What is the purpose of this document?


In this Privacy Policy we have summarised the key points in relation to the protection of your personal data and how it is processed by us. If you would like to receive more information about specific processes for processing your personal data, you can contact us via the contact details below.


How to contact us?


The controller of personal data processed through this website is the Penkov, Markov and Partners, Law Firm (“we”, “our”, “us”), registered in the Register of Law Firms at the Sofia District Court under company deed No. 18246/2007 with registered office address in Sofia, Izgrev Region, Iztok District, 1113, 13B Tintyava str., fl. 6, telephone number: 02/971 39 35, fax: 02/971 11 91, represented jointly and severally by Attorney-at-law Vladimir Penkov Penkov, in his capacity of Chairman and Senior Partner, and Attorney-at-law Nikolay Georgiev Tsvetanov, in his capacity of Managing Partner.

Contact person for personal data protection is Mr. Nikolay Georgiev Tsvetanov - Managing Partner.

E-mail address to which you can submit your inquiries and complaints regarding the privacy of your personal data:

Contact address: Sofia, Izgrev district, Iztok neighbourhood, 1113, 13B, Tintyava str., fl. 6.


Penkov, Markov & Partners Law Firm respects your personal data privacy.


The protection of your personal data throughout the entire data processing process, as well as the security of all business data, is an important issue for us. We process the personal data collected during your visit to our website confidentially and in accordance with the legal provision at national and European level.

Data protection and information security are included in our corporate policy.


What information can I find in this Privacy Policy?


This Privacy Policy will provide you with comprehensive information in clear and accessible language as regards to what is done with the personal data you provide to Penkov, Markov & Partners, Attorneys-at-law, including:

- What personal data do we collect about you?

- What is the purpose of their collection?

- For how long do we retain the personal data provided?

- With whom do we share your personal data?

- How do we notify you of changes to our Privacy Policy?

- What are your rights regarding the personal data provided?

With this Privacy Policy Penkov, Markov & Partners, Attorneys-at-law declares that it implements all appropriate technical and organizational measures to protect the personal data of individuals, which are envisaged by law or other statutory act at national and European level.

What is personal data?


Any information and data that can identify an individual, directly or indirectly.

For example, indirect identification may be achieved by your telephone number. In this case we would need to combine it with another identifier about you in order to establish your identity, for example a combination of three names and a mobile phone number.

Direct identification is achieved when you provide a unique identifier, such as PIN, PNF, customer code.

Personal data may also be automatically generated unique identifiers (e.g. your IP address) that can be used to indirectly identify you as an individual user, including through the installation of cookies on your end device.


What personal data does Penkov, Markov & Partners collect about you?


In order to provide you with effective access to the website providing our services, Penkov, Markov & Partners, Attorneys-at-law collects the following information about you:

- Technical data that is automatically sent to us when you use our website - IP address, information about the device from which you visit the website;

- Cookies - to identify your browser or device, including through the creation of individual automatically generated numbers by third-party service providers (Google Analytics), by which the specific user can be identified;

- Personal data concerning your physical and social identity (name, address, role and office in the legal entity you represent or for which you are listed as the contact person) and contact details that you may provide to us within your e-mail messages addressed to the e-mail address listed on our Internet page.


What does processing personal data mean?


The processing of personal data includes the collection, storage, destruction, transmission, rectification, updating, erasure, disposal and all other actions that are carried out with your personal data.

On what basis (why) does Penkov, Markov & Partners, Attorneys-at-law process personal data about you?


The legal basis for collecting and using your personal data as described above will depend on the specific context in which we collect it.

In each case, we will only process the personal data for which you have explicitly authorised us. We will also process personal data about you by taking care to protect and minimise it where possible.

Only technical information and personal data related to your visit to the Internet page will be processed for you via our website.

In order to protect your rights and interests, we will observe the highest standards to protect both your privacy and confidentiality, and we will follow in our work the professional ethical standards that the Bar Act and the Bar Code of Ethics envisage.

The main reason for collecting and using your personal data is to enable you to familiarise yourself with our services and to fulfil our pre-contractual obligations with you (i.e. to enable us to provide you with the service which you have assigned us).

We will also use your personal data where it is in pursuit of our legitimate business interests, but only where those interests are not overridden by your interests in relation to the protection of your personal data or your other rights and freedoms.

In some cases, we may have a legal obligation - a legal basis to collect personal data from you, or we may need to process it or share it with others to protect your vital interests.

If we ask you to provide personal data in order to comply with a legal requirement or to enter into a contract with you, we will notify you of the circumstances at the appropriate time and let you know whether or not the provision of personal data is mandatory and also explain the possible consequences of refusing to provide personal data.

Also, if we collect and use your personal data pursuant to our legitimate interests (or those of a third party), we will inform you at the appropriate time what those legitimate interests are.

If you have any questions or require further information about the legal basis on which we collect and use your personal data, please contact us using the contact details set out in the How to contact us? section above.

How do we obtain your personal data? How do we process your personal data?


In order to present the services available on its website, Penkov, Markov & Partners, Attorneys-at-law processes (collects) the technical data provided by you in the following ways:

- by visiting the website to use our services;

- by sending an e-mail message to the e-mail address indicated on our website, which contains personal data about you or a third party;

- by using online identifiers to collect information about IP addresses, cookie data, operating system and browser type.

How long do we store and process your data before we destroy it?


Penkov, Markov & Partners, Аttorneys-at-law will retain your personal information for no longer than is necessary to fulfil the purposes described in this Privacy Policy. Depending on the basis on which we process your personal data, the retention period varies.

Your personal data is stored by us for a period of 5 (five) years from the termination of our contractual basis, if we process the personal data for the performance of contractual obligations to you. After the expiry of this period, and in the event that there is no legal basis for the continued retention of your personal data, the information about you shall be destroyed and your personal data permanently deleted from our system.

Your personal data contained in accounting records, financial statements and documents for tax control, audit and subsequent financial inspections shall be stored for a period of 10 (ten) years as from January 1 of the year following the year to which they relate, in accordance with the requirements of the Accounting Act and the Tax and Social Security Procedural Code.

All other media of accounting information shall be kept for a period of 3 (three) years as from January 1 of the year following the year to which they relate, in accordance with the requirements of the Accounting Act.

Your personal data collected through the provision of your explicit consent to the use of our optional cookies via the Cookies Management Panel is stored for a maximum period of 2 (two) years from the date of your consent, depending on the type of cookies concerned.

For more information on the retention periods of personal data collected through cookies, please refer to our Cookie Policy.

Are there other cases where we can share your personal data?


Your personal data is provided to third parties in the following cases:

- At the request of the individual who has provided the data, the data subject;

- At the request of competent authorities in accordance with the legislation in force in the Republic of Bulgaria and the European Union.


Electronic Legal Digest


Our website provides you with the opportunity to subscribe for free to the legal digest prepared by Penkov, Markov & Partners, Attorneys-at-law.

Sending, respectively receiving electronic copies of this newsletter constitutes a personal data processing activity, involving the use and retention of emails of individuals to whom the requested electronic commercial communications may be sent.

The legal basis for this data processing activity is your explicit and informed consent, in your capacity of data subject to whom the electronic communication is addressed - Art. 6, paragraph 1, letter “a” of the GDPR.

Once provided, your consent can be withdrawn at any time by clicking the “Unsubscribe” button in the e-mail message you receive containing our legal digest, or by writing an explicit free-text e-mail to

When processing your personal data for the purpose of sending our legal digest, we do not utilize automated means, including profiling.

We retain the personal data processed for the above purpose for a period of 2 (two) years from the moment you subscribe to receive our legal digests, or until you explicitly withdraw your consent, if this even occurs earlier than the expiry of the period.

Before the expiration of the explicitly stated period, we will ask you whether you would like to continue your subscription, respectively whether we should continue processing your data for the described purpose.

Use of cookies


Our website uses cookies

Cookies are small text files that are stored on your computer when you visit our website. In the event that you access this website at another time, your browser sends the contents of the cookies back to the respective provider and thus allows the re-identification of the end device. Reading cookies allows us to design our website optimally for you and make it easier for you to use it.      

Disabling and deleting cookies                

Your browser allows you to delete all cookies at any time. To do this, please refer to your browser's help functions. This may result in individual functions of our website no longer being available to you.

Penkov, Markov & Partners, Attorneys-at-law’s website allows you to enable or disable the use of cookies in the future at any time.

The activation and deactivation of all types of cookies, with the exception of the Strictly Necessary ones (i.e. those by means of which our website functions according to your preferences), can be done by changing your settings in the Cookies Management Panel available on our website.              

You can find out more about the cookies we use in our Cookie Policy.        


What are your rights regarding the personal data provided?


Pursuant to the Bulgarian and European law, including Regulation (EU) 2016/679 of the EU and of the Council on the protection of personal data (General Data Protection Regulation, “GDPR”), you may exercise the following rights:

- 1. The right to access personal data relating to you;

- 2. The right to request from Penkov, Markov & Partners, Attorneys-at-law a rectification in case you identify inaccuracies or need to update your personal data by sending an e-mail to;

- 3. The right to request blocking of your personal data or restriction of the processing of personal data in the cases defined by law and GDPR;

- 4. The right to request deletion, i.e. erasure of your personal data by Penkov, Markov & Partners, Attorneys-at-law in case the conditions for this are met;

5. The right to object to the processing of your personal data where it is based on our’s or a third party's legitimate interest by sending an e-mail to;

- 6. The right, where you wish, to withdraw the consent you have given for your personal data to be processed for the purposes for which you have given consent, by sending an e-mail to;

- 7. The right to request portability of your personal data in a structured, machine-readable format that is commonly used by sending an e-mail to;

- 8.  The right to lodge a complaint or a request for protection of your rights before the competent supervisory authority in the Republic of Bulgaria - the Commission for Personal Data Protection, with address in the city of Sofia, 1592, 2, blvd. Tsvetan Lazarov, e-mail:, website:, telephone numbers: 02/91-53-519, 02/91-53-555.

You can exercise all your rights at any time during the processing of your personal data.

Do you have an obligation to provide us with your personal data?       


In order to provide our products and services and enter into contractual relationships, we collect and process your personal data. We also process them in order to comply with legal obligations.

In case of refusal to provide the requested personal data on your part, Penkov, Markov & Partners, Attorneys-at-law may not be able to provide its products and services, respectively to conclude a contract/to continue the performance of an already concluded contract.

Changes to Privacy Policies         


In the future, we may need to update this Privacy Policy in response to changing legal, technical or business processes.

We encourage you to periodically review this website for the latest information regarding our privacy practices.

If, as a result of changes made to this Privacy Policy, new purposes for processing personal data or other circumstances requiring your explicit consent are envisaged, we declare that we will also notify you by sending you a letter electronically (e-mail) to the e-mail address you have provided, inviting you to kindly confirm or refuse to provide consent.

This will give you the opportunity to discontinue the use of some or all of the services and/or to exercise your rights, some of which are expressly set out above.

This Privacy Policy has been adopted by Penkov, Markov & Partners Law Firm and is effective as of 22.05.2018, with last update: 30.01.2023.