Privacy Policy
1. Data Controller
Lawyer , member of the Sofia Bar Association, registration No. , BULSTAT , office: 12 Petar Delyan St., Office 5, Sofia, email: info@capitalto.eu, tel.: .
2. What Data We Collect
- identification and contact data: name, email, phone;
- company registration number (EIK) and data from the Commercial Register;
- data contained in the documents required for the service (e.g. details of partners/owners, capital, shares).
3. Purposes and Legal Bases for Processing
- provision of the service and performance of the legal services agreement (Art. 6(1)(b) GDPR);
- compliance with the Lawyer's legal obligations (Art. 6(1)(c) GDPR);
- communication regarding the request (legitimate interest / pre-contractual relations).
4. Legal Professional Privilege
Client data and documents are also protected by legal professional privilege under the Bar Act, which applies in addition to the GDPR.
5. Recipients
- Registry Agency (Commercial Register) — when filing the application;
- payment service provider: myPOS;
- hosting and email provider: SuperHosting Ltd.
Data is not sold or shared with third parties beyond the above.
6. International Transfers
The payment service provider (myPOS) may process data outside the EEA (in the United Kingdom). Such processing is protected by a European Commission adequacy decision and/or appropriate safeguards provided by the processor. All other recipients process data within the EU/EEA.
7. Retention Periods
- data and documents relating to concluded agreements (client file) — 5 years from completion of the work, pursuant to Art. 47(1) of the Bar Act;
- accounting documents for the paid fee — within the periods prescribed by the Accounting Act;
- data from incomplete requests where no agreement was concluded — up to 6 months or until the interest lapses, whichever is earlier.
8. Data Subject Rights
You have the right of access, rectification, erasure, restriction, portability, and objection, as well as the right to lodge a complaint with the Commission for Personal Data Protection (CPDP). Rights may be exercised by email: info@capitalto.eu.
9. Cookies
The site does not use cookies for tracking, profiling, or behavioural analysis. No web analytics tools (such as Google Analytics) are used. Any technical cookies strictly necessary for the platform to function (if set) contain no personal data and are not shared with third parties.
10. Updates
This policy may be updated; the current version is published on the website.