Data controllers
The joint controllers of personal data processed through this website and in work for clients are Petkova & Minkov Law Firm (registered in Bulgarian as “Петкова и Минков”), BULSTAT 176975194, and Lega Int Consult EOOD, UIC 201117738, both with their registered office and address at 8 Tsar Kaloyan Street, 2nd floor, office 2, 1000 Sofia, Bulgaria.
The two companies work as one team and have agreed their joint controllership between them (Art. 26 of Regulation (EU) 2016/679, the GDPR). In essence: they determine the purposes and means of processing together; the law firm is the contact point and handles requests to exercise your rights; and each company is responsible for the data of the clients it contracts with; legal assistance is contracted with the law firm. You may exercise your rights against either company at office@legaint.bg or on +359 888 983 737.
What data we process, why and on what basis
Through the contact form we receive only the data you send us yourself: your name, email, phone, the area of your enquiry and a description of the matter. We receive the same data when you email or call us. We use it to reply to you and to assess whether we can take on the matter. We send a short automatic confirmation to the email address you give, so you know the enquiry has arrived.
The legal bases are Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) (our legitimate interest in responding to enquiries and protecting the website from abuse). When you become a client, we process your data to perform the contract and to meet our legal obligations, for example under the Measures against Money Laundering Act and accounting legislation (Art. 6(1)(b) and (c)).
Providing your data is voluntary, but without your name, a way to contact you and a description of your question we cannot reply. We make no decisions based solely on automated processing and carry out no profiling.
Please do not send sensitive data (such as health data or criminal records) or documents through the form. If they are needed, we will ask for them after our first conversation.
The contact form and the server
Data submitted through the contact form is forwarded by email to the firm via the website’s server and is not stored there. The email also names the page of the website from which you opened the form, so that we know which material is useful. To prevent abuse, the form counts the enquiries sent from one address. For this purpose it keeps your IP address only in hashed form, with a secret key that is replaced every day; entries older than one hour are not used and are deleted the next time the form is sent. The server also keeps a short delivery log: the date and time, whether the mail server accepted the message and the domain of the recipient’s address, without names, addresses or content, keeping the last 400 entries.
The website is hosted by SuperHosting.BG in Bulgaria. Like any web server, the hosting records technical data about visits (IP address, date and time, the page requested and the browser type) in server logs, which are kept for a short period for server security.
Recipients and transfers outside the EU
The firm’s email runs on Google’s Gmail service; for users in the European Economic Area the provider is Google Ireland Limited. Google may also process data in the United States. Such transfers rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework, in which Google LLC participates, and on standard contractual clauses.
Where necessary for the work entrusted to us, we disclose data to courts, registries, notaries, enforcement agents and other authorities and, where the law requires it, to the competent public authorities. We do not sell data or use it for advertising.
Retention period
Data from enquiries that do not develop into an attorney-client relationship is kept for up to 12 months. Client data is kept for the periods required by the Bar Act, the Measures against Money Laundering Act and tax and accounting legislation.
Legal professional privilege
Information shared with an attorney in connection with legal assistance sought or provided is protected by legal professional privilege under the Bar Act and may not be disclosed without the client’s consent, except in cases expressly provided for by law.
Cookies and visit statistics
The website does not use cookies and stores nothing on your device, including in your browser’s storage. Fonts, images and maps are served from our own server, without third-party services, and the website includes no advertising or social media tracking.
To know how many people visit the website, which pages are useful and where visitors come from, we use Matomo, open-source software installed on our own hosting account with SuperHosting.BG in Bulgaria (stats.legaint.bg). The data is not shared with third parties and does not leave our hosting. Matomo is set up without cookies: when a page loads, your browser sends its address, the page you came from (if your browser passes it on), the type of browser and device, the language and the screen size. Your IP address is shortened, with its last two bytes removed, before it is recorded. To tell separate visits apart, Matomo derives a temporary identifier from this data, which changes every day. We also count the sending of the contact form, without its content.
The legal basis is our legitimate interest in knowing how the website is used and in improving it (Article 6(1)(f) GDPR). Detailed visit records are deleted automatically after 6 months; after that only aggregated reports remain, which contain no personal data. If your browser sends the Do Not Track signal, your visits are not counted. You may object to this processing at any time at office@legaint.bg.
Because the website neither stores nor reads information on your device, it needs no cookie consent. Should we ever start using such technologies, we will ask for your consent beforehand, and you will be able to withdraw it at any time.
Your rights
You have the right of access to your data, to rectification, erasure and restriction of processing, to portability of the data you have provided to us, and to object to processing based on legitimate interest. Please send requests to office@legaint.bg; we reply within one month.
You also have the right to lodge a complaint with the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, www.cpdp.bg.
Last updated: 15 October 2026