Legal services
Data Protection
Processing personal data requires clear rules and sound documentation. We assist in preparing privacy notices, internal policies, and compliance procedures tailored to the specific operations of your business.
Who the service is for
Businesses processing personal data of customers, counterparties, or other data subjects in Bulgaria.
What the service includes
- Privacy notices and cookie policies
- Records of processing activities
- Data processing agreements with processors
- Internal data protection policies and procedures
- Data subject requests, security incident response, and Data Protection Officer (DPO) considerations
How the work proceeds
- 01
Assessment
We review existing documents and processes against applicable legal requirements.
- 02
Recommendations
You receive a prioritised list of items requiring remediation along with the legal rationale.
- 03
Implementation
We draft the compliance documentation and guide internal adoption.
- 04
Ongoing Support
We remain available for day-to-day inquiries and specific escalations.
What timing and outcome depend on
- Internal IT processes and the operational pace of implementation
- Systems and third-party service providers deployed
- Procedures and statutory response times of competent supervisory authorities
Timeframes are indicative where they depend on institutions, banks or other third parties.