Last updated: 9 October 2026

This policy explains how Murliev & Yanev Law Firm (Адвокатско съдружие „Мурлиев и Янев“) processes the personal data of visitors to murliev-yanev.com and of people who contact us, in accordance with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

1. Data controller

Murliev & Yanev Law Firm
Address: 35 Academic Boris Stefanov St., 1700 Sofia, Bulgaria
Email: office@murliev-yanev.com
Phone: +359 883 35 33 39, +359 89 091 11 01

2. What data we process

  • Inquiry data – when you contact us through the inquiry form, by email or by phone: your name, email, phone number, subject and message, and any other information you choose to provide.
  • Client data – when we enter into a legal services agreement, we process the data needed to perform it and to comply with our legal obligations (e.g. client identification under anti-money laundering legislation).
  • Technical data – IP address, browser and device type, date and time of the visit, automatically logged by the server for security and the proper functioning of the website.
  • Analytics data – only with your consent: aggregated visit statistics via Google Analytics. IP addresses are anonymised.

3. Purposes and legal bases

  • Responding to your inquiry and taking steps prior to entering into a contract – Art. 6(1)(b) GDPR, and our legitimate interest in answering inquiries – Art. 6(1)(f) GDPR.
  • Performance of a legal services agreement – Art. 6(1)(b) GDPR.
  • Compliance with legal obligations under the Bar Act, the Measures Against Money Laundering Act, the Accountancy Act and others – Art. 6(1)(c) GDPR.
  • Security of the website – Art. 6(1)(f) GDPR.
  • Visit statistics (Google Analytics) and displaying a map (Google Maps) – only based on your consent – Art. 6(1)(a) GDPR. You may withdraw your consent at any time via the “Cookie settings” link at the bottom of the website.

4. Attorney–client confidentiality

All information you provide to us in connection with a legal matter is treated as confidential and is protected by attorney–client privilege under the Bulgarian Bar Act. In your first message, we recommend describing your matter briefly and not sending documents or sensitive data until we have contacted you.

5. Retention

  • Inquiries that did not lead to an engagement – up to 1 year after the last communication.
  • Client data and case files – for the term of the agreement and thereafter for the periods required by law (e.g. 5 years under anti-money laundering legislation and the periods under the Accountancy Act).
  • Analytics data – up to 14 months in Google Analytics.

6. Recipients

We do not sell or share your personal data with third parties for marketing purposes. Data may be accessible to:

  • our web hosting provider;
  • Google Ireland Ltd. – only if you have consented to Google Analytics or Google Maps. Google may transfer data to the USA on the basis of the EU-U.S. Data Privacy Framework;
  • public authorities – where required by law.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and the right to withdraw your consent at any time without affecting the lawfulness of processing before withdrawal. Some rights may be limited by our duty of professional secrecy or by statutory retention requirements.

To exercise your rights, write to office@murliev-yanev.com. We will respond within one month.

You have the right to lodge a complaint with the Commission for Personal Data Protection – 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, www.cpdp.bg.

8. Security

We apply appropriate technical and organisational measures to protect personal data – encrypted connection (HTTPS), restricted access and confidentiality of information.

9. Cookies

For information about the cookies we use, see our Cookie Policy.

10. Changes

We may update this policy. The current version is always published on this page with the date of the last update.