Personal Data Protection

Filipov & Beleva Law Firm provides specialised and tailored data-protection services adapted to the specific needs of each client.

Our team has extensive practical experience in implementing and integrating the requirements of the General Data Protection Regulation (GDPR).

Our services

We offer services aligned with your individual needs, such as:

• Comprehensive audit of internal processes and procedures related to the collection, processing and protection of personal data;
• Staff training on GDPR compliance;
• Preparation of all requisite documents (internal policies, procedures, rules, registers and others) to ensure conformity with the GDPR;
• Conducting risk and impact assessments for personal-data-processing activities;
• Legal advice on various aspects of personal-data processing;
• Drafting privacy notices and other documents for obtaining informed consent to personal-data processing, terms and conditions and data-processing agreements;
• Legal analysis of contracts, agreements and clauses concerning the protection and transfer of personal data;
• Preparation of responses to data-subject requests;
• Legal assistance and support during inspections by the Commission for Personal Data Protection;
• Legal representation before the CPDP and the courts in complaints and claims for damages related to personal-data processing.

External Data Protection Officer (DPO)

Filipov & Beleva also offers a specialized external Data Protection Officer (DPO) service. Our experts possess the professional knowledge and skills necessary to perform the duties of a Data Protection Officer effectively.

This service encompasses comprehensive intra-organizational support on all matters related to personal-data protection and GDPR compliance.

In our capacity as your Data Protection Officer, we will:

• Inform and advise you, as controller or processor, on your obligations under the GDPR;
• Monitor compliance with personal-data-processing rules and the organisation’s policies;
• Provide guidance and recommendations for aligning your activities with GDPR requirements;
• Train your employees involved in personal-data-processing operations;
• Prepare and update your documentation relating to personal-data-protection rules and procedures;
• Keep you informed of changes in data-protection legislation;
• Notify you of the latest opinions, guidelines and practices of the CPDP, the Bulgarian courts and the Court of Justice of the European Union on issues affecting your operations;
• Manage data-subject requests, including drafting responses to requests for information, rectification or erasure of personal data;
• Liaise with the CPDP on your behalf and assist you during supervisory inspections;
• Act as the point of contact with the CPDP on matters concerning personal-data processing.

If you have not yet implemented the GDPR requirements, our team can advise you and prepare the necessary documents and policies relating to personal-data processing.