Privacy Policy
Mandatory information about the rights of individuals regarding the protection of personal data
Information about the company processing your data:
Name: P & N Services Ltd.
UIC/BULSTAT: 208174688
Registered office and management address: BULGARIA, Sofia, Triaditsa district, Strelbishte residential complex, 52 Yordan Yovkov St.
Correspondence address: BULGARIA, Sofia, Triaditsa district, Strelbishte residential complex, 52 Yordan Yovkov St.
Phone: +359 88 889 0083
Email: info@thepnlaw.com
Website: pnlaw.com
Information about the competent supervisory authority for personal data protection:
Name: Commission for Personal Data Protection
Registered office and address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Correspondence address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: 02 915 3 518
Website: www.thepnlaw.com
P & N Services Ltd. (hereinafter referred to as “Administrator” or “Company”) carries out its activities in accordance with the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. This information aims to inform you about all aspects of the processing of your personal data by the Company and the rights you have in connection with this processing.
Legal basis for the collection, processing, and storage of your personal data
Article 1. The Administrator collects and processes your personal data in connection with the use of the website pnlaw.com and initiating communication based on Article 6, paragraph 1 of Regulation (EU) 2016/679 (GDPR), specifically based on explicit consent given via the contact form. By using this functionality, you consent to your personal data being used for communication purposes.
Purposes and principles in the collection, processing, and storage of your personal data
Article 2. (1) We collect and process the personal data that you provide to us in connection with the use of the website and the provision of a response to an inquiry.
(2) We comply with the following principles when processing your personal data:
- lawfulness, fairness, and transparency;
- limitation of processing purposes;
- relevance to the purposes of processing and minimization of the data collected;
- accuracy and up-to-date status of the data;
- limitation of storage with a view to achieving the purposes;
- integrity and confidentiality of processing and ensuring an appropriate level of security for personal data.
(3) When processing and storing personal data, the Administrator may process and store the data for the purpose of protecting its legitimate interests.
Types of personal data our company collects, processes, and stores
Article 3. (1) The company processes personal data provided by visitors to the website https://pnlaw.com through the contact form for the purpose of feedback and providing information in connection with inquiries about legal services.
(2) The personal data processed include: name, email address, and phone number.
(3) The legal basis for processing this data is the voluntary submission of an inquiry through the contact form, by which the individual agrees that the provided personal data will be used for communication purposes.
(4) The company does not use the provided data for marketing purposes, does not transfer it to third parties, and does not engage in automated decision-making, including profiling.
(5) The collected personal data is stored for no longer than 6 months unless otherwise required by a legal act.
cases of repeated or excessive requests.
Right to rectification or completion
Article 7. (1) You may at any time rectify or complete inaccurate or incomplete personal data related to you.
(2) You may rectify or complete inaccurate or incomplete personal data by sending a request to the Administrator via email, using the form in Appendix No. 4 or a free text request.
Right to erasure ('right to be forgotten')
Article 8. (1) You have the right to request the Administrator to delete part or all of the personal data related to you, and the Administrator is obligated to delete it without undue delay when one of the following grounds applies:
- The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- You withdraw your consent on which the processing is based and there is no other legal ground for the processing;
- You object to the processing and there are no overriding legitimate grounds for the processing;
- The personal data have been unlawfully processed;
- The personal data must be erased for compliance with a legal obligation under Union or Member State law;
- The personal data have been collected in relation to the offer of information society services.
(2) The Administrator is not obliged to delete the personal data if the processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority;
- for reasons of public interest in the area of public health;
- for archiving purposes in the public interest, scientific or historical research, or statistical purposes;
- for the establishment, exercise, or defense of legal claims.
(3) To exercise your right to be forgotten, send an email request to delete your personal data using the form in Appendix No. 2 or a free text request. The Administrator will send detailed verification instructions to the email address you used when submitting the contact form or making inquiries.
(4) After verifying the identity of the requester and the data subject, all data processed for you will be deleted in accordance with paragraph 3.
(5) If there is an ongoing inquiry, you may request deletion only after its successful completion.
Right to restriction of processing
Article 9. You have the right to request the Administrator to restrict the processing of your data by sending a free text request via email when:
- you contest the accuracy of the personal data;
- processing is unlawful but you oppose erasure;
- the Administrator no longer needs the data but you require it for legal claims;
- you have objected to processing pending verification of legitimate grounds.
(2) After receiving your request, the Administrator will send detailed verification instructions.
(3) After verification, the Administrator will suspend processing of your data but will not remove any content you may have posted on the site.
Right to data portability
Article 10. (1) If you have given consent for the processing of your personal data or the processing is necessary for the performance of communication upon inquiry with the Administrator, or if your data is processed in an automated manner, you may:
- request the Administrator to provide your personal data in a readable format and transfer it to another Administrator;
- request the Administrator to directly transfer your personal data to a specified administrator, where technically feasible.
(2) You may exercise your right to data portability by sending an email request using the form in Appendix No. 3 or a free text request. The Administrator will send verification instructions to your email address.
(3) After verification, the Administrator will send your processed data to the specified email address in XML format.
Right to receive information
Article 11. You may request the Administrator to inform you about all recipients to whom personal data subject to correction, deletion, or restriction has been disclosed. The Administrator may refuse if this is impossible or requires disproportionate effort.
Right to object
Article 12. You may object at any time to the processing of your personal data by the Administrator, including when it is processed for profiling or direct marketing purposes.
Your rights in case of data security breach
Article 13. (1) If the Administrator detects a data security breach that may pose a high risk to your rights and freedoms, they will notify you without undue delay and inform you of the measures taken or planned.
(2) The Administrator is not required to notify you if:
- appropriate technical and organizational protection measures were applied to the data affected by the breach;
- subsequent measures were taken to ensure no high risk to your rights remains;
- notification would require disproportionate effort.
Article 14. The Administrator does not transfer your data to third countries.
Article 15. In case your rights under this policy or applicable personal data protection legislation are violated, you have the right to lodge a complaint with the Commission for Personal Data Protection:
Name: Commission for Personal Data Protection
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: 02 915 3 518
Article 16. You may exercise all your rights concerning your personal data protection using the forms attached to this document. These forms are not mandatory; you may also send your requests in any format that includes a statement and identifies you as the data subject.
Article 17. If consent concerns a transfer, the Administrator will describe the possible risks of data transfer to third countries without an adequacy decision and appropriate safeguards.
Appendix No. 1
Consent Withdrawal Form for Data Processing Purposes
Your name*: ...............................
Your email used on the website*: ...............................
Contact information (email)*: ...............................
To: P & N Services Ltd.
UIC/BULSTAT: 208174688
Registered office and address: BULGARIA, Sofia, Triaditsa District, Strelbishte, 52 Yordan Yovkov St.
Phone: +359 88 889 0083
Email: info@thepnlaw.com
Website: pnlaw.com
I hereby withdraw my consent to the processing of the personal data I have provided for the purpose of receiving a newsletter, marketing messages, or other promotional materials, and I am aware of the terms for withdrawing consent in accordance with the Mandatory Information on the Rights of Individuals regarding Personal Data Protection available on the website.
Appendix No. 2
Right to be Forgotten – Request for Deletion of Personal Data
Your name*: ...............................
Your email used for inquiries or registration on the website*: ...............................
Contact information (email)*: ...............................
To: P & N Services Ltd.
UIC/BULSTAT: 208174688
Registered office and address: BULGARIA, Sofia, Triaditsa District, Strelbishte, 52 Yordan Yovkov St.
Phone: +359 88 889 0083
Email: info@thepnlaw.com
Website: pnlaw.com
Please delete all personal data that you collect, process, and store, provided by me or third parties related to me, based on the above identification, from your databases.
I acknowledge that some or all of my personal data may continue to be processed and stored by the Administrator to fulfill their legal obligations.
Appendix No. 3
Request for Personal Data Portability
Your name*: ...............................
Your email used for registration or inquiries on the website*: ...............................
Contact information (email)*: ...............................
To: P & N Services Ltd.
UIC/BULSTAT: 208174688
Registered office and address: BULGARIA, Sofia, Triaditsa District, Strelbishte, 52 Yordan Yovkov St.
Phone: +359 88 889 0083
Email: info@thepnlaw.com
Website: pnlaw.com
Please send all personal data related to me in your databases in XML format to:
Email: ...............................
Receiving Administrator: ...............................
Name: ...............................
Identification number (UIC, BULSTAT, reg. number in CPDP): ...............................
Email: ...............................
Appendix No. 4
Request for Data Rectification
Your name*: ...............................
Your email used for registration or inquiries on the website*: ...............................
Contact information (email)*: ...............................
To: P & N Services Ltd.
UIC/BULSTAT: 208174688
Registered office and address: BULGARIA, Sofia, Triaditsa District, Strelbishte, 52 Yordan Yovkov St.
Phone: +359 88 889 0083
Email: info@thepnlaw.com
Website: pnlaw.com
Please rectify the following personal data that you collect, process, and store, provided by me or by third parties related to me, as follows:
Data to be corrected: ..................................................
Please correct as follows: ..................................................