Nowadays personal data are practically everywhere – employers process personal data of employees, retailers process personal data of customers, health institutions/professionals process personal data of patients, marketing companies process personal data of participants in marketing activities, hotels process personal data of visitors, etc. The list could go on and on.
Whether it is the implementation of new software or the contracting of new service providers or the running of new promotional activities or the installation of video surveillance devices in company premises or the installation of GPS devices on company vehicles or the introduction of new employment benefits, companies should always beware of the personal data protection rules, especially the General Data Protection Regulation (GDPR).
Delchev & Partners’ personal data protection legal practice has extensive expertise in the field of personal data protection. Our work in this area covers:
- General personal data protection advice
Delchev & Partners’ personal data protection consultants are dedicated to helping personal data controllers and processors become more proactive in order to prevent legal issues before they arise and be compliant with all obligations arising from the processing of personal data.
In the process of ensuring compliance, we help our clients determine the exact scope of personal data to be processed, the appropriate legal basis for the data processing (as per the exhaustive list contained the GDPR), the appropriate term for processing and storage of different types of personal data. We also provide counseling on data protection impact assessments and transfers of personal data between controllers and/or processors. We may also advise whether a company is obligated to appoint a data protection officer (DPO).
Depending on our clients’ needs, we can review the processing of personal data throughout an entire company or focus on a particular department, a specific business process or a new activity in terms of GDPR compliance. We are also available to perform internal corporate trainings on personal data protection matters.
- GDPR documentation and agreements
Delchev and Partners provides counseling on personal data processing agreements between controllers and processors, between joint controllers or between independent controllers or processors and sub-processors.
We also help our clients with the development of internal policies for processing of different types of personal data, various forms for obtaining consent for processing of personal data, information notices to data subjects, registers and other necessary GDPR documentation.
- Support in case of queries/requests from data subjects or supervising authorities
We advise our clients on the steps necessary to be undertaken in the cases of withdrawals of given consent for processing personal data; requests for access to personal data (right of access); requests for correction of personal data (right to rectification); requests for erasure of personal data (right to erasure, i.e. right to be forgotten); requests for restriction of personal data processing (right to restriction of processing); requests for data transfer to another controller (data portability right); objections to personal data processing (right to object); exercised rights related to automated decision-making and profiling.
- Support and advice in case of data breach/incident
Under the GDPR upon occurrence of a data breach/incident controllers may be required to report the data breach to a competent supervising authority and depending on the circumstances, communicate the breach to the natural persons whose data are compromised. We are available to assist you with assessment and advice whether a security breach has actually occurred, whether a data protection authority/data subjects should be officially notified of the breach/incident.
- Representation before administrative authorities or court
=====================================================================================================
Delchev & Partners is a prime, full service, commercial law firm with offices in Sofia and Plovdiv, Bulgaria. Our experienced team of professional lawyers and expert consultants provide quality legal, corporate and tax services in various practice areas to multinational corporations, international companies, closely held foreign and local businesses, local entrepreneurs, exempt organizations and individuals, based or operating in any major Bulgarian city – Sofia, Plovdiv, Varna, Burgas, Stara Zagora etc.
