Last updated: 11 November 2026
This Privacy Policy explains how personal data is handled when you visit astakova.eu or contact the law office through it. It is written in line with Regulation (EU) 2016/679 (the GDPR) and the Bulgarian Personal Data Protection Act.
Who is responsible for your data
The data controller is:
Rositsa Astakova, Attorney-at-Law
99 Tsaribrodska Street, 1309 Sofia, Bulgaria
E-mail: ask@kantora.cloud
Phone: +359 87 931 9933
What data is collected and why
Contact form and direct enquiries
When you send a message through the contact form, by e-mail or by phone, the office receives the details you choose to provide: your name, e-mail address, telephone number (optional), the subject and the content of your message. This information is used only to answer your enquiry and, if you ask for it, to take steps towards providing legal services. The legal basis is Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) GDPR (the legitimate interest in answering enquiries).
Please do not send sensitive information or original documents through the contact form. Sending a message does not create an attorney–client relationship.
Website statistics
The website uses Google Analytics 4, loaded through Google Tag Manager, to understand how visitors use the site — for example which pages are viewed and from which country. Google Analytics sets cookies and processes online identifiers and an abbreviated IP address. These statistics are enabled when you first open the site; you can switch them off at any time, as described in the Cookie Policy.
Server logs
As with every website, the hosting server automatically records technical data such as IP address, date and time of the request, the page requested and the browser type. This is necessary for the security and stable operation of the site (Article 6(1)(f) GDPR).
Who receives your data
Your data is not sold or passed on for marketing purposes. It may be processed on the office’s behalf by service providers that are needed to run the website and its correspondence — the hosting provider, the e-mail provider and Google Ireland Limited (for Google Analytics and Google Tag Manager). Where data is transferred outside the European Economic Area, this takes place on the basis of the safeguards provided for in the GDPR, such as the EU–US Data Privacy Framework or standard contractual clauses.
How long data is kept
Enquiries are kept for as long as is needed to answer them. If an engagement follows, the correspondence becomes part of the client file and is kept for the periods required by the Bulgarian Bar Act and the applicable tax and accounting legislation. Statistical data in Google Analytics is kept for the retention period set in that service.
Professional confidentiality
Everything you share in connection with a legal matter is covered by attorney–client privilege under the Bulgarian Bar Act and is treated as strictly confidential.
Your rights
You have the right to request access to your personal data, its correction or erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, write to ask@kantora.cloud.
You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg.
Changes to this policy
This policy may be updated when the website or the applicable law changes. The current version is always published on this page.