Effective date: September 19, 2026
Last updated: September 19, 2026

1. Who We Are and Who Controls Your Personal Data

Your Private Advocate is a service brand through which legal, consulting, document preparation, translation, interpretation, notary-support, accommodation coordination and related professional services are presented.

The controller responsible for your personal data depends on the service you request:

  • Bulgarian legal services: Vassily Kolganov, Attorney at Law, Unified Bar Register No. 1100009890, Varna Bar Association, Republic of Bulgaria. Professional address: 35A Vasil Stoilov Street, Floor 1, Ground-Floor Premises 1, 9010 Varna, Bulgaria.
  • Website administration and other identified services: THISPARTA, LLC, a Nevada limited liability company, 9680 W. Tropicana Ave., Suite 121, Las Vegas, NV 89147, USA.

Where both controllers jointly determine the purposes and means of a specific processing activity, they may act as joint controllers in accordance with Article 26 of the General Data Protection Regulation (“GDPR”). Information about their respective responsibilities will be made available upon request.

Privacy contact: privacy@yourprivateadvocate.com

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data collected through yourprivateadvocate.com, contact and booking forms, consultations, email, telephone calls, messaging applications, document submissions, payments, professional instructions and related communications.

This Privacy Policy does not replace a client engagement agreement, attorney-client notice, service agreement or other notice applicable to a particular service.

3. Personal Data We May Process

Depending on the requested service, we may process:

  • identity and contact information, including your name, address, telephone number and email address;
  • date and place of birth, nationality and information contained in identity documents;
  • information about legal, immigration, administrative, property, family or business matters;
  • contracts, correspondence, court records, administrative records, powers of attorney, certificates, translations and supporting evidence;
  • financial, invoicing, payment and transaction information;
  • booking and accommodation information;
  • special-category personal data when relevant, including health information, biometric data, racial or ethnic origin, religious beliefs, political opinions, trade-union membership, sex-life or sexual-orientation information;
  • information relating to criminal convictions, alleged offences, investigations or proceedings when relevant and legally permitted;
  • audio, video and identification information required for remote-notarial or identity-verification procedures;
  • technical information, including IP address, browser type, device information, cookie preferences, security logs, referring pages and website activity.

Please do not submit sensitive, confidential or time-critical documents through a general contact form unless specifically requested. We will provide an appropriate submission method when necessary.

4. Purposes and Legal Bases for Processing

We process personal data only when a valid legal basis applies. Depending on the circumstances, the purposes and legal bases may include:

  • Responding to inquiries and evaluating a requested service: taking steps at your request before entering into a contract and our legitimate interests in responding to genuine inquiries.
  • Providing legal, consulting, translation, interpretation, document preparation, notary-support, booking or coordination services: performance of a contract, steps requested before entering into a contract, compliance with legal obligations and legitimate interests.
  • Establishing, exercising or defending legal claims: Article 9(2)(f) GDPR where special-category personal data are involved.
  • Complying with professional, court, administrative, tax, accounting, fraud-prevention and anti-money-laundering requirements: compliance with legal obligations and, where applicable, substantial public interest.
  • Processing payments and maintaining transaction records: performance of a contract and compliance with legal obligations.
  • Protecting the website, systems, clients and other persons: legitimate interests, information security and compliance with legal obligations.
  • Using optional analytics, personalization or marketing technologies: your consent.
  • Sending optional marketing communications: your consent or another legal basis expressly permitted by applicable law.

Consent is not normally the primary legal basis for processing information necessary to conduct a legal or professional matter. Withdrawal of consent does not require the deletion of information that must be retained or processed under another lawful basis.

5. How We Obtain Personal Data

We may obtain personal data directly from you and, where relevant, from authorized representatives, family members, lawyers, courts, government authorities, consulates, notaries, translators, interpreters, experts, property professionals, counterparties, publicly available registers and service providers.

Where Article 14 GDPR applies, the required information will be provided within the applicable period unless a lawful exception applies, including where professional secrecy or another legal restriction prevents disclosure.

6. Recipients of Personal Data

Personal data may be disclosed only when necessary and legally permitted to:

  • courts, administrative authorities, law-enforcement bodies and consulates;
  • lawyers, notaries, translators, interpreters, experts, accountants and other instructed professionals;
  • counterparties and their representatives when required for the matter;
  • payment and banking providers;
  • booking and accommodation service providers;
  • website hosting, security, communications, form-management, scheduling and cloud-service providers;
  • other recipients authorized by you or required by law.

Service providers acting on our instructions are required to observe appropriate data-protection, security and confidentiality obligations.

7. International Transfers

Our services may require the transfer of personal data between Bulgaria, the European Economic Area (“EEA”), the United States and other countries connected with a particular matter.

When Chapter V GDPR applies, we use an available lawful transfer mechanism, such as:

  • an adequacy decision adopted by the European Commission;
  • the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where necessary;
  • another legally recognized transfer mechanism; or
  • an applicable Article 49 GDPR derogation for an occasional transfer that is necessary for a contract, important reasons of public interest, or the establishment, exercise or defense of legal claims.

You may request information about the applicable safeguards by contacting privacy@yourprivateadvocate.com.

8. Retention of Personal Data

We retain personal data only for as long as reasonably necessary for the relevant purpose and to comply with applicable professional, contractual, limitation, tax, accounting, anti-money-laundering, regulatory and dispute-resolution requirements.

In determining the appropriate period, we consider the nature and sensitivity of the data, the purpose of processing, legal and professional obligations, applicable limitation periods, the possibility of legal claims and the need to protect the rights of the client and other persons.

General inquiries that do not result in an engagement are ordinarily deleted or anonymized when they are no longer reasonably needed. Client and matter records may be retained after completion for the period necessary to satisfy professional obligations, establish or defend legal claims, and comply with applicable law. Accounting and transaction records are retained for the legally required period.

A pending claim, investigation, legal hold or complaint may require information to be retained for a longer period.

9. Your Data-Protection Rights

Subject to the conditions and limitations of applicable law, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request erasure of personal data;
  • request restriction of processing;
  • receive certain personal data in a portable format;
  • object to processing based on legitimate interests;
  • withdraw consent at any time for future processing based on consent;
  • lodge a complaint with a competent supervisory authority.

To exercise a right, contact privacy@yourprivateadvocate.com. We may request information reasonably necessary to verify your identity and protect confidentiality.

These rights may be limited where processing or retention is required by law, necessary for legal claims, affects the rights of another person, or is protected by attorney professional secrecy or another legal obligation.

10. Complaints to a Supervisory Authority

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection:

Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia, Bulgaria
Website: https://cpdp.bg

You may also contact another competent supervisory authority in the EEA country in which you live, work or believe an infringement occurred.

11. Children’s Personal Data

This website is not directed to children. Personal data relating to a child may be processed when necessary for a legal or professional matter and provided by a parent, guardian or other person with lawful authority, or where processing is otherwise permitted by law.

12. Automated Decision-Making

We do not make decisions that produce legal or similarly significant effects solely through automated processing unless such processing is expressly disclosed and lawfully implemented.

13. Security and Confidentiality

We use technical and organizational measures appropriate to the risks presented by the processing. These measures may include access controls, authentication, restricted user permissions, secure hosting, backups, confidentiality obligations and controlled disclosure.

No method of transmission or storage is completely secure. If a personal-data breach creates a legally reportable risk, we will follow the notification requirements of Articles 33 and 34 GDPR.

14. Cookies and Similar Technologies

Strictly necessary technologies may operate without consent where permitted by law. Optional analytics, personalization and marketing technologies are activated only in accordance with the visitor’s consent choices.

You may accept, reject or customize optional technologies through the cookie banner and later change your selection by using the permanent Privacy Choices control displayed on the website.

Additional information about providers, purposes and storage periods is available through the website’s Cookie Policy and the detailed cookie panel provided by iubenda.

15. Third-Party Services

The website may use third-party services for hosting, contact forms, appointment scheduling, payments, security, translation, embedded content and consent management. These may include services such as SuperHosting.BG, WordPress, WPForms, SimplyBook.me, PayPal and iubenda, where applicable.

A third party may act as our processor or as an independent controller, depending on its role. Its own privacy notice may also apply. We periodically review the services used by the website and update this Policy when material changes occur.

16. Attorney Professional Secrecy and Website Inquiries

Bulgarian attorney professional secrecy applies where and to the extent that a communication is made within a protected professional relationship.

Submitting a general website inquiry does not by itself:

  • create an attorney-client relationship;
  • confirm acceptance of a legal matter;
  • create a duty to act by a particular deadline; or
  • prevent representation of another person.

Do not submit time-sensitive or highly confidential information until the appropriate service provider confirms acceptance of the engagement and provides a suitable communication channel.

17. Nevada and United States Professional Status

Vassily Kolganov is admitted as an attorney in the Republic of Bulgaria and is a member of the Varna Bar Association. He is not represented through this website as an attorney licensed to practice law in Nevada or another United States jurisdiction.

Non-Bulgarian legal services requiring admission in a United States jurisdiction are provided by or coordinated with appropriately licensed independent attorneys. Unless expressly stated in a written agreement, THISPARTA, LLC is not a law firm and does not itself provide legal representation.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, technology, services or business operations. The current version and its effective date will be published on this page. Material changes will be highlighted or otherwise communicated where required.

19. Contact

Questions, requests or complaints concerning personal data may be sent to:

Email: privacy@yourprivateadvocate.com

Bulgarian legal services:
Vassily Kolganov, Attorney at Law
Unified Bar Register No. 1100009890
Varna Bar Association
35A Vasil Stoilov Street, Floor 1, Ground-Floor Premises 1
9010 Varna, Bulgaria

Website administration and other identified services:
THISPARTA, LLC
9680 W. Tropicana Ave., Suite 121
Las Vegas, NV 89147, USA