1. ABOUT THIS PRIVACY NOTICE
This Policy governs how the Law Firm “Atanasov and Atanasov”, with Unified Identification Code (UIC): 177465618 (“We”, “Us” or “Our”) processes personal data. “Personal Information” or “Personal Data” means any information that allows someone to identify you directly or indirectly. “Processing” of personal data means any collection, use, sharing, and storage of personal data.
2. PERSONAL INFORMATION WE COLLECT
We process the personal data of the following categories of data subjects:
| Data Subjects | Description |
|---|---|
| Clients | Individuals or representatives of legal entities who use or have expressed interest in the services we provide. |
| Partners | Partners are individuals or representatives of legal entities who participate in our partnership program. |
| Website Visitors | Website visitors are all persons who have visited the Company's website. |
We process the following categories of personal data:
| Data Category | Description and Purpose of Processing |
|---|---|
| Identification Data | Personal data includes names, personal identifier, and ID card details. Identification data is necessary to identify the data subject and enter into a contract with them. |
| Payment Data | Date of sending and receiving a transfer, transfer amount, ordering party, beneficiary, and other information contained in the payment order or other similar document. The data is processed in order to track payment for the services we provide and to fulfill our monetary obligations. |
| Contact Data | Phone and/or email. |
| Website Behavior Data | Personal data includes pages visited, user session duration, and more. The data is collected to improve the customer experience of our Site's visitors and attract new clients. The data subject can refuse the processing of personal data by using our cookie banner. |
| Flight Data | Passenger name, flight number, date and time of the flight, booking number, air carrier, as well as additional information such as delay, diversion, cancellation, denied boarding, etc. |
| Lawsuit / Court Case Data | Parties to the case, case number, year, and court division/panel, as well as all information available in the case file, including related instances. |
3. PURPOSE AND LEGAL BASIS OF PROCESSING
We process personal data based on one of the following legal grounds:
| Legal Basis | Description |
|---|---|
| Performance or Entry into a Contract | Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract. |
| Legal Obligation | Processing is necessary for compliance with a legal obligation to which We are subject. |
| Legitimate Interest | Processing is necessary for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. |
| Consent | You have given consent to the processing of your personal data for one or more specific purposes. |
Processing Activities, Purposes, and Data Categories:
| Purpose | Basis and Explanations |
|---|---|
| 1. Administration of partnership relations | We administer partnership relations with our Partners in performance of the partnership agreement concluded between us. Legal Basis: - Performance of a contract Categories of Processed Data: - Identification Data - Payment Data - Contact Data |
| 2. Analysis of behavior on our Site | We process personal data from the behavior of our Site's visitors to improve the customer experience. Legal Basis: - Consent Categories of Processed Data: - Website Behavior Data |
| 3. Partnerships for obtaining compensation under Regulation 261/2004 | We process personal data within our partnership program, where our partners share passenger data with us in order to assist in obtaining compensation under Regulation 261/2004. Legal Basis: - Consent provided to the Partner, or performance of a contract between the Partner and the Passenger Categories of Processed Data: - Identification Data - Contact Data - Flight Data |
| 4. Advertising activity | We process personal data to promote the Services provided and attract new clients through personalized advertising. Legal Basis: - Consent Categories of Processed Data: - Website Behavior Data |
| 5. Assistance in obtaining compensation under Regulation 261/2004 | Personal data is processed in order to provide assistance in obtaining compensation under Regulation 261/2004 in case of a delayed or cancelled flight or denied boarding. Legal Basis: - Performance of a contract Categories of Processed Data: - Identification Data - Flight Data - Lawsuit / Court Case Data |
| 6. Email marketing | We process personal data when sending email marketing messages. Legal Basis: - Consent Categories of Processed Data: - Contact Data |
| 7. Maintenance of information infrastructure | In order to provide our services, we need to store and process data in a cloud environment. Legal Basis: - Legitimate Interest Categories of Processed Data: - Identification Data - Contact Data - Flight Data - Payment Data |
4. DATA RETENTION PERIODS
Personal data is stored only as long as necessary to achieve the purpose for which it is processed. A full list of the purposes for which we process personal data can be found above.
The appropriate retention period for personal data is determined based on the amount, nature, and sensitivity of the processed personal data, the potential risk of harm from unauthorized use or disclosure of the personal data, whether the purposes of the processing can be achieved through other means, and based on applicable legal requirements (such as applicable statutes of limitations).
Personal data is stored according to one or more of the following types of retention periods:
| Retention Period Type | Description |
|---|---|
| Upon automatic deletion | Some data is automatically stored for a predetermined period of time, after which it is automatically deleted. Such data may include data collected via cookies or log files. |
| Until a deletion request is made | Data is deleted following a request from the data subject or another authorized person for its deletion, provided there is no other legal basis for its retention. |
| Until deletion by the data subject or an authorized person | In some cases, data is stored until deleted by the data subject or another authorized person, provided deletion or retention is not required on another legal basis. |
| During contractual relations | Data is stored for the duration of the contractual relationship, provided there is no other basis for its retention. |
Personal data is stored until all applicable retention periods have expired.
Retention periods according to the different purposes of processing personal data:
| Purpose of Processing | Retention Period |
|---|---|
| Administration of partnership relations | During contractual relations |
| Analysis of behavior on our Site | Until deletion by the data subject or an authorized person |
| Partnerships for obtaining compensation under Regulation 261/2004 | During contractual relations |
| Advertising activity | Until a deletion request is made Upon automatic deletion |
| Assistance in obtaining compensation under Regulation 261/2004 | During contractual relations |
| Email marketing | Until a deletion request is made Upon automatic deletion |
| Maintenance of information infrastructure | Depending on the type of data: During contractual relations Until a deletion request is made Upon automatic deletion |
After the retention period expires, we delete the personal data.
6. YOUR RIGHTS
As a data subject, you have the following rights:
| Right | Description |
|---|---|
| Right to information | You have the right to be informed about the personal data we process about you and the way we process it. You can obtain information through:
|
| Right of access | You have the right to request to review or access the personal data we process about you. To access your personal data, you can contact us. |
| Right to rectification | You have the right to request rectification or updating of the data we process about you when it is inaccurate or incomplete. You can request a correction of your personal data by contacting us. |
| Right to erasure (Right to be forgotten) | You have the right to request the erasure of your personal data when:
Sometimes we may refuse to erase your personal data. For example, when:
To delete your personal data, you can contact us. You can read more about retention periods in the DATA RETENTION PERIODS section. |
| Right to restriction of processing | You have the right to request that we restrict the processing of your personal data when:
You can request a restriction on the processing of your personal data by contacting us. |
| Right to object | You have the right to object to the processing of your personal data when:
You can object to the processing of your personal data by contacting us. |
| Right to data portability | You have the right to receive your personal data in a structured, commonly used, and machine-readable format and you have the right to request that we transmit those data to another controller, where the processing is based on consent or a contractual obligation and the processing is carried out by automated means. You can exercise your right to portability by contacting us. |
| Right not to be subject to automated decision-making | You have the right not to be subject to a decision based solely on automated processing (decisions made without human intervention), including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not perform automated decision-making, including profiling. |
| Withdrawal of consent | You have the right to withdraw your consent to the processing of your personal data when the legal basis for processing is consent within the meaning of the GDPR. Consent can be withdrawn in a manner similar to how it was given. For example, via a cookie banner, unsubscribing from an email newsletter, or by contacting us. |
| Right to lodge a complaint | You have the right to lodge a complaint with the competent supervisory authority if you believe your rights have been violated. You can find the contact details of the competent supervisory authority below. |
7. HOW WE PROTECT YOUR DATA
We take the privacy and security of your personal data, including information considered sensitive, seriously. Our cybersecurity team actively works to maintain the integrity, confidentiality, and availability of our Services, and our policies and protocols are aimed at protecting your personal data. We continuously strive to improve our system defenses.
However, no method of data transmission over the Internet or method of electronic storage is completely secure, and We cannot guarantee the security of your personal data. Our security, safety, and privacy features are provided on an “as is” basis. As such, their effectiveness and flawless performance cannot be guaranteed, and we cannot ensure absolute confidentiality, anonymity, or personal safety.
In the event that we are legally required to inform you of unauthorized access to your Personal Information, we may notify you electronically or in writing in accordance with applicable law.
9. HOW TO CONTACT US
We welcome your comments, questions, or complaints regarding this Privacy Policy, the use of your personal data, or our response to your requests concerning the processing of your personal data. Please contact us using: office@claim-navigator.com
10. CHANGES TO THIS PRIVACY NOTICE
The most current version of the policy will govern our use of your personal data. We may revise this policy periodically. Notifications regarding changes to the Privacy Policy are sent to the data subject by email.