INFORMATION CLAUSE ON THE PROCESSING OF PERSONAL DATA
The Data Controller of personal data is the Law Office of Attorney Małgorzata Lewandowska, NIP: 585-118-23-40, REGON: 145832047 (hereinafter referred to as the “Controller”). The Controller processes personal data such as: name and surname, email address, telephone number, and job title. Personal data is processed in accordance with data protection regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (the “GDPR”), as well as the Polish Personal Data Protection Act of 10 May 2018. The Controller keeps all personal data confidential and properly secures it against unauthorized access.
Scope and purposes of data processing
The Controller processes personal data for the following purposes:
- to pursue the Controller’s legitimate interests, in particular those relating to the provision of services to clients, informing clients or potential clients about legal changes and practice developments, conducting correspondence, maintaining business relationships, and enabling the use of the Controller’s social media profiles – pursuant to Art. 6 Sec. 1 Letter f GDPR;
- to negotiate, conclude, and perform contracts with clients or other entities, as well as to take steps prior to entering into a contract at the request of the data subject – pursuant to Art. 6 Sec. 1 Letter b GDPR;
- to carry out recruitment processes and fulfill employment-related legal obligations – pursuant to Art. 6 Sec. 1 Letters a, c, and f GDPR;
- to comply with legal obligations arising from applicable law – pursuant to Art. 6 Sec. 1 Letter c GDPR.
Disclosure of personal data
Personal data may be disclosed to external entities supporting the Controller’s business operations, in particular providers of accounting, IT, marketing, postal, and courier services. Data is not transferred to third countries.
Data retention period
The retention period depends on the legal basis for processing:
- where processing is based on a legitimate interest – data is processed for as long as necessary to fulfill this interest;
- when related to contract negotiation or performance – for the time of negotiation, the duration of the contract, and until any potential claims expire;
- where required by legal obligations – for the period required by law;
- where processed on the basis of consent – until the consent is withdrawn.
Data processed within the scope of legal services provided by an attorney or legal advisor is stored for 10 years from the end of the year in which the case was concluded.
Rights of data subjects
Individuals whose data is processed have the right to:
- access their data and information regarding processing,
- obtain a copy of their data,
- request rectification of data,
- request erasure of data when it is no longer necessary for processing purposes,
- request restriction of processing,
- request data portability when processed automatically based on consent or contract,
- object to processing for marketing purposes,
- withdraw consent at any time (processing prior to withdrawal remains lawful),
These rights may be limited when their exercise would breach attorney-client or legal professional privilege.
Voluntary nature of providing data
Providing personal data is voluntary; however, it may be necessary to initiate contact, conduct correspondence, conclude or perform a contract, or receive legal updates. No profiling Personal data is not subject to profiling or automated decision-making that could affect data subjects legally or otherwise.
Cookies Policy
Cookies are data files, usually text files, stored on the user’s device when browsing a website. They enable the use of different sections of the site. Cookies typically contain the domain name, storage duration, and a unique identifier.
Cookies are used for:
- customizing the website to user preferences and optimizing functionality, including
recognizing devices and displaying content appropriately, - generating analytics and usage statistics to improve the website,
- maintaining user sessions (after login), preventing the need to re-enter credentials on each page.
Two types of cookies are used:
- Session cookies – temporary, stored until logout, leaving the website, or closing the browser;
- Persistent cookies – stored for a specified period or until manually deleted.
Types of cookies that may be used on the website:
- necessary – enable website functionality (e.g., login),
- security – detect misuse of authentication,
- performance – collect data about website usage,
- functional – store user preferences (language, region),
- analytical – such as Google Analytics, collecting data on visited pages, time spent, and navigation; handled through cookies by Google LLC.
Managing cookies
Most browsers allow cookies by default, but users may:
- block automatic cookie storage,
- receive notifications before cookies are saved,
- delete existing cookies.
Settings can be adjusted in the browser options. Use of the website implies acceptance of cookies. Restricting cookies may affect functionality. Cookies may also be used by website partners, advertisers, analytics providers, and multimedia service suppliers.
Server logs
Accessing the website generates server requests stored in logs. Logs may include the user’s IP address, date and time, browser type, and operating system. These logs do not identify users. Logs are used solely for administration and are accessible only to authorized personnel.