According to General Data Protection Regulation (GDPR) we hereby inform, that controller of your personal data is attorney at law, Mrs. Anna Szczęsna-Mazur which is conducting business activity based in Poland, Poznań (60-818), Sienkiewicza Street 22/17, disclosed in the Central Register and Information on Economic Activity, using VAT-EU PL7842518480 and REGON number 383686911.
WHO CAN I CONTACT IN MATTERS CONCERNING DATA PROTECTION?
In all matters regarding the protection of personal data, you can contact us by calling +48 61 610 0316 or by sending a message to the e-mail address .
Below, depending on who you are – you will find all information on the processing and protection of your data, that are required by articles 13 and 14 of GDPR. Whenever we refer to a law firm, administrator or use the possessive adjective – it is of course the attorney at law, Mrs. Anna Szczęsna-Mazur.
WHERE DOES THE LAW FIRM GET MY DATA FROM?
If you have not provided law firm with your personal data, we have obtained it from your employer or contractor. Sometimes your personal data may be obtained by the law firm from publicly available sources, e.g. from your employer’s website. Remember that you can always ask us how exactly we got your data – just write an email.
WHAT ARE THE AIMS OF MY DATA PROCESSING?
- Correct performance of the contract for the provision of legal services concluded between you and the law office – pursuant to art. 6.1.b GDPR.
- The performance of the law firm’s obligations under the law, such as the duties of an attorney at law or payment of public law liabilities – pursuant to art. 6.1.c GDPR, art. 4 and 6 of the Law on the Bar, § 1 and § 8.2 of the regulations for practicing the profession of an attorney in an individual office or companies
- The legitimate interests of the law firm, which include the performance of the contract concluded with your employer, service, investigation and defense against mutual claims, also in cases of termination of the contract and prevention of prohibited acts – pursuant to art. 6.1.f GDPR.
WHO WILL BE THE RECIPIENT OF MY DATA?
Your personal data may be disclosed to entities cooperating (recipients) with the law firm. This is done on the basis of data processing agreements, which is a GDPR-compliant practice. The entity to which we will disclose your personal data is in particular:
- Web INnovative Software sp. z o.o with headquarters in Wrocław (51-166), ul. Bolesława Krzywoustego 105/21, KRS 0000342082, VAT-ID 8982167294.
- Google Workplace provieder – Google LLC with headquarters in Mountain View (Kalifornia, US).
DOES MY PERSONAL DATA TRANSFER OUTSIDE THE EUROPEAN UNION?
Yes, because we use the Google Workplace package that uses infrastructure operating in the US. This means that we transfer your data to the so-called third countries. However, you do not have to worry. We do it in full compliance with the law. We have concluded data processing agreements based on standard contractual clauses approved by the European Commission, thanks to which we try to ensure an appropriate level of security for your data. As part of the data protection impact assessment, in line with the recommendations following judgment c-311/18, we have identified the risks and possible consequences related to the transfer of data. Also, consider that Google Workplace is one of the most secure services in its class. Other available solutions from suppliers from the European Union do not provide, in our opinion, a decent level of security.
HOW LONG WILL MY DATA BE PROCESSED?
Your personal data will be processed for various periods of time, depending on the purpose and specific data we have collected:
- for the duration of the contract and then for 3 years, in accordance with art. 118 of the Polish Civil Code – these are data on periodic claims arising from legal relations between the law firm and you or the entity you represent;
- for the duration of the contract and then for 6 years, in accordance with art. 118 of the Polish Civil Code – these are data on claims arising from legal relations between the law firm and you or the entity you represent;
- for 2 years from the maturity of the claims referred to in Art. 751 points 1 of the Polish Civil Code, arising in connection with the performance of a mandate contract or a contract for the provision of services concluded between the law firm and you or the entity you represent – these are data on the conclusion and performance of a mandate contract or for the provision of legal services;
- for 6 years from the end of consideration of the complaint submitted by you – pursuant to the provisions of Title XXI of the Polish Civil Code in connection with art. 118 of the Polish Civil Code;
- for 5 years from the end of the calendar year in which the tax payment deadline required by the provisions governing tax obligations has expired – pursuant to art. 32 and 70 § 1 of the Tax Ordinance Act – these are data required by the provisions of the tax law;
- for 10 years from the end of the year in which the procedure in which the personal data was collected ended – these are data processed by the law firm as part of the legal profession;
- until your death on the basis of the provisions of the Act on Copyright and Related Rights, in order to prove that you are the entity that transferred the copyrights to the law firm, or for 6 years from the date of sale of these rights by the law office to a third party.
WHAT ARE MY RIGHTS IN CONNECTION WITH THE PROCESSING OF MY DATA?
You have the right to request access to your personal data, rectification, erasure or restriction of processing or the right to object to the processing of your personal data. You are entitled to these rights only in situations where making such a request is actually justified.
DO I HAVE TO PROVIDE MY DATA?
Providing personal data is fully voluntary, you have the right to refuse to provide it. In this case, however, the conclusion of the contract will not be possible (if you are a contractor) or its performance may not be possible, or it may be difficult (if you are an employee).
AUTOMATED DATA PROCESSING
Your personal data will be processed in an automated manner, but will not be profiled.
RIGHT TO A COMPLAINT
You have the right to lodge a complaint regarding the processing of your personal data by the law firm. You can bring a complaint to the supervisory authority, which is the President of the Personal Data Protection Office, seated in Warsaw (00-193), ul. Stawki 2.
WHERE DOES THE LAW FIRM GET MY DATA FROM?
We obtained them from our Principal (most often the Client) or from a state authority in the course of the proceedings conducted before it. Sometimes your personal data may be obtained by the law firm from publicly available sources, e.g. from websites or from entities dealing with economic intelligence or detectives. Remember that you can always ask us how exactly we got your data – just write an email. Remember, however, that in cases where we would be required to breach legal secrecy, we will have to refuse. We have the right to do so pursuant to art. 16a of the Law on the Bar.
WHAT ARE THE AIMS OF MY DATA PROCESSING?
- The performance of the law firm’s obligations under the law, such as the duties of an attorney at law or payment of public law liabilities — pursuant to art. 6.1.c GDPR, art. 4 and 6 of the Law on the Bar, § 1 and § 8.2 of the regulations for practicing the profession of an attorney in an individual office or companies.
- The legitimate interests of the law firm, which include the performance of the contract concluded with your employer, service, investigation and defense against mutual claims, also in cases of termination of the contract and prevention of prohibited acts — pursuant to art. 6.1.f GDPR.
WHO WILL BE THE RECIPIENT OF MY DATA?
Your personal data may be disclosed to entities cooperating (recipients) with the law firm. This is done on the basis of data processing agreements, which is a GDPR-compliant practice. The entity to which we will disclose your personal data is in particular Google Workplace provieder — Google LLC with headquarters in Mountain View (Kalifornia, US).
DOES MY PERSONAL DATA TRANSFER OUTSIDE THE EUROPEAN UNION?
HOW LONG WILL MY DATA BE PROCESSED?
Your personal data will be processed for 10 years from the end of the year in which the procedure in which the personal data was collected ended – these are data processed by the law office as part of the legal profession.
WHAT ARE MY RIGHTS IN CONNECTION WITH THE PROCESSING OF MY DATA?
You have the right to request access to your personal data, rectification, erasure or restriction of processing or the right to object to the processing of your personal data. You are entitled to these rights only in situations where making such a request is actually justified.
DO I HAVE TO PROVIDE MY DATA?
Providing personal data is fully voluntary, you have the right to refuse to provide it. In this case, however, the conclusion of the contract will not be possible (if you are a contractor) or its performance may not be possible, or it may be difficult (if you are an employee).
AUTOMATED DATA PROCESSING
Your personal data will be processed in an automated manner, but will not be profiled.
RIGHT TO A COMPLAINT
You have the right to lodge a complaint regarding the processing of your personal data by the law firm. You can bring a complaint to the supervisory authority, which is the President of the Personal Data Protection Office, seated in Warsaw (00–193), ul. Stawki 2.
WHERE DOES THE LAW FIRM GET MY DATA FROM?
We obtained them from our Principal (most often the Client) or from a state authority in the course of the proceedings conducted before it. Sometimes your personal data may be obtained by the law firm from publicly available sources, e.g. from websites or from entities dealing with economic intelligence or detectives. Remember that you can always ask us how exactly we got your data — just write an email. Remember, however, that in cases where we would be required to breach legal secrecy, we will have to refuse. We have the right to do so pursuant to art. 16a of the Law on the Bar.
WHAT ARE THE AIMS OF MY DATA PROCESSING?
- The performance of the law firm’s obligations under the law, such as the duties of an attorney at law or payment of public law liabilities – pursuant to art. 6.1.c GDPR, art. 4 and 6 of the Law on the Bar, § 1 and § 8.2 of the regulations for practicing the profession of an attorney in an individual office or companies.
- The legitimate interests of the law firm, which include the performance of the contract concluded with your employer, service, investigation and defense against mutual claims, also in cases of termination of the contract and prevention of prohibited acts – pursuant to art. 6.1.f GDPR.
WHO WILL BE THE RECIPIENT OF MY DATA?
Your personal data may be disclosed to entities cooperating (recipients) with the law firm. This is done on the basis of data processing agreements, which is a GDPR-compliant practice. The entity to which we will disclose your personal data is in particular Google Workplace provieder — Google LLC with headquarters in Mountain View (Kalifornia, US).
DOES MY PERSONAL DATA TRANSFER OUTSIDE THE EUROPEAN UNION?
Yes, because we use the Google Workplace package that uses infrastructure operating in the US. This means that we transfer your data to the so-called third countries. However, you do not have to worry. We do it in full compliance with the law. We have concluded data processing agreements based on standard contractual clauses approved by the European Commission, thanks to which we try to ensure an appropriate level of security for your data. As part of the data protection impact assessment, in line with the recommendations following judgment c‑311/18, we have identified the risks and possible consequences related to the transfer of data. Also, consider that Google Workplace is one of the most secure services in its class. Other available solutions from suppliers from the European Union do not provide, in our opinion, a decent level of security.
JAK DŁUGO BĘDĄ PRZETWARZANE MOJE DANE?
Your personal data will be processed for:
- 6 years, in accordance with art. 118 of the Polish Civil Code – these are data concerning claims that may arise from legal relations between the law firm and you or the entity represented by the law office;
- 10 years from the end of the year in which the procedure in which the personal data was collected ended — these are data processed by the law firm as part of the legal profession;
WHAT ARE MY RIGHTS IN CONNECTION WITH THE PROCESSING OF MY DATA?
You have the right to request access to your personal data, rectification, erasure or restriction of processing or the right to object to the processing of your personal data. You are entitled to these rights only in situations where making such a request is actually justified.
DO I HAVE TO PROVIDE MY DATA?
Providing personal data is fully voluntary, you have the right to refuse to provide it. In this case, however, the conclusion of the contract will not be possible (if you are a contractor) or its performance may not be possible, or it may be difficult (if you are an employee).
AUTOMATED DATA PROCESSING
Your personal data will be processed in an automated manner, but will not be profiled.
RIGHT TO A COMPLAINT