This Privacy Policy (hereinafter referred to as:Privacy Policy) defines the principles of processing personal data by Polowiec i Wspólnicy Spółka Jawna with its registered office in Kraków, ul. Kielecka 8/1, 31-526 Kraków, registered in the Register of Entrepreneurs of the National Court Register under the number KRS: 0000370282, Tax Identification Number: 6751440375, REGON: 12138808000000, whose registration files are kept at the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register (hereinafter referred to as: "Company" or"Administrator"). The Privacy Policy constitutes the implementation of the information obligation resulting in particular from Article 13 and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L. of 2016, No. 119, p. 1, as amended) (hereinafter referred to as: "GDPR"”).
The Privacy Policy applies to persons contacting the Law Firm, clients, contractors, persons acting on behalf of clients or contractors, persons participating in recruitment or cooperating with the Company, website users and other persons whose data are processed in connection with the Company's activities.
The controller of personal data is the company: Polowiec i Wspólnicy Spółka Jawna with its registered office in Kraków, ul. Kielecka 8/1, 31-526 Kraków, registered in the Register of Entrepreneurs of the National Court Register under the KRS number: 0000370282, NIP: 6751440375, REGON: 12138808000000, whose registration files are kept at the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register.
The Administrator decides on the purposes and methods of processing personal data in connection with the conducted business activity, in particular customer service, contacts with contractors and running the website.
In all matters related to the processing of personal data, you can contact the Administrator:
The Administrator obtains personal data directly from data subjects, in particular during telephone, e-mail and personal contact, via contact forms, when concluding and performing contracts and in the course of providing legal assistance.
Data may also be obtained from the Controller's clients or contractors, from persons acting on their behalf, from documents submitted to the Law Firm as part of the case being conducted, from public registers, procedural files, official or court correspondence and from other entities, if it is necessary to provide legal services or to fulfil the Controller's legal obligations.
The scope of data processed depends on the purpose of the contact, the type of case and the basis of cooperation with the Administrator.
Name and surname, company or entity name, position or function, PESEL number, NIP number, REGON number, KRS number, identification data of proxies or representatives.
Residential address, mailing address or registered office address.
Telephone number, email address.
Data contained in the documents provided to the Company, data relating to the case.
Billing data and data necessary to issue an invoice.
If the nature of the case so requires, the Controller may also process special categories of personal data referred to in Article 9 of the GDPR, and data relating to criminal convictions or offences referred to in Article 10 of the GDPR, only to the extent necessary to provide legal assistance, comply with legal obligations, protect client rights or establish, pursue or defend claims.
IP address, date and time of connection, information about the browser, operating system, activity on the website and information saved in cookies.
In connection with the use of the website, the Administrator may also process technical data such as the IP address, date and time of connection, information about the browser, operating system, activity on the website and information saved in cookies.
Responding to inquiries and conducting correspondence.
Conducting a preliminary analysis of the case and presenting information on the possibility of providing legal assistance.
Taking action at the request of the data subject before concluding a contract.
Conclusion and performance of a contract for the provision of legal services.
Handling cases, preparing opinions, letters, contracts and other documents, representing clients before courts, public administration bodies, law enforcement agencies, offices, contractors and other entities.
Handling settlements, issuing invoices and maintaining accounting records.
Fulfillment of obligations arising from legal provisions, including tax, accounting, archiving regulations and provisions regulating the exercise of the legal profession.
Ensuring the confidentiality, integrity and security of data and IT systems.
Website administration and cookie management.
Recruiting or establishing cooperation.
Direct marketing of own services, if an appropriate legal basis applies.
Establishing, pursuing or defending against claims.
The legal basis for the processing of personal data is Article 6(1)(b) of the GDPR, where processing is necessary to take action at the request of the data subject before entering into a contract, as well as to conclude and perform a contract for the provision of legal services, including contact, case analysis, preparation of an offer, management of the case and implementation of agreed legal actions.
The legal basis for processing is Article 6(1)(c) of the GDPR, where processing is necessary for the performance of legal obligations incumbent on the Controller, in particular tax, accounting, archiving obligations, obligations related to counteracting money laundering and terrorist financing, if applicable, and obligations arising from the provisions governing the provision of legal assistance and the exercise of the legal profession.
The Controller may also process data under Article 6(1)(f) of the GDPR if it is necessary to pursue the Company's legitimate interests, such as ensuring the proper organization of the Company's work, ongoing contact with clients, contractors and persons acting on their behalf, website administration, ensuring the security of IT systems, protection of information covered by professional secrecy, direct marketing of own services, and the establishment, investigation or defense against claims.
If processing is based on consent, the legal basis is Article 6(1)(a) of the GDPR. This applies in particular to situations where an individual has voluntarily consented to certain activities, such as participating in future recruitment processes, receiving certain information, or using certain categories of cookies, where consent is required.
In the case of processing special categories of personal data, the basis for processing may be, in particular, Article 9(2)(f) of the GDPR, if processing is necessary for the establishment, exercise, or defense of legal claims or in the course of the administration of justice by courts, and Article 9(2)(a) of the GDPR, if the data subject has expressly consented to the processing of such data for a specific purpose. Data relating to criminal convictions and offences are processed only where permitted by law or when necessary in connection with the provision of legal assistance.
Personal data may be transferred to entities supporting the Controller in conducting its business, in particular providers of IT services, hosting, e-mail, accounting services, postal and courier services, document archiving, insurers, cooperating lawyers and other entities processing data on the basis of agreements concluded with the Controller.
Data may also be transferred to courts, public administration bodies, law enforcement authorities, bailiffs, notaries, legal representatives, experts, mediators, arbitrators and other entities if this is required by law, the nature of the case, the client's instructions or is necessary for the proper provision of legal services.
As a general rule, the Controller does not transfer personal data outside the European Economic Area or to international organizations. If such a need arises in the future, such data will only be transferred in accordance with the GDPR, in particular based on a European Commission adequacy decision, appropriate safeguards such as standard contractual clauses, or another basis provided for in the GDPR. The data subject can obtain information about the safeguards applied if such a transfer takes place.
Personal data is processed for the period necessary to achieve the purpose for which it was collected, and then for the period required by law or for the period necessary to establish, pursue or defend against claims.
Data processed for the purpose of concluding and performing the contract are stored for the duration of the cooperation, and after its termination for the period resulting from legal provisions, rules for the provision of legal services and limitation periods for claims.
Data processed for tax and accounting purposes are stored for the period required by applicable regulations, generally for the period required for tax and accounting documentation.
Data processed on the basis of consent are processed until its withdrawal, unless further processing is based on another legal basis.
Data processed for the purposes of direct marketing of own services are processed until an objection is raised.
The data of candidates for work or cooperation are processed for the duration of the recruitment process, and in the case of consent to future recruitment processes, until the consent is withdrawn or for the period specified in the recruitment clause.
Providing personal data is generally voluntary, but in certain cases it may be necessary to contact the Controller, analyse the case, conclude a contract, provide legal services, issue an invoice, fulfil legal obligations or participate in recruitment.
Failure to provide data may make it impossible to perform a specific action, conclude or perform a contract or fulfil the request of the data subject.
The data subject has the following rights:
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
To exercise your rights, please contact the Administrator. The Administrator will provide information and take action in accordance with the principles set out in Article 12 of the GDPR.
The rights of the data subject are not absolute and may be subject to limitations under the law, in particular when further processing is necessary due to: The rights of the data subject are not absolute and may be subject to limitations under the law, in particular when further processing is necessary due to:
The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office if he or she considers that the processing of his or her personal data violates the provisions on personal data protection.
The Administrator reserves the right to make changes to the Privacy Policy in the event of changes in legal regulations, technological or organizational changes or changes in the method of processing personal data, as well as to adapt its content to the solutions and services used.
The current content of the Privacy Policy is published on the Administrator's website and is effective from the moment of its posting, unless its content specifies a different date of entry into force of the changes.
It is recommended to regularly read the Privacy Policy to obtain information about the applicable principles of personal data processing.
