PRIVACY POLICY

The Law Firm processes personal data of Clients, potential Clients, as well as individuals indicated by Clients for contact with the Law Firm. The Law Firm also processes personal data of individuals contacting the Law Firm via the contact form and visitors to the Law Firm’s website.

This Privacy Policy aims to explain the principles on which the Law Firm processes your personal data and discuss the basic rights related to the processing of your personal data by the Law Firm.

The processing of personal data is carried out in accordance with the applicable data protection regulations, particularly in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation “GDPR”), and with the Act of 10 May 2018 on the protection of personal data.

PERSONAL DATA CONTROLLER

The controller of your personal data is Michał Pankiewicz conducting business as Michał Pankiewicz & Współpracownicy Kancelaria Prawna, registered in the CEIDG under the address: Rynek Dębnicki 6/3, 30-319 Kraków, Tax Identification Number: 679-286-58-35, National Business Registry Number: 122223889, email: kontakt@michalpankiewicz.pl (hereinafter referred to as the “Law Firm”).

You can contact the Data Controller:

• by phone: at the number: 665 810 480,
• by email: kontakt@michalpankiewicz.pl,
• at the registered office of the Law Firm at: Rynek Dębnicki 6/3, 30-319 Kraków.

PURPOSES OF PERSONAL DATA PROCESSING

The Law Firm processes personal data on the basis of Article 6(1)(a), (b), (c), and (f) of the GDPR for the purpose of:

1. entering into and performing contracts for the provision of legal services,
2. fulfilling legal obligations imposed on the Controller by Polish law or European Union law,
3. pursuing legally justified interests pursued by the Law Firm, including but not limited to:

• providing services to Clients,
• for analytical, statistical, and IT security purposes related to the Law Firm’s website,
• investigating, establishing, and defending against claims.

RETENTION PERIOD OF PERSONAL DATA

Your personal data will be stored for as long as there is a legal basis for their processing, namely:

1. in the case of data necessary for the performance of a contract – until the expiration of the limitation periods for claims related to the contract with which the processing of personal data is associated;
2. in the case where the processing is based on the legitimate interest of the Law Firm – until the existence of that legitimate interest, i.e., until the day on which further processing of your personal data becomes unjustified due to the purpose it was intended to serve;
3. until the objection is raised or consent is withdrawn with regard to the processing of data for marketing purposes, if such consent has been given.

RECIPIENTS OF PERSONAL DATA

Depending on the specific need justified by the legal relationship connecting the Law Firm, your personal data may be disclosed to:

1. the Law Firm’s accountant – for the purposes of providing accounting and tax services;
2. legal advisors, attorneys, trainees, apprentices (students), legal assistants – employed in the law firm or providing legal services to the Law Firm, in connection with the provision of such services;
3. IT companies servicing the IT system of the Law Firm.

These entities process your data based on a contract with the Law Firm and only in accordance with the Law Firm’s instructions. These entities are obliged to maintain confidentiality and to process your personal data in accordance with the applicable legal regulations regarding data protection.

Your personal data may also be disclosed to selected state institutions, authorities, or those performing public tasks (courts, court bailiffs, mediators, curators, tax control authorities, and other legal protection authorities).

TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

In principle, the Law Firm does not transfer personal data outside the European Economic Area. However, the Law Firm informs you that it may be necessary to transfer personal data to a third country in a manner and under conditions specified by relevant legal regulations. This may occur, for example, if specific services or IT tasks are commissioned to service providers located outside the European Economic Area. Transfer will only occur if the destination country provides an adequate level of data protection on its territory.

RIGHTS RELATED TO PERSONAL DATA PROCESSING

In connection with the processing of your personal data by the Law Firm, you have the following rights:

1. the right to object to data processing due to a particular situation,
2. the right to access personal data,
3. the right to request the correction of personal data,
4. the right to request the erasure of personal data,
5. the right to request the restriction of personal data processing.

To exercise these rights, please contact the Law Firm.

RIGHT TO OBJECT

If the Law Firm processes your data on the basis of its legitimate interests, you have the right to object to the processing of your data due to your specific situation. Upon receiving an objection, the Law Firm will cease processing your data for the above purposes against which you expressed objection, unless we demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms.

RIGHT TO LODGE A COMPLAINT

If you believe that the processing of your personal data breaches the GDPR, you have the right to lodge a complaint with the supervisory authority responsible for data protection, namely the President of the Personal Data Protection Office.

RIGHT TO WITHDRAW CONSENT

If the processing of data is based on your consent, you have the right to withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

DATA SUBMISSION REQUIREMENT AND CONSEQUENCES OF NOT PROVIDING THEM

Providing personal data is voluntary, but necessary for the conclusion and performance of a contract with the Law Firm. In such situations, failure to provide the required personal data may hinder the conclusion or performance of the contract.

NO PROFILING

Your personal data is not subject to profiling as one of the forms of automated data processing.

AMENDMENTS TO THE PRIVACY POLICY

Any amendments to the Privacy Policy will be published on the Law Firm’s website and will only be effective for the future.

By using the Law Firm’s website, you accept the Privacy Policy. Otherwise, you should refrain from using the website.