Privacy Policy

Privacy Policy of the Law Office of Legal Counsel Łukasz Wędziński based in Warsaw

The purpose of this Privacy Policy is to explain the principles on which personal data is processed at the Law Office of Legal Counsel Łukasz Wędziński. The privacy policy also indicates the basic rights of individuals whose personal data is processed by the Office in connection with the provision of services by the Office.

The data controller applies technical measures and organizational solutions ensuring the protection of personal data processing and safeguards against unauthorized access.

The legal basis for the processing of personal data is the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), (Official Journal of the European Union L 119/1, hereinafter: “GDPR”) and the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2019, item 1781 as amended).

 

Personal Data Administrator

The administrator of your personal data is Łukasz Wędziński (“Administrator”) running the Law Office of Legal Counsel Łukasz Wędziński based in Warsaw, NIP: 554-249-12-73, REGON: 341413034.

 

Contact details of the Personal Data Administrator

You can contact the Administrator by writing to the email address: l.wedzinski@wedzinski.leobeta.pl.

 

Purposes and legal basis for the processing of personal data

As part of its activities, the Administrator collects and processes personal data to conclude and perform a contract for the provision of legal assistance or another service agreement, including organizing training or translations, its termination, and other activities necessary to perform the legal assistance contract:

  • based on art. 6 sec. 1 lit. b) GDPR – in the case of a contract concluded with the person whose data is concerned;
  • based on art. 6 sec. 1 lit. f) GDPR – in the case where the person whose data is concerned is not a party but acts on behalf of the party to the contract with the Office, e.g., as their representative, another representative, or another person indicated by them;
  • based on art. 6 sec. 1 lit. b) GDPR – cooperation with service providers or other entities cooperating with the Office;
  • based on art. 6 sec. 1 lit c) and art. 6 sec. 1 lit a) GDPR – conducting recruitment of people interested in working or cooperating with the Office;
  • art. 6 sec. 1 lit c) GDPR – fulfilling legal obligations incumbent on the Administrator, including obligations resulting from the Act on Counteracting Money Laundering and Financing of Terrorism;
  • art. 6 sec. 1 lit f) GDPR – establishing conflicts of interest and violations of the ethics rules applicable to legal counsel to prevent abuses;
  • art. 6 sec. 1 lit f) GDPR – archival (evidence) purposes constituting the legitimate interest of the Administrator, i.e., securing information in the event of the legal need to prove facts, pursue claims, determine and defend against claims or to pursue receivables and other rights of the Administrator;
  • art. 6 sec. 1 lit f) GDPR – marketing the services of the Office, including informing about events organized by the Office or in which the Office or its employees participate, as well as about the activities and all forms of activity of the Office or its employees and associates;
  • art. 6 sec. 1 lit f) GDPR – the necessity to optimize the use of websites, creating statistics that form the basis for analyzing how the Office’s service recipients use the Office’s website. Personal data is processed for statistical purposes to improve the quality of services provided and the content posted on the Office’s website or publications prepared by the Office or its employees and associates.

 

Transfer of personal data to other entities

  1. 1. The recipients of your personal data may be entities from the following categories:
    • notaries and other entities providing legal services and independently deciding on the purposes and methods of data processing;
    • legal counsels, attorneys, trainee legal counsels, trainee attorneys, tax advisors, employees, and associates of the Office cooperating with the Office;
    • postal operators, couriers, and other entities processing data in connection with the delivery of shipments;
    • entities authorized under applicable law (in particular, courts and public administration bodies, as well as other institutions and entities performing public functions and tasks);
    • entities providing other services to the Office, i.e., IT services (e.g., hosting providers, email server, and other IT services), payment, tax, accounting services, e.g., accounting and financial office, and other services necessary for the lawful functioning of the Office).
  2. Data transferred to the entities indicated in point 1 is intended to provide services by these entities and is used only to provide these services. Such entities process data based on a contract with the Office and only in accordance with this Privacy Policy and applicable information security standards.
  3. Your personal data will not be transferred to countries outside the European Union, unless the provision of legal assistance related to the implemented order requires the transfer of data outside the EEA with your expressed consent.

 

Retention period of personal data

Personal data will be processed:

  • in the case of personal data processed by the Office in the performance of the profession based on the Act of July 6, 1982, on Legal Counsels – for 10 years from the end of the year in which the proceedings in which the personal data were collected ended;
  • in the case of personal data processed in connection with a contract concluded with the Office other than the provision of legal assistance within the profession’s performance – until the limitation period for claims related to the contract and an additional six-month period in case of claims filed at the last moment, or problems with delivery or another period provided for by generally applicable law;
  • in the case of personal data processed in connection with the intention to conclude a contract with the Office, when it is not concluded – within three years from the first contact with the Office;
  • personal data processed in connection with the Administrator’s legal obligation – until the limitation period for obligations arising from generally applicable law;
  • personal data processed based on the consent of the person concerned – until the withdrawal of the consent given by the authorized person;
  • personal data processed within the legitimate interest of the Administrator, including for direct marketing purposes – until the legitimate interest of the Office is realized or an objection is raised by the authorized person against such processing.

Rights of the data subject

Providing personal data is voluntary, but refusal to provide it or requesting its deletion will prevent the Office from contacting the person whose data is processed and from concluding a contract for the provision of legal assistance, providing legal assistance itself, as well as presenting a commercial offer, information about the Office’s activities, or any other information.

In accordance with the principles set out in the data protection laws and within the scope provided therein, you are entitled to the following rights:

  1. the right to access personal data, including obtaining a copy (art. 15 GDPR);
  2. the right to information on the scope of personal data processing;
  3. the right to rectify incorrect or erroneous personal data or to complete incomplete data (art. 16 GDPR) – if you believe that the data is incorrect, erroneous, or incomplete;
  4. the right to request the deletion of personal data without giving a reason (“right to be forgotten”), (art. 17 GDPR) – deleting the data will not affect the actions already performed;
  5. the right to request the restriction of personal data processing (art. 18 GDPR) – e.g., if you notice that the data is incorrect, you may request the restriction of processing your data for a period allowing us to verify the correctness of this data;
  6. the right to data portability to another administrator;
  7. the right to object – at any time – to the processing of your personal data by the Office for direct marketing purposes or purposes arising from the legitimate interests of the Office;
  8. the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office;
  9. the right to withdraw consent to the processing of personal data.

 

Right to object

  1. If you object to the processing of your personal data based on the legitimate interests of the Office, the Office will cease processing the personal data unless it demonstrates compelling legitimate grounds for processing that override your interests, rights, and freedoms or the data is necessary for establishing, pursuing, or defending claims.
  2. If you object to the processing of your personal data for direct marketing purposes, including profiling for this purpose, the Office will immediately cease processing the data for such purposes.

 

Withdrawal of consent

In cases where the processing of personal data is based on your consent, you have the right to withdraw it at any time without affecting the legality of the processing, which was carried out based on consent before its withdrawal.

 

Changes to the Privacy Policy

The Administrator reserves the right to amend the Privacy Policy by publishing the new content on the website: www.wedzinski.pl.

This Privacy Policy has been in force since January 1, 2021.