Address: Grota-Roweckiego Street 4/5/18, 98-355 Działoszyn, Poland
Tel.: +48 606 97 01 69
Registration: Kielce Bar Council, registration number KL-K-821
VAT registration number: PL6371329789
Code of Ethics of the Attorney-at-Law
Available at the website of the National Bar Council of Attorneys-at-Law (in Polish)
GDPR Data Processing Notice
As a result of the entry into force of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR) please be advised that the Law Firm of Michał Głowacki (the Law Firm) shall process, among others, the following personal data:
a) personal data of clients who are natural persons,
b) in the case of clients of the Law Firm being legal persons or associations not having legal personality – personal data of the persons authorised to represent such entities, and employees and associates of such clients,
c) personal data of service providers who are natural persons, as well as employees and associates of service providers,
d) persons addressing the Law Firm to obtain legal advice provided by the Law Firm and persons whose data were gathered when providing such services for the Law Firm’s clients,
e) persons associated with the Law Firm on a permanent or occasional basis in relation to the provision of services by the Law Firm.
For the above reasons, the Law Firm hereby provides you with significant information related to the processing of personal data.
PERSONAL DATA CONTROLLER
The personal data controller is the Law Firm of Michał Głowacki, address Grota-Roweckiego Street 4/5/18, 98-355 Działoszyn, Poland, tel. +48 606 97 01 69, e-mail
(in Polish: Kancelaria Radcy Prawnego Michał Głowacki), taxpayer identification number (NIP): PL637132978.
CONTACT DETAILS OF THE CONTROLLER
You can contact us using the following details:
a) by phone: (+48 606970169)
b) by sending an-email to the address:
PURPOSES OF DATA PROCESSING, LEGAL BASIS FOR PROCESSING AND LEGITIMATE INTERESTS
Please be advised that your personal data shall be processed where it is necessary to:
1. enter into and perform a contract, i.e. on the basis of Article 6(1)(b) of the GDPR, including in particular a legal service contract or an agreement on the provision of services to the Law Firm by the providers of such services;
2. comply with legal obligations to which the personal data controller is subject on the basis of Article 6(1)(c) of the GDPR, resulting from the European Union or Polish law;
3. for the purposes stemming from the legitimate interests pursued by the controller or a third party on the basis of Article 6(1)(f) of the GDPR, whereby the controller recognises the following as legitimate interests: establishment, exercise, and defence of legal claims; preventing fraud; ensuring ICT environment security; applying internal control systems; monitoring the Law Firm and recording entries to and exits from the Law Firm; establishing conflicts of interests and breaches of ethical rules to the extent necessary to prevent misuse; for archiving and statistical purposes; as well as to provide services to a client when the client’s interest overrides the interests, rights, and freedoms of the data subject.
CATEGORIES OF PROCESSED PERSONAL DATA
The Law Firm shall process the following personal data categories:
- data serving the purpose of confirming identity, such as first and last name, PESEL number, ID document number, date of birth;
- contact details such as: telephone number, e-mail address, residence address;
- tax identification data;
- information about education and professional experience – if necessary from the point of view of the services provided;
- information about the economic and financial situation – if necessary from the point of view of the services provided;
- information about professional and business activities;
- information about the marital status – if necessary from the point of view of the services provided;
- images – in the scope of the monitoring in place in the Law Firm.
In addition, the Law Firm may process other personal data categories where it is impossible to include them to any of these groups and the processing is carried out for the purposes specified in this notice.
CATEGORIES OF RECIPIENTS
The data recipients may include the following categories of entities:
a. attorneys at law and legal advisers, notaries, and other entities providing legal services and taking independent decision as regards the purposes and manners of data processing, cooperating with the Law Firm;
b. assignees of the Law Firm’s receivables;
c. entities authorised on the basis of the applicable law regulations (in particular courts and state bodies);
d. economic information bureaux;
e. entities providing:
- services in the field of IT and new technology;
- payment services;
- accounting and financial services;
- audit and control services;
- recovery services;
- printing services;
- services consisting in destroying documents;
- postal and courier services.
TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA
In general, the Law Firm shall not transfer personal data outside the European Economic Area. However, the Law Firm may commission the provision of specific IT services or tasks to a service provider having its registered office outside the European Economic Area. In such a case data shall be transferred to a third state for which an adequacy decision was taken by the European Commission.
DATA RETENTION PERIOD
The Law Form applies the following retention periods:
a) for the purposes of performing a contract/contracts – until their termination or expiry;
b) to establish, exercise, or defend against legal claims – until the expiry of the limitation period or lodging an objection;
c) to comply with the legal obligations to which the Law Firm is subject – until the expiry of the obligations stemming from law regulations.
RIGHTS OF THE DATA SUBJECT
Data subjects enjoy the following rights:
- right of access to the contents of the data subject’s personal data,
- rectifying and completing them,
- restricting their processing and deleting them;
- right of personal data portability with regard to the data provided by you to the Law Firm, i.e. right to receive them in a structured and commonly used format and to send them to another controller (his right may be exercised only where the processing takes place on the basis of a consent or agreement and where it is fully automated).
In order to exercise the above rights, please contact the Law Firm.
RIGHT TO LODGE A COMPLAINT
The right to lodge a complaint with the supervisory body handling personal data protection where the data subject believes that the processing of personal data breaches the GDPR.
RIGHT TO OBJECT
You have the right to object to the processing of personal data if the processing is carried out for the purposes resulting from the legitimate interests pursued by the controller or a third party, i.e. on the basis of Article 6(1)(f) of the GDPR.
Such an objection must be based on your particular situation. Upon receipt of the objection we shall cease to process your personal data for the purposes indicated above to which you have objected, unless we demonstrate that there is a compelling legitimate interest in the processing which overrides your interests, rights, or freedoms, or there are grounds for establishing, exercising and defending against claims.
RIGHT TO REVOKE CONSENT
Where personal data are processed on the basis of the consent of the data subject, the data subjects may revoke their consent at any time, whereby the revocation of consent shall be without prejudice to the legal compliance of the processing carried out before the revocation on the basis of such a consent.
INFORMATION ABOUT THE REQUIREMENT TO PROVIDE PERSONAL DATA AND THE VOLUNTARY NATURE OF THEIR PROVISION, AND THE CONSEQUENCES OF FAILURE TO PROVIDE DATA
In the scope of the processing of personal data for the purpose referred to in point 2 above, the obligation to provide data constitutes a statutory requirement; in turn where personal data are processed for the purposes referred to in points 1 and 3, the obligation to provide them is a contractual requirement – the provision of data for any of the purposes referred to above is voluntary, however necessary to enter into and perform a contract with the Law Firm.