in fulfillment of the information obligation arising from the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR“), we hereby inform you that:
1. personal data controllers
the joint controllers of your Personal Data are: (i) Iga Reguła-Szeląg, conducting business activity under the name of ‘Kancelaria Radcy Prawnego Iga Reguła-Szeląg’ with its registered office in Kraków, 38/22 Żabiniec st., 31-215 Kraków, tax iddentification number: 9730722644, national business register number: 523626789 and (ii) Tomasz Wit Szeląg, conducting business activity under the name of ‘Tomasz Wit Szeląg Kancelaria Radcy Prawnego’ with its registered office in Kraków, 3/42 Pod Fortem st., 31-302 Kraków, tax identification number: 9452124478, national business register number: 384570429. correspondence address of the joint controllers: 3/42 Pod Fortem st., 31-302 Kraków, poland, kontakt@lawyerit.pl.
the joint controllers have defined the scope of their responsibility for fulfilling the obligations arising from the GDPR in the concluded joint controllership agreement. the joint controllers jointly manage the website “www.lawyerit.pl” and fullfillthe information obligation. each of the joint controllers is obliged to enable the persons whose data has been obtained to exercise the rights arising from the provisions on the protection of personal data. Please send requests, demands and correspondence addressed to the controllers to the following e-mail: kontakt@lawyerit.pl.
2. purposes and legal basis of processing of personal data
The Joint Controllers process personal data for the following purposes and on the following bases:
a) for the purpose and to the extent necessary to perform the legal services, including the actions before entering into the contract, at the request of the data subjects (Article 6 paragraph 1 letter b of the GDPR);
b) based on the consent of the data subjects, in order to perform the contract for the provision of legal services (Article 6 paragraph 1 letter a of the GDPR);
c) to the extent necessary to fulfill the legal obligations incumbent on the Joint Controllers (Article 6 paragraph 1 letter c of the GDPR);
d) to the extent necessary to achieve the objectives arising from the legitimate interests of the joint controllers (Article 6, paragraph 1, letter f of the GDPR), i.e. establishing and maintaining relationships with clients as part of the conducted business activity, preparing and providing clients with answers to requests sent via the contact form or by e-mail, determining claims related to the legal services provided, as well as pursuing these claims or defending against these claims, as well as for archival purposes and in order to develop the website and adapt it to user preferences.
Personal data will not be processed in an automated manner and will not be profiled.
3. categories of personal data
the joint controllers receive personal data: (i) from persons interested in using the legal services (ii) from persons for whom legal services are provided.
The joint administrators process the following categories of personal data:
A) first and last name, PErsonal number, series and number of the identity document, date of birth;
b) telephone number, e-mail address, address;
c) tax identification number, bank account details;
d) if it is necessary for the provision of legal services, data concerning: (i) education and conducted business and/or professional activity (ii) financial situation (iii) marital status;
4. period of processing of personal data
Personal data will be processed for a period no longer than necessary to perform the contract for the provision of legal services, to fulfill tax obligations and to achieve the purposes resulting from the legitimate interests of the joint controllers (prescription period for claims resulting from the Contract). The period of data storage will not be shorter than the applicable period resulting from generally applicable legal provisions. after the storage period has expired, personal data will be permanently deleted.
5. recipients of personal data
Personal data may be processed by our partners and providers, based on agreements concluded with us and based on our instructions (accounting and HR services providers, legal advisors, consultants, translators, IT services providers), as well as entities authorized under applicable law (in particular courts and state authorities).
Personal data will be transferred outside the European Economic Area or to international organizations only when necessary and only when the European Commission determines that a third country or a given international organization ensures an adequate level of protection or when other appropriate or proper safeguards are applied, in particular standard contractual clauses adopted by the European Commission.
6. personal data subjects’ rights
Data subjects have the right to:
a) request access to personal data,
b) request rectification of personal data,
c) request deletion of personal data,
d) request restriction of personal data processing,
e) object to the processing of personal data,
F) file a complaint with the supervisory authority (President of the Personal Data Protection Office).
Data subjects have the right to withdraw consent to data processing at any time, which does not affect the lawfulness of processing based on consent before its withdrawal.
Providing personal data is voluntary, however, failure to provide it will prevent:
(i) response to an inquiry sent via the contact form or by e-mail
(ii) conclusion and performance of a contract for the provision of legal services.
iga reguła-szeląg
tomasz wit szeląg