Notice on data processing
Notice on data processing
I. General Information
1. The personal data controller is JDK Legal Kancelaria Radcy Prawnego Joanna Dudek, with its registered office at ul. Gwiaździsta 22/4, Wrocław 53-413, Tax Identification Number (NIP): 7831848765 (“Controller”). The data controller processes the personal data of individuals in connection with the services it provides, including the data of its clients.
2. The Controller can be contacted: (a) at the postal address: Wrocław 53-413, ul. Gwiaździsta 22/4 or (b) at the email address: info@jdklegal.pl.
3. Personal data is processed in accordance with: Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”), the Personal Data Protection Act and other applicable regulations concerning the protection of personal data, including those replacing the aforementioned regulations.
II. Scope of processed data
With regard to the contact details of service users and persons cooperating in the performance of the contract, the following data may be processed: first name and surname, email address, telephone number, data contained in the information and documents provided, and details of the employing organisation. This data has been obtained directly from you or from the organisation with which the contract was concluded.
The provision of personal data is voluntary but necessary for the conclusion or execution of the contract. Failure to provide this data will make it impossible to contact you for the purposes of fulfilling the contract.
III. Purposes and grounds for the processing of personal data
Personal data may be processed for the following purposes:
1. Where you are a party to a contract, your personal data will be processed for the purpose of executing the contract (Article 6(1)(b) of the GDPR) or for the purposes of the controller’s legitimate interests (Article 6(1)(f) of the GDPR, where the processing of your personal data is necessary for the performance of a contract to which you are not a party, as well as to enable the Controller to comply with legal obligations, e.g. those arising from accounting and tax legislation), (Article 6(1)(c) of the GDPR).W przypadku obsługi formularza kontaktowego oraz korespondencji dane przetwarzane są w celu: udzielenia odpowiedzi na wysłaną wiadomość i podjęcia działań przed zawarciem umowy. Podstawą prawną przetwarzania jest: art. 6 ust. 1 lit. b RODO (zawarcie umowy) lub art. 6 ust. 1 lit. f RODO, tj. prawnie uzasadniony interes Administratora (nawiązanie kontaktu i komunikacja w związku z odpowiedzią na wiadomość).
2. With regard to marketing and information activities, the purposes of processing may include: access to materials and information relating to the Controller’s activities. The legal basis for data processing is: Article 6(1)(a) of the GDPR (consent) or Article 6(1)(f) of the GDPR (the Controller’s legitimate interest – marketing of its own services).
3. In the event of pursuing or defending against claims: data may be processed to the extent necessary to establish, pursue or defend claims. The legal basis for data processing for this purpose is Article 6(1)(f) of the GDPR (the Controller’s legitimate interest – pursuing claims).
IV. Data processing period
1. Data will be processed for the period necessary to perform the contract and for the mandatory retention period of documentation relating to the contract – in accordance with applicable law.
2. Data processed on the basis of the Controller’s legitimate interest is retained until a valid objection was raised or the purpose of processing ceases to exist (including the expiry of the limitation period for claims or until proceedings are finally concluded). Data processed on the basis of consent is retained until consent is withdrawn or the purpose of processing ceases to exist.
V. Data processing rights
The data subject has the right at any time to:
- access their personal data and obtain a copy of it,
- have their data rectified,
- have their data erased or processing restricted,
- have their data transferred (where processing is carried out by automated means, on the basis of consent or a contract),
- object to the processing of data where the basis for processing is the Controller’s legitimate interest,
- withdraw consent at any time, if the basis for processing was consent, provided that the withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal,
- submit a complaint to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
VI. Access by third parties
Personal data may be disclosed to entities processing personal data on behalf of the Controller - IT, software and hosting service providers, marketing agencies, consultants, and entities cooperating with the Controller in the provision of legal and organisational services.
Data may also be disclosed to entities authorised under applicable law, e.g. law enforcement agencies.
VII. Transfer of data outside the European Economic Area
Personal data may be transferred to third countries, in particular to the United States, in connection with the use of services provided by suppliers such as Google. Data transfers are carried out in accordance with the provisions of the GDPR, in particular on the basis of the European Commission’s decision confirming an adequate level of data protection (EU–US Data Privacy Framework) or by applying other appropriate safeguards provided for by the GDPR.