Information on the Protection and Processing of Personal Data
Pursuant to Articles 13(1–2) and 14(1–2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR), we hereby inform you that:
- Data ControllerThe controller of your personal data is:Jacek Mościcki, conducting business under the name Kancelaria Radcy Prawnego Jacek Mościcki, Address: ul. Św. Leonarda 2a/2, 60-654 Poznań, Poland, Tax Identification Number (NIP): 7781019190, Email: biuro@kancelariaradcy.eu, Tel: +48 61 848 12 64
- Purposes and Legal Basis for ProcessingYour personal data will be processed for the following purposes:
- To perform a contract concluded with the Controller or to take steps at your request prior to entering into such a contract, in particular to respond to inquiries regarding services offered (legal basis: Article 6(1)(b) GDPR);
- To fulfil legal obligations incumbent upon the Controller, particularly those arising from accounting regulations (legal basis: Article 6(1)(c) GDPR);
- For purposes arising from the legitimate interests pursued by the Controller, such as direct marketing or the establishment, exercise, or defence of legal claims (legal basis: Article 6(1)(f) GDPR).
In all other cases, your personal data will be processed solely on the basis of your prior consent, and only to the extent and for the purpose defined in such consent. - Source of Data CollectionYour contact data may be obtained either directly from you (e.g., when using our services) or from third parties (e.g., intermediaries offering our services to whom you have disclosed your data). When you contact us directly, you have full control over the scope of data provided. When data is provided by a third party, the Controller usually receives only basic contact details such as: name, surname, email address, phone number, and potentially additional data related to the contract or order in connection with which the data has been shared.
- Data RecipientsYour personal data may be shared with the Controller’s subcontractors, including providers of accounting, IT, advertising, marketing, auditing, consultancy, legal, transport, or courier services.
- Data Retention PeriodYour personal data will be processed for the duration necessary to perform the contract, as well as for the period during which claims related to that contract may arise, and for the period required under applicable tax and accounting regulations. Data may also be processed for the duration of the legitimate interests pursued by the Controller or until an objection to processing for marketing purposes is lodged.
- Your RightsYou have the right to:
- Request access to your personal data (including receiving a copy);
- Request rectification of inaccurate or incomplete data;
- Request erasure of your personal data ("right to be forgotten") if:
- The data is no longer necessary for the purposes for which it was collected or otherwise processed;
- You withdraw consent on which the processing is based and there is no other legal ground for the processing;
- You object to the processing;
- The data has been unlawfully processed;
- The data must be erased to comply with a legal obligation;
- Request restriction of processing if:
- You contest the accuracy of the personal data;
- The processing is unlawful and you oppose erasure and request restriction instead;
- The Controller no longer needs the data but you require it to establish, exercise, or defend claims;
- You have objected to processing pending verification of whether the legitimate grounds of the Controller override yours;
- Request data portability if:
- The processing is based on your consent or on a contract, and
- The processing is carried out by automated means;
- Object to processing on grounds relating to your particular situation where processing is based on Article 6(1)(f) GDPR (legitimate interests).
If your data is being processed on the basis of your consent, you may withdraw this consent at any time without affecting the lawfulness of processing carried out before its withdrawal. - Right to Lodge a ComplaintYou have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) — if you believe that your personal data is being processed in breach of the provisions of the GDPR.
- Obligation to Provide DataProviding your personal data is voluntary. However, failure to provide the data may prevent us from concluding a contract with you and from rendering services on your behalf.
- Transfer of Data Outside the EEAYour personal data will not be transferred to a third country (i.e., outside the European Economic Area) or to an international organization.
- Automated Decision-MakingYour personal data is not subject to automated decision-making, including profiling.