Privacy Policy

1. General information

The controller of your personal data is: Wojciechowska & Wspólnicy Kancelaria Prawnicza Sp. k. with its registered office in Rzeszów, ul. Mochnackiego 25/3, 35-016 Rzeszów, entered in the business register of the National Court Register kept by the District Court in Rzeszów, XII Commercial Division of the National Court Register under number: 0000409879, NIP: 8131004190, REGON: 691792796 (hereinafter referred to as “Law Firm” or “Controller”).

In matters concerning the processing of personal data, you may contact the Controller as follows:

• o by telephone at +48 662 406 157 or (17) 852 2085;
• o by e-mail to: biuro@wojciechowska.legal; or
• o by post to the following address: Wojciechowska & Wspólnicy Kancelaria Prawnicza Sp. k. with its registered office in Rzeszów, ul. Mochnackiego 25/3, 35-016 Rzeszów.

The Law Firm informs you that it processes your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as
“GDPR”).

Where the Law Firm collects data not from the person to whom it relates, it is exempt from the information obligation if the data must remain confidential, in accordance with the duty of attorney-client privilege (e.g. in the case of providing the Law Firm with the personal data of a litigation opponent or providing the personal data of witnesses).

2. Categories of processed personal data

In particular, the Law Firm processes the following categories of personal data:

• contact data – i.a., name and surname, position, function, telephone number, e-mail address, PESEL number, company (in the case of persons conducting business activity), bank account number;
• data for the recruitment process – data resulting from Article 221 of the Labour Code and other data voluntarily provided by the candidate;
• image – in connection with the use of video surveillance in the Law Firm’s office – to record attendance at the Law Firm’s office for security reasons;
• data relating to court proceedings – when this is necessary for the purpose of conducting the proceedings;
• social media – i.e. personal data contained in posts, likes and other interactions relating to the Law Firm’s social media presence;
• data available on line – in a situation where you access the Law Firm’s website – IP address, information about the website you visit, tracks of visits to individual Law Firm websites, type and version of Internet browser, type of device, model of device; information about mobile networks.

3. Purposes and legal basis for processing personal data

Your data are processed in order to:

• establish contact with the Law Firm and conduct correspondence, including through the contact form contained on the Law Firm’s website or using e-mail, to conduct telephone conversations – the legal basis for data processing is then your voluntary consent (Article 6(1)(a) of the GDPR), as well as the Law Firm’s legitimate interest in conducting business (Article 6(1)(f) of the GDPR). Providing personal data is voluntary but necessary to establish contact and correspondence with the Law Firm;
• ensure the proper functioning of the Law Firm’s website – the legal basis for data processing is then the Law Firm’s legitimate interest, which is to conduct business activities and carry out permitted marketing activities to the extent that it is not opposed to the principles of ethics of attorneys and attorney-at-law (Article 6(1)(f) of GDPR);
• carry out the recruitment process – in the case of conclusion of an employment contract, the legal basis for data processing is Article 221 of the Labor Code in conjunction with Article 6(1)(c) of the GDPR), in the case of civil law contracts and the transfer of personal data in the scope broader than that resulting from Article 221 of the Labor Code, the legal basis for personal data processing is Article 6(1)(a) of the GDPR, i.e. the candidate’s voluntary consent. The provision of personal data is voluntary, but necessary for the conclusion and execution of the contract;
• to conduct future recruitment processes – the legal basis for processing personal data is Article 6(1)(a) of the GDPR;
• provide legal services and to conclude and perform contracts with contractors and collaborators – the legal basis for data processing is then the conclusion and performance by the Law Firm of binding contracts, including those involving the provision of legal services (Article 6(1)(b) of the GDPR). In this case, the Law Firm may also obtain data of persons involved in the execution of such agreements (e.g., authorized contact persons, substantive employees). The scope of the personal data processed is then limited to the extent to which the data is necessary for the performance of the contract and usually does not include personal data other than contact information. Personal data is processed for the purpose of performing the contract (Article 6(1)(b) of the GDPR), as well as on the basis of legitimate interests (Article 6(1)(f) of the GDPR), which is the conduct of business. Provision of personal data is voluntary but necessary for the conclusion and execution of the contract;
• perform statutory obligations imposed on the Controller, in particular tax obligations (Article 6(1)(c) of the GDPR);
• other Law Firm’s legitimate interests (Article 6(1)(f) of the GDPR) which are:
  • ensuring the security of persons and property in the Law Firm’s office, in connection with the use of video surveillance;
  • building business relationships with Clients;
  • ensuring the security of IT systems and equipment;
  • improving the quality of services provided, analyzing how Clients use the Firm’s services and websites;
  • asserting or defending against claims

4. Sensitive data

The Law Firm may process special categories of personal data (so-called “sensitive data”), such as racial origin, ethnicity, health status, information on criminal convictions, if:

• the data subject has given explicit consent to do so for one or more specific purposes;
• it is necessary to protect the vital interests of the data subject;
• the processing concerns data that has clearly been made public by the data subject;
• it is necessary for the establishment, investigation or defense of claims;
• it is necessary for reasons of important public interest (such a task is the processing of sensitive data for the purpose of providing legal services by an advocate or an attorney-at-law);
• to the extent permitted by applicable law.

5. Automated data processing

The Law Firm processes personal data in a fully or partially automated manner (through the use of email or Law Firm management software), but the Law Firm does not make decisions based on such automated processing.

6. Personal data processing time

Your personal data are processed for a period of time adequate to the purpose of processing for which they were collected.

In the case of data processing on the basis of the Law Firm’s legitimate interest, data are processed for a period of time enabling the realization of this interest. In the case of an objection, the data are kept until the date of its filing. Nevertheless, in such a situation, the Law Firm may have the right to continue processing your data based on legitimate legal interest in a situation where this interest is overridden by your interests, rights and freedoms, or where it is necessary to establish, assert or defend claims, which does not apply to processing for direct marketing purposes.

In the case of recruitment processes, the data are processed for the period of the recruitment process, and in the case of the candidate’s consent to process his/her data also for future recruitment processes, the personal data are processed also after the end of the given recruitment process, but no longer than for a period of 18 months.
When the basis for processing is the necessity to conclude and perform a contract, the data are processed until the contract is terminated and thereafter until the statute of limitations for claims arising from the contract.

Personal data processed by advocates and attorneys-at-law in the course of their profession is kept for 10 years from the end of the year in which the proceedings in which the personal data was collected ended.

In the case of video surveillance, personal data shall be processed for no more than 3 months, unless the surveillance record is to be used in legal proceedings, in which case personal data shall be processed for the duration of such proceedings.

The period of data processing may also be based on regulations when they provide the basis for processing.
Okres przetwarzania danych może także wynikać z przepisów, gdy stanowią one podstawę przetwarzania.

If processing is based on consent, the data are processed until the consent is withdrawn.

After the expiration of the processing period, the data are irreversibly deleted or are anonymized.

7. Rights related to processing of personal data

In connection with the Law Firm’s processing of your personal data, you have the following rights:

• the right of access to the data;
• the right to rectification of data;
• the right to delete data;
• the right to restrict data processing;
• the right to data transfer;
• the right to object to data processing;
• o the right to withdraw consent to data processing at any time, whereby withdrawal of consent shall not affect prior processing of personal data on that basis;

Whereas:

• the right of access to data and the right to restrict data processing shall apply to the extent that they do not violate the professional secrecy of the advocate or attorney-at-law;
• the right to object to the processing of personal data shall not apply in the case of personal data obtained by an advocate or attorney-at-law in connection with the provision of legal services.

Notwithstanding the above, you also have the right to lodge a complaint against the processing of personal data with the President of the Office for Personal Data Protection.

For more information on your rights regarding the processing of personal data and their exercise, please contact the law firm at:: biuro@wojciechowska.legal.

8. Cookie Files

A cookie is a file consisting of a string of letters and numbers that is placed in your web browser, on the hard drive of your computer or mobile device.

There are three basic types of cookies:

• session cookie files – specific for a particular visit, limited to sending a so-called session ID (a random string of digits generated by the server). Session cookie files are not permanently stored on the device and are deleted when the browser is closed;
• permanent cookie files – files that record information about user preferences, are stored in the cache memory of the browser or mobile device; and
• third-party cookie files – placed by third parties, used to collect data from many different websites or sessions.

The Law Firm uses the following cookie files::

• strictly necessary cookie files, i.e. cookie files that enable the use of the website and its various functions. The information collected relates to how the website is used;
• analytical cookie files.. These are cookie files that collect information about how you use the website, such as which pages you visit most often, whether you receive error messages and in what way you found the Law Firm’s website. The information collected by such cookie files is used solely to improve your experience on the law firm’s website. Sometimes these types of cookie files are placed by third-party providers of web traffic and analytics services. The Law Firm uses Google Analytics tools;
• functional cookie files.. Cookie files that make it possible to remember choices you have made, such as the language you have chosen and other parameters of individual web pages;
• advertising cookie files.. The files record a visit to the Law Firm’s website, the pages that have been visited. This information allows the Law Firm to measure the effectiveness of marketing or information activities. For this specific purpose, the Law Firm may share information with third parties.

Types of cookie files used by the Law Firm:

The default settings of most browsers assume that you have consented to cookies.

Please refer to your browser’s help tab for instructions on how to block or delete cookies. For more information on how to disable cookies, visit their websites and their cookie policies.
Below is information on how to manage cookies in the most popular browsers:
Microsoft Windows Explorer

Google Chrome

Mozilla Firefox

Apple Safari

More information on how to manage cookies is available at www.youronlinechoices.eu or www.wszystkoociasteczkach.pl

9. Security of personal data

In order to ensure the highest level of security, confidentiality and integrity of personal data, the Law Firm has implemented procedures that allow access to personal data only to authorized persons and only to the extent necessary due to their activities.

In addition, the Law Firm uses a number of technical solutions to ensure that all operations on personal data are carried out only by authorized persons. The Law Firm also takes steps to ensure that entities with which the Law Firm cooperates in connection with its business activities also provide a guarantee of the application of appropriate security measures whenever they process personal data on behalf of the Law Firm. The Law Firm monitors on an ongoing basis the adequacy of the security measures applied to personal data and, if necessary, implements additional measures to enhance security.

Notwithstanding its obligations under the GDPR, the Law Firm implements its obligations under the professional secrecy of an advocate and an attorney-at-law.

10. Recipients of personal data

Recipients of your data will be only entities entitled to receive them under applicable laws and persons cooperating with and under the control of the Law Firm. Personal data may be made available to external entities providing services to the Law Firm, in particular to entities providing IT services.

11. Transfer of personal data to third countries

The Law Firm does not transfer, nor does it plan to transfer your data to third countries or international organizations.

12. Changes to the Policy

The Policy is reviewed on an ongoing basis and updated as necessary.

The current version of the Policy is effective as of November 10, 2023.