Dear Sirs,
with regard to the implementation of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: “GDPR”), we provide you with information regarding your personal data.
This document sets out the principles under which the personal data of persons using https://adwokatzakopianska.pl/ (hereinafter: "Service") are protected.
The Privacy Policy describes the type of personal data collected from a user of the Service, how it is collected, used, as well as how it is stored and possibly shared, and describes what rights you have in connection with the processing of your personal data.
The Administrator is obliged to protect the privacy of the Service users. Acting to this end, the Administrator shall make every effort to ensure that the user of the Service protects the personal data provided in connection with the use of the Service.
We would like to inform you that the Administrator of your personal data is Tomasz Tantała conducting business activity under the name Kancelaria Adwokacka adwokat Tomasz Tantała, ul. Zakopiańska 108/32, 30-435 Kraków, NIP: 6751738229, REGON: 387473052.
PURPOSES AND BASIS OF PROCESSING
- Contact form
We process the data you provide in the contact form in order to process your request and answer your inquiry, based on our legitimate interest (the basis of Article 6(1)(f) of the GDPR), which is to contact customers and answer their questions, and based on your voluntary consent (Article 6(1)(a) of the GDPR). Provision of the data indicated in the form is voluntary, but necessary to handle the submitted inquiry.
- Contract
If the contact is made with a view to concluding a contract, your data will be processed for the purpose of taking pre-contractual action at your request, such as negotiating or presenting an offer (the basis of Article 6(1)(b) of the GDPR). The data will be processed for the period necessary to take action at your request. If no contract is concluded after this period, the data will continue to be processed until the execution of the contract and the statute of limitations for claims arising from the contract on the basis of the Administrator's legitimate interest, which is the defence and assertion of claims (Article 6(1)(b) and (f) of the GDPR).
If a contract is concluded with you, the data will be processed:
- for the purpose of its performance (including, but not limited to, contact in connection with its performance, confirmation of payment) and on its basis (basis of Article 6(1)(b) of the GDPR);
- for the purpose of fulfilling the Administrator's legal obligations, including tax obligations, issuing VAT invoices, processing complaints, fulfilling information obligations (the basis of Article 6(1)(c) of the GDPR);
- for archival (evidential) purposes to secure information in the event of a legal need to prove facts, for the purpose of possibly establishing, investigating or defending against claims, on the basis of the Administrator's legitimate interest (the basis of Article 6(1)(f) of the GDPR), which is then the investigation and defense of claims, archiving of documentation.
The scope of personal data necessary to conclude a contract depends on the subject of the contract. However, the administrator always requests only those data that are necessary to conclude a contract. Their provision is mandatory for the conclusion of the contract.
- Conducting traditional correspondence and via e-mail
In the case of your e-mail or traditional correspondence to the Administrator, which is not related to the provision of services or performance of another contract, the personal data contained therein are processed for the purpose of handling the request or inquiry submitted in the correspondence
The basis for processing in such a case is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which consists in correspondence and handling of requests and inquiries in connection with business activities. Provision of personal data necessary to handle the request is mandatory.
- Phone contact
In the event that you make contact by telephone, on matters which are not related to the provision of services to you or the performance of another contract, the personal data provided by you are processed for the purpose of handling the request or inquiry made.
The basis for processing in such a case is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), which is to handle requests and inquiries in connection with business activities. The Administrator may request that you provide data necessary to handle the request, in which case the provision of such data is mandatory to handle the request.
- Contact of contractor's or customer's employees
If you contact us by phone or email in connection with a contract concluded with your employer or actions taken at his/her request prior to the conclusion of the contract - we process the data obtained in this way for the purpose of performing the contract concluded and taking actions at his/her request prior to the conclusion of the contract (the basis of Art. 6(1)(b) of the GDPR), as well as for the purpose of investigating, defending against claims, which is the Administrator's legitimate interest in protecting your rights (the basis of Art. 6(1)(f) of the GDPR).
If you contact us on a matter other than the concluded contract, we process your data in order to answer the question asked or resolve the matter with which you are contacting us. The basis for processing is the Administrator's legitimate interest in answering the question asked or resolving the matter in connection with its business activities (the basis of Article 6(1)(f) of the GDPR).
- Other bases for processing
Your data may also be processed for the purpose of fulfilling legally binding obligations of the Administrator (the basis of Article 6(1)(c) of the GDPR, including tax obligations, obligations under the Civil Code, the GDPR, issuing VAT invoices, processing complaints, fulfilling information obligations),
DATA RECIPIENTS
- Data processing entrustments and data sharing
We may share your personal data with the entities we use for processing, e.g.: accounting, legal, IT, document shredding, document archiving, courier, transportation, providing access to e-mail, postal operators. The Administrator will also provide access to your data when it is necessary due to a legal obligation.
- Transfer of data to third countries or international organizations
The Administrator may outsource the processing of personal data to a third country, i.e. outside the European Economic Area, and send it to third-party collaborators of the Administrator acting on behalf of the Administrator for the purposes described above.
The transfer of data outside the EEA, e.g. to the USA, only takes place if the entity in question meets an adequate degree of security and data protection, e.g. on the basis of an adequacy decision, the so- called Data Privacy Framework. This means that your data can only be transferred to entities that have committed to an adequate degree of personal data protection in accordance with EEA standards.
DATA RETENTION PERIOD
The length of time for which we may process your personal data depends on the legal basis for the processing of personal data by the Administrator. We will never process your personal data beyond the duration of the above-mentioned legal grounds. Accordingly, we inform you that:
- where the Administrator processes personal data on the basis of consent, the processing period lasts until you withdraw that consent,
- in case the Administrator processes your personal data obtained on the basis of your request to take action by the Administrator before concluding a contract, the processing period lasts for the time necessary to take action on your request,
- where the Administrator processes personal data when it is necessary for the performance of the contract, the period of processing shall last until the possibility of asserting claims related to the contract by either party ceases,
- where the Administrator processes personal data on the basis of a legitimate interest of the Administrator, the period of processing shall last until the aforementioned interest ceases to exist (e.g., the statute of limitations for civil law claims) or until the data subject objects to further such processing - in situations where such an objection is entitled under the law,
- where the Administrator processes personal data because it is necessary due to applicable laws, the processing periods for this purpose are determined by those laws,
YOUR AUTHORITY
We inform you that you are entitled to:
- The right to access your data and receive a copy of it,
- The right to rectify your data,
- The right to delete your data,
- The right to restriction of data processing,
- The right to object to data processing,
- The right to data portability,
- The right to file a complaint with the supervisory authority,
- The right to withdraw consent to the processing of personal data.
At any time, you have the right to withdraw your consent to the processing of those personal data that we process on the basis of your consent. Withdrawal of consent will not affect the lawfulness of the processing that was carried out on the basis of your consent before its withdrawal.
If you believe that we are processing your data unlawfully, you may file a complaint about it with the President of the Office for Personal Data Protection.
If you wish to exercise the above rights, please contact us in person, via post or by e-mail using the following details:
Kancelaria Adwokacka adwokat Tomasz Tantała, ul. Zakopiańska 108/32, 30-435 Kraków;
e-mail:
(Monday to Friday, 9:00 a.m. to 5:00 p.m.)
VOLUNTARINESS OF PROVIDING PERSONAL DATA
Provision of data in connection with the handling of the request and the reported inquiry, presented by telephone, traditional correspondence or e-mail correspondence, is necessary to handle and respond to the inquiry and resolve the matter, and failure to do so will result in the inability to send a response or resolve the matter.
When you contact us to ask a question or indicate a matter to be resolved, the provision of data enabling us to contact you back is voluntary, but necessary to answer the question or resolve the matter presented.
Providing the data indicated in the contact form as mandatory is necessary to handle the question and answer it.
Provision of data in connection with the conclusion, execution and performance of the contract is voluntary, but necessary for the proper implementation of the service and performance of the contract. The consequence of not providing this data will be the inability to conclude a contract with the Administrator.
We may also require you to provide data if it is necessary to perform our legal obligations. In that case, the provision of data is mandatory.
Provision of data necessary to send commercial information on products and services, promotions and offers is voluntary, but necessary to send such information. Failure to provide them prevents sending commercial information on products and services, promotions and offers.
AUTOMATED DECISION-MAKING
We inform you that we will not make automated decisions about you, including that you will not be subject to profiling.
COOKIES POLICY
The Service uses cookies to provide the best possible user experience. If you do not change your browser settings on your side, you consent to their use.
A cookie is a small piece of text information sent by a server and stored on the device of a visitor to our Service (usually on the hard drive of a computer or mobile device). It stores information that the Service may need to adapt to the visitor's use of the Service and to collect statistical data about the Service.
When users browse the content of the Service, information regarding the use of the Service by users and their IP addresses is automatically collected based on analysis of access logs, e.g. browser type, operating system type, date and time of visit, number of connections, number of subpages of the Service opened, content viewed.
Installation of "cookies" is necessary for the proper operation of functionality on the Service. The "cookies" contain information necessary for the proper functioning of the Service, especially those requiring authorization.
The Service uses the following types of "cookies": session, permanent, analytical. "Session" cookies are temporary files that are stored on the user's terminal device until the user logs out, leaves the Service or shuts down the software (web browser). "Permanent" cookies are stored on the user's end device for the time specified in the parameters of the cookies or until they are deleted by the user. "Analytical" "cookies" allow to better understand how the user interacts with the content of the Service, to better organize its layout. "Analytical" "cookies" collect information about the way users use the Service, the type of page from which the user was redirected, and the number of visits and the time of the user's visit to the site. This information does not record specific personal information about the user, but is used to compile statistics on the use of the Service.
The user has the right to decide on the access of "cookies" to his/her computer by selecting them in advance in his/her browser window. Detailed information on how to change the settings for cookies and how to delete them yourself in the most popular web browsers is available in the help section of your web browser and on the following pages:
In addition to cookies, the Site may also collect data customarily collected by Internet system administrators as part of so-called logs or log files. Information contained in the logs may include: IP address, type of platform, type of web browser
Third party cookies
By using our Services, you may receive cookies from third parties that cooperate with the Administrator, such as Google, Facebook, Twitter. You can find more information about these cookies on the Services of the respective third parties.
