Privacy policy

Controller

This document ("Privacy Notice") describes how Kondracki Celej Adwokaci sp. k. with its registered office in Warsaw, ul. Wspólna 35 lok. 3, registered in the Business Register kept by the District Court for the Capital City of Warsaw, 12thCommercial Division of the National Court Register under the KRS number 0000966038, NIP (tax identification number) 5252655418 ("We/Controller'') processes your personal data as our client or a person associated with our client (“Client”), a person who visits our website, or a person interested in our services.

When you visit our website or become our Client, we may acquire and process certain information about you (“Data”). Your Data are processed in accordance with applicable laws and in compliance with the highest standards of privacy and security. First, we apply Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“General Data Protection Regulation”, or “GDPR”). We use secure technical and organizational measures to protect all Data we process from loss, destruction, or unauthorized access by third parties.

‍Collected Personal Data

We process the Data that we have received directly from you or from our Client in connection with the negotiation, the process of execution, or performance of a contract related to our services or retention of documents related to our services.

We may also process the data obtained from publicly available databases, such as the Central Register and Information on Business Activity, the National Court Register or the Central Register of Beneficial Owners.

The Data we collect depending on the purposes of their processing may be, without limitation, as follows:

1. basic identification details (name and surname),
2. company name,
3. contact details (telephone number, e-mail address),
4. address details (home address, place of residence),
5. data on identification numbers (ID card series and number, PESEL, NIP).
6. information about the principal,
7. data on citizenship,
8. information on work experience.

Data we collect automatically

Our website collects some Data automatically when you visit it. We may collect information by automated means, such as browser cookies, pixels, web server logs, web beacons and other technologies. These technologies, among other things, help us (1) remember visitor information so that you do not have to re-enter it, (2) track and understand how visitors use and interact with our website, (3) tailor our website to the visitor’s preferences, (4) manage and measure the usability of our website, (5) understand the effectiveness of our communications, and (6) otherwise improve our website.

The information we collect by automated means includes:

1. Data about your device, including MAC address, IP address, log information, device model, hardware model, IMEI number, serial number, subscription information, device settings, connections to other devices, mobile network operator, browser characteristics, app usage information, sales code, access code, current software version, MNC, subscription information, and random, non-persistent and re-settable device identifiers, such as your Personalized Service Identifier (PSID), and advertising identifiers, including Google Ads ID;
2. Data about your device, including MAC address, IP address, log information, device model, hardware model, IMEI number, serial number, subscription information, device settings, connections to other devices, mobile network operator, browser characteristics, app usage information, sales code, access code, current software version, MNC, subscription information, and random, non-persistent and re-settable device identifiers, such as your Personalized Service Identifier (PSID), and advertising identifiers, including Google Ads ID;
3. Data relating to your use of third-party websites, applications and features that are linked to our services.

Purposes and legal basis of Data processing

We may process your Data for the following purposes, on the basis and for the periods indicated in the table below:

1. Performance of a contract with you. We process your Personal Data to conclude or perform a contract between us and you. The legal basis for processing is Article 6(1)(b) GDPR (performance of a contract) – processing is necessary for the performance of a contract. The data is stored for the period necessary for the performance, termination or expiry of the contract concluded with you.‍
2. Performance of a contract with an entity you are associated with. We process your Data in order to conclude or perform a contract between us and the entity with which you are related or on behalf of which you act (e.g. a Client, our contractor or other entity contacting us). The legal basis for processing is Article 6(1)(f) of the GDPR (legitimate interest of the controller) – processing is necessary to contact you in connection with the performance of a contract concluded with the entity with which you are related or on behalf of which you act (e.g. Client, contractor or other entity contacting us). The data is stored for the period necessary to perform, terminate or expire the contract concluded with the entity with which you are related or represent.‍
3. Recruitment. We process your Data sent to as part of the recruitment procedure. The legal basis for processing is: (a) in the case of information specified in the Labor Code, Article 6(1)(c) of the GDPR (compliance with a legal obligation to which the controller is subject); (b) in the remaining scope of Article 6(1)(b) GDPR (performance of a contract), processing is necessary for the conclusion of a contract; (c) we process information not related to your qualifications or professional achievements (e.g. photo, interests) on the basis of Article 6(1)(a) of the GDPR (consent); (d) information that you have voluntarily provided to us and which is special category data we process on the basis of Art. 9 para. 2 lit. a GDPR (consent). We process your Data to recruit for the position indicated by us in the job advertisement in the period from the moment of receiving the application to the end of the recruitment, but not longer than for a period of one year from its receipt. If you have consented to the processing of Data as part of future recruitment processes, we will process your Data until this consent is withdrawn, but no longer than within one year from the moment of its submission. We process data processed based on consent until it is withdrawn or until the processing of other Candidate Data is completed.‍
4. Contact. We process your Data to enable communication with you through various channels. The legal basis for the processing of Data is Article 6(1)(f) of the GDPR (legitimate interest of the controller). This legitimate interest is to enable us to contact you. We process your Data until you object to the processing, in any case no longer than for 5 years.‍
5. Compliance with obligations arising from the law and internal regulations of the Administrator. We process your Data to comply with legal regulations. An example of this may be our processing of Data relating to the identification and verification of our Client's beneficial owner or mutual settlements to comply with tax and accounting obligations. The legal basis for data processing is Article 6(1)(c) of the GDPR (compliance with a legal obligation to which the controller is subject), processing is necessary to comply with legal obligations, e.g. tax regulations, anti-money laundering and terrorist financing regulations. We process your Data until the law authorizes us to process it.‍
6. Pursuing or defending claims. We process your Data to assert or defend our claims or interests. The legal basis is Article 6(1)(f) GDPR (legitimate interest of the controller). This legitimate interest consists in asserting or defending claims that we may or may raise against us. The data is stored for the duration of the legitimate interest pursued by us, but no longer than for the period of limitation of claims (the basic limitation period for claims is six years).
7. ‍Marketing and advertising. We may use your Data to conduct marketing and advertising activities for our services. Marketing activities include i.a. sending a newsletter via e-mail (if you agree to send commercial information by electronic means). The legal basis is Article 6(1)(f) GDPR (legitimate interest of the controller). This legitimate interest lies in informing you about our services.  We process your Data until you effectively object or withdraw your consent to receive the newsletter, but no longer than it is necessary for the purposes of such processing.‍
8. Analysis and personalization of our website. We use Data to personalize content and analyze our website and web traffic. The legal basis for the processing is Article 6(1)(f) GDPR (legitimate interest of the controller). It consists in analyzing the activity of visitors to the Website in order to optimize the services provided. We process this Data until the effective objection to their processing, but not longer than two years.

Voluntary Provision of Data

Providing Data is voluntary. However, without receiving the necessary Data, we may not be able to carry out some of the activities commissioned by you - their submission is therefore a condition for entering into a contract with us.

Recipients of Data

In some situations, we may need to share your Data with third parties, such as:

1. Third party service providers - we hire other companies and individuals to perform tasks on our behalf. Examples include fulfilling orders for products or services, providing marketing support, providing legal and accounting services. Such third-party service providers have access to the Data to the extent necessary to perform their functions but may not use it for other purposes. In addition, they must process the Data in accordance with the provisions of the Data Processing Agreements and applicable Data Protection Laws,‍
2. Public authorities - in connection with the proceedings conducted by them under the relevant provisions of law.

Transfer of Data to countries outside the EEA

We do not transfer and do not plan to transfer the Data to any countries outside the European Economic Area.

Your rights

The GDPR, depending on your situation, grants you several rights in relation to the processing of your Data. These are:

1. right to access, rectify or delete your Data ("right to be forgotten"),
2. right to object to the processing of your Data for direct marketing purposes, because of which we will stop processing your Data for such purposes,
3. right to object on grounds relating to your situation where we process your Data based on legitimate interest. However, we will continue to process your Data to the extent necessary if there is a legitimate reason,
4. right to data portability or restriction of Data processed in connection with the performance of a contract or based on your consent,
5. right to withdraw consent at any time, where processing is based on your consent. However, withdrawal of consent does not affect the lawfulness of our processing of your Data that we performed based on your consent before its withdrawal.
   

You can find more information about your rights in the context of your personal data on this website.

If you believe that our processing of your Data violates the law, you may file a complaint with the President of the Office for Personal Data Protection. More information on how to file a complaint can be found here.

Automated Decision Making and Profiling

Your Data is not subject to automated processing, in particular profiling.

Contact information

If you have any questions or comments regarding the protection of your Data or if you would like to exercise your rights under the GDPR, please send such information to: biuro@kondrackicelej.pl. Please remember to provide your contact details and preferred form of contact. Thanks to this, we will respond to your questions and requests more efficiently.

Current version of Privacy Notice

This Privacy Notice is an up-to-date notice of our processing of your Data. Its content may change to conform to the facts regarding our processing of your Data.