Information Clause

Fulfilling the obligation of a personal data administrator in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) dated 27 April 2016 (Official Journal of the European Union L 2016 No. 119, p. 1) (hereinafter referred to as “GDPR”), we hereby inform you that:

1) In the case of processing your personal data, the Data Controller is Prof. Marek Leśniak Law Firm, located at Okrężna 24, 53-008 Wrocław, Tax Identification Number (NIP):911-131-05-24, REGON: 020695370

2) You can contact the Data Controller regarding the processing of personal data at the following email address: kancelaria@mareklesniak.pl or by traditional mail to the registered office address.

3) The personal data will be processed by the Data Controller for the following purposes:

• Individuals whose data is processed by the Data Controller in connection with the provision of legal assistance:
• Clients of the Data Controller, who are natural persons, as well as their employees, collaborators, representatives, and agents (hereinafter referred to as “Representatives“) – main purposes: Establishing and executing agreements with Clients, including the provision of legal assistance, including the collection of fees from Clients for legal services rendered;
• Contractors of Clients, who are natural persons (e.g., parties to agreements negotiated with the Client) and their Representatives – main purposes: Executing agreements with Clients, including the provision of legal assistance, including reviewing and negotiating the content of agreements and other documents with the Contractors of Clients;
• Debtors or Creditors of Clients, who are natural persons, and their Representatives – main purposes: Pursuing claims on behalf of the Client or defending the Client against claims, including conducting pre-litigation and judicial proceedings, negotiating repayment terms for obligations;
• Witnesses, parties, and other participants in court and administrative proceedings conducted at the request of the Client – main purposes: Pursuing claims on behalf of the Client or defending the Client within the scope of court and administrative proceedings;

• Data processed by the Data Controller in connection with the acquisition of services by the Data Controller from external entities – that is, data of Service Providers and their Representatives – main purposes: Establishing and executing agreements with Service Providers providing services to the Data Controller (especially in the areas of IT, human resources and accounting, and cleaning), carrying out activities on behalf of the Data Controller within the framework of these services;
• Data processed by the Data Controller in connection with the recruitment of new members to the Data Controller’s team – main purposes: Selection and recruitment of candidates as members of the Data Controller’s team.

4) The legal basis for processing personal data is provided by regulations governing the principles of personal data processing, including processing personal data via means of distance communication, as well as the provisions of the GDPR and other legal acts, namely:

• Regarding Customer data, which are natural persons – Article 6(1)(b) of the GDPR (establishment and execution of a contract involving the provision of legal assistance); however, if processing the Customer’s data listed in Article 9(1) of the GDPR (sensitive data) is necessary for establishing, asserting, or defending legal claims or as part of the exercise of legal rights by courts, Article 9(2)(f) of the GDPR provides the legal basis. If processing the data mentioned in Article 9(1) of the GDPR is necessary to protect the vital interests of the Customer, who is a natural person, Article 9(2)(c) of the GDPR provides the legal basis;
• Regarding Representatives of Customers – Article 6(1)(f) of the GDPR in conjunction with Article 6(1) of the Act on Legal Advisers (legal interest of the Administrator, manifested in the necessity of contacting the personnel of the Customer for the proper provision of legal assistance);
• Regarding Contractors of Customers, who are natural persons, and their Representatives – Article 6(1)(f) of the GDPR in conjunction with Article 6(1) of the Act on Legal Advisers (legal interest of the Administrator, manifested in the necessity of processing such data, which may appear in the content of contracts or other documents subject to review on the Customer’s request for the proper provision of legal assistance);
• Regarding Debtors or Creditors of Customers, who are natural persons, and their Representatives, as well as witnesses, parties, and other participants in court and administrative proceedings conducted at the request of the Customer – Article 6(1)(f) of the GDPR in conjunction with Article 6(1) of the Act on Legal Advisers (legal interest of the Administrator, manifested in the necessity of processing such data for the proper provision of legal assistance to Customers, consisting in the enforcement of their claims or defense against claims);
• Regarding Service Providers to the Administrator, who are natural persons – Article 6(1)(b) of the GDPR (establishment and execution of a contract for the provision of services);
• Regarding Representatives of Service Providers to the Administrator – Article 6(1)(f) of the GDPR (legal interest of the Administrator, manifested in the necessity of contacting the personnel of Service Providers to the Administrator);
• Regarding individuals being recruited into the Administrator’s team – Article 6(1)(a) of the GDPR (consent given during the recruitment process).

5) Recipients of your personal data will include members of the Administrator’s team (partners, employees, contractors, collaborators, interns), entities providing services to the Administrator, especially in the field of accounting and IT, as well as courts and other authorities if such necessity arises from the contract for the provision of legal assistance.
6) Your personal data will be processed for the following periods:

• In relation to data processed by the Administrator in connection with the provision of legal assistance (data of Clients, their Representatives, Clients’ Contractors and their Representatives, Debtors or Creditors of Clients, witnesses, parties, and other participants in court and administrative proceedings) – Until the expiry of the processing periods for the accounting and reporting purposes of the Administrator (5 years from the provision of legal services or termination/expiry of the contract with the Client, expiration at the end of the tax year). However, no shorter than the ultimate expiration of the Administrator’s claims against the Client / the Client’s claims against the Administrator for the provision of legal assistance – with the possibility of extension in the event of claims by the Administrator / the Client (until the dispute is resolved). In the case of personal data collected in court or administrative proceedings – 10 years from the end of the year in which the proceedings were completed (Article 5c(1)(2)(c) of the Act on Legal Advisers);
• In relation to data of the Administrator’s Contractors and their Representatives – Until the expiry of the processing periods for the accounting and reporting purposes of the Administrator (5 years from the termination/expiry of the contract with the Contractor, expiration at the end of the tax year). However, no shorter than the ultimate expiration of the Administrator’s claims against the Contractor / the Contractor’s claims against the Administrator for the implementation of the contract with the Contractor – with the possibility of extension in the event of claims by the Administrator / the Contractor (until the dispute is resolved);
• In relation to data of candidates recruited to the Administrator’s team – Until the candidate withdraws consent to the processing of their data (due to the possibility of including the candidate in another recruitment process conducted by the Administrator) or until the Administrator decides to delete the data.

7) Your rights in connection with the processing of personal data by the Administrator:

• the right to access their personal data;
• the right to rectify data if the data processed by the Administrator are incorrect or incomplete;
• the right to request the erasure of data;
• the right to request the restriction of data processing;
• the right to data portability, meaning the right to receive personal data provided to the Administrator and to transmit it to another data controller;
• the right to object to data processing (excluding data processed based on consent);
• the right to lodge a complaint with the Polish supervisory authority or the supervisory authority of another EU member state, based on the person’s habitual residence or place of work, or the place of the alleged infringement of the GDPR;
• for candidates recruited to the Administrator’s team – the right to withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal);

8) Your personal data will not be subject to automated processing by the Administrator, including profiling.