Due to the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”), we inform you that Kancelaria Adwokacka Wojciech Mędraś processes, among others, personal data:

a) customers who are natural persons,
b) in the case of the law firm’s clients who are legal persons or organizational units without legal personality – personal data of persons authorized to represent such entities, employees and associates of such clients,
c) service providers who are natural persons, as well as employees and associates of service providers,
d) persons contacting the Law Firm in order to obtain assistance in the field of legal advice provided by the Law Firm, as well as persons whose data were obtained while providing such services to the Law Firm’s clients,
e) persons cooperating with the Law Firm on a permanent or occasional basis in the provision of services by the Law Firm.

I. PERSONAL DATA ADMINISTRATOR

The administrator of personal data is the Wojciech Mędraś Law Firm with its registered office in Wrocław, ul. Świdnicka 12/16, 50 – 066 Wrocław,

II. CONTACT DETAILS OF THE ADMINISTRATOR

You can contact us:

a) by phone: + 48 71 307 97 97
b) at the e-mail address: kancelaria@wmedras.pl
c) at the office of the Law Firm at the following address: ul. Świdnicka 12/16, 50 – 066 Wrocław.

III. DATA PROCESSING PURPOSES, LEGAL BASIS AND LEGALLY STATED INTERESTS

We would like to inform you that your personal data will be processed when it is necessary for:

1. conclusion and performance of the contract, i.e. based on Article. 6 section 1 letter b GDPR, in particular legal services contracts, mandate contracts or contracts for the provision of services to the Law Firm by suppliers of such services,
2. fulfillment of legal obligations imposed on the personal data administrator pursuant to Art. 6 section 1 letter c GDPR, arising from EU law or Polish law,
3. for purposes arising from legitimate interests pursued by the administrator or a third party pursuant to Art. 6 section 1 letter f GDPR, which the administrator considers in particular: investigating, determining and defending against claims, preventing fraud, ensuring the security of the ICT environment, using internal control systems, determining conflicts of interest and ethical violations to the extent necessary to counteract abuses, for archival and statistical purposes, as well as the provision of services to the client, in situations where the client’s interests override the interests, rights and freedoms of the data subject.

IV. CATEGORIES OF PERSONAL DATA PROCESSED

The law firm processes the following categories of personal data:

a) data to confirm identity, such as name and surname, PESEL number, ID card number, date of birth,
b) contact details, such as: telephone number, e-mail address, residential address,
tax identification data,
c) data regarding education and professional experience – if necessary from the point of view of the legal services provided,
d) data regarding the property and financial situation – if necessary from the point of view of the legal services provided,
e) data regarding professional and business activities,
f) data regarding marital status – – if it is necessary from the point of view of the legal services provided,
g) in addition, the Law Firm may process other categories of personal data, provided that it is done for the purposes specified in this information.

V. CATEGORIES OF DATA RECIPIENTS

The recipients of data may be entities from the following categories:

a) lawyers, legal advisors, experts, tax advisors, notaries and other entities providing legal services and independently deciding on the purposes and methods of data processing cooperating with the Law Firm,
b) entities authorized under applicable law (in particular courts and state authorities),
c) economic information offices;
d) entities providing services:
– IT and new technologies;
– payment;
– accounting and finance;
– audit and control;
– debt collection;
– printing;
– destruction of documents;
– postal and courier services

VI. DATA STORAGE PERIOD

a) for the purpose of performing the contract – until its termination or expiration;
b) establishing, pursuing or defending against claims – until the claims become time-barred or an objection is raised;
c) in order to fulfill the legal obligations of the Law Firm – until the obligations arising from legal provisions expire.

VII. YOUR RIGHTS

At any time you are entitled to:

a) access to personal data provided by Users relating to these Users, subject to Art. 15 section 3 GDPR (Article 15 GDPR);
b) rectification of data (Article 16 of the GDPR);
c) deletion of personal data provided by Users, i.e. “right to be forgotten” (Article 17 of the GDPR)
d) restrictions on the processing of the User’s personal data (Article 18 of the GDPR);
e) transfer of the User’s personal data (Article 20 of the GDPR);
f) withdraw consent to data processing at any time, which will not affect the lawfulness of processing based on consent before its withdrawal.
g) the right to object – in the case of processing personal data based on the legitimate interest of the Administrator, i.e. art. 6 section 1 letter f) GDPR, – pursuant to Art. 21 GDPR. Accordingly, the Administrator will not be able to process personal data of Users subject to objection on this basis, unless he demonstrates the existence of valid legally justified grounds for processing, overriding the interests, rights and freedoms of the data subject, or grounds for establishing, investigating or defense of claims.


VIII. INFORMATION REGARDING THE REQUIREMENT OR VOLUNTARYNESS OF PROVIDING DATA AND THE CONSEQUENCES OF FAILURE TO PROVIDE

In the scope of personal data processing for the purposes referred to in point III. 2 above, the obligation to provide data is a statutory requirement; in turn, in the case of data processing for the purposes referred to in point III. 1 and 3, the obligation to provide data is a contractual requirement – providing personal data for all the purposes referred to above is voluntary, but is necessary to conclude and implement the contract with the Law Firm.

IX. SKARGA DO ORGANU NADZORU

Użytkownicy mają prawo w dowolnym momencie wnieść skargę do organu nadzorczego tj. Prezesa Urzędu Ochrony Danych Osobowych, jeżeli uważają, że przetwarzanie ich danych osobowych przez Administratora narusza obowiązujące przepisy prawa.

Kancelaria nie przekazuje danych osobowych poza Europejski Obszar Gospodarczy oraz nie przetwarza danych osobowych w sposób zautomatyzowany ani dane nie będą profilowane.