I.   Data controller

Your personal data is controlled by Grzelczak Fogel i Partnerzy Spółka Partnerska Radców Prawnych, with the registered office at ul. Kościerzyńska 32, 51-430 Wrocław, entered in the register of entrepreneurs kept by the District Court for Wrocław-Fabryczna in Wrocław, VI Commercial Department of the Polish Court Register, under no. KRS 0000607670, tax identification no: NIP 8992786194; statistical no.: REGON: 363963770.

To contact us you can:

  • send an email to kancelaria@gfplegal.pl,
  • send a letter to the following address: ul. Kościerzyńska 32, 51-430 Wrocław, or
  • call 0048 71 341 60 41.

 

II.   Data processing purposes

We process your personal data on the following legal grounds and for the following purposes:

  1. Use of our website: https://gfplegal.pl/
    We will collect and analyse the data gathered during your visits to our website for security purposes, in order to measure how you use it and make it more efficient and user friendly. For these purposes, we will use, among others, the cookies referred to in point VII below. The processing is based on Article 6(1)(f) of the GDPR, i.e. our legitimate interests.
  2. Providing of legal assistance
    • We will process your data with regard to performance of the legal assistance contract we have concluded or take steps at your request prior to entering into a contract (in particular the preparation of a cooperation offer). The processing is based on Article 6 (1) (b) of the GDPR, i.e. the necessity to perform the contract or to take steps prior to entering into a contract;
    • If you are a member of our client’s staff, we will process your data related to the performance of your duties for the purpose of fulfilling the legal assistance contract concluded by us with your employer. The processing is based on Article 6 (1) (f) of the GDPR, i.e. our legitimate interest;
    • With regard to concluding a contract with you, we have a number of legal obligations, in particular those imposed in connection with the performance of the profession of attorney–at–law, e.g., obligations related to anti-money laundering and terrorist financing, as well as tax obligations, related to the settlement of the concluded contract. The processing is based on Article 6 (1) (c) of the GDPR, i.e. the necessity to compliance with legal obligations resulting from the law;
    • If you have used our services, we may process your data in order to send you a survey assessing their quality. The processing is based on Article 6 (1) (f) of the GDPR, i.e. our legitimate interest;
    • Should any disputes arise between us related with the providing of legal assistance, we may process your data in order to resolve them, including for the purpose of pursuing, determining or defending claims. The processing is based on Article 6 (1) (f) of the GDPR, i.e. our legitimate interest.
  3. Processing of data of contractors and their staff
    • If you are our contractor, we will process your data for the purpose of performing the contract. The processing is based on Article 6(1)(b) of the GDPR, i.e. the necessity to perform the contract;
    • With regard to the conclusion of a contract with you, we have a number of legal obligations, in particular tax obligations, related to the settlement of the contract. The processing is based on Article 6(1)(c) of the GDPR, i.e. the necessity to compliance with legal obligations resulting from the law;
    • If you are a member of our contractor’s staff, we will process your data related to the performance of your duties for the purpose of executing the contract concluded by us with your employer. The processing is based on Article 6(1)(f) of the GDPR, i.e. our legitimate interest;
    • Should any disputes arise between us related with the performance of the contract, we may process your data for the purpose of resolving them, including for the purpose of pursuing, determining or defending claims. The processing is based on Article 6(1)(f) of the GDPR, i.e. our legitimate interest.
  4. Processing of data for the purpose of mailing
    If you contact us by e-mail, we may process your data to correspond with you. The processing is based on Article 6 (1) (f) of the GDPR, i.e. our legitimate interest.
  5. Processing of social profile users’ data
    We may process your data collected on our social network profiles, such as Facebook and Linkedin, in order to ensure that these profiles work, interact with you or inform you about our activity. The processing is based on Article 6 (1) (f) GDPR, i.e. our legitimate interest.
  6. Newsletter
    If you have expressed your consent to receive the newsletter from us, we may process your data on the basis of Article 6 (1) (f) of the GDPR, i.e. our legitimate interest.
  7. Recruitment of employees
    If you send your application documents to us, we will process your personal data for the recruitment purposes.

    • As regards the data specified in the Labour Code as mandatory, i.e. name, surname, date of birth, contact details, education, professional qualifications and the course of your previous employment, the basis for their processing is Article 6 (1) (c) of the GDPR and Article 221 § 1 and § 2 of the Labour Code, i.e. the necessity to compliance with legal obligations resulting from the law;
    • In case you include other data in application documents than those mentioned above (providing such data is voluntary and depends solely on you), the processing is based on Article 6 (1) (a) of the GDPR, i.e. your consent to the processing. Please note that sending application documents containing the above mentioned additional data will be equivalent to your consent to their processing;
    • In case you give your consent to the processing of data also for the purposes of future recruitment, the processing is based on Article 6 (1) (a) of the GDPR.

 

III.   Obligation to disclose data

The provision of your personal data is voluntary. However, if you decide to use the services we provide, the processing of your data may be necessary for the performance of these services, e.g.:

  1. When you visit our website, the processing of your data, such as your IP address, date and time of your visit and the place from which you log in, is necessary for you to be able to use it;
  2. In the case of your data collected for the purpose of performing a contract concluded with you (or collected at your request prior to the conclusion of the contract), the provision of this data is necessary for us to be able to price our services and then perform and settle them. This includes data such as your name, address, NIP (tax identification number), contact details (email or phone). With regard to providing legal assistance, it will be necessary to provide additional information, including in particular a precise description of the situation in relation to which you are seeking our assistance. Moreover, if we are required to do so by legal obligations or professional standards, we will also process these data for the purpose of fulfilling these obligations;
  3. In the case that you contact us as a member of staff of an entity with which we have a contract, the processing of your data is necessary for the purpose of fulfilling that contract.
  4. In the case that you contact us by e-mail, the processing of your data such as your e-mail address, your name and any information provided in the message is necessary for us to correspond with you.
  5. In the case that you visit our profiles on social network, the processing of your data such as your name, surname and image is necessary to use the services offered by social network.
  6. In the case of sending a newsletter, it is necessary to provide your e-mail address so that you can receive the newsletter.
  7. In the case of collecting data for the purposes of recruitment, it is mandatory to provide the data specified in point II (7) (a) above.

 

IV.   Data retention period

We will storage your data for the following periods:

  1. In the case of data processed in relation with the conclusion of a legal assistance contract, they will be processed for a period of 10 years from the end of the year in which the proceedings in which the personal data were collected were completed, and in the case of providing legal assistance not related to the conduct of proceedings, for a period of 10 years from the end of the year in which the legal assistance was provided;
  2. In the case of data processed in relation with the obligation to prevent money laundering and terrorist financing, the data will be processed for a period of 5 years from the first year following the year in which we ended business relations with you or in which we provided you with occasional legal assistance;
  3. In the case of data necessary for the performance of contracts other than contracts for providing of legal assistance, and data necessary for the fulfilment of legal obligations imposed on us in relation with its conclusion – for the period of limitation of claims or prescription of tax claims (whichever period expires later). If a case is initiated, the data will be processed until the final termination of the case (proceedings);
  4. In the case of data processed based on our legitimate interests, the data will be processed until you object to such processing, with the following exceptions:
    • our interests override your interests, rights or freedoms, in such a case we will process the data further, but no longer than is necessary for the purposes of processing;
    • we need your data in order to determine, pursue or defend a claim, in such a case we will process your data until the final settlement of arbitration, court or enforcement proceedings (if any).
  5. In the case of data processed on the basis of your consent, your data will be processed until your consent is withdrawn.
  6. The data collected for the purposes of the current recruitment will be processed until it is finished. In the case of data collected for the purposes of future recruitments, it will be processed until the withdrawal of your consent, but not longer than 6 months.

 

V.   Your rights

In connection with the processing of your personal data you have the following rights:

  1. Right of access.
  2. Right to rectification.
  3. Right to erasure.
  4. Right to restriction of processing.
  5. Right to data portability.
  6. Right to withdraw consent, if you granted one, however the withdrawal of consent shall not affect the lawfulness of processing undertaken until such withdrawal.
  7. Right to file a complaint with the President of the Personal Data Protection Office regarding the processing of your data.

You also have the right to object to data processing we undertake due to our legitimate business interests (based on art. 6 sec. 1 f) of the GDPR). In such case we shall no longer process your data, unless in a given case, our compelling legitimate interests override your interests, rights or freedoms or unless we need your data to determine, pursue or defend claims.

 

VI.   Data transfers

We may transfer your personal data to:

  • entities that provide us with services regarding hosting, IT and website analytics;
  • entities that provide us with accounting services;
  • attorneys-at-law or tax advisers with whom we can cooperate in order to provide the legal assistance that you requested;
  • entities entitled to obtain them under the provisions of the law.

If you visit our website, your personal data collected during such visits may be transferred outside the territory of the European Union to third countries, which the European Commission has approved as providing adequate level of personal data protection, in particular to the U.S. in connection with the Privacy Shield program. Moreover, we may transfer your data to other, non-approved countries provided that appropriate data protection safeguards are in place as required by the GDPR, including standard contractual clauses.

 

VII.   Cookies
What are cookies?

On our website we use cookies, i.e. small text files that are installed and stored on your end-device (e.g. computer, smartphone). Cookies contain the domain name of our website, time of their storage on your end-device and a unique identifier. Thanks to cookies we know when you use our website, which pages you display, how long you stay on it and from which place in the world you log onto it. However, we do not know your identity, especially your name, surname, address, telephone number or email address.

Cookies can be divided according to their origin into own files (provided directly by the website you visit) or external files (provided by a different domain than the one you visit).

Moreover, due to a storage time, we may divide cookies into session files that expire at the end of your browser session and permanent files with a longer period of validity. Permanent files are stored on the user’s end-device between browsing sessions and allow, e.g., to remember the user’s preferences while using the website.

Cookies can also be divided according to their function into essential, statistical, functional and advertising files.

What cookies do we use?

On our website we use two types of cookies:

  1. necessary cookies – these cookies make it possible to use the website, to display it correctly as well as to ensure safety.
    We collect the following types of necessary cookies:
    a) cookieControl – their validity period is 1 month;
    b) cookieControlPrefs – their validity period is 1 year.
  2. statistical cookies – these cookies make it possible for us to receive information how often our website is visited and how you use it. This allows us to make it more efficient and user friendly.
    We collect the following statistical files:
    a) „_ga” – their validity period is 2 years;
    b) „_gat” – their validity period is 1 day;
    c) „_gid” – their validity period is 1 day.

Files specified in points a) to c) above are own files – their provider is Kancelaria Prawna GFP Legal.

In addition, we use an external „collect” cookie provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). It is a session file that expires after your browser session is turned off. Data collected through this file may be transferred outside the territory of the European Economic Area, including the USA. The transfer will take place under the Privacy Shield program or under standard contractual clauses adopted by the European Commission.

For further information, please read the information in Google’s Privacy Policy: https://policies.google.com/privacy?hl=pl

What is the purpose and legal ground for processing the data contained in cookies?

The processing of the data contained in the cookies is based on our legitimate interest, in accordance with Article 6 (1) (f) of the GDPR.

The data collected using cookies, we will process for the following purposes:

a) to enable you to use the website and display it correctly;
b) to ensure its security;
c) to analyse your activity on the website in order to make changes to it and adjust its content to your needs.

Great majority of web browsers allow the use of cookies on your device by default. If you do not want our website to install and store cookies on your device, you can make appropriate changes to the settings of your web browser, including in particular to completely disable this option. You will find more information on this matter below. Remember that disabling cookies does not automatically remove existing cookies from your browser. If you want to delete them, you must do so manually using the appropriate settings in your browser.

You also have the option of changing your cookies settings when you visit our website by selecting / deselecting the appropriate checkboxes.

How do I change my browser settings?

Most web browsers allow the use of cookies on your device by default. If you do not want our website to install and store cookies on your device, make appropriate changes to your browser settings.

Below you will find links to the settings of the most popular browsers:

Google Chrome:
https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=pl
Internet Explorer:
https://support.microsoft.com/pl-pl/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox:
https://support.mozilla.org/pl/kb/usuwanie-ciasteczek-i-danych-stron-firefox
Opera:
https://help.opera.com/pl/latest/web-preferences/
Safari:
https://support.apple.com/pl-pl/guide/safari/sfri11471/mac
Microsoft Edge:
https://support.microsoft.com/pl-pl/help/4027947/microsoft-edge-delete-cookies