PRIVACY POLICY

We hereby inform you that we process your personal data provided to us in connection with your use of our services.

§1 Personal Data Controller

The controller of your personal data is Olga Dobrowolska Immigration Lawyer, NIP: 7010465135, REGON: 529092900.

§2 Scope of Processed Data

We process your personal data provided to us in connection with your use of our services and the issuance of a VAT invoice. Among these data, the following information may be included:

1. Name and surname,
2. Email address,
3. Phone number,
4. Home address,
5. Name of Company,
6. NIP (Tax Identification Number).

§3 Purposes and Legal Bases for Processing

The data are processed for the following purposes and based on the following legal grounds:

1. Conclusion and performance of a contract (Article 6(1)(b) of GDPR),
2. Issuing an invoice, including the invoice in accounting records, and fulfilling other accounting and bookkeeping obligations imposed by law (Article 6(1)(c) of GDPR),
3. Establishing, pursuing, or defending claims related to the contract, which is our legitimate interest (Article 6(1)(f) of GDPR),
4. Identifying returning clients, recreating the course of cooperation, exchanged correspondence, prepared documents, etc., which is our legitimate interest (Article 6(1)(f) of GDPR).

§4 Data Recipients

The following entities may be involved in the processing of personal data:

1. Hosting provider – for storing personal data on the server, including the email server,
2. Google – for using services within the Google Workspace package, which involves the processing of personal data,
3. Invoice system provider – for using invoicing software in which personal data is processed for issuing invoices,
4. Accounting office – for handling accounting, which involves the processing of personal data contained in accounting documents,
5. IT support – for providing IT support that may involve access to personal data processed within IT resources,
6. Subcontractors – for providing services that involve access to personal data.

• All the above entities participate in the personal data processing process based on data processing agreements. All these entities provide an adequate level of personal data protection.
• Your personal data may be transferred to tax authorities in the course of fulfilling public-law settlement obligations. Your personal data may also be transferred to other authorities authorized by law if it is necessary to fulfill legal obligations or assert our rights.
• In situations where we need to use professional legal assistance, your personal data may be transferred to law firms providing legal assistance to us to the extent necessary to assert our rights or defend against claims.

§5 Transfer of Data to Third Countries

Due to the use of Google services, data may be transferred to third countries in connection with their storage on servers located outside the European Economic Area. Google provides an adequate level of personal data protection through compliance mechanisms, such as certification programs or standard contractual clauses.

§6 Data Retention Period

Your personal data will be stored for the duration of our business activities unless you object to the processing of your personal data earlier, which will result in their deletion. The objection will be effective after the expiration of the statute of limitations for claims arising from the concluded contract. Until then, your personal data will be necessary for us to potentially establish, pursue, or defend claims. Please also note that data contained in accounting documents must be retained for the period required by law.

§7 Rights Related to Processing

In connection with the processing of personal data, you have the following rights:

1. The right to access your data and receive a copy,
2. The right to rectify (correct) your data,
3. The right to delete data (if, in your opinion, there is no basis for us to process your data, you can request that we delete it),
4. The right to restrict data processing (you can request that we limit the processing of data to storage only or to perform actions agreed with you if you believe we have incorrect data or are processing them unlawfully),
5. The right to object to data processing (you have the right to object to the processing of data based on legitimate interest; you should indicate your particular situation that you believe justifies stopping the processing; we will stop processing your data for these purposes unless we demonstrate that the processing grounds are overriding your rights, or that your data is necessary for us to establish, pursue, or defend claims),
6. The right to data portability (you have the right to receive from us in a structured, commonly used, and machine-readable format the personal data that you provided to us based on the contract or your consent; you can instruct us to send this data directly to another entity),
7. The right to lodge a complaint with a supervisory authority (if you believe that we process data unlawfully, you can lodge a complaint with the President of the Office for Personal Data Protection or another appropriate supervisory authority).

To exercise your rights, please send your request to the email address: [email protected]. Please note that before exercising your rights, we will need to properly identify you.

§8 Information on the Requirement/Voluntary Nature of Data Provision

Providing your data is a condition for using our services.