The purpose of this Privacy Policy is to present the principles of personal data processing and to explain your rights related to such processing.
Data Controller
The data controller is Mateusz Radomyski conducting business under the name Kancelaria Prawna Verdict Partners Adwokat Mateusz Radomyski, ul. Dąbrowiecka 6b / 1, 03-932 Warsaw.
Personal data is processed in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and the Act of 10 May 2018 on the Protection of Personal Data.
The Controller ensures appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure.
For matters related to the processing of personal data, please contact: contact@verdictpartners.pl
Purposes and Legal Bases for Processing
In the course of its business activities, the Controller processes personal data for the following purposes and on the following legal bases:
a) for the purpose of pursuing the legitimate interests of the Controller (Art. 6(1)(f) GDPR), in particular: providing services to clients and ensuring the security of IT systems;
b) for the purpose of performing contracts concluded with clients, suppliers, and other cooperating entities (Art. 6(1)(b) GDPR), including organizing training and providing legal services;
c) for the purpose of fulfilling legal obligations incumbent on the Controller (Art. 6(1)(c) GDPR);
d) for the purpose of conducting recruitment processes (Art. 6(1)(a) and (c) GDPR — depending on the stage and legal basis of processing).
Rights of Data Subjects
Providing personal data is voluntary; however, in some cases the absence of such data may prevent the performance of certain activities, including contact, provision of services, or sending marketing communications.
Data subjects have the following rights:
- access to data,
- rectification of data,
- erasure of data,
- restriction of processing,
- data portability,
- objection to the processing of data for marketing purposes.
Where data is processed on the basis of consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.
In the context of the provision of legal services, certain rights may be subject to limitations arising from applicable law or the nature of the client–attorney relationship.
Complaint to a Supervisory Authority
You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
Data Retention Period
Personal data is retained for the period:
- necessary for the pursuit of the legitimate interests of the Controller,
- of the duration of the contract and applicable limitation periods for claims,
- resulting from legal obligations,
- until an effective objection to processing for marketing purposes is raised.
Recipients of Data
Personal data may be disclosed to:
- entities affiliated with the Controller,
- providers of IT, hosting, and cloud services,
- entities providing marketing, analytical, and telecommunications services,
- accountants, auditors, and advisors,
- cooperating law firms,
- public authorities, courts, and state services — to the extent required by law.
Data processors act on the basis of data processing agreements and are obligated to maintain confidentiality and apply appropriate data protection measures.
Transfer of Data Outside the EEA
Personal data is not, as a rule, transferred outside the European Economic Area. Where such transfer does occur, appropriate safeguards required by the GDPR are applied.
Profiling
Personal data is not used for automated decision-making, including profiling that produces legal effects.
Changes to the Privacy Policy
This Privacy Policy may be updated. Changes are published on the website and take effect from the moment of publication or another specified date.
You are encouraged to review the current content of the Policy on a regular basis.