Privacy notice concerning the contact form
pursuant to article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), Official Journal of the European Union L.2016.119.1 (“GDPR”).
1. DATA CONTROLLER
The controller of your data is “JDP Drapała & Partners” spółka jawna with its registered office in Warsaw, ul. Bonifraterska 17, 00-203 Warszawa, entered in the business register of the National Court Register kept by the District Court for the Capital City of Warsaw, XII Commercial Division of the National Court Register under number 0000880140, REGON: 140887753, NIP: 7010056483 (“Controller” or “JDP”).
The Controller has a website at www.jdp-law.pl; in addition to contacting us by post or vising our office at the address indicated above, you may contact us at firstname.lastname@example.org.
2. PURPOSE AND LEGAL BASIS FOR DATA PROCESSING
Your personal data is processed for the purposes of:
- EXCHANGING CORRESPONDENCE, including replying to the messages sent to the Controller, for the purposes of the legitimate interests pursued by JDP (article 6 par. 1 item f GDPR) which includes making contact available to persons interested in JDP’s activity, and exchanging communications,
- ARCHIVING materials and communications created by JDP as part of its business activity, for the purposes of the legitimate interests pursued by JDP (article 6 par. 1 item f GDPR) which includes documenting the business activity in accordance with applicable regulations, including the principles of practicing as an attorney-at-law, an advocate or a tax advisor.
3. DATA RECIPIENTS AND TRANSFERRING PERSONAL DATA OUTSIDE THE EEA
- Personal data may be provided to entities cooperating with JDP based on concluded agreements. In particular, personal data may be made available to entities providing IT support to the Controller, including those operating and maintaining IT systems and providing data hosting or cloud services; electronic mail service providers; entities archiving and shredding documents; post operators or couriers; consulting companies cooperating with JDP. Moreover, personal data may be shared with public authorities or public entities (or those performing public tasks) authorised to receive data under applicable legal provisions.
- Generally, personal data will not be provided outside the European Economic Area. However, if such transfer is to take place in the future – which may happen, for instance, if the Controller potentially uses IT solutions based on cloud solutions or solutions maintained outside the European Economic Area – the Controller will provide a mechanism that will legalise such transfer under the European legislation and will guarantee personal data protection. The data subjects will be informed about the transfer in advance.
4. PERIOD FOR WHICH PERSONAL DATA WILL BE STORED
Your personal data will be stored for a period necessary to handle your inquiry and for 12 months after this period for archiving purposes.
5. VOLUNTARY PROVISION OF PERSONAL DATA
Provision of personal data is necessary to exchange correspondence with the Controller.
6. PROFILING AND AUTOMATED DECISION-MAKING
Personal data processed for the purposes described above will not be subject to profiling and no automated decision-making will take place with respect to the data subjects.
7. DATA SUBJECTS’ RIGHTS
- In connection with JDP’s processing of personal data, the data subjects have the following rights:
- pursuant to article 15 GDPR – right of data access;
- pursuant to article 16 GDPR – right to data rectification;
- pursuant to article 17 GDPR – right to data erasure;
- pursuant to article 18 GDPR – right to restriction of data processing;
- pursuant to article 21 GDPR – right to object the processing where personal data is processed for the purposes of the Controller’s legitimate interests.
- These rights may be exercised by making a respective demand to the Controller to the addresses indicated in sec. 1 “Data Controller” above.
- In connection with JDP’s processing of personal data, the data subjects also have a right to lodge a complaint with a competent supervisory authority, in particular in the country of the data subjects’ habitual residence, place of work or place of alleged violation. In Poland the supervisory authority is the Head of the Personal Data Protection Office, Stawki 2, 00-193 Warszawa.