Privacy notice for newsletter subscribers
pursuant to article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), Official Journal of the European Union L.2016.119.1 (“GDPR”).
1. DATA CONTROLLER
The controller of your personal data is “JDP Drapała & Partners” spółka jawna with its registered office in Warsaw, ul. Bonifraterska 17, 00-203 Warszawa, entered in the business register of the National Court Register kept by the District Court for the Capital City of Warsaw, XII Commercial Division of the National Court Register under number 0000880140, REGON: 140887753, NIP: 7010056483 (“Controller” or “JDP”).
The Controller has a website at www.jdp-law.pl; in addition to contacting us by post or vising our office at the address indicated above, you may contact us at firstname.lastname@example.org.
2. PURPOSE AND LEGAL BASIS FOR DATA PROCESSING
Your personal data are processed for the purposes of INFORMING YOU ABOUT PRACTICING A LEGAL PROFESSION AND JDP’S ACTIVITIES, including but not limited to, sending newsletters, alerts, information about seminars and other events, based on your voluntary consent given by completing the newsletter sign up form and clicking “Submit” (art. 6 par. 1 item a GDPR).
3. DATA RECIPIENTS AND TRANSFERRING PERSONAL DATA OUTSIDE OF THE EEA
- Your personal data may be provided to entities cooperating with JDP based on concluded agreements. In particular, your personal data may be made available to entities supporting the Controller in information activities (such as entities organising dispatch of newsletters, letters, invitations and other communications and materials on JDP’s behalf), entities providing IT support to the Controller, including those operating and maintaining IT systems and providing data hosting or cloud services; electronic mail service providers; entities archiving and shredding documents; post operators or couriers; consulting companies cooperating with JDP. Moreover, personal data may be shared with public authorities or public entities (or those performing public tasks) authorised to receive data under applicable legal provisions.
- Generally, your personal data will not be provided outside of the European Economic Area. However, if such transfer is to take place in the future – which may happen, for instance, if the Controller potentially uses IT solutions based on cloud solutions or solutions maintained outside of the European Economic Area – the Controller will provide a mechanism that will legalise such transfer under the European legislation and will guarantee necessary personal data protection. The data subjects will be informed about the transfer in advance.
4. PERIOD FOR WHICH PERSONAL DATA WILL BE STORED
Your personal data will be stored until you effectively revoke your consent to the processing of your personal data for specific purposes or you unsubscribe from newsletters and other materials.
5. VOLUNTARY PROVISION OF PERSONAL DATA
The provision of personal data for the purposes of being informed about practicing a legal profession and JDP’s activities is voluntary. However, if you do not provide the data, informing you about practicing a legal profession and JDP’s activities in the certain form will not be possible.
6. PROFILING AND AUTOMATED DECISION-MAKING
Personal data processed for the purposes described above will not be subject to profiling, and no automated decision-making will take place with respect to the data subjects.
7. DATA SUBJECTS’ RIGHTS
- In connection with JDP’s processing of personal data, the data subjects have the following rights:
- pursuant to article 15 GDPR – right of data access;
- pursuant to article 16 GDPR – right to data rectification;
- pursuant to article 17 GDPR – right to data erasure;
- pursuant to article 18 GDPR – right to restriction of data processing;
- right to revoke the consent at any time where the processing is based on the consent; the revocation will not affect the lawfulness of processing based on the consent before it has been revoked.
- These rights may be exercised by making a respective demand to the Controller to the addresses indicated in sec. 1 “Data Controller” above. Moreover, in the case of newsletters it is possible to use a special address for unsubscribing from a given form of correspondence by clicking a relevant link at the bottom of each correspondence. Making the statement of unsubscribing will be deemed as a consent revocation or an objection to receiving the type of correspondence to which the statement refers.
- In connection with JDP’s processing of personal data, the data subjects also have a right to lodge a complaint with a competent supervisory authority, in particular in the country of the data subjects’ habitual residence, place of work or place of alleged violation. In Poland the supervisory authority is the Head of the Personal Data Protection Office, Stawki 2, 00-193 Warszawa.