Privacy policy

In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1, as amended) — hereinafter referred to as the “GDPR” — I inform you that:

Controller details and contact information

The controller of your personal data is Paweł Jarosz, trading as Paweł Jarosz Software Development, Os. 2. Pułku Lotniczego 2/39, 31-867 Kraków, Poland, Tax ID (NIP): 6751729992, hereinafter referred to as the “Controller”.

For matters relating to the processing of your personal data, you may contact me by email at biuro@paweljarosz.pl

Purpose of processing

Your personal data are processed in order to establish contact, exchange correspondence, and subsequently to conclude and perform an agreement for the provision of legal services.

Legal basis for processing

Accordingly, your personal data are processed on the basis of:

• performance of a contract or steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR); or
• compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) GDPR); or
• the legitimate interests pursued by the Controller (Article 6(1)(f) GDPR) where there is a specific litigation risk or another clear basis for further processing; or
• consent — where cooperation gives rise to the possibility or necessity of obtaining such consent and you choose to give it (Article 6(1)(a) GDPR).

Due to the prohibition on performing professional acts for anonymous clients (Article 35 of the Code of Ethics of Legal Counsel), providing your data is a condition for concluding an agreement for the provision of legal assistance. If your identity cannot be established, legal assistance will be refused.

Where your data are processed on the basis of consent you have given, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Your personal data will not be processed in an automated manner.

Retention period

Your data will be processed until:

• the agreement ceases to be in force;
• the possibility of pursuing any claims related to the agreement expires (where justified in light of the circumstances); or
• legal obligations requiring the Controller to process personal data cease to apply; or
• you withdraw consent to processing, where consent was the basis for processing and there is no other legal basis; or
• the Controller accepts your objection to processing — where the basis for processing was the legitimate interest of the Controller;

— depending on which of these events applies in a given case and which occurs last.

Your data will be processed for no longer than is necessary to achieve the purposes for which they were collected. Personal data will be erased without undue delay once further processing becomes unnecessary.

Sharing your data with other recipients

Your personal data may be disclosed to the Controller’s subcontractors and to entities providing accounting and related bookkeeping services for the Controller.

The Controller requires all subcontractors to whom your personal data are disclosed to respect the security of personal data and to process them lawfully.

Your data will not be transferred to a third country or international organisation (i.e. outside the European Economic Area). The Controller uses a provider whose servers are located within the European Economic Area, thereby ensuring appropriate protection and security of your personal data.

Your rights in relation to processing

In connection with the processing of your personal data by the Controller, you have the right to:

• access your personal data, including obtaining a copy of the data (Article 15 GDPR or, where applicable, Article 13(1)(f) GDPR),
• rectification of your personal data (Article 16 GDPR),
• erasure of your personal data (Article 17 GDPR),
• restriction of processing of your personal data (Article 18 GDPR),
• data portability (Article 20 GDPR),
• object at any time, on grounds relating to your particular situation, to processing of your personal data which is based on Article 6(1)(f) GDPR (i.e. on the legitimate interests pursued by the controller) (Article 21(1) GDPR),
• withdraw consent to processing where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Data may continue to be processed if another lawful basis applies independently of consent.

Without undue delay and in any event within one month of receipt of the request, the Controller shall inform you of the action taken in response to the request, or of any extension of the time limit due to the complexity of the request or number of applications, or of the reasons for not taking action and the possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.

If you consider that your data are being processed unlawfully, you have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).