Dear Sir or Madam,

On 25 May 2018 became applicable the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC- General Data Protection Regulation –  (hereinafter referred to as “RODO” or “Regulation”).

Kancelaria Adwokacka Iwona Kliś processes your personal data in accordance with the applicable law, particularly in accordance with the Regulation and the provisions of the Act of 10 May 2018 on the protection of personal data.

The purpose of the following Privacy Policy is to explain the rules according to which your personal data is processed, as well as to explain your fundamental rights related to the processing of your personal data by us.

1. Who is the Personal Data Controller?

The Personal Data Controller is Iwona Kliś, conducting business under

the name Kancelaria Adwokacka Iwona Kliś, address: ul. Dzielna 21 lok. 18, 01-029 Warszawa, NIP 928-183-43-44 REGON 147288599 (hereinafter referred to as the Controller).

You can contact the Controller by sending a letter to the abovementioned address, as well as via e-mail to: sekretariat@kancelariaklis.pl

1. What personal information do we collect?

The Controller processes personal data necessary to achieve the objectives set out in this Privacy Policy, which were provided to us.

We process the following categories of personal data:

1. a) data needed for identification such as name and surname, date of birth, PESEL number, identity card number,
2. b) contact details, such as: phone number, address, email address,
3. c) tax identification data,
4. d) information about education and professional experience, if it is necessary for the services provided by us or recruitment,
5. e) property and financial situation – if it is necessary from the point of view of the services provided by us,
6. f) information about your professional and business activity,
7. g) civil status data – if it is necessary from the point of view of the services provided.

In addition, the Controller may process other categories of personal data, if the processing is necessary for purposes specified in the Privacy Policy;

III. For what purpose and on what legal ground we process your data?

The data is processed by the Controller in order to fulfil the contractual obligations  based on Art. 6 (1) ( b) RODO and possibly also – in clearly identified cases – based on Art. 6(1)( f) RODO.

If  data processing takes place on the basis of art. 6 (1 ) ( f) of the Regulation, the Controller will promptly indicate legally justified interests for the purpose of processing the data.

Personal data is also processed in order to fulfil legal obligations incumbent on the Law Office, for example, accounting and tax regulations (based on Art. 6 (1)( c) of RODO.

In the event of consent to the processing of personal data for the purposes of direct and personal marketing, the data is also processed on the basis of art. 6 ( 1 ) (a) of the Regulation.

Data processing for marketing purposes requires the consent to the processing of data. The statement of consent is below and its expression is not required, but it is necessary to perform such activities as, for example:

1. a) sending Christmas cards,
2. b) invitations on Christmas meetings organized by our company, and other occasional events,
3. c) information on law changes and social events organized by courts or other institutions,
4. d) information about workshops and other events, such as: cultural – sporting, social, local government, legal and publishing evening, breakfast, lunch or business or environmental dinners, etc.,
5. e) proposing participation in various types of groups and clubs.

We would like to ensure that we do not misuse marketing communication with you in any way. The information provided by us is quite sporadic and focuses mainly on customarily accepted holiday events.

At the same time, we would like to inform you that providing your personal data is necessary to conclude agreements, provide our law services and settle your law case. In the other above-mentioned scope, providing data is voluntary, but depending on the circumstances, the refusal to provide access to data or requesting their removal may make it impossible for the Controller to provide information about our activity and to keep in touch with you.

1. How long will we process your data for?

The Controller will process data on the basis of art. 6 ( 1 )( b) and ( f) of the Regulation until the expiry of the limitation period of claims.

Data processed on the basis of art. 6 ( 1)( c) RODO, will be processed for a period required by law.

In the case of data processed on the basis of art. 6 ( 1 )( a ) of RODO, the data will be processed until you withdraw the consent to their processing.

After the processing period, the data will be deleted or anonymized.

1. Can your data be transferred to other entities?

Our firm may, as a result of cooperation with its suppliers and other law firms as well as if it is necessary for the performance of contractual obligations, transfer your personal data to external entities, in particular:

1. a) secretaries, employees and associates,
2. b) firms providing accounting services or banks,
3. c) entities operating postal or courier services,
4. d) IT support,
5. e) state authorities or other entities authorized to perform legal obligations imposed on the Controller,
6. g) other entities if the Controller will be obliged by law.

The Law Firm Iwona Klis in principle does not transfer personal data outside the European Economic Area. However, we may commission certain services or IT tasks to service providers established outside the European Economic Area. In this case, the data shall be transferred to a third country with whom an appropriate level of data protection has been established through a decision of the European Commission. You can request further information and copies of relevant security measures at any time.

1. Will your data be profiled?

The Controller informs that your personal data will not be profiled.

VII. What kind of rights do you have in relation to your data?

Subject to situations defined in law, you have the following rights:

In the scope of data processed on the basis of art. 6 ( 1)( b):

1. a) an access to the personal data and its rectification by reporting to the Controller by email : sekretariat@kancelariaklis.pl,
2. b) to the extent that the data have been transferred pursuant to art. 6 ( 1 )( b) of the Regulation and its processing is necessary for the proper performance of the contractual obligation, these data cannot be deleted or their processing cannot be restricted. In the other case, if data has been provided, the right to request removal or limitation of processing may be done by reporting to the Controller to the e-mail: sekretariat@kancelariaklis.pl,
3. c) transfer of data, whereby this right may be exercised by reporting to the Controller to the e-mail address: sekretariat@kancelariaklis.pl,

In the scope of data processed on the basis of art. 6 ( 1)( a) of RODO, you have the right to demand consideration, rectification, deletion, limitation of processing or execution of the right to file an objection and the right to transfer the data, this right may be effected by reporting to the Controller to the e-mail address: sekretariat@kancelariaklis.pl. The withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing of such data before its withdrawal.

In the scope of data processed on the basis of art. 6 (1) (f) (c) of the Regulation, you have the right to demand rectification, deletion, limitation of processing or execution of the right to raise objections and the right to transfer the data, by reporting to the Administrator at the email sekretariat@kancelariaklis.pl :.

Applications regarding the implementation of these rights should be submitted electronically or in writing to the address indicated in point I of this Privacy Policy.

VIII. Where could you appeal if in case of violation of RODO provisions?

You have right to lodge a complaint with the supervisory institution which in Poland is the

President of the Personal Data Protection Office.