Personal Data Processing

1. Data of the Administrator of personal data

The personal data administrator is Parchimowicz i Kwaśniewski Spółka Adwokatów i Radców Prawnych spółka komandytowa with its registered office in Warsaw, at ul. Stefana Jaracza 10/5, 00-378 Warsaw, Poland entered in the register of entrepreneurs kept by the District Court for the Capital City of Warsaw XII Commercial Division of the National Court Register under KRS number: 0000968390, NIP: 5252485347, REGON: 141689370, (hereinafter referred to as “the Administrator” or “the Law Firm”).

In matters related to the processing of personal data by the Law Firm, you may:

1) call the telephone number :+48 22 625 46 37, available on working days between 9:00 a.m. and 5:00 p.m;

2) write an e-mail to the following address:;

3) contact us in person, by visiting the office of the Law Firm.

2. Purpose and legal basis of personal data processing

The Administrator, on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as GDPR), processes personal data:

  1. for the purpose of entering into or performing a contract, including in particular a legal services contract, i.e. pursuant to Article 6(1)(b) of the GDPR;
  2. in order to fulfill a legal obligation incumbent on the Administrator, i.e. on the basis of Article 6(1)(c) of the GDPR;
  3. for the purpose of fulfilling the legitimate interests of the Administrator or a third party, i.e. on the basis of Article 6(1)(f) of the GDPR, which the Administrator considers in particular: investigation, establishment and defense against claims, prevention of fraud, ensuring the security of the ICT environment, establishing conflicts of interest and ethical violations to the extent necessary to prevent fraud, for archival and statistical purposes, as well as for the purpose of communication via email or traditional correspondence,
  4. when the processing is necessary for reasons of important public interest, on the basis of European Union law or Polish law, i.e. on the basis of Article 9(2)(g) of the GDPR.

3. Recipients of personal data

Recipients of personal data processed by the Administrator may be entities of the following categories:

  1. attorneys, legal advisors, notaries, and other entities cooperating with the Law Firm that provide legal services and independently decide on the purposes and methods of data processing;
  2. entities authorized under applicable laws (in particular, courts and state authorities);
  3. business information offices;
  4. entities providing the following services: information technology and new technologies, payment, accounting and financial, auditing and inspection, debt collection, printing, document destruction, postal, and courier services.

Personal data may be transferred to a third country, i.e. outside the European Economic Area. However, this will only take place to the extent permitted by law, in particular, on the basis of a decision of the European Commission finding an adequate level of protection, standard contractual clauses. In any case, the Administrator shall provide the opportunity to obtain further information on appropriate safeguards.

4. Period of personal data processing

The Administrator shall process personal data for the period necessary for the performance of the task for which the personal data were collected, and thereafter for the period of the statute of limitations for claims arising under generally applicable law or for the period for which a conviction is erased, or until the expiration of the period for the retention of records arising under accounting regulations or regulations for professional legal corporations.

5. Rights of data subjects

The Administrator shall ensure the following rights to the persons whose personal data it processes:

  1. the right of access to personal data and the right to obtain a copy of personal data (Article 15 GDPR);
  2. The right to rectification (correction) of personal data (Article 16 GDPR);
  3. The right to erasure of personal data (the so-called right to be forgotten), insofar as the personal data are no longer necessary for the purposes for which they were collected or otherwise processed (Article 17 GDPR);
  4. The right to restrict the processing of personal data (Article 18 GDPR)
  5. The right to portability of personal data (Article 20 GDPR);
  6. the right to object to the processing of personal data based on the legitimate interest of the Controller (Article 21 GDPR).

Persons whose personal data are processed by the Administrator may exercise the above rights by contacting the Administrator (contact indicated in section 1).

In addition, persons whose personal data is processed by the Administrator, if they consider that the processing of their personal data violates the provisions of the GDPR or other regulations on personal data protection, have the right to lodge a complaint to the President of the Office for Personal Data Protection, at Stawki 2, 00-193 Warsaw, Poland.