Privacy Policy
This Privacy Policy sets out the rules governing the processing of personal data and the use of technologies that store information or access information stored on a user’s device in connection with the use of the website of the Law Firm of Łukasz Sołowiej, Attorney-at-law.
1. Data controller
The controller of personal data is Łukasz Sołowiej, Attorney-at-law, operating the Law Firm of Łukasz Sołowiej at 59A/97 Okopowa Street, 01-043 Warsaw, Poland. The controller can be contacted by e-mail at radca@solowiej.info, by telephone at +48 604 963 226, or by post at the address indicated above.
2. Purposes and legal bases of processing
Personal data provided to the controller in connection with contact by e-mail or telephone may be processed for the following purposes:
- responding to enquiries and conducting correspondence – on the basis of Article 6(1)(f) GDPR, i.e. the controller’s legitimate interest in handling enquiries addressed to the Firm and maintaining communication;
- taking steps at the request of the data subject prior to entering into a contract, and entering into and performing an agreement for the provision of legal services – on the basis of Article 6(1)(b) GDPR;
- compliance with legal obligations incumbent on the controller – on the basis of Article 6(1)(c) GDPR;
- establishing, pursuing or defending legal claims – on the basis of Article 6(1)(f) GDPR, i.e. the controller’s legitimate interest in protecting his rights.
The scope of personal data processed depends on the content and nature of the contact.
3. Voluntary provision of data
Providing personal data when contacting the Firm is voluntary, but may be necessary in order to respond to an enquiry or to take steps aimed at entering into or performing an agreement for the provision of legal services. Failure to provide data necessary for a particular purpose may make it impossible to respond or provide the relevant services.
4. Technical logs and security
When the website is used, basic technical data related to the connection may be processed automatically, such as the IP address, date and time of the request, browser type, operating system, and information concerning errors or security events. Such data may be processed to ensure the security, stability and proper operation of the website on the basis of Article 6(1)(f) GDPR, i.e. the controller’s legitimate interest in ensuring the security and proper functioning of the website.
5. Cookies and similar technologies
The website does not currently use analytics or advertising cookies and does not profile users.
To the extent that the website uses technologies that store information or access information stored on a user’s device, the applicable rules include Article 399 of the Polish Electronic Communications Law of 12 July 2024.
The website uses local browser storage solely to remember that the user has closed the cookie notice. This information is not used for analytics, advertising or user tracking.
If analytics, marketing or other technologies that are not necessary for the proper operation of the website are introduced in the future, they will be activated only after the required consent has been obtained.
6. Recipients of data and transfers outside the EEA
Data may be disclosed to entities providing technical, hosting, e-mail or IT services to the Firm, solely to the extent necessary to provide those services and in accordance with applicable law. Data may also be disclosed to other entities where such disclosure is required by law.
The website uses Cloudflare infrastructure. Accordingly, technical data relating to the use of the website may be processed by Cloudflare and its subprocessors, including outside the European Economic Area. Where data are transferred outside the EEA, mechanisms provided for in Chapter V of the GDPR are used, in particular adequacy decisions or the European Commission’s Standard Contractual Clauses, as applicable.
7. Data retention
Data relating to enquiries and correspondence are retained for the period necessary to handle the relevant contact and subsequently, where justified, for the period necessary to establish, pursue or defend potential claims.
Data relating to the performance of an agreement are retained for the duration of that agreement and subsequently for the period required by applicable law and the relevant limitation periods. Data processed in order to comply with legal obligations are retained for the period required by the applicable provisions.
Technical data relating to the operation of the website are retained for the period resulting from the configuration and policies of the infrastructure providers and for as long as necessary to ensure the security of the website.
8. Rights of data subjects
Subject to the conditions set out in the GDPR, a data subject may have the right to access personal data, rectify or erase them, restrict processing, receive data in a portable format, and object to processing based on the controller’s legitimate interests. Where processing is based on consent, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
A data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office in Poland.
9. Automated decision-making
Personal data are not used for automated decision-making, including profiling.
10. Changes to this Privacy Policy
This Privacy Policy may be updated, in particular, to reflect changes in the operation of the website, the tools used, service providers or applicable law. The current version of the Privacy Policy is published on the Firm’s website.