Privacy Policy
and Cookies Policy.

§1. Personal Data Administrator

1. The administrator of your personal data is Grzegorz Szmidla, conducting business under the name:
Kancelaria Radcy Prawnego (Attorney-at-Law Office)
ul. Vivaldiego 5/2, 05-092 Łomianki, Poland
NIP (Tax ID): 9491923522 | REGON: 142631779

2. In all matters related to the processing of personal data and the exercise of your rights, you can contact the Administrator:

• By e-mail: grzegorz@szmidla.eu
• By phone: +48 660 721 295
• By mail: to the address of the Office indicated above.

§2. Professional Secrecy

1. Due to the specific nature of the services provided, all information and personal data provided to the Administrator (including legal inquiries, documents, case descriptions) are covered by attorney-at-law professional secrecy (in accordance with the Polish Act of July 6, 1982, on attorneys-at-law).

2. Professional secrecy is unlimited in time and constitutes the highest guarantee of the confidentiality of your data. Exemption from professional secrecy may occur only in strictly defined and exceptional cases provided for by absolutely binding provisions of law.

§3. Purposes and Legal Bases for Data Processing

Your personal data is processed exclusively for specific, legally justified purposes:

• Handling inquiries from the contact form or e-mail: We process your data (name, surname, e-mail address, phone number, message content) to respond to your message.
  Legal basis: Art. 6(1)(f) GDPR and Art. 6(1)(b) GDPR.
• Provision of legal services and execution of contracts: If you decide to cooperate, your data will be processed for the reliable performance of the legal assistance agreement.
  Legal basis: Art. 6(1)(b) GDPR.
• Fulfilling legal obligations (accounting, taxes): In the event of issuing an invoice or receipt.
  Legal basis: Art. 6(1)(c) GDPR.
• Establishing, pursuing, and defending against claims: If it is necessary to protect the rights of the Office.
  Legal basis: Art. 6(1)(f) GDPR.
• Website traffic analysis and security: Through cookies.
  Legal basis: Art. 6(1)(a) GDPR and Art. 6(1)(f) GDPR.

§4. Data Retention Period

The storage period of your data depends strictly on the purpose of its processing:

• Inquiries/contact: Until a comprehensive answer is provided and for the time necessary to potentially continue correspondence.
• Legal services: For the duration of the contract, and after its termination for a period of 10 years due to the provisions on the statute of limitations for claims and the statutory obligation to store case files.
• Accounting/tax data: For a period of 5 years, counting from the end of the calendar year in which the tax payment deadline expired.

§5. Data Recipients

Due to professional secrecy, your data is protected in a special way. They may be entrusted to external entities only to the necessary extent, on the basis of appropriate personal data processing agreements. These include:

• Entities providing website and e-mail hosting.
• The accounting office serving the Law Firm (regarding invoice data).
• Legal / office software providers.

The Administrator does not transfer your personal data outside the European Economic Area (EEA) or to international organizations.

§6. Your Rights

In connection with the processing of personal data, you have the following rights (subject to limitations arising from the provisions on attorney-at-law professional secrecy):

• Right of access: You can request information about what data of yours we process.
• Right to rectification: You can request the correction of data if it is incorrect or incomplete.
• Right to erasure ("right to be forgotten"): In situations provided for by law (e.g., when the data is no longer necessary). This right may be restricted.
• Right to restriction of processing: In certain situations provided for by the GDPR.
• Right to data portability: In the case of data processed in an automated manner based on consent or a contract.
• Right to object: For reasons related to your particular situation.
• Right to withdraw consent: If the data is processed on the basis of consent.

To exercise the above rights, contact the Administrator at: grzegorz@szmidla.eu. You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (PUODO) in Poland, if you believe that the processing violates the GDPR.

§7. Cookies

1. The website uses cookies. These are small text files saved on your end device.

2. We use cookies for the following purposes:

• Necessary (technical): Ensuring the proper functioning of the website, maintaining sessions, security of contact forms. These cookies do not require consent.
• Analytical / Statistical: Analyzing website traffic and user behavior. The use of these cookies requires your consent.

3. Cookie management: You can change your web browser settings at any time and completely block or delete cookies.

§8. Final Provisions

1. The website may contain links to other websites (e.g., LinkedIn profile). The Administrator is not responsible for the privacy practices of these websites.
2. The Administrator reserves the right to make changes to the Privacy Policy due to the development of technology or changes in the law.
3. This Privacy Policy is effective from the moment it is published on the website.