Privacy Policy for the Website henclewskiwyjatek.pl

 

I. General Provisions This Privacy Policy (hereinafter referred to as the "Policy") defines the rules for processing Users' personal data in connection with the use of the website operating at the address henclewskiwyjatek.pl (hereinafter referred to as the "Website").

KANCELARIA ADWOKACKA HENCLEWSKI, WYJATEK SPÓŁKA KOMANDYTOWA (hereinafter referred to as the "Law Firm") attaches the highest importance to the protection of privacy and security of personal data of individuals visiting the Website.

The legal basis for this Policy is, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "GDPR".

Use of the Website is voluntary.

 

II. Personal Data Controller The Controller of your personal data (ADO) is: KANCELARIA ADWOKACKA HENCLEWSKI, WYJATEK SPÓŁKA KOMANDYTOWA, Chwaliszewo 72/7, 61-104 Poznań, Poland, NIP (Tax ID No.): 7831664870, REGON (Business ID No.): 301635458, KRS (National Court Register No.): 0001142181

In all matters concerning the processing of personal data and the exercise of rights related to their processing, you can contact us: By e-mail: biuro@henclewskiwyjatek.pl

By post: Chwaliszewo 72/7, 61-104 Poznań

 

III. Purposes, Legal Bases, and Period of Data Processing The Controller processes your personal data for the following purposes:

1. Website Administration and Security (Server Logs) Purpose of processing: During each visit to the Website, the system automatically collects data in so-called server logs. These include, among others, your IP address, date and time of the visit, browser type, and operating system. This data is necessary to diagnose technical problems, ensure the security of the IT infrastructure, and administer the Website.

Legal basis: Art. 6(1)(f) of the GDPR (the Controller's legitimate interest, consisting in ensuring the efficient and secure functioning of the Website).

Retention period: Data is stored for the time necessary to analyze security incidents, usually no longer than 30 days.

2. Analytical and Statistical Purposes (Google Analytics) Purpose of processing: Collecting anonymized statistical data on how Users use the Website (e.g., popular subpages, traffic sources). This data helps us understand Users' needs and optimize the Website.

Legal basis: Art. 6(1)(a) of the GDPR (the User's voluntary consent, expressed via the cookie banner).

Retention period: In accordance with the time limits specified in the Cookie Policy.

3. Marketing Purposes (Google Ads) Purpose of processing: Conducting remarketing activities, which involve displaying our advertisements to you on other websites (in the Google advertising network) after you leave our Website.

Legal basis: Art. 6(1)(a) of the GDPR (the User's voluntary consent, expressed via the cookie banner).

Retention period: In accordance with the time limits specified in the Cookie Policy.

4. Handling inquiries sent by phone or e-mail Purpose of processing: Although there is no contact form, the Website provides contact details (phone number, e-mail address). If you contact the Law Firm through these channels, we will process your data (such as name, surname, e-mail address, phone number, and the content of the inquiry) to provide a response or present an offer for legal services.

Legal basis: Art. 6(1)(f) of the GDPR (the Controller's legitimate interest, consisting in handling correspondence and responding to inquiries), or

Art. 6(1)(b) of the GDPR (taking steps at the request of the data subject prior to entering into a contract). Retention period: Data will be processed for the time necessary to complete correspondence on the given matter, and then for the period required to establish, pursue, or defend potential claims (i.e., for the limitation period).

5. Establishing, pursuing, or defending claims Purpose of processing: Archiving data to secure information in case of a legal need to demonstrate facts or defend against claims.

Legal basis: Art. 6(1)(f) of the GDPR (the Controller's legitimate interest).

Retention period: Until the expiry of the statutory limitation periods for claims.

 

IV. Recipients of Personal Data In connection with its activities, the Controller may entrust the processing of your personal data to the following categories of entities: Hosting and IT service providers: Entities providing technical support and hosting for the Website.

Google Ireland Limited: To the extent you have consented – for the use of analytical (Google Analytics) and marketing (Google Ads) tools.

Other subcontractors: Entities providing support services to the Law Firm (e.g., e-mail services, consulting). These entities process data only on the basis of a data processing agreement and only to the extent necessary to achieve the purposes specified by the Controller.

 

V. Data Transfer outside the European Economic Area (EEA) In connection with the use of Google tools (Analytics, Ads, Tag Manager), your personal data (collected based on your consent) may be transferred to the United States, i.e., a country outside the EEA.

Google LLC (the parent company) uses compliance mechanisms in the form of Standard Contractual Clauses (SCCs) approved by the European Commission, which aims to ensure an adequate level of data protection required by GDPR.

Detailed information on how Google processes data is available at: https://policies.google.com/privacy

 

VI. Your Rights (Under GDPR) In connection with the processing of your personal data, you have the following rights: Right of access to data (Art. 15 GDPR): The right to obtain confirmation as to whether we process your data and to obtain a copy of it.

Right to rectification of data (Art. 16 GDPR): The right to request the correction of inaccurate or completion of incomplete data.

Right to erasure of data – "right to be forgotten" (Art. 17 GDPR): The right to request the erasure of data when, among other things, it is no longer necessary for the purposes for which it was collected.

Right to restriction of processing (Art. 18 GDPR): The right to request the "blocking" of data in specific cases (e.g., while its accuracy is being verified).

Right to data portability (Art. 20 GDPR): The right to receive data in a structured format and transmit it to another controller (applies to data processed based on consent or a contract).

Right to object (Art. 21 GDPR): You may object at any time (on grounds relating to your particular situation) to the processing of data based on a legitimate interest (Art. 6(1)(f) GDPR), e.g., the processing of data in server logs.

Right to withdraw consent (Art. 7(3) GDPR): You have the right at any time to withdraw consent for the processing of data for analytical and marketing purposes (cookies).

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Consent can be withdrawn in the manner described in the Cookie Policy (by changing settings in the consent management panel). Right to lodge a complaint with a supervisory authority: If you believe that the data processing infringes GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) (address: ul. Stawki 2, 00-193 Warszawa, Poland).

 

VII. Cookies The Website uses cookies and similar technologies.

Cookies are used, among other things, for analytical and marketing purposes, solely based on your voluntary consent.

Detailed information on the types of cookies used, the purposes of their use, and ways to manage consent (including its withdrawal) can be found in the Cookie Policy.

 

VIII. Automated Decision-Making and Profiling The Controller does not make decisions about you in an automated manner that would produce legal effects or similarly significantly affect you.

Data collected based on your consent (cookies) may be used for profiling for marketing purposes (Google Ads remarketing). This means that based on your activity on the Website, we may direct more tailored advertising messages to you within the Google network.

 

IX. Changes to the Privacy Policy This Policy is regularly reviewed and updated as necessary.

All changes come into effect on the day the new content of the Policy is published on the Website.