Subject of the Privacy Policy

1. This document fulfills our obligations under data protection laws, in particular the RODO (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC).

2. From this document, you will learn how and under what conditions we process your personal data when you contact us or use our Services. You will learn, among other things:

• Why we may process your data;
• For what purpose we process them;
• Whether you are required to provide us with your data;
• How long we keep your data;
• Whether there are other recipients of your personal data;
• Whether we process your data outside the European Economic Area;
• Whether we process your data by automated means, including profiling.

3. This Policy consists of the following parts:

The first part of the Privacy Policy contains the information we need to provide to everyone, regardless of the purpose of data processing.

The second part contains information for the person who uses the KWMN Legal Service, including contacting us through our contact information provided there.

The third part contains information for the person who is interested in our offer thanks to the marketing activities carried out, based also on the use of social media.

Part I. General information for all Users
Contact details of the administrator of your personal data

The administrator of your personal data is Kwmn Legal Nowak Wójciga I Wspólnicy Spółka Komandytowa, Filipa Eisenberga 11/9, 31-523 Kraków, NIP: 6751791732, REGON: 527134652, tel. +48 530 553 805, e-mail office@kwmnlegal.pl

For all matters concerning our services, but also the processing of your personal data, you can contact us by email by sending a message to office@kwmnlegal.pl.

Where do we get your personal information from?

The personal information we collect through our site comes directly from you. This happens when:

You are browsing our Service.

You are using our Service.

You send us questions, request a quote.

You visit our profiles on social networks and contact us through these portals.

What rights do you have in relation to the processing of your personal data?

Below are your rights related to data protection and the fact that we process your data. The rights you have in a particular situation depend on the purpose for which and on what basis we process your personal data.

Right of access to data

You have the right to obtain information regarding the personal data we hold about you. By submitting a request for access to your data, you will be provided with information about the processing of your personal data, including, in particular, the purposes and legal basis for the processing, the scope of the data held, the entities to which the personal data is disclosed and the planned date of deletion.

Right of rectification

You have the right to promptly correct and/or supplement the personal data stored about you. It is our duty to ensure that our mutual communication is based on data that is true, complete and up-to-date.

Right to restrict processing

You have the right to ask us to restrict the processing of your personal data if you question the accuracy of the data stored about you, if the processing is carried out without a legal basis, or if you have presented your objection to the processing.

Right to erasure

You have the right to request the deletion of your personal data held by us, unless maintaining the data is necessary to ensure freedom of speech, freedom of access to information, to fulfill a legal obligation, for reasons of public interest, to report or defend against claims, or to assert rights under the law.

Right to information

If you have claimed the right to rectification, erasure or restriction of processing, we will notify all recipients of your personal data of how to rectify, erase or impose restrictions on the processing of such data, unless this is impossible to carry out or involves disproportionate effort.

Right to data portability

You have the right to obtain a copy of the data you provided to us, which will be sent to you or a third party in a structured, standard, machine-readable format. If you request that this data be sent to another data controller, this will be done, provided that it is technically possible. This entitlement applies only if we process your data on the basis of your consent or in connection with the performance of a contract.

Right to object

If your personal data is processed on the basis of our legitimate legal interest, you have the right to object at any time to further processing. We will consider your request in accordance with the rules under the law.

Right to withdraw consent

If your data is processed on the basis of consent, you have the right to withdraw it at any time, with future effect. This will not affect the legality of the data processed to date.

The right to file a complaint with the supervisory authority

If the processing of your personal data violates data protection laws or if your data protection rights have been violated in any other way, you may file a complaint with a supervisory authority. The supervisory authority with jurisdiction in Poland is the President of the Office for Personal Data Protection in Warsaw (2 Stawki Street). Before you exercise your right to file a complaint, we encourage you to contact us first so that we can clarify any doubts you may have.

Consideration of the request

If you address a request to us for the exercise of a given entitlement, we will respond to your request within one month of receiving it. If it is necessary to extend this deadline, we will inform you of the reasons for such extension.

The response to your request will be provided to the e-mail address from which you send the request, and in the case of requests directed by letter, by regular mail to the address you indicate, unless the content of the letter indicates that you wish to receive feedback to your e-mail address (in which case you must provide your e-mail address).

Links to other sites

Where we provide links to third-party websites, this Privacy Policy does not apply and does not describe how that entity processes your personal information. We encourage you to read the relevant privacy policies of these entities located on their websites.

Cookies

Like almost all websites, our service also uses cookies.

Cookies, which are used to ensure the functionality, security and accessibility of the website, are essential for the correct operation of the website. These cookies let us know that you have accepted our Privacy Policy and Cookie Policy. We use these cookies based on our legitimate legal interest.

We also use cookies for analytical and marketing purposes. They allow us to measure the effectiveness of advertisements based on analysis of users’ actions on the site. We use tools that enable such functionality based on your consent.

Google Analytics

On our site we use tools from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google Analytics, which allow us to collect statistical information about your use of the site such as IP address, device type, browser type. We do this to have knowledge of, among other things, the number of users accessing our site. This information is only processed in a way that does not allow us to directly identify anyone. Note, however, that Google may process your data on a server in the United States. In these cases, Google may process your personal data outside the European Economic Area, but this is on the basis of so-called standard contractual clauses, provisions of the agreement between us and Google that guarantee an adequate degree of secure processing of your personal data.

If you are interested in the details related to data processing within Google Analytics, I encourage you to read the explanations prepared by Google tutaj.

LinkedIn Insight Tag

Our site uses marketing tools available through Linkedin and provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2. LinkedIn Insight Tag, as the tool is called, allows us to collect data on visits to our site, including URL, referring page, IP address, device and browser information, and timestamp. IP addresses are hashed or encrypted.

LinkedIn does not share users’ personal information, but only provides reports and alerts (which do not reveal users’ identities) about the site’s audience and advertising effectiveness. It also allows retargeting of ads on site visitors. This allows you to receive personalized ads outside of our service.

Using account settings, LinkedIn users can control how personal information is used for advertising purposes.

Marketing Newsletter

We use marketing tools that allow us to send our Newsletter, in which we present our current activities and interesting offers for customers.

Meta Ads

We use marketing tools available through Facebook and provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Dublin. As part of these tools, we target ads to you on Facebook. You can read more about our use of this tool in our Cookie Policy, available here.

Youtube

On the Site, we may use the Youtube platform, owned by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to post videos on our site.

Vimeo

On the Service, we may use the Vimeo platform, which is owned by Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, for the purpose of posting videos on our website.

Profiling

In order to provide the most advantageous, tailored, personalized offer to its Customers and Users, and for the purposes necessary for the conclusion or performance of a contract between the data subject and us, and in the case of the data subject’s express consent, we may use “profiling,” which means a form of automated processing of personal data that involves the use of personal data to evaluate certain personal factors of a natural person, in particular to analyze or predict aspects concerning personal preferences and interests. Decisions as to whether to send a personalized offer or other benefit are made automatically on the basis of criteria such as gender, date of birth, website addresses where activities have been carried out, number and frequency of activities carried out. After determining the fulfillment of the criteria, the information system automatically sends information about the granted benefit, such as a discount. The granted benefit can be used under the terms of the information on its granting or can be abandoned. In the case of processing for direct marketing purposes, including profiling, processing based on our legitimate interests, for scientific, historical and statistical research purposes, data subjects have the right to object, due to the particular situation of the data subject. We do not make a decision that is based solely on automated processing, including profiling, and materially affects the data subject.

Server logs

Using the site involves sending queries to the server where the site is stored. Each request made to the server is recorded in the server logs.

The logs include, among other things, the IP address, date and time of the server, information about the web browser and operating system. The logs are saved and stored on the server. The data stored in the server logs are not associated with specific individuals using the service and are not used for identification purposes.

Server logs are only auxiliary material used to administer the site and their contents are not disclosed to anyone except those authorized to administer the server.

Changes to the Privacy Policy

The Privacy Policy is subject to periodic review and update, when reasonably necessary.

Part II. Data processing in the use of the Service

Below we provide you with the rules for the processing of personal data (including your IP address or other identifiers and information collected through cookies or other similar technologies) that apply when you use the Service and you are not a registered user of the Service (i.e. you do not have an Account on the Service).

For what purpose do we process your data?

We process your personal data in order to provide electronic services to you in terms of providing you with the content collected on the Website, as well as for analytical and statistical purposes.

On what legal basis do we process your data?

The legal basis for processing your personal data is:

• for the purpose of providing electronic services in terms of providing you with access to the content collected on our Service – in which case the legal basis for processing is the necessity of processing for the performance of the contract (Article 6(1)(b) RODO);
• in order to respond to your inquiry, directed by email or telephone-then the basis for processing is our legitimate interest (Article 6(1)(f) of the RODO), consisting in informing you about our activities and responding to customer inquiries;
• for analytical, statistical, marketing purposes-then the legal basis for processing is your consent (Article 6(1)(a) RODO);
• for the purposes of possible establishment, investigation or defense of claims and to ensure the security of your data – the legal basis for the processing is our legitimate interest (Article 6(1)(f) RODO) in protecting our rights.

How long do we process your data?

We will process your personal data for as long as necessary for the purposes described in this Privacy Policy, in particular to fulfill our contractual and statutory obligations.

Who is the recipient of your personal information?

The recipients of your personal data, i.e. external entities that may participate in the processing of your data, will be our trusted subcontractors – IT service providers for data hosting and business mail services and companies whose statistical, analytical and marketing tools we use, indicated in Part I of this Privacy Policy.

Nature of data submission

Your personal information – including IP address, other identifiers and other information, from the moment you connect to our Service, is collected through cookies or other similar technologies.

Other relevant information

Your data may be processed outside the European Economic Area – Google may process your data on a server in the United States. In these cases, Google may process your personal data outside the European Economic Area, but this is done on the basis of so-called standard contractual clauses, provisions of the agreement between us and Google that guarantee an adequate degree of secure processing of your personal data.

What rights do you have?

Your rights are indicated in Part I of this Privacy Policy.

Part III. Processing of data as part of the Service’s marketing activities

The following are the rules for processing your personal data, which apply when you use and communicate with us via our social media profiles – Facebook, Instagram and LinkedIn (called “fanpages” or “profiles”). On our fanpages, we publish and share content, offers and recommendations of our services on an ongoing basis, as well as if you choose to subscribe to our Marketing Newsletter.

For what purpose is your data processed?

We process your data solely in connection with the operation of our social media profiles, including to keep you informed of our activities and to promote various events and services, as well as to communicate with you through the functionalities available on social media.

Please note that social network administrators record your activity using cookies and other similar technologies each time you interact with our fanpages and other LinkedIn, Facebook and Instagram sites. The fanpage administrators have access to general statistics about your (as a fanpage visitor) interests and demographics (such as age, gender, region). As part of your use of social networking sites, the scope and purposes of data processing on social networking sites are defined by the administrators of these sites.

We process your data in terms of the name and email address you provide for our Marketing Newsletter in order to send you commercial information, including information about the latest promotions or offers via email.

On what legal basis do we process your data?

The legal basis for processing your personal data is:

• our legitimate interest (Article 6(1)(f) RODO) in promoting our own brand and building and maintaining a brand-related community;
• Your consent to create data for site statisticsw serwisie LinkedIn, Facebook i Instagram (art. 6 ust. 1 lit. a RODO);
• Your consent to receive our Marketing Newsletter (Article 6(1)(a) RODO).

How long do we process your data?

We will process your personal data for as long as it is necessary for the purposes described in this Privacy Policy, in particular to fulfill our contractual and statutory obligations, unless you withdraw your consent to the processing of your data beforehand.

Services: LinkedIn, Facebook and Instagram process your data when using our fanpages for their own purposes, not covered by this Privacy Policy. We have no influence on the actions of these services related to the aforementioned data processing. In this regard, we refer you to the privacy policies of the respective social networks:

Data rules on Facebooku.

Data rules on Instagramie.

Data rules on LinkedIn.

Who is the recipient of your personal information?

The recipients of your personal data, i.e. the external entity that may be involved in the processing of your data when you use our social media, will be our trusted subcontractors – IT service providers for data hosting and business mail services, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland administering Facebook and Instagram, and LinkedIn Ireland Unlimited Company (an Irish company) administering LinkedIn.

Our subcontractor responsible for handling the Marketing Newsletter will also be the recipient of your personal data.

Nature of data submission

Your personal information – including IP address, other identifiers and other information, from the moment you connect to our fanpages, is collected through cookies or other similar technologies.

As part of the use of our fanpages, the scope and purposes of data processing on social networks are determined by the administrators of these sites.

In this regard, I refer you to the privacy policies of the individual social networks:

Data rules on Facebooku.

Data rules on Instagramie.

Data rules on LinkedIn.

Podanie Twoich danych osobowych na potrzeby Newslettera marketingowego jest dobrowolne i konieczne, jeżeli dokonasz zapisu na ten Newsletter i wyrazisz zgodę na przetwarzanie danych osobowych w tym celu. Zgoda może być przez Ciebie w każdej chwili wycofana poprzez kliknięcie odpowiedniego linka w przesłanej przez nas wiadomości albo poprzez wysłanie maila na adres office@kwmnlegal.pl.

What rights do you have?

Your rights are indicated in Part I of this Privacy Policy.