Privacy Policy

Below you will find information regarding the processing of your personal data in connection with your use of the website available at: www.rodowskaz.pl (the “Website”), as well as the processing of your personal data in other cases. You will also learn from this document how cookies are used on the Website.

Who is the controller of your data?

The controller, i.e. the entity which determines the purposes and means of processing your personal data, is Agnieszka Rapcewicz conducting business activities under the name Kancelaria Adwokacka Adwokat Agnieszka Rapcewicz RODOwskaz Legal Consulting, Narutowicza 248, 05-400 Otwock, NIP: 9512181110, REGON: 369581146.

Your personal data is processed by me in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”).

How can you contact the controller?

In matters concerning the processing of your personal data you can contact me electronically by writing to the e-mail address: kontakt@rodowskaz.pl, by mail, writing to the address: Narutowicza 248, 05-400 Otwock, or by telephone by calling +48 668 264 604.

For what purposes is your personal data processed?

Data processing in connection with e-mail, written or telephone contact

When you contact me by e-mail, post or telephone, I receive personal data directly from you. I process it in order to respond to your request, which is my legitimate interest under Article 6(1)(f) of the GDPR.

You give me your personal data voluntarily in this case, but without it I will not be able to respond to your enquiry.

I will process your personal data provided to me in connection with your enquiry for the period necessary to respond or until you lodge an effective objection to the processing of your personal data.

Processing of personal data in connection with the provision of services

If you wish to make use of my support and we enter into a contract for the provision of services by me to you, or if you sign up for a training or similar event organised by me, I receive personal data directly from you. I then process it for the following purposes:

taking action at your request before entering into a contract (e.g. sending you an offer you request from me), entering into a contract with you and performing the contract – on the basis of Article 6(1)(b) of the GDPR;
to comply with my legal obligations in the field of tax and accounting, in particular: to issue an invoice or other accounting evidence, to keep accounts, to settle taxes, to archive data for accounting purposes – on the basis of Article 6(1)(c) of the GDPR in connection with the provisions of tax law and the Accounting Act;
to establish, assert and defend claims, which is my legitimate interest pursuant to Article 6(1)(f) of the GDPR.

The provision of personal data to the extent necessary for me to fulfil my legal obligations is mandatory and results from the provisions of tax law and the Accounting Act. The provision of personal data for the conclusion of a contract is voluntary, but necessary for the conclusion of this contract and its performance.

Personal data is stored for the period of execution of the contract and then until the statutory obligation to store data ceases (5 years from the end of the fiscal year) and until the expiry of the period of limitation of claims.

Processing of personal data of Contractors (natural persons conducting business activities)

If I enter into a contract with you for the provision of services to me or another contract, I receive personal data directly from you and process it for the following purposes:

entering into and performing a contract with you – on the basis of Article 6(1)(b) of the GDPR;
ongoing contact regarding the provision of services, handling of any complaints, fraud prevention, maintaining business relationships, which is my legitimate interest under Article 6(1)(f) of the GDPR;
fulfilment of my legal obligations in the area of taxation and accounting, in particular: bookkeeping, tax settlement, data archiving for accounting purposes – on the basis of Article 6(1)(c) of the GDPR in connection with the provisions of tax law and the Accounting Act;
to establish, assert and defend claims, which is my legitimate interest pursuant to Article 6(1)(f) of the GDPR.

Processing of personal data of Representatives (persons representing clients or contractors)

If my client or counterparty (whether an individual, company or other type of entity) is represented by you or you have been appointed by them for ongoing contact in connection with the conclusion and performance of a contract, I receive your personal data from the client or counterparty or directly from you.

I then process your identification data (e.g. first names, surnames, name of the entity you represent or with which you cooperate, job title/role title, scope of matters you deal with), data concerning the power of attorney granted (e.g. date of power of attorney, type and scope of power of attorney granted), contact data (e.g. business telephone number, email).

I process your personal data for the following purposes:

for the purpose of entering into and performing the contract between the contractor or client and me, in particular to verify your authority to enter into the contract on behalf of the contractor or client and to contact you as the contact person in connection with the performance of the contract – on the basis of Article 6(1)(f) of the GDPR, i.e. on the basis of the legitimate interest pursued by both me and my contractor or client, which is to enable us to perform the contract efficiently on an ongoing basis and to enable us to verify your authority to enter into the contract on behalf of the contractor or client;
in order to perform tax settlements and keep accounting records – on the basis of Article 6(1)(c) of the GDPR, i.e. the processing of data is necessary for the fulfilment of legal obligations incumbent on me and resulting from generally applicable laws, including tax law and accounting regulations;
for the purpose of establishing, asserting or defending claims between a contractor or client and me – on the basis of Article 6(1)(f) GDPR, i.e. the processing is necessary for the purposes arising from my legitimate interests consisting in the possibility of establishing, asserting or defending claims);
for the purpose of establishing or maintaining a business relationship with a contractor or customer through you, which is my legitimate interest under Article 6(1)(f) of the GDPR.

If you provide me with your personal data directly, this is voluntary, while necessary for the conclusion and performance of the contract and the establishment of the business relationship. Failure to provide personal data will result in the impossibility of concluding and performing the aforementioned contract as well as maintaining the business relationship.

Your personal data shall be processed for the period necessary to fulfil the purposes indicated above, in particular for the period of maintaining business relations and realisation of the agreement concluded with my contractor or customer, and then they shall be stored by me until the statute of limitations for claims or until the expiration of the obligation to store data resulting from the provisions of law (e.g. tax law – 5 years from the end of the tax year).

Processing of personal data in connection with subscription to the Newsletter

If you agree to receive the Newsletter from me by email, I receive your personal data directly from you and process it on the basis of Article 6(1)(a) of the GDPR.

The provision of personal data is voluntary. I will store your personal data until you withdraw your consent.

Processing of personal data in social media

I maintain profiles on the following social media:

LinkediIn – https://www.linkedin.com/company/rodowskaz-pl/

Facebook – https://www.facebook.com/rodowskaz/

Instagram – https://www.instagram.com/rodowskaz/

In connection with the operation of the above profiles, I acquire your personal data in connection with your subscription to my fan pages or social media channels (clicking the “Like” icon, “Watch”, “Subscribe”, etc.), your publication of a comment under any of the posts posted on the fan page or channel, as well as in connection with sending me a message via the social network. I process your personal data in particular as follows:

your user ID (may include your first and last name);
your identification data and other information to the extent published by you on your own profile on the relevant social network;
your profile picture (so that in some cases I can get to know your image);
other pictures (which may also be representative of you) voluntarily uploaded by you under my posts;
the content of the comments and the content of the conversation you have with me through the relevant social network;
statistical data on visits to my profiles or social media channels.

Accordingly, I process your personal data for the following purposes:

to maintain a profile on social media, under the terms and conditions set by the operators of these social networks, and to inform you through it about activities, services, events that I organise, to share knowledge, as well as to build and maintain communities and to communicate through the available functionalities of social networks (comments, chat, messages, including event sign-ups), which constitutes my legitimate interest in accordance with Article 6(1)(f) of the GDPR;
to conduct analyses of the functioning, popularity, use of social media profiles, which is my legitimate interest in accordance with Article 6(1)(f) of the GDPR.

When using the statistics function on Facebook, I and Facebook Ireland Limited act as joint controllers of the data processed for statistics purposes. The arrangements between the joint controllers, which define the responsibilities for the processing of personal data, can be found here: https://www.facebook.com/legal/terms/page_controller_addendum

According to them, Facebook Ireland has assumed primary responsibility under the GDPR for processing data for statistics purposes and for complying with all relevant obligations under the GDPR.

Tracking of web activity can take place regardless of whether you are logged in or registered with the social network. I would like to point out that I have no influence on the tracking of online activities used by the respective social network and cannot, for example, turn it off.

You can find detailed information on activity tracking in the privacy policies of the social network operators. As for the statistics I receive from the operators, I have limited influence over them and can only prevent their transmission to a limited extent. If you are a logged in/registered user of the respective social network, please verify your privacy settings to correspond to your preferences.

The provision of personal data is voluntary.

Information that is contained in private messages sent to me via social networks will be stored for the time it takes to respond to the message or until you delete your user profile on the social network, whichever comes first.

In the case of information held by me as part of comments shared by you, it will be available on my profile until you delete it.

Personal data collected by a given social network, i.e. history of posts, history of activity and sent messages, are subject to storage according to the rules of a given social network.

Statistical data regarding visitors to my social media profiles will be processed for the time that the data is available at the given social network in accordance with its terms and conditions.

Please note that apart from me, the controller of your personal data is the operator of the respective social network you use and through which you visit my profile. I have a limited influence on how the respective social network operator processes your personal data. Please also read the terms and conditions and privacy policy of the social network which you are using and through which you are visiting my profile.

Information regarding the processing of your personal data by the operators can be found here:

LinkedIn: https://pl.linkedin.com/legal/privacy-policy

Facebook: https://www.facebook.com/privacy/explanation

Instagram: https://help.instagram.com/519522125107875\

Processing of data in connection with sending requests concerning the exercise of rights under the GDPR

You have certain rights in relation to my processing of your personal data (see below in Section VII of the Privacy Policy for information on these rights), and you may address correspondence to me regarding the exercise of these rights. In connection with such correspondence, I process your identification data, contact data, and other data provided by you or any other person who sends me a request on your behalf to exercise your rights under the GDPR. Where the application is not sent directly by you, but by a proxy or legal representative, I process in addition data concerning that proxy or representative, i.e. their identification data, contact data and data concerning the type of empowerment.

I process applicants’ personal data for the following purposes:

for the purposes of contact and correspondence regarding the sent request for the exercise of rights under the GDPR – on the basis of Article 6(1)(c) of the GDPR, as the processing of personal data is necessary for the fulfilment of my legal obligation under Article 12(1)-(3) of the GDPR;
for the purpose of archiving correspondence carried out on the handling of a sent request for the exercise of rights under the GDPR, for the purpose of proof and demonstrating that I have responded to the sent request in a timely manner, which is my legitimate interest under Article 6(1)(f) of the GDPR.

The provision of personal data is necessary in order to fulfil the request made.

The personal data is processed for the duration of the correspondence and will then be archived for evidence purposes until the expiry of the period of limitation of claims.

Recipients of personal data

Your personal data may be disclosed by me to other entities:

my subcontractors, contractors, in particular entities providing accounting services (Web INnovative Software Sp. z o.o. based in Wrocław), hosting services (LH.pl Sp. z o.o. based in Poznań), e-mail provider (Google Ireland Ltd based in Dublin), the entity through which I send the Newsletter (UAB MailerLite based in Vilnius), with which I have concluded agreements on entrusting the processing of personal data;
banks;
couriers, post offices;
entities authorised by law;
if you publish content on a social media profile, your personal data may also be visible to visitors to my social media profiles.

Automated decision-making

I do not make decisions about you based solely on automated processing, including profiling.

Transfer of data outside the EEA

In connection with my maintenance of profiles or channels on social networking sites, your personal data is processed through a specific social networking site whose servers may be located in the United States or another country outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, social network operators are required to apply appropriate safeguards, in particular EU Standard Contractual Clauses. In such cases, you may request a copy of these relevant safeguards. You can find more detailed information in the privacy policies of the individual social networks.

In connection with my use of the Google Workspace email service, your personal data may be transferred to the USA on the basis of EU Standard Contractual Clauses.

Your rights

You have the following rights in relation to my processing of your personal data:

access to your personal data (Article 15 GDPR), including obtaining a copy of your data (Article 15(3) GDPR),
to rectify (amend) or complete incomplete personal data (Article 16 GDPR),
to request the erasure of personal data in cases provided for by law (Article 17 GDPR),
to request the restriction of the processing of personal data (Art. 18 GDPR),
to receive your data in a structured commonly used format and to have it transferred where the processing is based on your consent or contract by automated means (Article 20 GDPR),
to object to the processing of your personal data where the processing is carried out for my legitimate interest, on grounds related to your particular situation (Article 21 GDPR),
to withdraw the consents granted at any time, without affecting the lawfulness of the processing that took place on the basis of the consents before their withdrawal.

You can exercise the above rights by contacting me as indicated in para. II of the Privacy Policy.

In addition, if you consider that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint to the supervisory authority, i.e. to the President of the Office for Personal Data Protection based in Warsaw. You can find details on how to lodge a complaint on the website of the PDPA, at: https://uodo.gov.pl/pl/83/155

Cookie files

Cookies are small text files containing information about your activity on the Website and storing it on the device from which you access the Website.

In accordance with applicable law, I may store cookies on your device if this is necessary for the functioning of the Website (these cookies are described below as necessary). For the use of any other types of cookies (in particular analytical and advertising cookies) I need your permission.

I only use strictly necessary cookies on the Website, which do NOT legally require your prior consent, are necessary for the proper functioning of the Website, including to perform certain tasks such as, for example, performing the services you have requested through the Website and saving your preferences. These cookies are not deleted once you have finished browsing the Website, but have a limited validity period. The installation of strictly necessary cookies does not require your prior consent: they are automatically installed on your device when you access the Website or make specific choices on the Website.

Changes to the Privacy Policy

This Privacy Policy may be updated in the event of a change in legislation that affects the processing of your personal data or the use of cookies, as well as if the processes by which I process personal data and the types of cookies used change.

This Privacy Policy was introduced on 26.06.2021.