INFORMATION ON THE PROCESSING OF PERSONAL DATA
Attorney-at-law Tomasz Gondko, conducting law practice under the name Kancelaria Radcy Prawnego Tomasz Gondko, with its registered office in Bielsko-Biała (postal code 43-300), at ul. Piastowska 55/5, in accordance with Article 13 of Regulation (EU) 2016/ 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, also known as “GDPR”), hereby informs:
1. The controller of personal data is Tomasz Gondko, attorney-at-law, conducting law practice under the name Kancelaria Radcy Prawnego Tomasz Gondko (Tomasz Gondko Legal Advisor's Office); ul. Piastowska 55/5, 43-300 Bielsko-Biała, tel. (33) 472 02 81 or 609 080 510, e-mail: t.gondko@gondko.pl, biuro@gondko.pl
2. Personal data will be processed for the performance of legal services and legal assistance, the performance of obligations under a cooperation agreement or a legal services agreement – if concluded, and other obligations imposed by generally applicable laws, on the basis of:
- Article 6(1)(a) or Article 9(2)(a) of the GDPR, in relation to data for which the data subject has given consent to processing
- Article 6(1)(b) of the GDPR, i.e. in relation to data processed for the purpose of taking steps at the request of the data subject prior to entering into a contract or for the performance of a contract by the Controller
- Article 6(1)(c) and Article 9(2)(g) of the GDPR, i.e. in relation to data processed for the purpose of complying with a legal obligation to which the controller is subject
- Article 6(1)(f) f) of the GDPR, i.e. in the scope of data processed for purposes resulting
from legitimate interests pursued by the controller, i.e. in particular in the scope of direct marketing of the Controller's services to the extent permitted by the provisions of professional self-government, establishing cooperation and possible determination, pursuing or defending claims arising from the contract between the Controller and the data subject (in the scope of establishing, pursuing or defending claims, also Article 9(2)(f) of the GDPR)
3. During processing, personal data may be disclosed to authorized persons (in particular, employees of the law firm) and entities that demonstrate a legitimate interest in obtaining the data, as well as entities to whom the disclosure of data is necessary for the performance of a contract or to whom the disclosure of data is an obligation incumbent on the Controller, such as, in particular: courts, public administration bodies, postal operators and courier service providers, banks, IT service providers, appraisers, experts, translators
4. Personal data will not be transferred to third countries or international organizations. Public authorities that may receive personal data in the context of a specific procedure in accordance with European Union law or the law of a Member State are not considered recipients.
5. The period of storage of personal data is 10 years from the end of the year in which the proceedings in which the personal data was collected by the Controller in the course of his professional activity as a legal advisor ended. In addition, other personal data will be stored for the period necessary to perform the contract, fulfill
legal obligation incumbent on the controller, and to establish, pursue, or defend claims, even after the termination or expiration of the contract.
6. You have the right to request from the Administrator:
- access to personal data concerning the data subject (i.e., confirmation of data processing, access to personal data, copies of personal data, information pursuant to Article 15(1) of the GDPR)
- rectify personal data concerning the data subject (i.e., rectify incorrect data or complete incomplete data)
- erase personal data (i.e., “be forgotten” if: the data is no longer necessary for the purposes for which it is processed or there are no overriding grounds for processing in the event of an objection to the processing of data or the processing was unlawful or the deletion of data constitutes compliance with a legal obligation; it is possible to refuse to delete the data on the basis of Article 17(3) of the GDPR) or to restrict the processing of personal data
and, in addition, you have the right to:
- withdraw your consent to the processing of data processed on the basis of your consent (Article 6(1)(a) or Article 9(1)(a) of the GDPR) at any time. However, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal,
- object to the processing of data processed on the basis of Article 6(1)(f) of the GDPR; The provision of Article 21(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/ EC (General Data Protection Regulation) in the case of personal data obtained by a legal advisor in connection with the provision of legal assistance does not apply
- transfer of data processed on the basis of your consent (Article 6(1)(a) of the GDPR).
To exercise these rights, please contact the data controller - contact details are provided in point 1 above.
If you believe that the processing of your personal data is incorrect, you have the right to lodge a complaint with the President of the Personal Data Protection Office.
7. Providing personal data is voluntary, but it is a condition for concluding a contract or providing legal assistance, as well as for establishing contact with the interested party by the Administrator. Refusal to provide such data or raising an objection will prevent the conclusion or performance of the contract, as well as the provision of legal assistance and contact with the interested party.
If an objection is raised, personal data will be deleted immediately, unless the obligation to store it results from generally applicable legal provisions. In such a case, however, it will not be possible to provide legal assistance (unless otherwise provided for by applicable legal regulations or rules of ethics and professional practice), which may lead to the need to terminate the contract or revoke powers of attorney, authorizations, or orders.
8. The controller will not make automated decisions regarding you, including decisions resulting from profiling.
9. We will also process data provided by our clients or contractors for the purpose of providing legal services on the terms specified above.