1. Data controller
The controller of your personal data is Kancelaria Radcy Prawnego NP Legal Maciej Niedziałkowski, ul. Puławska 2, Building B, 3rd floor, Warsaw, Poland (“the Firm” or “the Controller”). For data protection matters, contact biuro@np-legal.com or call +48 603 621 518.
2. Data we process and how we obtain it
We may process information you provide directly, including your name, company, email address, telephone number and information contained in your description of the matter or documents you send us. When you visit the website, the hosting provider may also process basic technical data such as your IP address, device type, access time and security logs.
The contact form on this website prepares a message in your own email application. The website itself does not store the form data; the Firm receives the information only after you send the email.
3. Purposes and legal bases
- responding to enquiries and taking pre-contractual steps — Article 6(1)(b) GDPR;
- entering into and performing a legal services agreement — Article 6(1)(b) GDPR;
- complying with legal, tax, accounting and professional obligations — Article 6(1)(c) GDPR;
- establishing, exercising or defending legal claims, checking conflicts of interest and protecting the website — the Controller's legitimate interests under Article 6(1)(f) GDPR;
- processing based on consent — Article 6(1)(a) GDPR — only where consent is the appropriate basis and has been expressly given.
4. Retention periods
Enquiry data is retained until the enquiry has been dealt with and subsequently for as long as reasonably necessary to establish, exercise or defend potential claims. Client and matter records are retained during the engagement and afterwards for periods required by legal, tax and professional rules. Data processed solely on the basis of consent is retained until consent is withdrawn, unless another legal basis permits further processing.
5. Recipients and international transfers
Data may be entrusted to providers of hosting, email, IT support, accounting and archiving services. Where necessary for a matter, it may be shared with cooperating lawyers, tax advisers, translators, experts, courts, authorities, bailiffs or other participants in proceedings. Recipients receive information only to the extent necessary and subject to professional confidentiality.
If a service provider processes data outside the European Economic Area, the transfer takes place only under a mechanism permitted by Chapter V GDPR, such as an adequacy decision or standard contractual clauses.
6. Your rights
Subject to the conditions in the GDPR, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. Requests may be sent to biuro@np-legal.com. To protect personal data, the Controller may ask you to confirm your identity.
7. Right to complain
You may lodge a complaint with a data protection supervisory authority, in particular the Polish Personal Data Protection Office (UODO) or the competent authority in the country of your habitual residence, place of work or the alleged infringement. Information about the Polish authority is available at uodo.gov.pl.
8. Voluntary provision and automated decisions
Providing personal data is voluntary. Without contact details or information needed to assess the matter, we may be unable to answer an enquiry or enter into an engagement. The Firm does not make decisions producing legal effects solely by automated means and does not profile website users.
9. Cookies and technical data
The current website does not use its own analytics or marketing cookies. The infrastructure provider may use technical mechanisms necessary for security, load balancing and correct display of the service. If analytics or marketing tools are introduced, this policy will be updated and any required consent will be obtained before optional cookies are stored.
10. Security and policy changes
The Firm applies organisational and technical measures appropriate to the nature of the data and the relevant risks, taking professional confidentiality into account. This policy may be updated when the website, service providers or applicable law changes. The current version will remain available at this address.