GDPR

Dear Clients,

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "GDPR", entered into force on May 25, 2018.

Acting in the best interest of our Clients and being aware of the trust that we have been granted, we would like to provide you with basic information regarding the principles of personal data processing in force at the Mateusz Romowicz Legal Consultancy.

Who is the administrator of the personal data of the Legal Consultancy's Clients?

The administrator of your personal data is a legal adviser, Mateusz Romowicz, who runs the Mateusz Romowicz Legal Consultancy with its registered office in Gdynia (Śląska 35/37, 81-310 Gdynia).

What is the purpose of processing personal data of the Legal Consultancy?s Clients?

The personal data provided by you are used only for the purpose of providing legal assistance within the scope of a mandate given to the Law Office. We make every effort to ensure that your personal data are processed in accordance with the principle of minimization and adequacy, which means that this processing takes place only for a strictly defined purpose and only to the extent that is really necessary for its effective implementation.

For what period of time are Clients? personal data processed by the Legal Consultancy?

The Legal Consultancy processes Clients' personal data within a period of time necessary for the proper provision of legal assistance services in accordance with the order received from the Client. The Legal Consultancy has adopted effective mechanisms for managing the period of storing personal data, their verification and their further suitability, in accordance with the principle of temporality / time minimization. At the same time, it needs to be remembered that the legal adviser is obliged to keep the Clients' documents and personal data until the expiry of the period of limitation on the validity of claims, unless the Client waives any claims against the Legal Consultancy in writing. Any possible archiving of data provided by the Clients, whether in electronic or paper format, takes place with all necessary technical and legal means guaranteeing their proper security.

Are the personal data of Clients transferred by the Legal Consultancy to third parties?

The Legal Consultancy does not transfer personal data of its Clients to any unauthorized third parties. Any possible transfer of Clients? personal data may result exclusively from the need to protect their legal interest and is always carried out with the knowledge and consent of those individuals. This applies in particular to the transfer of personal data to institutions and public authorities competent to resolve cases in which the Client remains a party.

Does the Legal Consultancy export Clients? personal data outside of the European Economic Area (EEA)?

No. Bearing in mind the nature of the activities pursued by the Legal Consultancy and the related high professionalism requirements, as well as the need to maintain a high level of trust among our Clients for whom we provide legal assistance, the Legal Consultancy does not export data outside the EEA.

Are the personal data of Clients processed by the Legal Consultancy safe?

Yes. The Legal Consultancy has adopted a number of organizational, technical and legal solutions guaranteeing full security of the processed personal data. Additionally, the Legal Consultancy has made all necessary steps in the analysis of the risk of violation of the rights and freedoms of natural persons as related to the processing of personal data and has made efforts to establish the required level of data protection in the context of cybersecurity of IT systems used in the process of providing legal assistance. All this contributes to the Clients' personal data being protected at the highest possible level.

Does the Legal Consultancy use so-called profiling tools or other technical tools that compromise the security of its Clients' personal data?

Given the nature of the Legal Consultancy's activity, focused strictly on the provision of legal assistance services, and the striving for the fullest possible minimization of the processing of personal data, the Legal Consultancy does not use the so-called profiling at any stage of its activities. In particular, the Legal Consultancy does not use the services of advertisers or any other business partners to whom the personal data of its Clients would need to be transferred. Moreover, the Legal Consultancy does not use so-called cloud computing tools, such as, electronic servers located abroad or Dropbox.

Are there specific legal grounds on which the Legal Consultancy processes personal data of its Clients?

Yes. According to Art. 6 of GDPR, the processing of personal data is lawful only if and to the extent that in which one at least one of the following applies. The basis for the processing of personal data of the Legal Consultancy's Clients is primarily their consent (Art. 6(1)(a) of GDPR), understood as a voluntary, specific and unambiguous representation of the will on the part of the individual to whom the data pertain in the form of a declaration or explicit confirmatory action, which allows for the processing of their personal data. In addition, the basis for the processing of personal data by the Legal Consultancy may be, in particular, the necessity of this process for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art.6(1)(b) of GDPR) and a situation in which this processing is necessary in order to protect the vital interests of the data subject or of another natural person (Art. 6(1)(d) of the GDPR). The Law Office does not process personal data in any way without the proper legal basis.

Are there any other sources outside the scope of the GDPR guaranteeing an appropriate level of protection of personal data in the Legal Consultancy?

GDPR is not the only legal act on the basis of which the Legal Consultancy implements an appropriate level of protection of its Clients' personal data. In this context, the provisions of the Act of 29 August 1997 on Personal Data Protection (Dz.U.2016.922.tj) and the new Act of 10 May 2018 on Personal Data Protection become increasingly important (Dz.U.2018.1000). What is particularly important, protection of the Client's personal data outside the conditions described in the GDPR results directly from the obligation of the legal adviser and persons co-operating with him to maintain professional secrecy arising from the Act of 6 July 1982 on legal advisers (Dz.U.2017.1870) and Code of Ethics of Legal Adviser.

Do the Clients of the Legal Consultancy have any special rights in connection with the processing of their personal data?

The GDPR formulates a number of rights for natural persons to whom the data relate. Each Client of the Legal Consultancy, on the basis of the GDPR, has the right to: access their personal data (Art. 15 of the GDPR), rectify their personal data (Art. 16 of the GDPR), erase their personal data (Art. 17 of the GDPR), restrict the processing of their personal data (Art. 18 of the GDPR), data portability (Art. 20 of the GDPR), as well as the right to object (Art. 21 of the GDPR). Moreover, every Client of the Legal Consultancy has the right to withdraw, at any time of their choice, consent to the processing of personal data by the Legal Consultancy. Nevertheless, the Client?s withdrawal of consent to the processing of their data does not affect the lawfulness of the processing of their data, which was made on the basis of the consent granted prior to its withdrawal.

Is it possible for Clients to contact the Legal Consultancy in matters related to the scope and method of processing their personal data?

The functioning of procedures enabling Clients to establish quick contact with the Legal Consultancy, as well as equipping them with the opportunity to submit comments and promptly resolve any doubts has always been one of the priorities of the Legal Consultancy. It is no different in the case of issues related to the broadly understood personal data protection.

To implement the above, we have created a special separate e-mail address. Any questions regarding the processing of personal data of Legal Consultancy?s Clients may be sent to the following e-mail address: rodo@kancelaria-gdynia.eu.