Privacy
Policy

Personal data controller

The controller of your personal data is ZAWADZKA MROWIEC & WSPÓLNICY SP. K. with its registered office in Warsaw, ul. Wspólna 47A (3rd floor), 00-684 Warsaw, entered in the National Court Register maintained by the District Court for the Capital City of Warsaw, 12th Commercial Division of the National Court Register.

For any matters concerning personal data protection, you can contact us:

• e-mail: biuro@zmwlegal.pl
• phone: +48 22 319 47 60 (Mon–Fri, 9:30–17:30)
• postal address: ul. Wspólna 47A, 00-684 Warsaw, Poland

Where we get your data

We process personal data that:

• You provide to us directly – by completing the contact form on the website, sending an e-mail, calling the firm or meeting our lawyers.
• We collect automatically – when you visit the website, through cookies and similar technologies (IP address, browser type, pages visited, time of visit).
• We receive from third parties – in the course of court cases and transactions, from the firm’s clients who appoint us as their attorney or adviser.

Purposes and legal bases of processing

We process personal data for the following purposes and on the following legal bases:

Providing personal data is voluntary; however, without the data necessary to provide a service, we cannot provide it.

Data retention period

We store personal data for as long as necessary to achieve the purposes for which it was collected:

• Contact form data – until we have responded and for 12 months after the last contact, unless we start working together.
• Data related to a legal services contract – for the term of the contract and for 10 years after it ends (the limitation period for claims).
• Data processed under a legal obligation (including AML) – for the periods specified in the relevant regulations, but not less than 5 years.
• Analytics cookie data – for the period indicated in the cookie policy, up to 26 months.
• Data processed on the basis of consent – until consent is withdrawn.

After these periods, the data is deleted or anonymised.

Recipients of personal data

Your personal data may be disclosed to the following categories of recipients:

• Service providers to the firm – IT system providers, e-mail operators, website hosting companies and accounting service providers – solely under appropriate data processing agreements.
• Public authorities – courts, administrative authorities and law enforcement agencies – solely on the basis of applicable law.
• Lawyers and advisers – cooperating law firms or external experts involved in a specific case, only to the extent necessary for that case.

As a rule, data is not transferred outside the European Economic Area. Where we use tools from providers operating outside the EEA (e.g. Google Analytics), we apply standard contractual clauses approved by the European Commission.

Your rights

Under the GDPR you have the following rights:

• Right of access – you can find out whether and what data we process and obtain a copy of it.
• Right to rectification – you can request that inaccurate data be corrected or incomplete data be completed.
• Right to erasure – you can request erasure of your data in the cases set out in Art. 17 GDPR (e.g. where the data is no longer necessary for the purposes for which it was collected).
• Right to restriction of processing – you can request restriction of processing in the cases set out in Art. 18 GDPR.
• Right to data portability – you can receive your data in a structured, machine-readable format.
• Right to object – you can object to processing based on the controller’s legitimate interest.
• Right to withdraw consent – where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before its withdrawal.

To exercise these rights, contact us at biuro@zmwlegal.pl. We will respond to your request without undue delay and in any event within 30 days.

You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) if you believe that the processing of your data infringes the GDPR.

Cookies and technical data

Our website uses cookies – small text files stored on your device. We use three categories of cookies:

• Necessary – required for the website to work properly. The only such cookie is zmw_consent, which stores your cookie choice (kept for 12 months). They do not require consent.
• Analytics – statistics tools (e.g. Google Analytics) that let us measure traffic and improve the website. We only run them after you have given your consent.
• Marketing – used to tailor content and messages to your interests. We only run them after you have given your consent.

On your first visit we show a banner where you can accept all categories, reject all except the necessary ones, or choose them individually in the settings. You can change your choice at any time by clicking the Cookie settings link (also available in the footer of every page), or delete cookies in your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

We also collect technical data generated automatically when you visit the website: IP address, browser type and version, operating system and referrer URL. This data is used solely for statistical and security purposes.

Changes to this privacy policy

We reserve the right to change this privacy policy – in particular in the event of changes in the law, in the services we provide or in the technologies we use.

We will announce significant changes by publishing an updated version on the website with a new effective date. We encourage you to review the policy regularly.

Data protection contact

For any matters relating to the processing of personal data and the exercise of your rights, please contact us:

• E-mail: biuro@zmwlegal.pl
• Phone: +48 22 319 47 60 (Mon–Fri, 9:30–17:30)
• Address: ZAWADZKA MROWIEC & WSPÓLNICY SP. K., ul. Wspólna 47A (3rd floor), 00-684 Warsaw, Poland

We aim to respond to all enquiries within one working day.