Privacy Policy

Privacy Policy

  1. Data Controller of the personal data of the Clients and collaborators of the law firm, within the meaning of Articles 13 and 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), dated April 27, 2016 (hereinafter also: GDPR), is attorney Michał Surówka, conducting business under the name SURÓWKA Law Office, Attorney Michał Surówka, Jana Kochanowskiego 19/4, 31-127 Krakow (hereinafter also: Data Controller).
  2. Data Controller commits to ensuring the proper acquisition, protection, and processing of personal data, particularly by those authorized to process such data on their behalf.

  3. The Data Controller may process personal data of potential and actual Clients of the Law Firm, as well as contractors, suppliers, and their representatives.

  4. Your data will be processed to the extent necessary for the provision of legal services by the Law Firm. This includes primarily the content of provided documents, correspondence, and possibly other information obtained by the Law Firm from publicly available sources, such as first and last name, mailing address, phone number, email address, or other contact details, i.e., data classified as non-sensitive.

  5. If we process your data in connection with an agreement, the purpose of the processing is to conclude and perform the agreement, including conducting negotiations, presenting offers, and communication related to the performance of the agreement (Article 6(1)(b) GDPR), as well as the fulfillment of legal obligations, including tax obligations, issuing VAT invoices, handling complaints, and fulfilling the informational obligation (Article 6(1)(c) GDPR).

  6. If you have contacted the Law Firm on your own behalf, including through the form available on the Law Firm’s website, we process your data to respond to your inquiry or carry out other actions for which you have given your consent (Article 6(1)(a) GDPR) and based on our legitimate interest, which consists of handling requests and inquiries related to our business activities (Article 6(1)(f) GDPR). Providing the personal data indicated in the form is voluntary but necessary to use the form and process your inquiry.

  7. If we process your data based on consent, please note that you can withdraw your consent at any time, but this will not affect the lawfulness of processing that occurred before the withdrawal of consent.

  8. If you act on behalf of the client of the Law Firm, its contractor, or any other entity, we process your personal data for the purpose of communication, in the context of your representation of the third party, as well as for the purpose of concluding or performing a contract with that third party or carrying out a joint venture. The legal basis for processing your personal data for this purpose is our legitimate interest (Article 6(1)(f) GDPR) – building and maintaining a relationship with the third party on behalf of which you are acting, including concluding and performing relevant contracts with it.

  9. Your personal data may be shared with entities processing them under contracts concluded with the Administrator, but only to the extent necessary for the achievement of the above-mentioned purposes. Such entities process the data solely in accordance with the instructions of the Administrator. In addition to the Administrator, access to your personal data will be granted to appropriately authorized employees or collaborators of the Law Firm, to the extent necessary for the realization of the aforementioned purposes. All these individuals are required to keep such information confidential, and your data remains protected. Your data may also be shared with entities that the Law Firm engages to assist with data processing, to the extent necessary, such as accounting firms, IT services, document destruction companies, postal operators, and entities providing access to electronic mail.

  10. Beyond the aforementioned entities, your personal data may only be disclosed to those authorized to do so under national or EU law. The Administrator will exercise due diligence to appropriately safeguard the personal data provided, particularly against unauthorized access, and will take all necessary measures to ensure the application of their knowledge and expertise in order to fulfill this assurance.

  11. Providing personal data is voluntary, but necessary for the provision of the legal services offered by the Law Firm. Refusal to provide personal data will, however, result in the inability to provide the aforementioned services.

  12. In connection with the processing of your personal data, you have the right to request from the Administrator access to your personal data, rectification, deletion, restriction of processing, or to object to its processing, as well as the right to data portability.

If you wish to exercise any of the above rights or if you have any questions or concerns related to the processing of your personal data, please contact us in person, by traditional mail, or via email:

SURÓWKA Law Firm, Jana Kochanowskiego 19/4, 31-127 Krakow, email address: adwokat.m.surowka@kancelariasurowka.pl.

  1. In connection with the processing of personal data, you have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office.

  2. You have the right to withdraw your consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of the processing based on consent prior to its withdrawal.

  3. Personal data will be processed only for as long as necessary to achieve the processing purpose or until consent is withdrawn. We process your personal data only for the period necessary for the purposes for which they were originally collected. After this period, they will be deleted, except in cases where we are required to continue processing such data to fulfill legal obligations. If you are a client, employee, or collaborator of the Law Firm, we will store your personal data for at least the duration of the contract or the period necessary to conclude it, and then for a maximum period of 10 years from the termination of the contract or – if the contract was not concluded – 2 years from the last contact or completion of negotiations.

  4. Personal data processed based on your consent will be processed until such consent is withdrawn or the purpose for which the consent was given is fulfilled.

  5. The above periods may be appropriately extended, if necessary, in the case of any claims or legal proceedings – for the duration of such proceedings and their settlements – as well as if the law requires their processing for longer periods in specific cases.

  6. The Administrator is not responsible for the consequences of providing false or incorrect data by you, if, despite the due diligence of the Administrator, it is not possible to contact you.

  7. The Administrator is obliged to maintain the confidentiality and privacy of the information obtained for the purpose of providing the above services and not to disclose it to anyone. This obligation remains in force indefinitely.

Rate this page
Privacy Settings
We use cookies to enhance your experience while using our website. If you are using our Services via a browser you can restrict, block or remove cookies through your web browser settings. We also use content and scripts from third parties that may use tracking technologies. You can selectively provide your consent below to allow such third party embeds. For complete information about the cookies we use, data we collect and how we process them, please check our Privacy Policy
Youtube
Consent to display content from - Youtube
Vimeo
Consent to display content from - Vimeo
Google Maps
Consent to display content from - Google