Privacy policy – how we process your personal data?
The controller of your personal data is IMPACTIV Bagiński Góźdź Grybska Podwiak-
Góźdź Adwokaci i Radcowie Prawni Spółka Partnerska with its registered office in
Warsaw („we”). In all matters related to processing your personal data you can
contact us:
- by letter: Willowa 8/10 apt. 25, 00-790 Warsaw, Poland;
- by e-mail: hello@impactiv.law.
We process your personal data in accordance with the general data protection
regulation („GDPR”). Please find below information on how we process your
personal data if you are:
- an individual who contacts us (e.g. by e-mail or by phone) but who is not our client,
- our client (you are our client, if you concluded with us a contract for legal services),
- our client’s employee or associate, who is the client’s representative or contact person in relations with us.
How we process personal data of individuals, who contact us but who are
not our clients?
What are the purposes and legal bases for processing of your personal data?
We process your personal data to contact you in order to provide answers to your
questions or to provide you with the offer for our services, if you asked for it. The
legal basis for processing of your personal data is our legitimate interest, which in
our case means answering your questions related to our business or in providing
you with the offer for our services (art. 6 sec. 1 let. f GDPR).
Providing us with your personal data is voluntary. However, to some extent your
personal data may be necessary to reach objectives deriving from our legitimate
interest mentioned above.
How long we retain your personal data?
We retain your personal data as long as our business relations with you exist and
for one year after they ceased.
Who can be a recipient of your personal data?
We can transfer your personal data to: our authorized staff, subcontractors (e.g.
advocates, attorneys-at-law, advocate and attorney-at-law trainees), other
service providers who process your personal data due to the nature of services
provided to us (e.g. IT providers, cloud hosting providers, secretaries and
paralegals).
What are your rights in relation to processing your personal data by us?
You have a right to:
- lodge an objection to processing of your personal data based on your particular situation (as we process your personal data on the basis of legitimate interest);
- access your personal data,
- request to correct your personal data, which is inaccurate or incomplete,
- request to erase your personal data,
- limit processing of your personal data,
- file a complaint to the President of the Personal Data Protection Office, if you
- find that the processing of your personal data by us violated the GDPR or other provisions of law.
What else you should now?
Your personal data is not subject to automated decision-making nor profiling.
How we process personal data of our clients?
What are purposes and legal bases of processing your personal data?
We process your personal data to:
- perform a contract that you concluded with us, in particular to contact you in any cases related to the contract and to represent your interests towards third persons. In this respect we process your personal data on the basis of a necessity of its processing in order to perform the contract, to which you are a party (art. 6 sec. 1 let. b GDPR),
- contact you in order to answer your questions not related to the contract or to provide you with the offer for our services, if you asked for it. In this respect we process your personal data on the basis of our legitimate interest, which in our case means answering your questions related to our business or in providing you with the offer for our services (art. 6 sec. 1 let. f GDPR),
- provide you with information about our services and other information about our business. In this respect we process your personal data on the basis of our legitimate interest, which in this case means direct marketing (art. 6 sec. 1 let. f GDPR),
- defend against your claims or pursuing our claims against you, in case of any dispute related to the contract that we concluded with you. In this respect we process your personal data on the basis of our legitimate interest, which in this case means defending against your claims and pursuing our own claims (art. 6 sec. 1 let. f GDPR),
- perform our obligations deriving from the provisions of law. In this respect we process your personal data on the basis of a necessity of its processing for compliance with our legal obligations (art. 6 sec. 1 let. c GDPR).
Providing us with your personal data is voluntary. However, your personal data is necessary to conclude and execute a contract with us and – to some extent – to reach objectives deriving from our legitimate interest mentioned above.
How long we retain your personal data?
We retain your personal data for the period of the contract concluded with us and after the contract’s termination – until statute of limitation periods expire for claims that derive from the contract or longer if specific statutory provisions impose on us such legal obligation.
Who can be a recipient of your personal data?
We can transfer your personal data to: our authorized staff, subcontractors (e.g. advocates, attorneys-at-law, advocate and attorney-at-law trainees), other service providers who process your personal data due to the nature of services provided to us (e.g. IT providers, cloud hosting providers, secretaries and paralegals).
What are your rights in relation to processing your personal data by us?
You have a right to:
- lodge an objection to processing of your personal data based on your particular situation (if we process your personal data on the basis of legitimate interest) or without any reason (if we process your personal data on the basis of legitimate interest consisting in our direct marketing)
- access your personal data,
- request to correct your personal data, which is inaccurate or incomplete,
- request to erase your personal data,
- limit processing of your personal data,
- file a complaint to the President of the Personal Data Protection Office, if you find that the processing of your personal data by us violated the GDPR or other provisions of law.
What else you should now?
Your personal data is not subject to automated decision-making nor profiling.
How we process personal data of our clients’ employees and associates,
who are the clients’ representatives or contact persons in relations with
us?
What are purposes and legal bases of processing your personal data?
We process your personal data to:
- contact you in order to handle current matters of the client (in particular related to the contract concluded with us), to answer questions or to provide the client with the offer for our services. In this respect we process your personal data on the basis of our legitimate interest, which in our case means maintaining business relations with the client and communicating with individuals, who are the client’s representatives or contact persons in relations with us (art. 6 sec. 1 let. f GDPR),
- provide you with information about our services and other information about our business. In this respect we process your personal data on the basis of our legitimate interest, which in this case means direct marketing (art. 6 sec. 1 let. f GDPR),
- defend against claims of our client or pursuing our claims against our client, in case of any dispute related to the contract that we concluded with the client. In this respect we process your personal data on the basis of our legitimate interest, which in this case means defending against the client’s claims and pursuing our own claims (art. 6 sec. 1 let. f GDPR),
- perform our obligations deriving from the provisions of law. In this respect we process your personal data on the basis of a necessity of its processing for compliance with our legal obligations (art. 6 sec. 1 let. c GDPR).
Providing us with your personal data is voluntary. However, to some extent your personal data may be necessary to reach objectives deriving from our legitimate interest mentioned above.
From who we received your personal data?
We received your personal data directly from you or from our client. The personal data that we received includes: your name and surname, information about your position in client’s structure, place of work, contact details (phone number, e-mail address, postal address, your social media professional profiles, your contact details at videoconferencing platforms).
How long we retain your personal data?
We retain your personal data for the period of the contract concluded with the
client and after the contract’s termination – until statute of limitation periods
expire for claims that derive from the contract or longer if specific statutory
provisions impose on us such legal obligation.
Who can be a recipient of your personal data?
We can transfer your personal data to: our authorized staff, subcontractors (e.g.
advocates, attorneys-at-law, advocate and attorney-at-law trainees), other
service providers who process your personal data due to the nature of services
provided to us (e.g. IT providers, cloud hosting providers, secretaries and
paralegals).
What are your rights in relation to processing your personal data by us?
You have a right to:
- lodge an objection to processing of your personal data based on your particular situation (if we process your personal data on the basis of legitimate interest) or without any reason (if we process your personal data on the basis of legitimate interest consisting in our direct marketing)
- access your personal data,
- request to correct your personal data, which is inaccurate or incomplete,
- request to erase your personal data,
- limit processing of your personal data,
- file a complaint to the President of the Personal Data Protection Office, if you find that the processing of your personal data by us violated the GDPR or other provisions of law.
What else you should know?
Your personal data is not subject to automated decision-making nor profiling.
How we process personal data of individuals we contact in connection with an event (webinar, training, workshop)?
What are purposes and legal bases for processing your personal data?
We process your personal data to communicate with you in order to establish and maintain business relationships with you, your employer, or the entity you represent. In this context, we process your data based on our legitimate interest in establishing and maintaining business relationships (Art. 6(1)(f) GDPR).
From whom did we receive your personal data?
We received your personal data (name, email address, place of work indicated in the registration form) from the event organizer that we included in our communication with you.
How long we retain your personal data?
We will process your personal data for the duration of our relationship related to the event (e.g., correspondence exchange, responding to questions, sending additional materials) and for one year after its conclusion.
Who may be a recipient of your personal data?
We can transfer your personal data to: our authorized staff, subcontractors (e.g. advocates, attorneys-at-law, advocate and attorney-at-law trainees), other service providers who process your personal data due to the nature of services provided to us (e.g. IT providers, cloud hosting providers, secretaries and paralegals).
What are your rights in relation to processing your personal data by us?
Regarding the processing of your personal data, you have the right to:
- lodge an objection to processing of your personal data based on your particular situation (if we process your personal data on the basis of legitimate interest) or without any reason (if we process your personal data on the basis of legitimate interest consisting in our direct marketing)
- access your personal data,
- request to correct your personal data, which is inaccurate or incomplete,
- request to erase your personal data,
- limit processing of your personal data,
- file a complaint to the President of the Personal Data Protection Office, if you find that the processing of your personal data by us violated the GDPR or other provisions of law.
What else you should know?
Your personal data is not subject to automated decision-making nor profiling.