Legal notice · Privacy policy · Cookie policy
This English translation is provided for convenience only. In the event of any discrepancy between the language versions, the Polish version shall prevail.
Legal notice
Introductory information
The pjrlaw.pl website (the "Website") is operated and owned by the law firm Perez Jastrząb Regulski Kancelaria Adwokatów i Radców Prawnych spółka komandytowa (a Polish limited partnership) with its registered office in Poznań, Business Link Maraton, ul. Królowej Jadwigi 43, 61-871 Poznań, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register, under KRS number 0001266140, NIP (tax identification number) 7831962610 and REGON (statistical number) 545701350 (the "Firm").
Nature of the content
The content published on the Website — including the posts in the "News & Insights" section — is of a general, informational nature only. It does not constitute legal advice or a legal opinion, nor is it a form of providing legal assistance in any matter. Nor does it constitute an offer within the meaning of Article 66 of the Polish Civil Code. The content reflects the state of the law as at its publication date and may not take account of subsequent changes in legislation or case law; nor does it guarantee — in any form — the correctness, accuracy, effectiveness or usefulness of the legal information it contains.
Copyright and trade marks
The content of the Website — including texts, the logotype, the graphic mark and the layout — is protected under copyright law or by rights of protection resulting from the registration of trade marks, and belongs exclusively to the Firm unless expressly stated otherwise. Any use of the content beyond the scope of permitted use under Polish copyright law (dozwolony użytek) requires the Firm's prior consent.
Links to external websites
The Website may contain links to third-party websites, including the Firm's social media profiles. The Firm is not responsible for the content or privacy practices of external websites.
Professional information
Advocates and attorneys-at-law are subject to compulsory professional indemnity insurance.
Advocates and attorneys-at-law practising their profession within the Firm are members of the relevant self-governing professional body (bar association) of advocates or of attorneys-at-law. Individualised information relating to this point is made available upon request.
Privacy Policy
I. Personal Data Controller and Data Protection Officer
1. The controller of your personal data is "Perez Jastrząb Regulski Kancelaria Adwokatów i Radców Prawnych spółka komandytowa" (a Polish limited partnership) with its registered office in Poznań, Business Link Maraton, ul. Królowej Jadwigi 43, 61-871 Poznań, entered in the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register, under KRS number 0001266140, NIP 7831962610 and REGON 545701350 (hereinafter: the "Law Firm").
2. Personal data are collected and processed by the Law Firm in accordance with the rules laid down in personal data protection legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: the "GDPR"), and in the Polish legislation adopted in connection with the implementation of the GDPR, including the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws of 2018, item 1000, as amended).
3. The Law Firm exercises the utmost care to keep personal data confidential and to protect them against unauthorised access by third parties, in accordance with the rules set out in the legislation referred to above.
4. In matters relating to the processing of personal data, in particular matters relating to the exercise of the rights provided for in personal data protection legislation, the Law Firm encourages you to make contact in writing at the address of the Law Firm's registered office indicated above or by e-mail at: dane.osobowe@pjrlaw.pl.
II. Scope and purposes of the processing of personal data
As part of its activities, the Law Firm collects and processes personal data:
1. for purposes arising from the legitimate interests pursued by the Law Firm as data controller, namely in order to provide services to Clients, to use commercial communications in the forms provided for by law, including the marketing of the Law Firm's services, as well as for analytical and statistical purposes and in order to ensure the ICT security of the pjrlaw.pl website or of other ICT resources used by the Law Firm (legal basis: Article 6(1)(f) GDPR);
2. in order to perform agreements concluded by the Law Firm with Clients, to the extent specified in those agreements;
3. for the purposes of cooperation with contractors, suppliers and other entities cooperating with the Law Firm (legal basis: Article 6(1)(b) GDPR);
4. in order to conduct the recruitment of persons interested in employment or cooperation (legal basis — respectively: Article 6(1)(c) and Article 6(1)(a) GDPR) — subject to the provisions of Section X of this Privacy Policy;
5. in order to fulfil the obligations imposed on the Law Firm by legal provisions (legal basis: Article 6(1)(c) GDPR);
6. for the specific purpose connected with the use of the pjrlaw.pl website (server logs): IP address, date and time of the request, URL and basic browser data — in order to ensure the security, stability and technical diagnostics of the Website (legal basis: Article 6(1)(f) GDPR — the Law Firm's legitimate interest in ensuring the security and proper operation of the Website). Logs are retained as a rule for up to 30 days, unless longer retention is necessary to investigate a security incident;
7. for the specific purpose connected with the handling of correspondence (e-mail, telephone), in the form of the sender's identification and contact details (as specified in the contact form) and the content of the correspondence — in order to handle the enquiry and to take steps prior to entering into an agreement (legal basis: Article 6(1)(b) GDPR), and on the basis of the Law Firm's legitimate interest in handling incoming correspondence and in the establishment, exercise or defence of legal claims (legal basis: Article 6(1)(f) GDPR).
8. in order to perform the obligations arising under the Act of 1 March 2018 on Counteracting Money Laundering and Terrorist Financing (hereinafter: the "Polish AML Act") — to the extent that the attorneys-at-law or advocates practising within the Law Firm act as an obligated institution within the meaning of Article 2(1)(14) of the Polish AML Act, including in particular in order to apply financial security measures (identification and verification of the identity of the Client and of the Client's beneficial owner, including with the use of the Central Register of Beneficial Owners) and to perform reporting obligations towards the General Inspector of Financial Information (legal basis: Article 6(1)(c) GDPR).
III. Specific provisions concerning the processing of personal data obtained as a result of the operation of the Website
1. The forms available on the pjrlaw.pl website (the contact form and the recruitment form) transmit the data entered directly to the Law Firm — the submission is stored within Google infrastructure, and its content (in the case of the recruitment form, together with the CV file as an attachment) is also placed in the Law Firm's mailbox within the Google Workspace service.
2. Data from the contact form are processed by the Law Firm in order to handle the enquiry, for the period necessary to deal with the matter and on the basis of the legitimate interest consisting in communication with persons interested in the Law Firm's services, but for no longer than 12 months (legal basis: Article 6(1)(f) GDPR), whereas data from the recruitment form are processed on the basis of consent, in accordance with the rules set out in the remaining provisions of the Privacy Policy (legal basis: Article 6(1)(a) GDPR).
3. In order to protect against spam, the pjrlaw.pl website stores, for a period of up to 30 days, a shortened, irreversible signature (hash) of the IP address of the sender of a form (legal basis: Article 6(1)(f) GDPR — the Law Firm's legitimate interest in protecting the Website against abuse). The Website does not embed any external tracking tools or content from third-party services (fonts and graphic assets are served from the Law Firm's own infrastructure); before any such content is embedded, this policy will be updated and content requiring consent will be loaded only once consent has been given. Detailed information on cookies and similar technologies used on the Website is provided in a separate Cookie Policy available on the Website.
IV. Rights of data subjects
1. The processing of your personal data takes place in accordance with the principle of voluntariness; however — depending on the circumstances — a refusal to provide data, or a request for their erasure, may prevent the Law Firm from taking a legitimate action, in particular from providing a service, establishing contact, concluding an agreement or carrying out a recruitment process, as well as from providing information about the Law Firm's events and activities.
2. The processing of your personal data in connection with the provision of legal assistance is governed by the agreements concluded with Clients or by the General Terms and Conditions.
3. The use of commercial communications by the Law Firm, including the marketing of the Law Firm's services, in particular the sending of commercial communications by electronic means, especially by e-mail, is conditional upon your prior consent.
4. In accordance with personal data protection legislation, and in accordance with the rules and to the extent provided for therein, you have the right of access to the personal data concerning you which are being processed, the right to rectification, the right to request erasure or restriction of processing, and the right to data portability. However, some of these rights may not be available to you with respect to data processed in the course of the provision of legal assistance.
5. Independently of the rights described below, you have the right to object at any time — on grounds relating to your particular situation — to the processing of your personal data based on Article 6(1)(f) GDPR (the Law Firm's legitimate interest); in such a case, the Law Firm will cease processing the data within that scope, unless it demonstrates the existence of compelling legitimate grounds for the processing which override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims (legal basis: Article 21(1) GDPR). If you do not wish the Law Firm to process your personal data for purposes connected with the Law Firm's use of commercial communications, including the marketing of the Law Firm's services, you may object at any time to the processing of your personal data for that purpose. If you have given consent to the processing of your personal data, you may withdraw it at any time; however, the withdrawal of consent will not affect the processing carried out before its withdrawal.
6. You have the right to lodge a complaint concerning the Law Firm's processing of personal data with the President of the Personal Data Protection Office (UODO).
V. Period of processing
The Law Firm exercises its right to process personal data, as appropriate, until its legitimate interests have been fulfilled. This will be the case until the expiry of the limitation periods relating to the agreement with which the processing of personal data is connected, or relating to the limitation of obligations arising from legal provisions, or, as the case may be, until an objection is raised to the processing of personal data for the purposes of the Law Firm's use of commercial communications, including the marketing of the Law Firm's services. Personal data processed in connection with the performance by the Law Firm of its obligations as an obligated institution under the Polish AML Act are retained for a period of 5 years from the first day of the year following the year in which the business relationship with the Client ended or an occasional transaction was carried out (basis: Article 49 of the Polish AML Act).
VI. Place of processing
1. Your personal data are processed at the Law Firm's registered office in Poznań and at the Law Firm's Offices located in Warsaw and Szczecin. Personal data are, as a rule, processed within the European Union/European Economic Area, including in the infrastructure of IT service providers hosted in the EU region (Europe-West4). However, data from submissions sent via the forms referred to in Section III, once placed in the Law Firm's mailbox within the Google Workspace service, may also be stored and processed by Google outside the European Economic Area, as the location of data in that service is not restricted to the European Union/European Economic Area.
2. However, incidental access to data from outside the European Economic Area cannot be ruled out in connection with global technical support provided by the suppliers of the Law Firm's IT infrastructure (e.g. as part of maintenance support). Any such transfer, as well as any transfer of data outside the European Economic Area in connection with the use of the Google Workspace service referred to above, takes place solely with the use of the compliance mechanisms provided for in the GDPR (including standard contractual clauses or an adequacy decision, including the EU–US Data Privacy Framework, in which Google LLC participates).
VII. Transfer of personal data to other entities
1. The recipients of your personal data may include, in particular, entities directly or indirectly related to the Law Firm, in particular through capital, organisational or personal ties, which have or will have their registered offices in one of the Member States of the European Union, as well as external service providers, especially entities providing IT services, including cloud computing services, entities providing marketing services, entities processing data on behalf of the Law Firm under a data processing agreement, tax advisers, accountants, statutory auditors and auditors, lawyers and public authorities.
2. For the purposes of cooperation with other law firms or with suppliers, the Law Firm may entrust the processing of your personal data to those entities. In each case, however, those entities will be obliged to keep your personal data confidential and to process them in accordance with data protection legislation and the Law Firm's relevant instructions, and in this respect — where possible — will provide appropriate assurances.
3. The recipients of data may also include the provider of the hosting infrastructure of the pjrlaw.pl website — Google (Firebase App Hosting, Cloud Functions, Cloud Firestore and Cloud Storage services, data centres in the European Union, Europe-West4 region) — acting as a processor, other IT service providers supporting the Law Firm, and entities authorised under legal provisions. Google, acting as a processor, is also a recipient of data in its capacity as the provider of the Google Workspace service, in which the Law Firm maintains the mailbox that receives submissions from the forms available on the pjrlaw.pl website (in the case of the recruitment form, together with the CV file); the place of processing of those data is set out in Section VI.
4. In the cases provided for in the Polish AML Act, the recipient of personal data may also be the General Inspector of Financial Information (GIIF), to the extent that the Law Firm — as an obligated institution — is required to provide information to the GIIF under the provisions of that Act.
VIII. Exclusion of profiling
Personal data are not processed by the Law Firm in a manner involving automated decision-making, including profiling.
IX. Amendments to the Privacy Policy
Any amendments made by the Law Firm to the Privacy Policy will be published on the pjrlaw.pl website, with effect for the future. They will enter into force upon acceptance of the amended Privacy Policy, of the content of which you will be notified by means of a pop-up window.
X. Specific provisions concerning the recruitment process
1. The processing of Candidates' personal data in connection with participation in the recruitment process is governed by the provisions of the Privacy Policy, with the modifications or additions resulting from this Section.
2. Candidates' personal data will be processed for the purposes of the ongoing recruitment process:
a) to the extent necessary to fulfil the legal obligation imposed on the Law Firm in connection with conducting recruitment relating to an employment contract (legal basis: Article 6(1)(c) GDPR);
b) to the extent necessary to take steps prior to entering into an agreement (legal basis: Article 6(1)(b) GDPR);
c) as to the remaining scope, by reference to the consent given by the Candidate (legal basis: Article 6(1)(a) GDPR), and, where the application documents contain special categories of personal data as referred to in Article 9(1) GDPR (legal basis: Article 9(2)(a) GDPR);
d) to the extent necessary for the conduct of future recruitment processes, which takes place on the basis of the consent given by the Candidate (legal basis: Article 6(1)(a) GDPR), and, where the application documents contain special categories of personal data as referred to in Article 9(1) GDPR (legal basis: Article 9(2)(a) GDPR);
e) to the extent necessary to protect the Law Firm's legitimate interest consisting in the ability to establish, pursue or defend against claims (legal basis: Article 6(1)(f) GDPR);
f) to the extent necessary for the establishment, exercise or defence of legal claims in the case of special categories of personal data (legal basis: Article 9(2)(f) GDPR).
3. The Law Firm's right to request the provision of personal data arises from legal provisions or is necessary for the conclusion of an agreement, and the provision of such data is necessary in order to take part in the recruitment process; failure to provide them will make participation in the process impossible. In all other respects, the provision of personal data is voluntary, but may affect the assessment of suitability for employment.
4. Where a recruitment agency has taken part in the employment process, the Law Firm may receive from it the following categories of personal data: first name(s) and surname, the contact details indicated by the candidate, as well as information on education, professional qualifications and previous employment history, and other personal data provided by the Candidate.
5. A Candidate's data may be transferred to entities with which the Law Firm has concluded a service agreement, such as: recruitment agencies or independent recruiters (headhunters), advisers, including HR advisers, and providers of IT tools supporting recruitment processes.
6. A Candidate's personal data will be retained for the entire duration of the recruitment process. If, however, the candidate has consented to taking part in future recruitment processes and to the processing of his or her personal data for the purposes of such processes, the data provided to the Law Firm will be processed for a period of 2 years from the giving of consent. To the extent that the processing of personal data is based on consent, the data will be processed until the consent is withdrawn, but no longer than until the expiry of the above periods. Where necessary and in justified cases, personal data will be retained for the period required to establish, pursue or defend against claims.