+48 71 719 59 08PRIVACY POLICY
1. General Provisions
1.1. This Privacy Policy is addressed to users of the websites under the domains k-legal.pl, krasuski.legal, regreg.pl, and other domains belonging to the Administrator, as well as to persons directing any correspondence to the Administrator.
1.2. The Policy defines the rules for the processing of personal data obtained by the Administrator during your use of the above-mentioned services and data obtained as a result of directing any correspondence to the Administrator, in particular via e-mail or forms available on the above-mentioned websites.
2. Personal Data Administrator
The administrator of personal data is Konrad Krasuski, conducting business under the name Kancelaria Radcy Prawnego Konrad Krasuski, ul. Kręta 10/U1, 50-233 Wrocław, NIP: 9241757850, REGON: 022462290, e-mail: kancelaria@k-legal.pl, tel. 71 719 59 08.
3. Legal Basis for Processing Personal Data
3.1. Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR).
3.2. The legal basis for the processing of your personal data by the Administrator is:
a) the necessity of performing contracts concluded by you with the Administrator, as well as taking steps prior to the conclusion of such contracts at your request (Article 6(1)(b) GDPR);
b) processing necessary to comply with a legal obligation incumbent on the Administrator (Article 6(1)(c) GDPR),
c) the consent of the data subject to the processing of personal data, e.g. expressed when sending inquiries or publishing comments (Article 6(1)(a) GDPR).
3.3. Providing your personal data is voluntary; however, refusal to provide the data will prevent you from using the service and services provided by the Administrator.
3.4. The user may withdraw consent to the processing of personal data for one or more purposes at any time.
4. Purposes and Scope of Processing Personal Data
4.1. The personal data you provide will be processed for the purposes and to the extent necessary in connection with the conclusion and performance of the contract and for the direct marketing of the Administrator’s services.
4.2. For the performance of the contract, the Administrator will process the following data you provide: first name, last name, address, e-mail address, phone number, company name, tax identification number (NIP), statistical number (REGON), website address, data contained in attached files, and message content.
4.3. To add a comment on the blog, the Administrator will process the e-mail address and first name/username you provide.
5. Sharing Personal Data
5.1. Your personal data will be made available to relevant state authorities or third parties if such an obligation results from generally applicable law.
5.2. The Administrator shares your personal data with entities providing hosting/server services, entities cooperating with the Administrator in providing legal services, and IT entities maintaining the given website.
6. Data Protection
6.1. The Administrator is obliged to protect the collected data of the Service Users in accordance with applicable law and the highest standards of security and data protection.
6.2. The Administrator ensures the security of personal data through appropriate technical and organizational measures designed to prevent unlawful processing of data and their accidental loss, destruction, or damage. The Administrator takes all possible measures to ensure that personal data are:
a) correct and processed lawfully,
b) obtained only for specified purposes and not further processed in a way incompatible with those purposes,
c) adequate, relevant, and not excessive,
d) accurate and up to date,
e) not kept longer than necessary,
f) processed in accordance with the rights of the data subjects, including the right to object to sharing,
g) securely stored,
h) not transferred without adequate protection.
6.3. Personal data sets are protected against access by third parties. Only persons authorized by the Administrator, trained in personal data protection, and obliged to keep your personal data confidential are allowed to process your personal data.
6.4. Personal data collected for the conclusion or performance of a contract and compliance with a legal obligation by the Administrator are stored for the period necessary to: (1) perform the contract, (2) secure or pursue possible claims arising from the contract, (3) handle complaints, (4) take pre-contractual actions at your request aimed at concluding a contract, (5) fulfill the legal obligation imposed on the Administrator (e.g., accounting and tax regulations). Personal data related to adding a comment on the blog will be processed until consent is withdrawn or the comment is deleted.
7. Rights
7.1. You have the right to request from the Administrator access to your personal data, rectification, erasure, or restriction of processing, the right to data portability, and the right to object to processing, as well as the right to withdraw previously given consent to the processing of personal data at any time.
7.2. You have the right to obtain from the Administrator the following information:
a) about the purpose, scope, and method of processing your personal data,
b) since when your data has been processed,
c) about the source from which your data originates,
d) about the recipients or categories of recipients to whom the data is disclosed.
7.3. Furthermore, at your request, the Administrator will supplement, update, and correct your personal data, as well as suspend (temporarily or permanently) its processing or delete it if your data turns out to be incomplete, outdated, false, or has been collected in violation of the law or is no longer necessary for the purpose for which it was collected.
7.4. Additionally, if your data is processed by the Administrator for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing, including profiling, to the extent that the processing is related to such direct marketing. To exercise the rights referred to in this paragraph, you must submit a request to the Administrator’s e-mail address.
7.5. You have the right to lodge a complaint with the supervisory authority if you believe that the processing of personal data violates the GDPR.
8. Data Changes
If your personal data changes, please update it yourself in your user account (if created) or notify the Administrator by phone, in writing to the company’s registered office, or by e-mail to the Administrator’s e-mail address.
9. Cookies
9.1. The Administrator declares that cookies are used.
9.2. Cookies are information sent by the server and saved on your device (e.g., hard drive of a computer or phone).
9.3. Data obtained using cookies does not allow identifying you but enables the Administrator to determine whether a given computer has visited the website (which is not equivalent to information about who visited the website) and what preferences the user had at that time (what interested them most on the website).
9.4. The Administrator uses internal cookies for:
a) ensuring the proper functioning of the website,
b) statistical purposes.
9.5. The Administrator may place both permanent and temporary cookies on your device.
9.6. Temporary cookies are usually deleted when you close your browser, while permanent cookies remain even after the browser is closed.
9.7. Temporary cookies are used to identify the User as logged in.
9.8. Permanent cookies provide certain functions not only during a given session but throughout their storage period on the computer. Permanent cookies are used to: collect information on how the website is used, including data on the subpages visited and any errors, improve the website by recording errors, test different style variants of the website, remember Users’ preference settings, and show Users that they are logged in to the website.
9.9. The Administrator uses Google Analytics, which uses cookies placed on your device to prepare statistics regarding website traffic and how the website is used.
9.10. You can delete cookies left by the website from your device at any time, following the instructions of your browser manufacturer.
9.11. It is also possible to block cookies from accessing your device by configuring your browser appropriately; however, in such a case, the website may not function properly.
9.12. The Administrator uses a server that automatically records in server logs, for the purpose of analyzing the operation of the IT system, information about the device you use to connect to the website, i.e., the type of device and browser you use, your computer’s IP, date and time of access, a text description of the event, and event classification.
9.13. Only persons authorized to administer the IT system have access to log files. Log files may be used to prepare statistics regarding website traffic and the occurrence of errors, which do not allow for identifying you.
10. Final Provisions
In the future, it may be necessary to update the rules set out in this Privacy Policy. The updated rules will be available on the website. The Administrator will inform about any changes to this Policy.
