Privacy and Cookies Policy for the kordialegal.pl website

Introduction

Respecting the right to privacy of individuals who have entrusted their personal data to KORDIA Legal Krzywański Świstak Limited Partnership, including those using our services, our business partners and their employees, we declare that the information obtained is processed in accordance with national and EU law, in a manner that ensures its protection.
In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: ‘GDPR’), we hereby inform you that:

1. Data controller

The data controller is KORDIA LEGAL Krzywański Świstak Limited Partnership, with its registered office in Rzeszów (address: 18 Króla Kazimierza Street, 35-061 Rzeszów), entered in the Register of Entrepreneurs of the National Court Register under KRS number 0001198849, for which the registration files are kept by the District Court in Rzeszów, 12th Commercial Division of the National Court Register, NIP: 8133940893, REGON: 542943650 (hereinafter: “Controller”).

2. Contact details

For matters relating to the processing of personal data, please contact the Data Controller at the following email address: office@kordialegal.pl.
The Data Controller has not appointed a Data Protection Officer.

3. Scope of data and data sources

  1. Use of the Website
    As a general rule, use of the Website does not require the User to provide personal data. Whilst using the Website, the Controller may process:
    • technical and usage data (e.g. IP address, device/browser identifiers, date and time of connection, information about server requests, errors, logs),
      • identifiers and information stored in cookies or similar technologies – as described in the "Cookies" section.
  2. Contact form / correspondence
    When contacting us via the form, the User may provide the following information (provided directly by the User):
    • first name and surname,
    • email,
    • phone number (optional),
    • the message content.

The data comes directly from the User

4. Purposes and legal basis for processing

The controller processes personal data for the following purposes and on the following legal grounds:

  1. Provision of services by electronic means / enabling users to view the content of the
    • Purpose: to ensure the operation of the Website and to make its content available (legal basis: Article 6(1)(b) of the GDPR – necessary for the performance of a contract for the provision of electronic services relating to the provision of the Website’s functionality).
    website
  2. Handling enquiries via the form and managing correspondence
    • Purpose: communication, responding to enquiries, and handling correspondence regarding enquiries (legal basis: Article 6(1)(f) of the GDPR – the Controller’s legitimate interest in handling correspondence and responding to enquiries).
    • Purpose: to establish, pursue or defend legal claims, including the archiving of correspondence as evidence (legal basis: Article 6(1)(f) of the GDPR – the Controller’s legitimate interests).
    : Pursuing or defending claims
  4. Security and proper functioning of the Website (logs, fraud prevention)
    • Purpose: to ensure IT security, detect fraud, analyse incidents and maintain the stability of the Website (legal basis: Article 6(1)(f) of the GDPR (the Controller’s legitimate interests)).
  5. Search engine optimisation and targeted personalised advertising / marketing
    • Purpose: marketing activities, including tailoring marketing content to the User’s preferences (legal basis: generally Article 6(1)(f) of the GDPR – the Controller’s legitimate interests; however, with regard to the use of analytical/marketing cookies, the legal basis will be the User’s consent, as expressed through their cookie settings – see the ‘Cookies’ section for details).

5. Recipients of the data

Data may be transferred:

  • hosting/server provider: Zenbox sp. z o.o. (Poland),
  • provider of email and contact channel services (form/correspondence): Zenbox sp. z o.o. (Poland),

In addition, the data may be disclosed:

  • to entities authorised by law (e.g. courts, public authorities) – to the extent and in the manner provided for by the relevant legal basis.

CMP / cookie banner: Complianz.

6. Transfer of data outside the EEA

According to the information provided, the Controller uses tools that result in data being transferred outside the EEA.

7. Data retention period

The controller retains data for a period depending on the purpose of the processing, in particular:

  • data from correspondence/forms: as a rule, for the time necessary to process the matter and thereafter until consent is withdrawn or a valid objection is lodged – in cases where the processing is based on a legitimate interest, and for a longer period if necessary for the purposes of preserving evidence,
  • data processed for the purpose of establishing, pursuing or defending claims: until the expiry of the limitation periods for such claims,
  • server logs: 30 days.

8. Voluntary provision of data

  • Providing your details in the contact form is voluntary, but necessary for us to respond and correspond with you regarding your enquiry.
  • A telephone number is optional; providing a number will enable us to contact you by telephone, provided you give your consent (where such consent is required).

9. Rights of data subjects

The data subject has the right to:

  • access to data (Article 15 of the GDPR),
  • the right to rectification (Article 16 of the GDPR),
  • the right to erasure (Article 17 of the GDPR),
  • restrictions on processing (Article 18 of the GDPR),
  • data portability (Article 20 of the GDPR),
  • the right to object to processing based on Article 6(1)(f) of the GDPR (Article 21 of the GDPR),
  • withdrawal of consent – where processing is based on consent (withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal).

Requests regarding the exercise of your rights may be sent to: office@kordialegal.pl.

10. The right to lodge a complaint with the supervisory authority

The data subject has the right to lodge a complaint with the President of the Office for Personal Data Protection.

11. Automated decision-making and profiling

Personal data may be processed automatically and may be subject to profiling in order to tailor marketing information to the User’s preferences – provided that the User consents to the relevant cookies/technologies (e.g. marketing cookies) or where marketing solutions requiring such processing are implemented. No decisions resulting from profiling will be made that produce legal effects on the User or similarly significantly affect them.

12. Security measures

The controller shall implement technical and organisational measures appropriate to the risk of infringement of the rights or freedoms of natural persons, including safeguards restricting access to personal data to authorised persons only and measures to protect the Website against unauthorised interference.

Cookies

13. What are cookies and similar technologies?

Cookies are small text files stored on the User’s device (e.g. a computer or smartphone) when using the Website. They may be used, amongst other things, to ensure the Website functions correctly, to remember settings and – where applicable – for analytical or marketing purposes. The Website may also use technologies with similar functions.

14. Categories of cookies

The following categories of cookies may be used on the Website:

  1. Essential – necessary for the Website to function properly and for its basic functions to work.
  2. Preferences – allowing you to save your chosen settings (where applicable).
  3. Analytical – used for statistical analysis and to improve the Website (based on data from Google Analytics).
  4. Marketing – used to tailor advertising content and marketing activities (based on input data: Meta Pixel / LinkedIn Pixel).

15. Consent and cookie management (CMP/banner)

  • Essential cookies may be used without separate consent – they are necessary for the Website to function.
  • Preference, analytics and marketing cookies (where applicable) are used on the basis of the User’s consent, which is given via the Complianz banner/cmp settings.

You can change your cookie preferences at any time:

  • via the CMP tool settings (if implemented), or
  • via your web browser settings.

16. How to disable cookies in your browser

You can manage cookies yourself via your browser settings (e.g. block cookies, delete stored files, set rules for specific websites). However, restricting the use of cookies may affect certain features of the Website.

17. Changes to the Policy

The Administrator may update this Policy, in particular in the event of changes to the Website’s functionality, the implementation of new tools (e.g. CMP) or changes to legal requirements. The current version of the Policy is published on the Website.