GDPR – information clause for substitutes
INFORMATION ON PERSONAL DATA PROCESSING
FOR PERSONS PROVIDING LEGAL SERVICES
ON BEHALF OF THE LAW FIRM
In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), We hereby inform you that:1) ADMINISTRATOR DANYCH
The controller of your personal data is:
Kancelaria Prawnicza ARGOS adw. Wojciech Lubelski i Wspólnicy sp. k.
with its seat at: Katowice (40 – 049), Kościuszki 6/4
represented by: general partner Wojciech Lubelski
2) CONTACT DETAILS
The controller has not appointed a Data Protection Officer.
The contact person for the processing of your personal data is:
Kamil Lubelski, e-mail: email@example.com, tel. no.: (+48) 606 454 747
3) PURPOSES AND LEGAL BASIS OF PROCESSING
Your personal data will be processed for the purpose of exercising your rights and obligations in connection with the provision of legal services, based on:
a) art. 6 ust. 1 lit. b GDPR– as the processing is necessary for the conclusion and performance of a contract for the provision of legal services or to take action at your request prior to entering a contract,
b) art. 6 ust. 1 lit. c GDPR – as the processing is necessary for compliance with a legal obligation to which the controller is subject, including accounting and legal and tax duties,
c) art. 6 ust. 1 lit. f RODO – as the processing is necessary for the purposes of the legitimate interests pursued by the controller, which should be understood in particular as ensuring the possibility of enforcement and defence against claims, controlling access to the personal data processed by the controller, identifying possible conflicts of interest in the matters handled by the controller.
4) RECIPIENTS OF PERSONAL DATA
The recipients of your personal data may be: the controller’s employees and contractors authorized to process the data, the controller’s clients, who are affected by the case covered by the agreement concluded between you and the controller, entities to which the controller has entrusted the processing of data (i.e., in particular, the accounting office and the enterprise providing IT services), common courts, administrative courts and authorities, entities providing postal and courier services and entities authorized to obtain personal data under the law, in particular, competent tax offices.
5) TRANSFER OF DATA TO A THIRD COUNTRY
The controller will not transfer your personal data to a third country or an international organisation unless this is necessary for the use of the IT services of entities established outside the European Economic Area. In that case, your personal data will be transferred to a third country in respect of which the European Commission has determined an adequate level of protection.
6) DATA STORAGE PERIOD
Your personal data will be stored for a period of 5 years from the date of the end of providing the last service to the Law Firm, but not less than until the statute of limitations for claims arising from the agreement concluded between you and the controller, and the data processed in order to fulfil the legal obligations of the controller (in particular tax and accounting) – until these obligations expire.
7) INFORMATION ON YOUR RIGHTS
You have a right of access to the content of your data (Article 15 GDPR) and a right of rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), as well as a right to data portability (Article 20 GDPR) and a right to object to processing (Article 21 GDPR).
Where you have given your consent to the processing of your personal data to the controller, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of your consent before the withdrawal.
8) RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with the data protection supervisory authority, the President of the Office for Personal Data Protection (Prezes Urzędu Ochrony Danych Osobowych), if you find that the processing of your personal data violates your rights, including the provisions of the GDPR.
9) INFORMATION ON THE REQUIREMENT OR VOLUNTARY NATURE OF THE DATA PROVISION
The provision of your personal data is a contractual requirement and a condition for concluding a contract for legal services. Failure to provide the data will result in the inability to perform the contract for the provision of legal services and related legal and tax obligations arising from the applicable laws.
10) INFORMATION ON AUTOMATED DECISION-MAKING OR PROFILING
The data you provide will not be subject to automated decision making and profiling.