Privacy Policy

Kancelaria Adwokacka Leszczyńska-Wiącek Magdalena Sp. k. 

1. General Information

   This Privacy Policy sets out the rules for the processing of personal data of persons using the website available at: https://www.leszczynska-wiacek.pl/ (“the Website”), as well as persons contacting the Law Firm via the Website, email, telephone or other communication channels indicated on the Website.

   The data controller is Kancelaria Adwokacka Leszczyńska-Wiącek Magdalena Sp. k., with its registered office in Warsaw, ul. Ludna 2, 00-406 Warsaw, Tax Identification Number (NIP): 522-300-67-69, National Business Registry Number (REGON): 146701270 (“the Law Firm” or “the Controller”).

   The Controller can be contacted by email at: adwokat@leszczynska-wiacek.pl or by post at the Firm’s registered office address.

   The Law Firm processes personal data in accordance with the principles of lawfulness, fairness, transparency, data minimisation, purpose limitation, accuracy, storage limitation, integrity and confidentiality. To the extent that communication with the Law Firm relates to the provision of legal assistance, the Law Firm also acts in accordance with legal professional privilege and the rules governing the practice of the legal profession.

2. Scope of data processed in connection with the use of the Website

   In connection with the use of the Website, the Law Firm may process, in particular, the following categories of data: the IP address of the user’s device, data concerning the device and browser, the date and time of the connection, information about activity on the Website, the addresses of subpages visited, data stored in cookies or similar technologies, as well as other technical information generated automatically by the server or tools used on the Website.

   If you use the contact form, send an email or contact us by telephone, the Law Firm may also process your first name and surname, email address, telephone number, the name of the entity you represent, the content of the message and other data voluntarily provided during the contact.

   The Law Firm requests that you do not provide any unnecessary data via the contact form or email, in particular special categories of personal data, unless this is necessary for presenting a case or obtaining preliminary information regarding the possibility of providing legal assistance.

3. Purposes and legal bases for data processing

   The personal data of Website users may be processed for the following purposes:

   1. to ensure the proper functioning of the Website, maintain its security, prevent misuse, diagnose technical errors and carry out basic administration of IT systems — on the basis of the Controller's legitimate interest in ensuring the security, stability and continuity of the Website's operation;
   2. to handle correspondence and respond to enquiries addressed to the Law Firm — on the basis of the Controller's legitimate interest in communicating with persons contacting the Law Firm, and in cases where such contact is aimed at concluding a contract for the provision of legal assistance, also for the purpose of taking action at the request of the data subject prior to the conclusion of the contract;
   3. for the purpose of concluding or performing a contract for the provision of legal assistance — if, following contact with the Law Firm, a case is accepted or cooperation is established;
   4. to fulfil the legal obligations incumbent on the Controller, in particular obligations arising from tax, accounting, archiving, professional regulations or those relating to the prevention of money laundering and terrorist financing, where applicable in a specific case;
   5. for the purpose of potentially establishing, pursuing or defending claims — on the basis of the Controller's legitimate interest in protecting the rights and interests of the Law Firm;
   6. for analytical purposes, including analysing how the Website is used and improving its functionality — solely to the extent that the user has consented to the use of relevant cookies or similar technologies, where such consent is required.

4. Contact form and correspondence with the Law Firm

   Data provided via the contact form, email, telephone or any other communication channel is used to familiarise ourselves with the matter, provide a response, conduct further correspondence and, where justified, take steps to conclude or perform a contract for the provision of legal assistance.

   Sending a message to the Firm does not automatically constitute the conclusion of a contract for the provision of legal assistance or the acceptance of a mandate by the Firm. The Firm may refuse to accept a case, in particular in the event of a conflict of interest, an inability to provide legal assistance, or other restrictions arising from statutory provisions or the rules governing the practice of the legal profession.

5. Cookies and similar technologies

   The Website uses cookies and similar technologies in accordance with the principles described in detail in a separate Cookie Policy.

   Cookies necessary for the operation of the Website may be used without the user’s separate consent if they are necessary to provide the electronic service requested by the user or to ensure the transmission of a message. Other cookies, in particular analytical, statistical or marketing cookies, are used only after obtaining the user’s prior consent, where such consent is required by law.

   You may change your cookie preferences at any time using the consent management mechanism available on the Website or by changing your web browser settings.

6. Analytics tools

   Where analytical tools such as Google Analytics are used on the Website, the Law Firm employs them to obtain aggregate information regarding how the Website is used, the number of visits, traffic sources, the popularity of individual subpages, and basic technical parameters of visits.

   Analytical tools are activated solely in accordance with the user’s preferences as expressed in the cookie consent panel. The Law Firm recommends using a configuration that limits the scope of data, in particular anonymisation or IP address truncation where technically feasible, disabling advertising features if they are not essential, and configuring the tools in accordance with the ‘privacy by design’ model.

   The provider of analytical tools may be an external entity, in particular Google Ireland Limited or other companies within the Google group. In such cases, data may be processed in accordance with the terms of service of the relevant provider and its privacy policy.

7. Embedded content from external websites

   The website may contain embedded content from external websites, in particular maps, video material, links to professional or social media profiles, forms, widgets or other technical elements.

   Embedded content from other websites may behave as if the user had visited the external provider’s website directly. These providers may use their own cookies, collect information about the user, monitor interaction with the embedded content, and link this information to the user’s account on that website if the user is logged in.

   The Law Firm recommends that you familiarise yourself with the privacy policies of the third-party providers whose content is embedded on the Website.

8. Recipients of data

   Personal data may be disclosed to entities supporting the Law Firm in the operation of the Website and its business activities, in particular providers of hosting services, email services, IT services, cybersecurity services, technical support for the Website, and analytical, accounting, legal, administrative or archiving tools.

   Data may also be disclosed to public authorities or other authorised entities if the obligation to disclose it arises from legal provisions.

   The Law Firm does not sell the personal data of Website users. The Law Firm does not transfer users’ personal data to third parties for their own marketing purposes without a separate legal basis.

9. Transfer of data outside the European Economic Area

   As a general rule, the Law Firm endeavours to process personal data within the European Economic Area.

   If, in connection with the use of specific technical, analytical or communication tools, personal data is transferred outside the European Economic Area, such transfer takes place in accordance with the mechanisms provided for in the GDPR, in particular an adequacy decision, standard contractual clauses or other required safeguards.

   Where services are used from providers with their registered office or infrastructure outside the European Economic Area, the scope and mechanisms of the transfer depend on the configuration of the tool in question and the data processing terms offered by the provider.

10. Data retention period

    Technical data related to the use of the Website, including server logs, is retained for the period necessary to ensure the security, stability and proper functioning of the Website, but no longer than is necessary to achieve these objectives, unless longer retention is justified by the detection of a security incident, the need to pursue claims or a legal obligation.

    Data provided in correspondence is stored for the period necessary to handle the enquiry, conduct further communication and safeguard any potential claims. If the correspondence leads to the conclusion of a contract for the provision of legal assistance, the data may be stored for the period required by law, professional rules and the limitation periods for claims.

    Data processed on the basis of consent is processed until such consent is withdrawn, unless there is another legal basis for further processing.

    The retention period for individual cookies is set out in the Cookie Policy and the consent management panel available on the Website.

11. Rights of data subjects

    The data subject is entitled to the rights set out in the GDPR, including the right of access to data, the right to receive a copy of the data, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object to the processing of data, and the right to withdraw consent at any time if the processing is based on consent.

    Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

    To exercise these rights, please contact the Law Firm at: adwokat@leszczynska-wiacek.pl or by post to the Law Firm’s registered office address.

    The Law Firm may refuse to comply with a request in whole or in part if the data subject’s right is subject to restriction under the law, in particular due to the duty of legal professional privilege, the protection of the rights and freedoms of others, a legal obligation incumbent on the Law Firm, or the need to establish, exercise or defend legal claims.

12. Right to lodge a complaint

    The data subject has the right to lodge a complaint with the supervisory authority competent in matters of personal data protection, i.e. the President of the Personal Data Protection Office.

13. Voluntary provision of data

    The provision of personal data is voluntary; however, failure to provide the data necessary to process an enquiry may prevent the Law Firm from responding or continuing communication.

    With regard to data required by law, providing such data may be a condition for the conclusion or performance of a contract or for the fulfilment of the Law Firm’s legal obligations.

14. Automated decision-making

    The Law Firm does not use the personal data of Website users to make decisions based solely on automated processing, including profiling, which would produce legal effects concerning the user or similarly significantly affect them.

15. Changes to the Privacy Policy

    The Law Firm may update this Privacy Policy in the event of changes to legislation, technological developments, changes to the Website’s functionality or changes to the way in which personal data is processed.

    The current version of the Privacy Policy is published on the Website.

Last updated: 22 May 2026