Privacy Policy
Kancelaria Adwokacka Leszczyńska-Wiącek Magdalena Sp. k.
1. General information
This Privacy Policy sets out the rules governing the processing of personal data of individuals using the website available at: https://www.leszczynska-wiacek.pl/ (‘the Website’), as well as individuals contacting the Law Firm via the Website, by email, telephone or other communication channels indicated on the Website.
The data controller is Kancelaria Adwokacka Leszczyńska-Wiącek Magdalena Spółka komandytowa, with its registered office in Warsaw, ul. Ludna 2, 00-406 Warsaw, NIP: 522-300-67-69, REGON: 146701270 (“the Law Firm” or “the Data Controller”).
The Controller can be contacted by email at: adwokat@leszczynska-wiacek.pl or by post at the Firm’s registered office address.
The Law Firm processes personal data in accordance with the principles of lawfulness, fairness, transparency, data minimisation, purpose limitation, accuracy, storage limitation, integrity and confidentiality. To the extent that communication with the Law Firm relates to the provision of legal assistance, the Law Firm also acts in accordance with legal professional privilege and the rules governing the practice of the legal profession.
2. Scope of data processed in connection with the use of the Website
In connection with the use of the Website, the Law Firm may process, in particular, the following categories of data: the IP address of the user’s device, data relating to the device and browser, the date and time of the connection, information about activity on the Website, the addresses of subpages visited, data stored in cookies or similar technologies, as well as other technical information generated automatically by the server or tools used on the Website.
If you use the contact form, send an e-mail or contact us by telephone, the Law Firm may also process your first name and surname, e- mail address, telephone number, the name of the organisation you represent, the content of the message and any other data voluntarily provided during the contact.
The Law Firm requests that you do not provide any unnecessary data via the contact form or by email, in particular special categories of personal data, unless this is necessary for presenting a case or obtaining preliminary information regarding the possibility of providing legal assistance.
3. Purposes and legal bases for data processing
The personal data of Website users may be processed for the following purposes:
a) to ensure the proper functioning of the Website, maintain its security, prevent misuse, diagnose technical errors and carry out basic administration of IT systems — on the basis of the Controller’s legitimate interest in ensuring the security, stability and continuity of the Website’s operation;
b) to handle correspondence and respond to enquiries addressed to the Law Firm — on the basis of the Controller’s legitimate interest in communicating with persons contacting the Law Firm, and in cases where such contact is aimed at concluding a contract for the provision of legal assistance, also for the purpose of taking action at the request of the data subject prior to the conclusion of the contract;
c) for the purpose of concluding or performing a contract for the provision of legal assistance — if, following contact with the Law Firm, a case is accepted or a working relationship is established;
d) to fulfil the legal obligations incumbent on the Controller, in particular those arising from tax, accounting, archiving and professional regulations, or those relating to the prevention of money laundering and the financing of terrorism, where applicable in a specific case;
e) for the purpose of potentially establishing, pursuing or defending claims — on the basis of the Controller’s legitimate interest in protecting the Firm’s rights and interests;
f) for analytical purposes, including analysing how the Website is used and improving its functionality — solely to the extent that the user has consented to the use of relevant cookies or similar technologies, where such consent is required.
4. Contact form and correspondence with the Law Firm
Data provided via the contact form, email, telephone or any other communication channel is used to familiarise ourselves with the matter, provide a response, conduct further correspondence and, where justified, take steps to conclude or perform a contract for the provision of legal assistance.
Sending a message to the Law Firm does not automatically constitute the conclusion of a contract for the provision of legal assistance or the acceptance of a mandate by the Law Firm. The Law Firm may refuse to take on a case, in particular in the event of a conflict of interest, an inability to provide legal assistance, or other restrictions arising from statutory provisions or the rules governing the practice of the legal profession.
5. Cookies and similar technologies
The Website uses cookies and similar technologies in accordance with the principles set out in detail in aseparate Cookies Policy.
Cookies necessary for the operation of the Website may be used without the user’s separate consent if they are necessary to provide the electronic service requested by the user or to ensure the transmission of a communication. Other cookies, in particular analytical, statistical or marketing cookies, are used only after obtaining the user’s prior consent, where such consent is required by law.
You may change your cookie preferences at any time using the consent management tool available on the Website or by changing your web browser settings.
6. Analytical tools
Where analytical tools, such as Google Analytics, are used on the Website, the Law Firm employs them to obtain aggregated information on how the Website is used, the number of visits, traffic sources, the popularity of individual subpages and basic technical parameters of visits.
Analytics tools are activated solely in accordance with the user’s preferences as expressed in the cookie consent panel. The Law Firm recommends using a configuration that limits the scope of data, in particular anonymising or truncating the IP address where technically feasible, disabling advertising features if they are not essential, and configuring the tools in accordance with the ‘privacy by design’ model.
The provider of the analytics tools may be a third party, in particular Google Ireland Limited or other companies within the Google group. In such cases, data may be processed in accordance with the terms of service of the relevant provider and its privacy policy.
7. Embedded content from external websites
The website may contain embedded content from external websites, in particular maps, videos, links to professional or social media profiles, forms, widgets or other technical elements.
Embedded content from other websites may function as if the user had visited the external provider’s website directly. These providers may use their own cookies, collect information about the user, monitor interaction with the embedded content, and link this information to the user’s account on that website if the user is logged in.
The Law Firm recommends that you familiarise yourself with the privacy policies of the third-party providers whose content is embedded on the Website.
8. Recipients of data
Personal data may be disclosed to entities supporting the Law Firm in the operation of the Website and its day-to-day activities, in particular providers of hosting services, email services, IT services, cybersecurity services, technical support for and the Website, as well as analytical, accounting, legal, administrative or archiving tools.
Data may also be disclosed to public authorities or other authorised entities where such disclosure is required by law.
The Law Firm does not sell the personal data of Website users. The Law Firm does not transfer users’ personal data to third parties for their own marketing purposes without a separate legal basis.
9. Transfer of data outside the European Economic Area
As a general rule, the Law Firm endeavours to process personal data within the European Economic Area.
If, in connection with the use of specific technical, analytical or communication tools, personal data is transferred outside the European Economic Area, such a transfer takes place in accordance with the mechanisms provided for in the GDPR, in particular a decision confirming an adequate level of protection, standard contractual clauses or other required safeguards.
Where services are used from providers with their registered office or infrastructure outside the European Economic Area, the scope and mechanisms of the transfer depend on the configuration of the tool in question and the data processing terms offered by the provider concerned.
10. Data retention period
Technical data relating to the use of the Website, including server logs, is retained for the period necessary to ensure the security, stability and proper functioning of the Website, but for no longer than is necessary to achieve these objectives, unless longer retention is justified by the detection of a security incident, the need to pursue claims or a legal obligation.
Data provided as part of correspondence is retained for the period necessary to handle enquiries, conduct further communication and safeguard any potential claims. If the correspondence leads to the conclusion of a contract for the provision of legal assistance , the data may be retained for the period prescribed by law, professional conduct rules and the limitation periods for claims.
Data processed on the basis of consent is processed until such consent is withdrawn, unless there is another legal basis for further processing.
The retention period for individual cookies is set out in the Cookie Policy and the consent management panel available on the Website.
11. Rights of data subjects
Data subjects are entitled to the rights provided for in the GDPR, including the right of access to data, the right to receive a copy of the data, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object to data processing, and the right to withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
To exercise these rights, please contact the Law Firm at: adwokat@leszczynska-wiacek.pl or by post to the Law Firm’s registered office address.
The Law Firm may refuse to comply with a request in whole or in part if the data subject’s right is subject to restrictions under the law, in particular due to the duty of legal professional privilege, the protection of the rights and freedoms of others, a legal obligation incumbent on the Law Firm, or the need to establish, exercise or defend legal claims.
12. Right to lodge a complaint
The data subject has the right to lodge a complaint with the supervisory authority competent in matters of personal data protection, i.e. the President of the Personal Data Protection Office.
13. Voluntary provision of data
The provision of personal data is voluntary; however, failure to provide the data necessary to process an enquiry may prevent the Law Firm from responding or continuing communication.
With regard to data required by law, the provision of such data may be a condition for the conclusion or performance of a contract or for the fulfilment of the Law Firm’s legal obligations.
14. Automated decision-making
The Law Firm does not use the personal data of Website users to make decisions based solely on automated processing, including profiling, which would produce legal effects concerning the user or similarly significantly affect them.
15. Changes to the Privacy Policy
The Law Firm may update this Privacy Policy in the event of changes to legislation, technological developments, changes to the Website’s functionality or changes to the way in which personal data is processed.
The current version of the Privacy Policy is published on the Website.
Last updated: 29 June 2026.