Bearingin mind the security of the data of the clients of the Law Firm of Advocate Dr.Paulina Smulska (hereinafter referred as "the Law Firm"), wehereby present to you a document containing information on the processing ofyour personal data by the Law Firm within the framework of the provision oflegal services by the Law Firm. Inaddition, you will find information about the processing of personal data inconnection with the operation of the website at www.adwokat-smulska.com in thePrivacy Policy. The LawFirm complies with the provisions and principles of personal data protectioncontained in generally applicable laws, including in particular the Regulationof the European Parliament and of the Council (EU) 2016/679 of April 27, 2016on the protection of natural persons in relation to the processing of personaldata and on the free flow of such data and repealing Directive 95/46/EC(hereinafter: "RODO"). Personal data is confidentialinformation and its processing by the Law Firm is carried out in a securemanner, using appropriate technical and organizational measures.Bearing in mind the provision of Article 13 (1) and(2) of the RODO, I hereby inform you that:

PERSONAL DATA CONTROLLER
The Administrator of your personal data is Advocate Dr. Paulina Smulska, conductingbusiness under the name "Dr. Paulina Smulska Kancelaria Adwokacka" with its registeredoffice in Warsaw at Jana Brożka 18/8 (01-451 Warsaw) and the main (second) place ofbusiness (including this is the address for correspondence) located in Warsaw at Bracka 20ap. 7a (00-028 Warsaw) hereinafter referred to as "Administrator".
‍
PERSONAL DATA COLLECTED
If you are an employee of the Law Firm's clientor an individual who is a client of the Law Firm - the data has been collectedfrom you directly, and in some cases it has been provided by the Law Firm's client, and then it includes: name, surname, position, contact information.
‍
PURPOSES OF DATA PROCESSING
We inform you that your personal data will beprocessed when it is necessary for:
‍
1) the conclusion and performance of a contract, i.e.on the basis of Article 6(1)(b) of the RODO, including in particular a contractfor legal services or a contract for the provision of services to theAdministrator by providers of such services;

2) fulfillment of legal obligations incumbent on thePersonal Data Controller under Article 6(1)(c) of the RODO resulting from Unionor Polish law;

3) for purposes arising from legitimate interestspursued by the Administrators or a third party on the basis of Article 6(1)(f) RODO,which the Administrator recognizes in particular as: investigation,establishment and defense against claims, prevention of fraud, ensuring thesecurity of the IT environment, application of internal control systems,determination of conflicts of interest and ethical violations to the extentnecessary to prevent fraud, for archival and statistical purposes, as well asthe provision of services to the Customer, in situations where the interests ofthe Customer override the interests, rights and freedoms of the data subject.

The Law Firmprocesses your personal data for the purposes of: providing legal consultingservices, conducting and organizing trainings, including webinars and also tosend you invitations or information about events organized by the law firm. The Law Firmprocesses personal data only to the extent that it is for the above-mentionedpurposes and provided that it has a valid legal basis. In termsof sending information about events organized by the Law Firm, the basis fordata processing is your consent.

‍CATEGORIES OF PERSONAL DATA PROCESSED
‍The Administrator processes the followingcategories of personal data: 
1) data to confirm identity such as name,PESEL number, ID card number, date of birth;
2) contact information, such as phone, number, email address, home address;
3) tax identification data;
4) data on education and work experience -if necessary for the services provided;
5) data on the property and financial situation - if necessary from the point of view of the services provided;
6) data on professional or businessactivities;
7) data on marital status - if necessary for the services provided;
8) image - if necessary for the services provided.

The controller may process other categoriesof personal data, as long as the data cannot be classified into any of theindicated groups, and the processing is carried out for the purposes specifiedin this notice.
‍
CATEGORIES OF DATA RECIPIENTS
We do not share your data without prior consent.Recipients of your data may be entities in the following categories:
‍
1) Lawyers, legal advisors, notaries, and other legalservice providers who cooperate with the Administrator and independently decideon the purposes and methods of data processing;

2) entities authorized under applicable laws (inparticular, courts and state bodies);

3) economic information offices;

4) entities that provide the following services:information technology and new technologies; payment; accounting and financialservices; auditing and inspection; debt collection; printing; documentdestruction; postal and courier services.
‍
It may happen that your personal data may bedisclosed to recipients, such as providers of services for the Law Firm, whichare necessary for the proper functioning of the Law Firm and the performance ofthe contract binding the Law Firm with the Client (e.g., providers of servicesenabling the use of e-mail). Before using the services of such entities, weverify that they meet the security requirements and provide a guarantee ofproper data handling.

With your consent, your datawill be disclosed to cooperating legal advisors and entities whose support isnecessary for the performance of the legal services contract concluded withyou.As a rule, the Administrator does not transfer personal data outside theEuropean Economic Area. In some cases, however, theremay be a transfer of your personal data outside the European Economic Area. Insuch situations, the recipients of the data will only be trusted entities thatprovide an adequate level of data protection as established by a decision ofthe European Commission or guaranteed through the application of othersafeguards, including the Standard Contractual Clauses adopted by the European Commission,published on its website at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_enYou may request further information and copies of relevant security at any time.

DATA RETENTION PERIOD‍
For legal consulting services, the data retention period is 10 years. The expiration of the period is to be counted from the end of the calendar year in which the proceedings in question ended or the service was performed. 

In the event that your data is processed for the purpose of sending designated individuals information and invitations to events organized by the Law Firm, the data will be kept for a period of three years after the last correspondence is sent, unless consent for such contact is withdrawn.

ENTITLEMENTS
‍You have the right to access the content of your personal data, to correct and complete it, to limit its processing and todelete it.

The right to portability of personal data that you have provided to the Administrator, i.e. the right to receive it in a structured common format and send it to another controller. This right can only be exercised in cases where the processing is based on consent or contract and in so far as it is fully automated.

In addition, to the extent that your data is processed on the basis of the consent you have given, you have the right to revoke it. Withdrawal of your consent will not affect the legality of the processing performed earlier, and will prevent you from being sent information regarding training and events organized by the Law Firm.
‍
For more detailed information on the processing ofyour data and to exercise theabove-mentioned rights, please contact the Administrator by e-mail or telephone:
‍
Advocate Paulina Smulska:

Email address: contact@adwokat-smulska.com
‍
Phone number: +48 886 58 03 12

At the Law Firm, we respect your privacy and guarantee the realization of your rights. If your personal data is processed unlawfully, you may file a complaint with the President of the Office for Personal Data Protection (www.uodo.gov.pl).

If you have any questions about the processing of your personal data, kindly contact the Office by email or telephone.
Contact information is indicatedabove or on the Firm's website.

INFORMATION AS TO THE REQUIREMENT OR VOLUNTARINESS OF PROVIDING DATA AND THE CONSEQUENCES AND FAILURE TO DO SO
With regard to the processing of personal data for the purpose referred to in point 2 above, the obligation to provide data is a statutory requirement; in turn, with regard to the processing of data for the purposes referred to in points 1 and 3 [PURPOSES OF DATA PROCESSING], the obligation to provide data is a contractual requirement - the provision of personal data for all purposes referred to above is voluntary, but is necessary for the conclusion and performance of an agreement with the Administrator or one of the Administrators.

ADDITIONAL INFORMATION
I hereby inform you thatthe website usesthe Google Analytics service to collect and analyze traffic data. The privacypolicy of the Google Analytics service is available here:https://policies.google.com/privacy?hl=pl.