Privacy Policy

This is a courtesy translation. In the event of any discrepancy, the Polish version of the Privacy Policy prevails.

Definitions

1.1. Controller – KANCELARIA RADCÓW PRAWNYCH I ADWOKATÓW CEZARY NOWAKOWSKI I WSPÓLNICY SP. K. with its registered office in Działdowo (13-200), Pl. Mickiewicza 18, entered in the National Court Register – Register of Entrepreneurs under KRS number 0001064511, NIP 5711726544, REGON 526842039.

1.2. Personal data – information about a natural person who is identified or identifiable by one or more specific factors determining their physical, physiological, genetic, mental, economic, cultural or social identity, including the device IP address, location data, an online identifier and information collected through cookies and similar technology.

1.3. Policy – this Privacy Policy.

1.4. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

1.5. Website – the website operated by the Controller at knw.pl.

1.6. User – any natural person visiting the Website or using one or more of the services or functionalities described in the Policy.

Processing of data in connection with the use of the Website

2.1. In connection with the User’s use of the Website, the Controller collects data to the extent necessary to provide the individual services offered, as well as information about the User’s activity on the Website. The detailed rules and purposes of processing the Personal data collected while the User uses the Website are described below.

Purposes and legal bases of data processing on the Website

Use of the Website

3.1. The Personal data of all persons using the Website (including the IP address or other identifiers and information collected through cookies or other similar technologies) are processed by the Controller:

3.1.1. in order to provide services by electronic means, consisting in making the content collected on the Website available to Users – in which case the legal basis for processing is the necessity of processing for the performance of a contract (Article 6(1)(b) GDPR);

3.1.2. for analytical and statistical purposes – in which case the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting in analysing Users’ activity and preferences in order to improve the functionalities used and the services provided;

3.1.3. in order to establish and pursue claims or defend against claims, if any – the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting in protecting its rights;

E-mail correspondence

3.2. Where correspondence unrelated to the services provided to the sender or to any other contract concluded with the sender is sent to the Controller by e-mail, the Personal data contained in that correspondence are processed solely for the purpose of communication and resolving the matter to which the correspondence relates.

3.3. The legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting in handling correspondence addressed to it in connection with its business activity.

3.4. The Controller processes only the Personal data relevant to the matter to which the correspondence relates. All correspondence is stored in a manner that ensures the security of the personal data (and other information) it contains and is disclosed only to authorised persons.

Cookies and similar technology

4.1. The Controller uses cookies mainly to provide the User with services by electronic means and to improve the quality of those services. For this purpose, the Controller and other entities providing analytical and statistical services to it use cookies, storing information or gaining access to information already stored in the User’s telecommunications terminal equipment (computer, phone, tablet, etc.). The use of cookies on the Website is not intended to identify Users. The Policy governs the processing of data related to the use of the Controller’s own cookies.

Necessary cookies

4.2. The Controller uses necessary cookies primarily to provide Users with the services and functionalities of the Website that the User wishes to use. Necessary cookies may be installed only by the Controller through the Website.

4.3. The legal basis for processing data in connection with the use of necessary cookies is the necessity of processing for the performance of a contract (Article 6(1)(b) GDPR).

Analytical cookies

4.4. Analytical cookies make it possible to obtain information such as the number of visits and the sources of traffic on the Website. They are used to determine which pages are more and which are less popular, and to understand how Users navigate the Website, by keeping statistics on Website traffic. The data are processed in order to improve the performance of the Website. The information collected by these cookies is aggregated and is therefore not intended to establish the User’s identity. Analytical cookies may be installed by the Controller and its partners through the Website.

4.5. The legal basis for processing Personal data in connection with the Controller’s use of necessary and analytical cookies for this purpose is its legitimate interest (Article 6(1)(f) GDPR), consisting in ensuring the highest quality of the services provided on the Website.

4.6. The processing of Personal data in connection with the use of analytical cookies is subject to the User’s consent to the use of analytical cookies, given through the cookie consent management platform. This consent may be withdrawn at any time through that platform.

Analytical tools used by the Controller

5.1. The Controller and its partners use various solutions and tools for analytical purposes. Basic information on these tools is provided below. Detailed information can be found in the data privacy settings and in the privacy policy of the respective partner.

Google Analytics

5.2. Google Analytics cookies are files used by Google to analyse how the User uses the Website and to produce statistics and reports on the operation of the Website. Google does not use the collected data to identify the User, nor does it combine this information in a way that would enable identification.

Period of processing of personal data

6.1. The period for which the Controller processes data depends on the purpose of processing. As a rule, data are processed for the duration of the service, until the consent given is withdrawn or an effective objection to data processing is raised in cases where the legal basis for processing is the Controller’s legitimate interest.

6.2. The processing period may be extended where processing is necessary to establish and pursue claims or defend against claims, and after that time only if and to the extent required by law. After the processing period has expired, the data are irreversibly deleted or anonymised.

User’s rights

7.1. The User has the right to access the content of their data and to request its rectification, erasure or restriction of processing, the right to data portability and the right to object to the processing of data, as well as the right to lodge a complaint with the supervisory authority responsible for the protection of Personal data.

7.2. To the extent that the User’s data are processed on the basis of consent, that consent may be withdrawn at any time by contacting the Controller by e-mail at warszawa@knw.pl.

7.3. The User has the right to object to the processing of data for marketing purposes where the processing is based on the Controller’s legitimate interest, and – on grounds relating to the User’s particular situation – in other cases where the legal basis for processing is the Controller’s legitimate interest (e.g. in connection with analytical and statistical purposes).

Recipients of data

8.1. In connection with the provision of services, Personal data will be disclosed to external entities, including in particular providers responsible for operating IT systems.

8.2. The Controller reserves the right to disclose selected information concerning the User to competent authorities or third parties that request such information on an appropriate legal basis and in accordance with applicable law.

Transfer of data outside the EEA

9.1. The level of protection of Personal data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Controller transfers Personal data outside the EEA only where necessary and with an adequate level of protection ensured, primarily through:

9.1.1. cooperation with entities processing Personal data in countries for which a relevant European Commission decision finding an adequate level of protection of Personal data has been issued;

9.1.2. the use of standard contractual clauses issued by the European Commission;

9.1.3. the use of binding corporate rules approved by the competent supervisory authority.

9.2. The Controller always informs of the intention to transfer Personal data outside the EEA at the stage of their collection.

Security of personal data

10.1. The Controller carries out an ongoing risk analysis to ensure that Personal data are processed securely – ensuring, above all, that only authorised persons have access to the data and only to the extent necessary for the tasks they perform. The Controller ensures that all operations on Personal data are recorded and carried out only by authorised employees and associates.

10.2. The Controller takes all necessary measures to ensure that its subcontractors and other cooperating entities also guarantee the application of appropriate security measures whenever they process Personal data on the Controller’s behalf.

Contact details

11.1. The Controller can be contacted at warszawa@knw.pl or by post at: KANCELARIA RADCÓW PRAWNYCH I ADWOKATÓW CEZARY NOWAKOWSKI I WSPÓLNICY SP. K., ul. Pańska 73, 00-834 Warszawa, Poland.

Changes to the Privacy Policy

12.1. The Policy is reviewed on an ongoing basis and updated where necessary.

Version: October 2026.