Dear Sir or Madam,

fulfilling the information obligation under the regulations of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC („GDPR”), we hereby inform you, that T. Studnicki, K. Płeszka, Z. Ćwiąkalski, J. Górski Spółka komandytowa with its registered office in Krakow, ul. Jabłonowskich 8, 31-114 Kraków (phone number: 12 427-24-24; „SPCG”) is the controller of your personal data, processed in connection with the sending of informational and occasional materials, including newsletters, provided by SPCG. Providing personal data by you is voluntary, but without providing them, SPCG will not be able to send you these materials by email.

We process your personal data only to the extent that it is necessary for the following processing purposes:

1. Purpose: To analyse the correctness of the dispatch and the statistics of the use of informational and occasional materials, including newsletters, provided by SPCG. Legal ground: Article 6 (1) (f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the SPCG); legitimate interest pursued by SPCG: Analysing the correctness of delivery and statistics on the use of informational and occasional materials, including newsletters. Retention Period: the period necessary to achieve mentioned purposes, but not longer than the moment you submit your objection.
2. Purpose: To send information and occasional materials, including newsletters, to you via SPCG to your e-mail. Legal ground: your consent. Retention period: time period necessary for achieving that purpose, but no longer than until you revoke your consent or submit an objection.

SPCG does not carry out automated decision-making that you are subject to, including profiling referred to in Article 22 (1) and (4) of the GDPR.

The recipients of your data will be to the extent necessary: SPCG employees and associates; public authorities; entities processing personal data on behalf of SPCG (including providing IT and marketing services, including in particular Freshmail Sp. z o.o. with its registered office in Cracow); entities providing SPCG with services supporting the activities of SPCG.

To the extent and subject to the exceptions provided for by applicable law, including the GDPR: you have the right to access your personal data; the right to rectification of your personal data; the right to delete your personal data; the right to restrict the processing of your personal data; the right to transfer personal data concerning you, if they were processed by SPCG in an automated manner, and legal ground for processing is your consent; the right to object to the processing of your personal data; the right to file a complaint with the President of the Personal Data Protection Office.

You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You have the right to object at any time to the processing of your personal data, on grounds relating to your particular situation, if the processing is based on Article 6 (1) (f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the SPCG or third party). This right also includes profiling based on that provision. However, despite the objection to processing, SPCG will be entitled to process personal data if it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

You have the right to object at any time to the processing of your personal data for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing. After such an objection, your personal data will no longer be processed for purpose of direct marketing.

Your data will be transferred outside the European Economic Area or to international organizations only if the European Commission decided that a third country, territory or specified sector in a third country or an international organization ensures an adequate level of protection or when other appropriate safeguards are applied, in particular standard contract clauses adopted by the European Commission. SPCG informs that it uses services of Microsoft Corporation, that holds EU-US Privacy Shield Program certificate, which program is covered by the decision of the European Commission on the adequacy of protection provided by the EU-US Privacy Shield. In addition, Microsoft Corporation uses contractual clauses approved by the decision of the European Commission (if you want to obtain a copy of these clauses, please contact SPCG).

SPCG Law Firm