Privacy Policy
Penteris, Tokaj i Partnerzy Adwokaci i Radcowie Prawni spółka partnerska (“Penteris“, “the law firm” or “we/us/our“) is a Controller, under the Regulation (EU) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons, with regard to the processing of personal data and on the free movement of such data (“GDPR“) and applicable national law with regard to the personal data that we process in the course of our business.
In this privacy policy, we describe how we process your personal data, the purpose of our processing, and the rights you have as a data subject.
We gather personal data directly from you, as a data subject, as well as from third parties such as your employer and open sources (e.g., internet services).
If you are a Client
If you have appointed us as your legal representative, we process the personal data received from you in connection with our assignment or otherwise gathered during the performance of the assignment. You are not obligated to provide us with any personal data; however, without such information we may not be able to represent you, as we require some personal data in order to perform regulated conflict of interest and anti-money laundering checks.
Why do we process your personal data?
We process your personal data in order to perform regulated conflict of interest and (if necessary) anti-money laundering checks, to perform and manage your assignment, to protect your rights, for communication and marketing purposes, as well as for accounting and invoicing.
Personal data are processed on the following legal basis: (i) it is necessary to fulfil a legal obligation; (ii) it is necessary in order to accomplish a purpose in which Penteris has a legitimate interest; and (iii) it is necessary in order to perform an agreement to which you, as a data subject, are a party (this is only if we have entered into an agreement with you as an individual).
Transfer of your personal data
Personal data may be transferred to our cooperating entities for the purposes of conflict of interest and anti-money laundering checks, for the purpose of exchanging information and knowledge, and for the purpose of allocating resources. We shall however not transfer personal data to third parties unless: (i) it is agreed upon between you and the law firm; (ii) if within the performance of the assignment it is necessary in order to protect your rights; (iii) if it is necessary in order for us to fulfil a statutory obligation or to comply with government decisions or court decisions; or (iv) in case we hire third party service providers who perform assignments on our behalf. The personal data may be disclosed to courts, authorities, opponent’s representative if necessary in order for us to protect your rights.
Storing of personal data
Personal data are stored, in accordance with the obligation we have under Polish law, for a period of ten (10) years from the date of the assignment’s completion, or as long as it is required by the assignment.
Personal data processed for the purpose of developing, analysing and promoting the law firm’s business will be stored for a period of one (1) year from the date of completion of the Client’s assignment. If you choose to opt-out from newsletters or similar communications, the personal data stored for such a purpose will be deleted, effective immediately.
If you are not a Client
We frequently send newsletters and other forms of marketing to former Clients, professional or personal contacts, or if you have shown interest in our business, to the e-mail address you have registered with us. Newsletters and marketing information are not aimed at you specifically, but are general in nature.
The legal basis for our processing of your personal data in these instances is our legitimate interest in communicating and promoting our business to you.
If you would like to unsubscribe from receiving such newsletters, please contact us. Our contact details can be found below.
Your rights
According to the GDPR, you have rights in relation to the processing of your personal data. Please contact us (see contact details below) if you wish to exercise your rights, or if you have any questions relating to any of the rights presented here.
| Access | You have the right to request information on whether we process personal data about you, as well as to request access to the personal data. |
| Rectification | If your personal data are inaccurate or incomplete, you have the right to request rectification of the personal data. |
| Erasure | Under certain circumstances, you have the right to request erasure of your personal data, for example if the information is no longer necessary. |
| Restriction of processing | You have the right to request that the processing of your personal data is restricted. There is a risk that we will be unable to provide you with our services once the processing is restricted. |
| Data portability | Under some circumstances, you have the right to gain access to your personal data in a structured, commonly used, and machine-readable format. This right is limited to the personal data that you have provided us with, if it is being processed for the purpose of fulfilling an agreement with you or based on your consent. |
| Objection to processing | You have the right to object to personal data processing which is based on Penteris’s legitimate interests. However, if we have compelling legitimate grounds which override your interests, rights and freedoms, we may have the right to continue the processing. |
| Objection to processing for direct marketing purposes | You always have the right to object to our processing of your personal data for direct marketing purposes. |
If you have complaints relating to our processing of your personal data, you have the right to file a complaint with the President of the Personal Data Protection Office.
Contact details
If you have any questions relating to Penteris’s processing of personal data, you are welcome to contact us.
Telephone: +48 22 257 83 00, please ask to be directed to the employee responsible for answering personal data questions.
E-mail: gdpr@penteris.com
BACK