Privacy Policy

I. General Provisions

1. The administrator of the website www.lflegal.pl (hereinafter referred to as the “Website”), and therefore the controller of the personal data provided while using the Website, is LF LEGAL FOLIGOWSKI KANCELARIA RADCOWSKA SPÓŁKA KOMANDYTOWO-AKCYJNA, with its registered office at ul. Piękna 24/26A, 00-549 Warsaw, Poland, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, XII Commercial Division of the National Court Register, under KRS number 0000935445, REGON number 520565350, NIP number 7011061167, share capital: PLN 50,000.00, fully paid-up share capital: PLN 50,000.00 (hereinafter referred to as the “Controller”).
2. Your personal data is processed in accordance with the applicable laws governing personal data protection, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”), as well as in accordance with this Privacy Policy implemented by the Controller.
3. The purpose of this Privacy Policy is to explain the principles under which your personal data is processed in connection with the use of the Website and to inform you about your fundamental rights relating to the processing of your personal data.
4. Using the Website constitutes acceptance of the provisions of this Privacy Policy.
5. The Controller may update and modify this Privacy Policy at any time in order to continuously improve the security of personal data entrusted to the Controller and in the event of changes in applicable law. Updates shall be made by publishing a new version of the Privacy Policy on the Website.
6. If you have any questions regarding the protection and processing of personal data or wish to exercise your rights, please contact the Controller by e-mail at: office@lflegal.pl.

II. Processing of Personal Data

1. “Personal data” means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, surname, or identification number.
2. “Processing” of personal data means any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, combination, restriction, erasure, or destruction.

III. Purposes, Legal Bases, Scope and Retention Period of Personal Data Processing

1. Your personal data is processed for the following purposes:
   • responding to inquiries directed to the Controller regarding its business activities, products, and services;
   • concluding and performing contracts with the Controller;
   • archival purposes, including the storage of correspondence, agreements, and accounting documents;
   • establishing, exercising, or defending legal claims related to contracts concluded with the Controller;
   • analytical and statistical purposes, including analysis of traffic on the Website and collection of anonymized visitor data;
   • online marketing purposes, including the use of Google Ads and Google Ads Conversion Tracking services.
2. Your personal data is processed on the following legal bases:
   • for purposes related to responding to inquiries and pre-contractual activities, pursuant to Article 6(1)(b) GDPR;
   • for the conclusion and performance of contracts, pursuant to Article 6(1)(b) GDPR;
   • for archival, accounting, and legal obligations, pursuant to Article 6(1)(c) GDPR;
   • for analytical, statistical, marketing, and claim-related purposes, pursuant to Article 6(1)(f) GDPR, based on the Controller’s legitimate interest.
3. The Controller collects personal data only to the extent adequate, relevant, and necessary for the purposes for which they are processed.
4. Your personal data is retained as follows:

• • for correspondence purposes, for the duration of the correspondence and, where justified, for archival and defense of claims purposes;
  • for contract performance, for the duration of the contract and thereafter for the period required by applicable law or necessary for the establishment, exercise, or defense of claims;
  • for tax and accounting purposes, for the period required under applicable legal regulations;
  • where processing is based on consent, until such consent is withdrawn or restricted.

IV. Requirement to Provide Personal Data

Providing personal data to the Controller for the purpose of concluding and performing an agreement
(as specified in Section III, point 8(a)-(d) of this Privacy Policy) is necessary for the performance
of the respective services. Failure to provide personal data will make it impossible to conclude the
agreement and subsequently to perform it properly and in full.

V. Data Subject Rights

1. In connection with the processing of your personal data by the Controller, you are entitled to:
   • the right to access your personal data and obtain a copy thereof;
   • the right to rectify (correct) your personal data;
   • the right to erasure of personal data;
   • the right to restrict processing;
   • the right to object to processing;
   • the right to data portability;
   • the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
2. These rights may be exercised through the contact channels specified in Section I, point 6 of this Privacy Policy.
3. If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right
   to lodge a complaint with the competent supervisory authority, namely the President of the Personal Data Protection Office (UODO).

VI. Cookies, Analytical Tools and Profiling

A. Cookies

1. This Website uses cookies. Cookies are text files stored on a user’s device during a visit to the Website.
   Where possible, the Controller uses cookies that are deleted immediately after the browser session ends.
2. The Controller also uses cookies that remain on the user’s device for a longer period. Such cookies collect
   information when users visit the Website and are used for statistical purposes.
3. If you do not wish to accept cookies on your device, receive cookies, or wish to delete cookies already stored,
   you may change your browser settings accordingly. More information can be found in your browser’s Help section.

B. Google Tools and Services

1. The Controller uses Google Analytics to perform anonymous analysis of Website traffic. This analytical tool
   allows measurement of the Website’s effectiveness and enables improvements to its content and structure.
   For example, anonymous information may be collected regarding pages visited, where users leave the Website,
   devices and browsers used, or statistics about users from a specific country or city.
2. Under no circumstances can the collected information be used to personally identify Website visitors. The data
   is used solely to improve the Website and the Controller’s services.
3. The Controller also uses Google Ads and Google Ads Conversion Tracking. When a user clicks on a Google advertisement,
   a conversion tracking cookie is stored on the user’s device. These cookies expire after 30 days, do not contain
   personal data, and are not used for personal identification.
4. If a user visits certain pages while the cookie is still active, Google and the Controller may recognize that the
   user clicked an advertisement and was redirected to the Website. Information collected through conversion cookies
   is used to generate conversion statistics for Google Ads customers.
5. Users may permanently disable Google’s use of cookies by downloading and installing the browser plug-in available at:
   
   https://www.google.com/settings/ads/plugin
   
6. More information regarding Google cookies, advertising, and privacy policies can be found at:
   
   https://www.google.com/privacy/ads/
   
   and
   https://policies.google.com/technologies/ads” target=”_blank” rel=”noopener noreferrer”>
   https://policies.google.com/technologies/ads

VII. Security

Personal data is collected with due care and appropriately protected against access by unauthorized persons.
The Controller guarantees the confidentiality of all personal data provided and implements all security measures
required under applicable data protection laws.

VIII. Disclosure and Entrusted Processing of Personal Data

1. Your personal data is processed at the Controller’s registered office and at locations where the Controller carries out its business activities.
2. Personal data is not transferred to countries outside the European Economic Area (EEA) or to international organizations.
3. Recipients of your personal data may include, in particular, entities authorized under applicable law,
   including public authorities, state institutions and courts, as well as external service providers engaged by the Controller
   (such as IT service providers). In such cases, these entities are required to maintain the confidentiality of personal data
   and process it in accordance with applicable data protection regulations and contractual obligations imposed by the Controller.

IX. Server Logs

1. Use of the Website involves sending requests to the server on which the Website is hosted.
   Each request directed to the server is recorded in server logs.
2. Server logs may include, among other things, IP addresses, server date and time, information regarding the web browser used,
   and the operating system of the user. These logs are stored on the server.
3. Data stored in server logs is not associated with specific individuals using the Website and is not used to identify users.
4. Server logs serve solely as auxiliary material for Website administration, and their contents are disclosed only to persons authorized to administer the server.