Privacy Policy

This Privacy Policy is a document that details how personal data of users using the mstolorz.pl website is processed, stored, and protected. It constitutes the fulfillment of the information obligation arising from Art. 13 of the GDPR (General Data Protection Regulation) and the new Act of July 12, 2024, the Electronic Communications Law.

We assure you that we treat the security of your personal data with the utmost care, and the information provided to us is protected against unauthorized access.

Who is the Controller of your personal data?

The Controller of your personal data is Marek Stolorz running a business under the name “Kancelaria Radcy Prawnego Marek Stolorz”, Plac Wolności 10a/4, 40-078 Katowice, NIP (Tax Identification Number): 6762625368

You can contact the Controller regarding personal data processing:

• in writing to the registered office address provided above.
• via e-mail: kancelaria@mstolorz.pl
• by phone: +48 600 090 005

What data do we collect, for what purpose, and on what legal basis?

Your personal data is collected in various places on our website. Each time we process only the data necessary to achieve a specific purpose (e.g., name, surname, e-mail, phone number).

We process your data for the following purposes:

1. Handling inquiries via the contact form and e-mail/phone contact

• Data scope: Name and surname, e-mail address, phone number, type of case, case description, and possibly other data provided voluntarily in the message content.
• Purpose: Responding to the submitted inquiry, sending information regarding a legal consultation, and conducting communication.
• Legal basis: Art. 6(1)(b) of the GDPR (taking steps at the request of the data subject prior to entering into a contract) and Art. 6(1)(f) of the GDPR (legitimate interest of the controller consisting in handling correspondence). In case special categories of data (e.g., health data) are provided in the case description, the legal basis for processing is your explicit consent (Art. 9(2)(a) GDPR) or the establishment, exercise or defense of legal claims (Art. 9(2)(f) GDPR).

2. Conclusion and performance of a legal services contract

• Data scope: Name, surname, address, PESEL/NIP, contact details, information necessary to conduct the case.
• Purpose: Provision of legal assistance, representation before courts and authorities.
• Legal basis: Art. 6(1)(b) of the GDPR (necessity for the performance of a contract).

3. Ensuring website security and protection against spam (Google reCAPTCHA)

• Data scope: IP address, browser and device data, behavior analysis on the website.
• Purpose: Verifying whether the data entered in the form is provided by a human or by automated bots to ensure server security.
• Legal basis: Art. 6(1)(f) of the GDPR (legitimate interest of the controller consisting in protecting the IT infrastructure against attacks and abuse).

4. Creating statistics and website traffic analytics (Google Analytics)

• Data scope: Anonymized IP address, device and browser data, time spent on the site, visited subpages (behavioral data).
• Purpose: Understanding how users interact with the website, which allows for improving its functionality and structure.
• Legal basis: Art. 6(1)(a) of the GDPR (your voluntary consent expressed through the cookie banner).

Is providing data mandatory?

Providing personal data on our website is voluntary, but in some cases necessary. Failure to provide data in the contact form (name, surname, e-mail, type of case) will result in the inability to send an inquiry and establish contact with the Law Firm. In the case of establishing cooperation, providing data is a contractual and statutory requirement, necessary for the provision of legal assistance.

Who do we share your personal data with? (Data recipients)

To ensure the proper functioning of the website and run the Law Firm, we use the services of trusted external entities to whom we may transfer your data. These are exclusively entities providing an adequate level of security (so-called processors). Data recipients may include:

• hosting and server service providers (website and e-mail hosting),
• IT and technical service providers for the Law Firm,
• entities supporting the Law Firm organizationally: accounting, payment system providers, courier companies,
• Google LLC (provider of Google Analytics and reCAPTCHA services).

Transferring data outside the European Economic Area (EEA)

Z uwagi na to, że korzystamy z systemów takich jak Google Analytics oraz Google reCAPTCHA, Twoje dane (np. zanonimizowany adres IP, dane plików cookies) mogą być przekazywane poza Europejski Obszar Gospodarczy, w szczególności do Stanów Zjednoczonych. Przekazywanie danych do USA odbywa się na podstawie decyzji wykonawczej Komisji Europejskiej stwierdzającej odpowiedni stopień ochrony (tzw. Data Privacy Framework) dla certyfikowanych podmiotów, do których należy Google LLC. Więcej informacji znajdziesz w polityce prywatności Google: https://policies.google.com/privacy.

How long do we keep your data?

Personal data will be stored only for the time necessary to achieve a specific purpose:

• Data from the contact form: For the period of handling the inquiry, but no longer than a year, unless cooperation has been undertaken or the data is necessary for defense against claims.
• Data related to the contract (case handling): For the duration of the contract, and then until the limitation of claims or the expiration of document retention periods imposed by legal provisions (in particular tax law and the Act on Legal Advisors).
• Analytical data (Cookies): Until the consent is withdrawn or cookies are deleted from the user’s browser.

What rights do you have over your data?

According to the GDPR provisions, you have full control over your data. You have the following rights:

1. Right of access – you can find out what data we process and receive a copy of it.
2. Right to rectification – you can request the correction of incorrect data.
3. Right to erasure (“right to be forgotten”) – except in situations where legal provisions require us to continue storing it (e.g., tax settlements, ongoing proceedings).
4. Right to restriction of processing.
5. Right to data portability.
6. Right to object to data processing based on our legitimate interest.
7. Right to withdraw consent – at any time (e.g., for analytical cookies), which does not affect the lawfulness of processing before its withdrawal.
8. Right to lodge a complaint – if you consider that we are violating data protection regulations, you have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (PUODO).

Decisions concerning your data will not be made in an automated manner and are not subject to profiling producing legal effects.

Cookie policy and tracking technologies

Nasz serwis internetowy wykorzystuje pliki cookies (tzw. “ciasteczka”). Zgodnie z Prawem komunikacji elektronicznej obowiązującym od 10 listopada 2024 r., przechowywanie informacji lub uzyskiwanie do niej dostępu w urządzeniu użytkownika jest dozwolone pod warunkiem wyrażenia zgody. Wyjątkiem są cookies absolutnie niezbędne do działania strony.

Types of cookies used:

1. Necessary cookies (Functional – First-party cookies): They enable basic website functions, such as remembering privacy settings, properly displaying the site on various devices, or handling the contact form. According to the law, these files do not require user consent.
2. Analytical and statistical cookies (Third-party cookies – Google Analytics): Used exclusively with your consent, they are used to analyze website traffic. They allow us to count visits, traffic sources, and understand how users navigate the site. This information is aggregate and anonymized. The main tool we use is Google Analytics.

Managing cookies: During your first visit to our website, a cookie banner is displayed. You have the right to accept all cookies, reject analytical files, or set your own preferences. Moreover, you can always change your cookie settings directly from your web browser.

Changes to the privacy policy

We reserve the right to make changes to this Privacy Policy in order to adapt it to new legal requirements, changes on the website, or modifications in the tools and processes used.