1. This Privacy and Cookies Policy (hereinafter referred to as the “Privacy Policy”) constitutes a document which sets out: (i) the principles for the processing of Client’s personal data by the law firm operating under the business name: Malinowski, Pieńkowska-Samul i Wspólnicy Radcowie Prawni i Adwokaci sp. p., with its registered office in Warsaw; and (ii) a catalogue of Client’s rights in connection therewith.
2. The adoption and adherence by MPiW to the principles set forth in this Privacy Policy ensures compliance with applicable data protection laws, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “GDPR”), as well as the relevant provisions of Polish law, including the Personal Data Protection Act of 10 May 2018 (Journal of Laws 2018, item 1000), and statutory rules of professional secrecy arising from, inter alia, the Act of 6 July 1982 on Legal Advisers (consolidated text: Journal of Laws 2017, item 1870, as amended), and the Act of 26 May 1982 – Law on the Bar (consolidated text: Journal of Laws 2017, item 2368, as amended).
3. The controller of your personal data is Malinowski, Pieńkowska-Samul i Wspólnicy Radcowie Prawni i Adwokaci sp.p. with its registered office in Warsaw (02-520), 40B flat 7 Wiśniowa Street, entered in the Register of Entrepreneurs of the National Court Register under number 0000238907, NIP: 7010002731, REGON: 140206859 (hereinafter referred to as “MPiW”).
4. Contact details of the Data Controller: 40B flat 7 Wiśniowa Street, 02-520 Warsaw, tel.: (+48 22) 621 40 70, email: sekretariat@mpiw.pl.
5. Legal basis for processing personal data. MPiW processes your personal data in accordance with applicable law and considering the nature of the legal services provided. Data is processed on the following bases:

Under Article 6(1)(b) and (f) of the GDPR:

• for the purpose of entering into and performing legal services agreements concluded with MPiW’s clients;
• for the purpose of concluding and performing contracts with clients and third parties cooperating with MPiW (e.g., accounting firms, IT service providers, property valuers, notaries public, bailiffs, certified translators, etc.);

Under Article 6(1)(a) and (c) of the GDPR:

• for recruitment, employment, and cooperation purposes related to MPiW’s staff and associates;

Under Article 6(1)(c) of the GDPR:

• for compliance with legal obligations relating to tax and HR matters arising from the processing activities mentioned above (e.g., issuance of VAT invoices, accounting documents, employment references, etc.);

 

 

• to carry out tasks in the public interest in connection with the legal profession as a public trust;
• to comply with statutory obligations concerning anti-money laundering and counter-terrorist financing;
• to fulfil other legal obligations arising under generally applicable law.

MPiW primarily obtains personal data in the course of providing legal services, either directly from clients or on the basis of data processing agreements entered into with corporate clients or other organisations. As a rule, data is obtained based on client consent, granted at the outset of cooperation or during the course of communications. Subject to applicable laws, data is processed on a voluntary basis, taking into account specific circumstances, such as data relating to the client’s counterparties or opposing parties involved in legal proceedings.

1. Commercial information may be sent by MPiW electronically only upon obtaining the recipient’s prior written consent.
2. Your rights. In conjunction with the processing of personal data, you have the right to: a. access your personal data; b. receive a copy of your data; c. request the rectification, erasure or restriction of the processing of your data; d. request data portability; e. object to the processing of your data, including for direct marketing purposes; f. lodge a complaint with the President of the Personal Data Protection Office (formerly: the Inspector General for Personal Data Protection), if you believe that your data is being processed in breach of applicable law.

Please note that exercising certain rights (e.g., objection, erasing, restriction of processing) may result in the inability or the limitation of MPiW’s ability to provide legal services to you.

1. Data retention periods. Your personal data may be retained: a. until the legitimate interests pursued by the data controller (i.e., MPiW) are fulfilled; b. until the expiry of limitation periods for claims under the agreement in connection with which data is processed; c. until the expiry of legal obligations under applicable laws; d. where processing is based on consent for marketing purposes – until the consent is withdrawn or objection is raised.
2. Data recipients. Recipients of your personal data may include entities typically involved in cooperation with legal service providers, such as: lawyers, accountants, notaries public, bailiffs, auditors, certified valuers, court experts, sworn translators, public authorities and governmental bodies, courts, IT and systems providers.
3. Data transfers outside the EU. Your personal data is not transferred outside the European Union, with exception of cases that such transfers are necessary, appropriate safeguards will be implemented, subject to prior consultation with you, to ensure an adequate level of protection.
4. Profiling. MPiW does not carry out profiling activities within the meaning of the GDPR. This means that we do not engage in automated decision-making processes based on personal data for the purpose of assessing, analysing or predicting personal preferences, behaviours, locations, financial situation, health or other characteristics of natural persons.
5. Cookies. “Cookies” are small text files stored on the user’s end device (e.g., computer, smartphone, tablet) used for accessing websites. Cookies enable the recognition of the user’s device and store specific information and settings related to a given website. Cookies are

 

commonly used to adapt the website’s content and layout to user preferences and to enhance the user experience. They are also used to compile anonymous statistics that help analyse site traffic and improve website functionality.

1. Cookies may be either session cookies, which expire upon closing the website or browser, or persistent cookies, which remain on the user’s device for a defined period or until manually deleted.
2. Cookies used by mpiw.pl do not contain personal data.
3. Cookies used by third-party partners of this website are subject to their respective privacy policies. MPiW shall not be liable for the policies and practices adopted by such third parties.
4. Cookie management. By default, web browsers permit the use of cookies. However, users may configure their browser settings to block cookies entirely or to receive a notification each time a cookie is placed on their device. Instructions on how to manage cookie settings can be found in the help section of your browser. Please note that blocking or restricting cookies may affect the functionality of the website.
5. For more information about cookies, you may visit: www.wszystkoociasteczkach.pl
6. Any amendments to this Privacy Policy shall be published on the MPiW website at: mpiw.pl. By continuing to use our website, you are deemed to have accepted the provisions of the current version of the Privacy Policy.

 

Warsaw, 30 March 2025