Privacy Policy
This document explains how the Legalspot.pl service (the “Service”) processes the personal data of its users and uses cookies, prepared with regard to the provisions of the General Data Protection Regulation (GDPR).
1. Data controller
The controller of personal data is Legalspot spółka z ograniczoną odpowiedzialnością, with its registered office in Białystok (15-336), ul. Kręta 3A, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Białystok, 12th Commercial Division of the National Court Register, under KRS no. 0000880375, share capital PLN 5,000, NIP 5423425399 (the “Company”).
2. Personal data and privacy
To use the services offered by the Service, the user may be asked to provide personal data, which in each case will be processed by the Service and/or the Company for the purposes described below, connected with the operation of the Service and the provision of its services (which may include, among others, sending updates to the services provided).
Purpose of processing: (i) providing the services offered in the Service, (ii) direct marketing, and/or (iii) sending updates about the services provided (e.g. newsletter messages).
Legal basis: depending on the actions taken by the user and/or the data and services chosen: (a) a contract for the provision of services or steps taken at the user's request prior to concluding it (Art. 6(1)(b) GDPR), (b) a legal obligation of the Company (Art. 6(1)(c) GDPR), (c) the user's consent given in the Service, if provided (Art. 6(1)(a) GDPR), and (d) the Company's legitimate interest (Art. 6(1)(f) GDPR), consisting in processing: (i) to establish, pursue or defend possible claims, (ii) for direct marketing, (iii) for analytical and statistical purposes, and/or (iv) to measure customer satisfaction.
Providing data is voluntary, but in some cases may be necessary to conclude a contract. Consequences of not providing data, depending on the purpose: (i) inability to use the Service's services, (ii) inability to make contact via the contact form, and/or (iii) inability to receive information about new services, promotions or special offers. Consent may be withdrawn at any time; processing carried out before withdrawal remains lawful.
3. Data security
The Company applies the necessary organisational and technical measures, in accordance with applicable law, to protect users' personal data.
4. Processing period
The user's personal data will be processed for as long as the Service and/or the Company has a legal basis for processing, i.e. until: (i) the legal obligation requiring the Company to process the data ceases, (ii) the possibility of establishing, pursuing or defending claims related to a contract concluded via the Service ends, (iii) the user withdraws consent, where such consent was the basis for processing, or (iv) the user's objection to the processing is upheld, where the basis for processing was the controller's legitimate interest or the data was processed for direct marketing, including profiling.
5. User rights
The user is entitled to request: (i) access to their personal data, including obtaining a copy (Art. 15 GDPR or, where applicable, Art. 13(1)(f) GDPR), (ii) rectification (Art. 16 GDPR), (iii) erasure (Art. 17 GDPR), (iv) restriction of processing (Art. 18 GDPR), (v) portability of the data to another controller (Art. 20 GDPR), and/or (vi) to object at any time to the processing of their data: (a) on grounds relating to the user's particular situation — to processing based on Art. 6(1)(f) GDPR (the controller's legitimate interests), including profiling on that basis; (b) where personal data is processed for direct marketing, including profiling, to the extent the processing relates to such direct marketing. If the user considers that their personal data is processed unlawfully, they have the right to lodge a complaint with a supervisory authority.
6. Profiling
In connection with the services provided by the Service, the Service and/or the Company may carry out profiling using the personal data provided by the user. Profiling consists primarily in the automated assessment of which services the user may be interested in, based on the user's prior activity in the Service, and in displaying content profiled in this way. In the case of the service-update feature, profiling may also concern the content delivered to the user.
7. Cookies
The Service uses cookies. These files: (i) are stored in the memory of the user's device (computer, phone, etc.); (ii) enable the user, among other things, to use all features of the Service; and (iii) do not cause changes to the user's device settings. Using the appropriate browser options, the user can at any time: (i) delete cookies and/or (ii) block their use in the future. In the Service, cookies are used for: (i) remembering a user's session information, (ii) statistics, (iii) marketing, and/or (iv) providing the Service's features. For more information about cookies, please refer to the rules of the web browser used by the given user.
8. External services / data recipients
In connection with the operation of the Service, the Company uses external providers to whom the user's data may be transferred (solely for the purposes indicated in this policy). Possible recipients of the user's data include: (i) persons cooperating with the Company under civil-law contracts, supporting the Company's provision of Service services, (ii) a communication-software provider, (iii) a project-management software provider, (iv) an email-mailbox provider, (v) an accounting office, (vi) a mailing-system provider, (vii) a marketing-services provider, (viii) an entity supporting optimisation of the Service, (ix) social-media platforms, (x) an office-suite provider, (xi) a hosting provider, (xii) a technical-support provider, (xiii) law firms providing traditional services that may provide complementary services, and/or (xiv) relevant public authorities to the extent the controller is obliged to disclose data to them.
9. Transfer of personal data outside the European Union
Accordingly, the user's personal data may also be processed by entities from outside the European Union. An appropriate level of protection of the user's data, including through the application of suitable safeguards, is ensured by the use of standard data-protection clauses adopted by the European Commission, referred to in Art. 46(2)(c) GDPR.
10. Contact details
Email: [email protected]