General information

This Privacy Policy sets out the rules for the processing and protection of personal data by the Jabłoński Koźmiński i Wspólnicy Adwokaci i Radcowie Prawni Spółka Komandytowo-Akcyjna, a law firm with its registered office in Warsaw, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to processing of personal data and on the free movement of such data and repealing of Directive 95/46/EC (General Data Protection Regulation) (“GDPR“) and other applicable data protection provisions.
The privacy policy also contains a description of the basic principles relating to the use of cookies on the Website.

Personal data controller

The controller of your personal data is Jabłoński Koźmiński i Wspólnicy Adwokaci i Radcowie Prawni Spółka Komandytowo-Akcyjna with its registered office at: ul. Londyńska 4, 03-921 Warsaw, KRS 0000964122, whose registration documentation is kept by the District Court for the Capital City of Warsaw in Warsaw, XIV Economic Division of the National Court Register, REGON: 38753671700000, NIP: 7011003997 (hereinafter: “Personal data controller“). In matters concerning your personal data you can contact the Administrator at the above-mentioned postal address of the Administrator or at the electronic address:

Purposes and legal basis for data processing

Depending on the situation and context of collecting information, we process your personal data for the following purposes:

  • as part of your use of our website:
    IP address, type of device from which you access the website, type of operating system, processor, RAM, browser type, language, domain name, location data (country and region of access), data about the content you visit on our website (general, not requiring analysis of specific behavior or profiling),
  • subscription to our newsletter or mailing list:
    e-mail address, date of registration and unsubscription, history of sent mailings or receipt of the newsletter.
  • contact for inquiries sent by e-mail, telephone or post:
    e-mail address, telephone number, name, surname or other data provided by you in a given situation.

Legal basis

We process your personal data based on the following legal bases:

  • use of our website and online services available on it:
    article 6 paragraph 1 letter f) GDPR – legitimate interest, which is to ensure the functionality of our website, correct errors and analyze visit statistics.
  • subscription to our newsletter or mailing list (informing about the Law Firm’s activities, notable events, legislative changes and legal rulings):
    article 6 paragraph 1 letter a) GDPR – your consent.
  • contact for inquiries by e-mail, telephone or post:
    a) in purpose of responding to your enquiry – the legal basis is the Controller’s legitimate interest in handling correspondence and analysing the enquiries received (article 6 paragraph 1 letter f) GDPR) or to act on your request before entering into a contract (article 6 paragraph 1 letter c) GDPR);
    b) to conclude and perform a legal services contract or a contract for the provision of services to which the client or contractor to whom the data relates is a party, or to take action at the client’s request prior to the conclusion of the contract, the legal basis for processing is (article 6 paragraph 1 letter b) of the GDPR);
    c) for the establishment, if any, and pursuit of claims or defence against claims – in this case, the legal basis for the processing of Personal Data is that the Controller is pursuing its legitimate interests (article 6 paragraph 1 letter f) GDPR), which is represented by the protection of its rights.

Your rights

In connection with our processing of your data, you have the right to:
a) access (you have the right to obtain information about the processing of your data);
b) rectification (you can request us to correct or supplement your data if there is an error, update or lack of information);
c) deletion of data (you can request that we delete your data if it is possible in accordance with the GDPR);
d) data transfer (you can request the transfer of your data for yourself or any third party in the case of certain data processed in an automated manner, based on your consent or on the basis of a contract concluded with us);
e) restriction of data processing (in some cases you can request the restriction or cessation of the processing of your data);
f) objection (you may object to the processing of your data for reasons related to your particular situation in cases where the processing is carried out pursuant to article 6 paragraph 1 letter f) of the GDPR, when processing is necessary for purposes arising from legitimate interests pursued by the controller or by a third party);
g) withdraw your consent to the processing of data (this is possible at any time and does not affect the lawfulness of the processing carried out before consent was granted).
You can contact us at to exercise any of the rights listed above or to obtain additional information about the processing of your data.
You can also lodge a complaint with the President of the Personal Data Protection Office. More details and contact details on this subject can be found at

Data recipients

Recipients of personal data may be, where necessary and to the necessary extent justified by the relevant legal basis and purpose of the processing of personal data, other entities, including on the basis of processing personal data on our behalf.
The categories of recipients identified by the Law Firm are entities that cooperate with the Law Firm in the scope of services provided to the Law Firm and in support of the Law Firm’s current business processes: IT service providers, hosting companies, couriers, postal operators, banks and payment operators.
Controller reserves the right to disclose selected information concerning the User to competent authorities or third parties who request such information on an appropriate legal basis and in accordance with the provisions of the applicable law.
The Firm’s partners are located in countries of the European Economic Area (EEA).
In the event that the Administrator were to transfer personal data outside the EEA, an appropriate level of protection will be provided consisting of:
a) verifying that partners located outside the EEA provide an adequate level of protection for personal data;
b) cooperation with entities processing Personal Data in countries for which an adequate level of protection of Personal Data has been granted by the European Commission;
c) use of standard contractual clauses issued by the European Commission.

Data retention periods

We will store your personal data for the period necessary to fulfill our obligations, including tax obligations and the purposes set out above in this Privacy Policy, until the claims expire, you raise an objection, or you withdraw your consent. As soon as the data we collect is no longer required for these reasons, we will take all reasonable steps to ensure that it is securely deleted or anonymized.

Information on automated decision-making, including profiling

Personal data will not be processed in a solely automated manner (including in the form of profiling) which is likely to have legal effects on data subjects or similarly significantly affect them.

Security measures

We take reasonable technical and organizational measures to protect your personal data against unauthorized access or disclosure, in accordance with the requirements of the GDPR. We make sure that processing takes place in a safe and compliant manner, guaranteeing the integrity and confidentiality of the collected information.

Cookie policy

Cookies are text files stored on your device by websites you visit.
We use cookies only to improve the functionality of our website and analyze traffic on it. This occurs when you enter the website or enter any data through our systems. We only store this data for the duration of the session, so it is deleted when you close the browser window.
Consent to the use of cookies is required for the collection of data through them, including accessing the data stored on the User’s device.
It is possible to withdraw consent to the use of cookies via the settings of the browser.
The User’s consent is not required in the case of cookies whose use is necessary for the provision of a telecommunications service.

Changes to this Privacy Policy

This Privacy Policy may be changed and updated from time to time. The latest version will be published on our website with the effective date.The latest version will be published on our website with an effective date. Last update was made: 12.12.2023