Privacy and cookies policy
1. General provisions
The data provided by you is administered by the following entities (co-controllers - for the purposes of the demo, the roles of the Co-Administrator 1/2 are only presented below):
Law Firm (referred to as the Co-Administrator 1);
Cognitum Ltd. with its registered office in Warsaw, Środkowa st. n. 8, 03-340 Warsaw, entered in the register of entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, XIII Economic Division of the National Court Register under the Legal Register of Companies (KRS) number: 0000362305, National Business Registry Number (REGON): 142512477, Tax ID (NIP): 5213574584 (referred to as the Co-Administrator 2)
We hereby inform that, within the framework of the co-administration agreement, the scope of responsibility regarding the fulfillment of duties resulting from the GDPR has been agreed, in particular it has been agreed that:
For fulfilling information obligations resulting from the GDPR with regard to providing information referred to in art. 13 and 14 (primary and secondary information obligations), is the responsibility of the Co-Administrator 1.
The Joint Administrator 1 is responsible for fulfilling the duties resulting from the GDPR with respect to the exercise of your rights. Regardless of this arrangement, you may exercise your rights also with the Joint Administrator 2 who will forward your request to the Joint Administrator 1, who will execute your request.
The Joint Administrator 1 is responsible for fulfilling the other obligations resulting from the GDPR.
Please be advised that we have set up a common contact point with which you can contact us regarding the protection of your personal data at the e-mail address firstname.lastname@example.org.
The legal basis for the processing of personal data is contained at the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 related to the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation), hereinafter "the Regulation". Official text of the Regulation: http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679
We guarantee the confidentiality of all personal data provided, and we ensure that all security measures and personal data protection required by the law on personal data protection are taken. Personal data is collected with due diligence and properly protected against access by unauthorized people.
We do not collect or process sensitive data called "specific categories of personal data" in the Regulation. We also do not want to collect or process data of minors under the age of 16.
We do not transfer personal data to third countries or international organizations.
We may be required to provide information to authorized bodies on the basis of lawful requests to the extent resulting from the request.
2. User permissions
The user has the following rights arising from the processing of his personal data:
the right to request access to own personal data the User has the right to obtain confirmation that the Administrator processes his personal data and if this is the case, he is entitled to access the data and receive information on the data such as: purpose of processing, categories of the data, information about the recipients or categories of recipients to whom the data have been or will be disclosed, the intended period of storage of personal data or criteria for determining this period; the above right also includes the right to receive a copy of the data free of charge,
the right to rectify personal data (when incorrect), which also includes the request to update non-completed personal data,
the right to delete personal data (the so-called "right to be forgotten") in the following circumstances: when your personal data are no longer necessary for the purposes for which they were collected, you have withdrawn the consent for their processing and there is no other basis for processing data, the user has objected to the processing, personal data were processed illegally, personal data must be removed in order to comply with the legal obligation provided in EU law or the law of the Member State to which the Administrator is subject; personal data were collected in connection with the offering of information services,
the right to limit data processing when: The User questions the correctness of personal data (for the period allowing the Administrator to check the accuracy of these data), the processing is illegal and the User objects to the deletion of data, the Administrator no longer needs personal data for processing but is nevertheless needed by the User to establish, assert or defend claims, the User has objected to the processing – pending the determination of whether the legitimate grounds on the part of the Administrator are overriding the grounds of the User's objection,
right to data transfer, including receipt from the Administrator in a structured, commonly used machine-readable format of personal data provided by the User, including the right to request that personal data be sent by the Administrator directly to another Administrator (if technically possible),
the right to withdraw consent to the processing of data at any time (whereby the withdrawal of consent does not affect the lawfulness of the processing, which was made on the basis of the expressed consent before its withdrawal),
the right to file a complaint to the President of the Office for Personal Data Protection, when the User considers that the processing of personal data violates the provisions of the Regulation.
If you have any questions related to the processing of personal data and in order to implement the above rights, please contact the Administrator using the following e-mail address email@example.com.
3. Purpose of the processing, storage period and scope of data
a) Purpose of processing: sending commercial information.
Legal basis: Article 6 paragraph 1 letter a) Regulations
Storage period: until the User cancels the consent.
The consequence of not providing data will be the inability to receive commercial information.
b) Purpose of processing: service provision.
Legal basis: Article 6 paragraph 1 letter b) Regulations.
Storage period: data will be processed for the period necessary to provide the service.
The consequence of not providing data will be the inability to provide the service.
Cookies are used to remember data from completed forms and to set language preferences / format of numbers in relation to a specific User.
5. Server logs
Using the website involves sending queries to the server on which the page is stored. Each query addressed to the server is saved in the server logs.
The data stored in the server logs are not associated with specific people using the site and are not used by the Administrator to identify the User.
The above data are used only for server administration. The server logs are only auxiliary material used to administer the site, and their content is not disclosed to anyone except those authorized to administer the server.