Privacy and Cookies Policy

Personal data is processed in accordance with the legislative Act of 10 May 2018 regarding personal data protection (Journal of Laws 2018.1000) and with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”), and also in accordance with such further legislative instruments as may, from time to time, supplement or replace the above.

1. The personal data controller

The personal data controller is Gessel, Koziorowski Kancelaria Radców Prawnych i Adwokatów sp.p. with its registered seat in Warsaw at ul. Sienna 39, 00-121 Warszawa, entered in the business enterprises register of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, Department XII – Commercial of the National Court Register under no. KRS 892064, NIP tax identification no. 5252070586 (“the Data Controller”).

2. Contacting the Data Controller

You are welcome to contact the Data Controller with queries and issues concerning this Privacy Policy, use of the Website, and personal data protection by e-mail at mail@gessel.pl.

3. Scope of data processed

a. The contact form

  • given names, surname,
  • e-mail address,
  • data contained in the message proper;

b. The newsletter

  • e-mail address;

c. Cookies

  • Details of activity on the site, identification of the visitor type; (detailed information about specific essential cookies and analytical cookies may be perused on the cookies panel which appears when you first access the site, and upon clicking the cookie symbol in the lower left-hand corner of the screen);

4 Objectives and basis of data processing

a. The contact form

Objective: handling the contact form, in particular contacting the person submitting the form in order to address her/his query.

Legal basis: Article 6.1.f GDPR, i.e. legitimate legal interest of the Data Controller associated with the possibility of replying to a query and of contacting the given person.

b. The newsletter

Objective: provision of information concerning changes to the law, important events and court rulings and, generally, developments in the legal sphere.

Legal basis: Article 6.1.f GDPR, i.e. legitimate legal interest of the Data Controller associated with marketing and information activities.

c. Cookies

Objective: analysis of the User’s interactions with the Data Controller’s website.

Legal basis: Article 6.1.a GDPR – consent.

Explanation:

If the User consents to the processing of her/his personal data for the purpose of analytics, personal data shall be processed on this basis. When first accessing the Website, the User has the opportunity to grant consent for the processing of her/his personal data for the purpose of analytics via the pop-up panel. All along, the basis is comprised in consent – at any point during her/his visit on the Website, the User is free to reiterate, or to revoke, consent for such processing by clicking on the cookie symbol in the bottom left-hand corner of the screen.

The only cookies processed by the Data Controller on an automatic basis are session cookies, i.e. essential data packets without which correct operation of the Website would be impossible; these cookies do not store any information which would enable identification of a specific User. Detailed information about cookies may be accessed at any time by clicking the cookie symbol.

5. Duration of personal data processing

a. The contact form

Personal data shall be processed for as long as the exchange of correspondence continues and, thereafter, for as long as necessary to safeguard against any claims.

b. The newsletter

Personal data shall be processed until an objection is raised or consent is revoked as per art. 398 of the legislative Act of 12 July 2024 – the Polish Electronic Communications Law (you may revoke your consent at any time by clicking the appropriate button embedded at the bottom of any newsletter or by writing to the Data Controller at mail@gessel.pl).

c. Cookies

The cookies essential for due operation of the site are stored in accordance with the relevant technical settings (usually until the end of the browser session).

Analytical cookies are stored until the User revokes her/his consent (you may revoke your consent at any time by clicking the appropriate button on the cookies panel).

6. Means of data processing

The Data Controller processes personal data in accordance with applicable laws, in particular with GDPR. The Data Controller applies technical and organisational measures which ensure due security, in particular as regards securing data against unauthorised access, disclosure, loss, destruction and/or modification. Only authorised persons bound by an obligation of confidentiality shall have access to the data.

7. Data recipients

The personal data may be made available to entities providing auxiliary services to the Data Controller, in particular in the area of information and communications technology. These entities shall process the personal data pursuant to an appropriate contract with the Data Controller, and in accordance with the Data Controller’s instructions. Moreover, personal data may be made available to entities empowered to access the personal data on authority of applicable laws.

8. Your rights associated with personal data processing

At any moment of her/his choosing, the person whom the personal data concerns may:

  • revoke the consent previously granted (in those instances where data is processed on the basis of consent; revocation of consent shall remain without prejudice to the lawfulness of processing conducted prior to such revocation),
  • request access to her/his personal data,
  • request that her/his personal data be corrected,
  • request deletion of her/his personal data or curtailment of its processing,
  • request transfer of her/his personal data (in those instances where data is processed by automated means, on the basis of consent and/or of a contract – Article 6.1.a or b GDPR),
  • object to processing of her/his personal data (in those instances where data is processed on the basis of legitimate legal interest of the Data Controller – Article 6.1.f GDPR),
  • file a complaint with the supervisory body – the Polish Personal Data Protection Office.

In order to make your request, revoke your consent, or to lodge your objection, please contact the Data Administrator using the contact details set out under item 2 above.

9. Amendments

The up-to-date version of this Policy is always posted on the Website.