1. General Information

This Privacy Policy (hereinafter the „Policy”) determines the rules of processing the personal data of users (hereinafter the „Users”) of the online service at http://orlikpartners.com/ (hereinafter the „Service”) and other categories of persons indicted in the Policy by Orlik & Partners Adwokacka Spółka Partnerska, with its registered office in Warsaw (00-480) at ul. Wiejska 11 lok. 8, registered in the Register of Business Entities under KRS No. 0000901801, NIP (Taxpayer Id.): 7010965004, REGON (Business Id.): 385326536.

2. Information on personal data processing
3. The controller of your personal data is Orlik & Partners Adwokacka Spółka Partnerska, with its registered office in Warsaw (00-480) at ul. Wiejska 11 lok. 8, KRS No. 0000901801, NIP (Taxpayer Id.): 7010965004, REGON (Business Id.): 385326536, which is the provider of the Service in the following scope:

2. In matters related to the processing of personal data, you can contact us in electronic form at odo@orlikpartners.com.
3. The recipients of your personal data may be – but only in cases when it is necessary and to the necessary extent - entities cooperating with the Firm regarding services provided to the Firm, including entities that support current business processes of the Firm, in particular entities providing IT, legal and delivery services.
4. If personal data processing is based on your voluntary consent, your personal data will be stored until your consent to the processing of personal data for specific, explicit and legitimate purposes has been withdrawn.
5. Your consent to the processing of personal data may be revoked at any time. Withdrawal of consent to the processing of personal data shall be made by contacting odo@orlikpartners.com. 
6. Withdrawal of consent shall not affect the lawfulness of the processing based on consent prior to its withdrawal.
7. If personal data processing is necessary for the performance of an agreement to which you are a party, or to take action at your request, prior to the conclusion of the agreement, your personal data will be processed for the duration of the agreement and after that period, for the period of limitation of any claims arising from the generally applicable law.
8. If personal data processing is necessary to fulfil a legal obligation binding upon the Firm, your personal data will be processed for a period of time in accordance with the generally applicable law.
9. If personal data processing is necessary for purposes resulting from the legitimate interests pursued by the Firm or by a third party, your personal data will be processed for no longer than is necessary for the purposes for which the data is processed or until you object to the processing of personal data for these purposes.
10. If personal data is processed on the basis of the data subject's consent, the provision of personal data is voluntary. Failure to provide personal data will result in the impossibility of providing the service as consent is a condition for the provision of this service.
11. If personal data is processed for the purposes necessary for the performance of an agreement to which the data subject is a party or to take action at the request of the data subject prior to the conclusion of the agreement, the provision of personal data is voluntary, but necessary for the conclusion of an agreement with the Firm.

• If the processing of personal data is necessary to fulfil the legal obligation of the Firm, the provision of personal data is a statutory requirement.

13. If personal data is processed for purposes resulting from the legitimate interests pursued by the Firm or by a third party, the provision of personal data is voluntary but necessary for these purposes.

• With regard to the processing of personal data, you have a right to: 

- have access to your personal data, including the right to obtain confirmation as to whether your personal data is being processed,

- if applicable, the right to obtain access to the processed personal data and to receive copies of the data,

- correct your personal data, including the right to demand that the Firm promptly correct any of your personal data that is incorrect,

- limit the processing of your personal data,

- delete your personal data, 

- transfer your data,

- object to the processing of your personal data with regard to the processing of data for the purposes justified by the legitimate interests of the Firm pursuant to point (f) of Article 6(1) of GDPR, unless the Firm demonstrates the existence of valid and legitimate grounds for processing, overriding the interests, rights and freedom of the data subject, or grounds for establishing, pursuing or defending claims,

- submit a complaint regarding personal data protection to the supervisory authority – the President of the Office for Personal Data Protection,  if you find the processing of data contrary to the law.

3. Exercising the data subject’s rights
4. Any natural person (hereinafter the „Requesting Party”) may request the Firm to exercise the rights indicated in point 3 k of the Policy.
2. The aforementioned requests will be implemented by the Firm taking in accordance with the provisions of GDRP. This means that in cases listed in the provisions of GDRP, the rights indicated in point 3 k of the Policy may not be vested in the data subject or the request will be executed for a fee in order to cover the costs of its execution.
3. Request should be submitted at odo@orlikpartners.com.
4. If the Firm does not process the personal data of the Requesting Party (with the exception of the processing of personal data for the purposes of the request itself), the Requesting Party will be informed about it and the data of the Requesting Party obtained as a result of the request will be immediately deleted.
5. Immediately after receiving the request, the Firm will inform the Requesting Party about this and include information about the request in its records.
6. The Firm is entitled to verify the identity of the Requesting Party. Failure to effectively verify the identity of the Requesting Party for reasons for which the Requesting Party is responsible may result in the Firm's failure to process the request, of which the Requesting Party will be informed immediately.
7. The Firm shall provide the Requesting Party with a response to the request within one (1) month from the date of its receipt. In case of objectively complicated cases (i.e. requiring a large amount of the Firm’s work), the above deadline may be extended to 2 (two) months, of which the Requesting Party will be informed immediately.
8. In exercising the right of access to data, the Requesting Party will be informed of the data subject to processing, to the extent requested, and of the following information: (i) the purpose of processing, (ii) the categories of personal data to be processed, (iii) information on the recipients and categories of recipients to whom the personal data have been or will be disclosed, in particular, recipients in third countries or international organizations, (iv) period of storing the personal data, or if this is not possible, the way in which this period is determined, (v) information on automated decision-making, including profiling, and relevant information on the modalities of such decision-making, as well as on the relevance and expected consequences of such processing for the data subject, (vi) the right to request the Firm to correct, delete or limit the processing of personal data and to object to such processing (if such a right applies), (vii) if personal data has not been collected from the data subject, any available information about its source, (viii) the right to file a complaint with the supervisory authority.
9. If the right of access and the right to transfer the data is exercised, a copy of the personal data of the Requesting Party in commonly known and accessible machine-readable formats shall be attached to the reply given to the Requesting Party
10. Any complaint relating to the implementation of this procedure should be submitted in writing to the following address: ul. Wiejska 11 lok.8, 00-480 Warszawa, or electronically at odo@orlikpartners.com.
11. A complaint will be considered as soon as possible and not later than within 7 (seven) days from the date of its delivery, of which the Requesting Party will be informed immediately. The Requesting Party will also be informed about receiving a complaint. Information on all complaint is included in the register kept by the Data Protection Officer.

4. Cookies and system logs
5. When the Service User connects to the Service, the system logs of the Service will get the information about the number (including IP) and type of the Service User's device from which the Service User connects to the Service. 
2. In accordance with the applicable law, the Firm will also process data concerning the number (including IP) and type of the Service User's device, as well as the time of connection of the abovementioned persons to the Service and other exploitation data concerning the Service User's activity. This data is processed for technical purposes and to collect general statistical information.
3. The Service may use cookies (i.e. small text files sent to the Service User's device, identifying him/her in a manner necessary to simplify or discontinue a given operation) in order to collect information related to the use of the Service by the Service User. Cookies are used to maintain the Service User's session, to adjust the operation of websites to the Service User's preferences and the Service to the needs of the Service User, and creating statistics on the viewing of the Service’s subpages.
4. At any time, the User can change their internet browser’s cookie settings.
5. In order to change cookie setting, the internet browser’s cookie settings shall be changed. Those settings may be changed in order to block automatic handling of cookies in the web browser setting or to notify the User each time they are placed on their device.

6. Information about how to change in the settings concerning cookies in the most popular web browsers can be found at the following addresses:

- Internet Explorer https://support.microsoft.com/pl-pl/help/17442/windows-internet-explorer-delete-manage-cookies;

-  Google Chrome https://support.google.com/chrome/answer/95647?hl=pl;

- Firefox https://support.mozilla.org/pl/kb/ciasteczka?esab=a&s=ciasteczka&r=0&as=s;

5. Other provisions
6. The Firm will make every effort to ensure a high level of security for Service Users in the use of the Service.
2. Any events affecting the security of information transmission should be reported to odo@orlikpartners.com.
3. The Firm reserves the right to disclose certain information about the Service User to the competent authorities or third parties who request such information, on an appropriate legal basis and in accordance with applicable law.
4. Except in cases indicated in this Policy, personal data will not be disclosed to any third party or body without the consent of the data subject.