The Controller of your personal data is: BRILLAW Kancelaria Radców Prawnych Mikulski & Partners, str. Herbu Janina 5/U03, (02-972) Warsaw.

In performance of our obligations under the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation (text in Polish: OJ L 2016.119.1 of 2016.05.04), (“GDPR”), below we present basic information on our processing of personal data, including the purposes of processing your personal data and your rights, for the following categories of persons:

• Information obligation for the Clients/Contractors of the Law Firm
• Information obligation for the Client’s employees/co-workers
• Information obligation for the Contractor’s employees/co-workers (suppliers of services for the benefit of the Law Firm)
• Information obligation for job applicants.

Information obligation for the Clients/Contractors of the Law Firm

Pursuant to Art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR“), we inform you that:

1. BRILLAW Kancelaria Radców Prawnych Mikulski & Partnerzy spółka partnerska is the controller of your personal data. Our contact details: BRILLAW Kancelaria Radców Prawnych Mikulski & Partnerzy spółka partnerska, str. Herbu Janina 5/U03, (02-972) Warsaw, tel. +48 22 840 57 57, email: kancelaria@brillaw.pl.
2. If you have any questions concerning your personal data, please contact our Data Protection Officer: e-mail address: rodo@brillaw.pl, address for correspondence: BRILLAW Kancelaria Radców Prawnych Mikulski & Partnerzy sp.p., str. Herbu Janina 5/U03, (02-972) Warsaw.
3. Your personal data is processed for the purpose of:
   a) taking action at your request before concluding the agreement or performing the agreement concluded between you and the Controller (Article 6 section 1 letter b of the GDPR);
   b) performing our obligations as the Controller under the provisions of law, including tax or accounting law (Article 6 section 1 letter c of the GDPR);
   c) performing legitimate interests pursued by the Controller, including pursuing or securing possible claims, marketing purposes (Article 6 section 1 letter f of the GDPR).
4. Your personal data is processed for the purpose of taking action prior to the conclusion of the agreement at the request of the data subject or the performance of the agreement to which the data subject is the party; complying with a legal obligation of the personal data controller (e.g. under tax or accounting regulations) and the marketing of own products or services; pursing or securing claims.
5. Your personal data is processed by us as the Controller pursuant to Article 6 letter c) of the GDPR and Article 6 section 1 letter f of the GDPR for the purpose of performing the Agreement concluded with the Client, including the current communication and cooperation under the Agreement as well as for the purpose of fulfilling our legal obligation as the Controller (e.g. under tax or accounting regulations) and pursuing or securing claims under the Agreement.
6. Your personal data will be transferred to other recipients, i.e.: partners providing technical services (e.g. providing and maintaining the ICT infrastructure), telecommunications companies, companies providing hosting and consulting services, companies archiving or destroying documents, postal operators, carriers, companies printing or handling correspondence, our subcontractors providing legal services, entities providing postal, courier, tax, audit and translation preparation services.
7. Your personal data will be stored by us as the Controller for the period necessary to perform the Contract with the Client and after its expiration for the period under the special legal regulations (e.g. tax or accounting regulations, the Civil Code, including the period necessary to secure or pursue any claims in connection with the Agreement).
8. We do not make automated decisions with regard to your personal data and your data is not profiled.
9. Your personal data will not be transferred outside the European Economic Area.
10. You have the right to:
    a) request from us as the Controller the access to your personal data as well as their rectification, erasure or restriction of processing and the right to request the transfer of data to another controller,
    b) object to the processing of your data on the basis of the legitimate interest of the Controller (Article 6 section 1 letter f) of the GDPR),
    c) lodge a complaint with the Polish supervisory authority competent for the protection of personal data (the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw) or the supervisory authority of another Member State of the European Union competent for the place of habitual residence or work of the data subject or with regard to the place of the alleged breach of the GDPR.
11. The provision of personal data by you is voluntary but it is necessary in order to take action before concluding the agreement with you or performing the agreement to which you are the party; fulfil a legal obligation of the personal data controller (e.g. under tax or accounting regulations) and to market your own products or services; pursue or secure claims. If you do not provide the data, the agreement will not be concluded.

INFORMATION OBLIGATION FOR THE CLIENT’S EMPLOYEES/CO-WORKERS

Pursuant to Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR“), we inform you as the employee/co-workers of our Client that:

1. BRILLAW Kancelaria Radców Prawnych Mikulski & Partnerzy spółka partnerska is the Controller of your personal data. Our contact details: BRILLAW Kancelaria Radców Prawnych Mikulski & Partnerzy spółka partnerska, str. Herbu Janina 5/U03, (02-972) Warsaw, tel. +48 22 840 57 57, email: kancelaria@brillaw.pl (the “Controller“).
2. If you have any questions concerning your personal data, please contact our Data Protection Officer: e-mail address: rodo@brillaw.pl, correspondence address: BRILLAW Kancelaria Radców Prawnych Mikulski & Partnerzy sp. p., str. Herbu Janina 5/U03, (02-972) Warsaw.
3. We will process your personal data in the following scope: name and surname, contact details (email address, telephone number), position.
4. Your personal data were made available to us by our Client (the entity of which you are an employee/co-worker) in connection with the cooperation under the legal counselling agreement concluded between us and the Client (the “Agreement“), or when establishing this cooperation.
5. Your personal data is processed by us as the Controller pursuant to Article 6 letter c) of the GDPR and Article 6 section 1 letter f) of the GDPR – for the purpose of performing the Agreement concluded with the Client, including the current communication and cooperation under the Agreement as well as for the purpose of fulfilling a legal obligation of the Controller (e.g. under tax or accounting regulations) and to pursue or secure claims under the Agreement.
6. Your personal data will be transferred to other recipients, i.e.: partners providing technical services (e.g. providing and maintaining the ICT infrastructure), telecommunications companies, companies providing hosting and consulting services, companies archiving or destroying documents, postal operators, carriers, companies printing or handling correspondence, our subcontractors providing legal services, entities providing postal, courier, tax, audit, translation preparation services.
7. Your personal data will be stored by us as the Controller for the period necessary to perform the Agreement with the Client and after its expiration for the period under special legal regulations (e.g. tax or accounting regulations, the Civil Code, including the period necessary to secure or pursue any claims in connection with the Agreement).
8. We do not make automated decisions with regard to your personal data and your data is not profiled.
9. Your personal data will not be transferred outside the European Economic Area.
10. You have the right to:
    a) request from us as the Controller the access to your personal data as well as their rectification, erasure or restriction of processing and the right to request the transfer of data to another controller,
    b) object to the processing of your data on the basis of the legitimate interest of the Controller (Article 6 section 1 letter f) of the GDPR),
    c) lodge a complaint with the Polish supervisory authority competent for the protection of personal data (the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw) or the supervisory authority of another Member State of the European Union competent for the place of habitual residence or work of the data subject or with regard to the place of the alleged breach of the GDPR.

INFORMATION OBLIGATION FOR THE COUNTERPARTY’S EMPLOYEES/CO-WORKERS (SERVICE PROVIDER FOR THE LAW FIRM)

Pursuant to Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR“), we inform you, as the employee/co-worker of our Counterparty, that:

1. BRILLAW Kancelaria Radców Prawnych Mikulski & Partnerzy spółka partnerska is the Controller of your personal data. Our contact details: BRILLAW Kancelaria Radców Prawnych Mikulski & Partnerzy spółka partnerska, str. Herbu Janina 5/U03, (02-972) Warsaw, tel. +48 22 840 57 57, email: kancelaria@brillaw.pl (the “Controller“).
2. If you have any questions concerning your personal data, please contact our Data Protection Officer: e-mail address: rodo@brillaw.pl, correspondence address: BRILLAW Kancelaria Radców Prawnych Mikulski & Partnerzy sp. p., str. Herbu Janina 5/U03, (02-972) Warsaw.
3. We will process your personal data in the following scope: name and surname, contact details (email address, telephone number), position.
4. Your personal data was provided to us by our Counterparty (the entity of which you are the employee/co-worker) in connection with the cooperation under a civil law agreement concluded between us and the Counterparty pursuant to which the Counterparty provides us with services in the scope of its business activity (the “Agreement“) or when establishing such cooperation.
5. Your personal data is processed by us pursuant to Article 6 letter c) of the GDPR and Article 6 section 1 letter f) of the GDPR – for the purpose of performing the Agreement, including the current communication and cooperation under the Agreement as well as to fulfil our legal obligation as the Controller (e.g. under tax or accounting regulations) and to pursue or secure claims associated with the Agreement.
6. Your personal data will be transferred to other recipients, i.e.: partners providing technical services (e.g. providing and maintaining the ICT infrastructure), telecommunications companies, companies providing hosting and consulting services, companies archiving or destroying documents, postal operators, carriers, companies printing or handling correspondence, our subcontractors providing legal services, entities providing postal, courier, tax, audit, translation preparation services.
7. Your personal data will be stored by us as the Controller for the period necessary to perform the Agreement with the Counterparty and after its expiration for the period under special legal regulations (e.g. tax or accounting regulations, the Civil Code, including the period necessary to secure or pursue any claims in connection with the Agreement).
8. We do not make automated decisions with regard to your personal data and your data is not profiled.
9. Your personal data will not be transferred outside the European Economic Area.
10. You have the right to:
    a) request from us as the Controller the access to your personal data as well as their rectification, erasure or restriction of processing and the right to request the transfer of data to another controller,
    b) object to the processing of your data on the basis of the legitimate interest of the Controller (Article 6 section 1 letter f) of the GDPR),
    c) lodge a complaint with the Polish supervisory authority competent for the protection of personal data (the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw) or the supervisory authority of another Member State of the European Union competent for the place of habitual residence or work of the data subject or with regard to the place of the alleged breach of the GDPR.

INFORMATION OBLIGATION FOR JOB APPLICANTS

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR“), we inform you that:

1. BRILLAW Kancelaria Radców Prawnych Mikulski & Partnerzy is the Controller of your personal data. Our contact details: BRILLAW Kancelaria Radców Prawnych Mikulski & Partnerzy, str. Herbu Janina 5/U03, (02-972) Warsaw, tel. +48 22 840 57 57, e-mail: the kancelaria@brillaw.pl (the „Controller”).
2. If you have any questions concerning your personal data, please contact our Data Protection Officer: e-mail address: rodo@brillaw.pl, correspondence address: BRILLAW Kancelaria Radców Prawnych Mikulski & Partnerzy, str. Herbu Janina 5/U03, (02-972) Warsaw.

1. Your personal data is processed for the purpose of recruitment.
2. Your personal data is processed under Article 6 section 1 letter a) of the GDPR (to the extent that you have given your consent, e.g. if you have given your consent for processing your data in future recruitments), Article 6 section 1 letter c) of the GDPR (performance of the Controller’s legal obligations, in particular under the provisions of law) and Article 6 section 1 letter f) of the GDPR (processing of data on the basis of the legitimate interest of the controller, such as securing or pursuing claims related to the current recruitment).
3. Your personal data will be transferred to other recipients, i.e.: partners providing technical services (including the ICT infrastructure), business partners, telecommunications companies, companies providing the services such as hosting, consulting, translations, destruction of documents, companies archiving documents, postal operators, carriers, companies printing or handling correspondence, entities providing legal, tax, audit, banking, insurance and transport services.
4. The period for which your personal data will be stored: until the end of the recruitment process for a given position and the end time necessary to secure or pursue any claims to which you are entitled, comply with the legal obligation of the controller and, if the consent for the processing of data for the purposes of future recruitment processes was given, until the withdrawal of consent to which you are entitled at any time or the until the expiration of 1 year from the date on which it was granted.
5. We do not make automated decisions with regard to your personal data and your data is not profiled.
6. Your personal data will not be transferred outside the European Economic Area.
7. You have the right to:
   a) request from us as the Controller the access to your personal data as well as their rectification, erasure or restriction of processing, the right to request the transfer of data to another controller and the right to object to the processing of the data,
   b) withdraw your consent to the processing of your personal data at any time,
   c) object to the processing of your data on the basis of the legitimate interest of the Controller (Article 6 section 1 letter f) of the GDPR),
   d) lodge a complaint with the Polish supervisory authority (the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw) or the supervisory authority of another Member State of the European Union competent for the place of habitual residence or work of the data subject or with regard to the place of the alleged breach of the GDPR.
8. The provision of your personal data is voluntary but it is necessary for us to undertake recruitment activities regarding the work in our team. If you do not provide your personal data, we will not be able to recruit you.

Brillaw Kancelaria Radców Prawnych Mikulski & Partnerzy
NIP [Tax Identification Number]: 5272306454
str. Herbu Janina 5/U03, 02-972 Warsaw
rodo@brillaw.pl
Telephone no. +48 22 840 57 57