Privacy policy

The purpose of this Privacy Policy is to explain the principles on which your personal data are processed and to discuss your fundamental rights relating to our processing of your personal data.


Personal Data Controller
The Personal Data Controller is Karwasiński Szpringer i Wspólnicy Spółka jawna (“KSZ”). Personal data collected by KSZ are processed on the principles set out in the provisions on the protection of personal data, including in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”) and in Polish regulations issued in connection with the GDPR, including the Act of 10 May 2018 on the protection of personal data. KSZ keeps personal data confidential and protects them against unauthorized access by third parties on the terms specified in the above-mentioned legal acts.

If you have any questions about data processing, please contact KSZ, in particular directly at


Scope and purposes of personal data processing
Within the scope of its activity KSZ collects and processes personal data: (a) for the purposes resulting from legally justified interests pursued by KSZ as a data controller: to provide services to Clients, to market KSZ services, including to inform about events organized by KSZ or in which KSZ participates and about the activities of KSZ (e.g. in a newsletter), as well as for analytical and statistical purposes, and to ensure the ICT security related to the website (legal basis: Article 6(1)(f) of GDPR); (b) to perform agreements concluded by the KSZ with its clients, including the provision of training, to cooperate with suppliers and other entities cooperating with KSZ (legal basis: Article 6(1)(b) of GDPR); (c) to recruit persons interested in working for or cooperating with KSZ (legal basis: Articles 6(1)(c) and 6(1)(a) of GDPR respectively). We also process personal data in order to fulfill the legal obligations incumbent on KSZ (legal basis: Article 6(1)(c) of GDPR).


Your rights
The processing of your personal data is performed on a voluntary basis; however, depending on the circumstances, a refusal to provide data or a request to delete it may prevent us from, for example, contacting you, providing you with information about the events and activities of KSZ or providing a service. The processing of personal data while providing legal assistance services is regulated in the agreements concluded with customers or in the general terms and conditions for providing legal services. Sending commercial information by electronic means, e.g. by e-mail, is subject to your prior consent, including by subscribing to the newsletter or by giving instructions to receive certain information, including thematic legal alerts. In accordance with the principles set out in data protection legislation and to the extent provided for therein, you have the right of access to your personal data, the right to rectification, erasure or restriction of processing and the right to data portability. Some of these rights may not apply to the processing of data being part of legal advice. If you do not want KSZ to process your personal data for marketing purposes, you may object at any time to the processing of your personal data for this purpose. If you have given your consent to the processing of personal data, you may withdraw it at any time; however, the withdrawal of consent will not affect the processing of data that took place prior to the withdrawal of your consent.


Right to lodge a complaint
You have the right to lodge a complaint related to the processing of personal data by KSZ to the President of the Office for the Protection of Personal Data (until the date of entry into force of the Act of 10 May 2018 on the Protection of Personal Data – to the Inspector General for the Protection of Personal Data).

Processing period
Personal data will be processed, respectively, until the relevant legitimate interests pursued by KSZ as the controller of data related to the processing of specific data are fulfilled, until the expiry of the statute of limitations related to the agreement to which the processing of personal data is related, or related to the statute of limitations of obligations under the law, or until the objection to the processing for marketing purposes is raised. We will send you the newsletter and other similar information until the moment you raise an objection.


Transfer of personal data to other entities
The recipients of your personal data may be, in particular, entities directly or indirectly linked to KSZ, in particular in an organizational or personal manner, which are established in one of the Member States of the European Union, as well as external service providers (e.g. IT service providers, including cloud computing services, call center and marketing and promotional services providers, other data processors processing data on behalf of KSZ under an agreement for the processing of personal data), accountants, expert auditors and auditors, lawyers, administrative bodies, state services and courts. Your personal data are processed in the seat of KSZ and in the offices of KSZ in other cities in Poland. Personal data are not transferred to countries outside the European Union. In case of transfer of personal data to third countries outside the EU, KSZ will apply appropriate measures to ensure the security of your personal data. KSZ, in connection with cooperation with its suppliers and other law firms, may entrust the processing of your personal data to the aforementioned entities. However, in any case, these entities will be obliged to maintain the confidentiality of your personal data and to process them in accordance with the provisions on the protection of personal data and the relevant instructions of KSZ.


No profiling
Your personal data are not subject to profiling as one of the forms of automated processing of personal data.


Amendments to the Privacy Policy
Any changes that we make to the Privacy Policy in the future will be posted on the website. If possible, we kindly ask that you regularly check our site for updates to our Privacy Policy.