top of page

Information on processing  personal data


In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation) (Official Journal of the EU L 119, hereinafter called the GDPR), we hereby inform that  we process Your personal data according to the rules indicated below:

The Controller of personal data

The Controller of personal data is Hipsz Magdziak Kancelaria Radców Prawnych sp. p. with the registered office in Warsaw (02-349) ul. Baśniowa 3 premises 108

It is possible to contact the Controller in writing or by phone: telephone number: +48 22 822 12 00, and by e-mail: the e-mail address:


The purpose of  processing data

Personal data shall be processed for the purpose of: 

  1. undertaking activities before concluding and executing an agreement – the legal basis– fulfilling a legal obligation– art. 6 para. 1 letter b) of the GDPR and the Controller’s legitimate  interest– art. 6 para. 1 letter f) of the GDPR,

  2. drawing up  accounting and bookkeeping documentation required by the law, calculating taxes and other public law fees– the legal basis – fulfilling a legal obligation – art. 6 para. 1 letter c) of the GDPR – and the Controller’s legitimate  interest – art. 6 para. 1 letter f) of the GDPR,

  3. the protection of the Controller’s  interests – pursuing claims that could result in the connection with executing an agreement or defence against such claims–– the legal basis – art. 6 para. 1 letter f) of the GDPR.


The categories of data

The Controller may process the following  categories of personal data:

  1. name and surname,

  2. the residence address, correspondence address (if different than  the residence address),

  3. data regarding the conducted business activity including the address of conducting it; NIP, REGON, PESEL numbers,

  4. contact data (telephone numbers, e-mail address),

  5. liabilities towards the  Controller,

  6. information on possible court proceedings,

and other data transferred  in the scope that is  adequate for the purposes of processing.


Providing Your personal data indicated above is voluntary and aims at the conclusion and implementation of an agreement, a possible consideration of claims arising therefrom. A failure to provide data may result in the inability to perform an agreement.



The recipients of personal data

The recipient of personal data will be public administration units and bodies and other entities with which Hipsz Magdziak Kancelaria Radców Prawnych sp. p. with the registered office in Warsaw carries out its tasks and responsibilities including:

  1.  subcontractors participating in the implementation of agreements or providing services related to them such as consultancy firms, notaries, translators;

  2. entities providing ancillary services to the Controller such as, in particular, accounting offices, IT specialists;

  3. the contractors of the Controller’s clients, public administration bodies, offices, and other third parties - if it results from the purpose and scope of the services provided to the client including in particular their representation before these entities.

Personal data will not be transferred to a third country/an international organization.

Data will not be processed in an automated way including in the form of profiling.


Data storage

Personal data will be stored for a period of time depending on the purpose for which the data is processed. The period of time during which personal data will be stored is determined according to the following criteria:

a) legal regulations that may oblige the Controller to process data for a certain period of time;

b) the period that is necessary to implement the Controller’s legitimate interests;

c) the period for which consent has been granted.


The rights of the persons whose data are processed

Everyone has the right to:

a) access to the contents of their data and the right to rectify, delete, limit processing, the right of data transfer, the right to object, the right to withdraw consent at any time without affecting the lawfulness of processing (if processing takes place on the basis of consent), which has been made on the basis of consent before withdrawing it;

b) submit a complaint to the President of the Office for Personal Data Protection, if they think that the processing of personal data concerning them infringes the provisions of the general data protection regulation of 27 April 2016.

bottom of page