Under Article 13 of REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (in short: (“GDPR”), please be advised of the following principles of processing the personal data of clients who are natural persons:


“DYRDA, SZYMAŃSKI, KONDRATOWICZ KANCELARIA ADWOKACKO-RADCOWSKA SP.K.”, with its registered office in Warsaw, ul. Nowogrodzka 56A, 00-695 Warsaw, phone: (22) 6254925, (22) 6293807, e-mail:, is the Controller of the personal data.


We process personal data in compliance with legal regulations for the following purposes:a) pursuant to Article 6(1)(b) of the GDPR:- to perform the agreement signed with the Firm or to enable the Firm to act for the Client before an agreement is signed (i.e. to enforce the rights and fulfil the obligations related to the provision of legal services to the Client and represent the Client in all legal matters),- to settle the applicable fees, expenses and other benefits related to the above, b) pursuant to Article 6(1)(c) of the GDPR – to comply with legal obligations to which the Firm, partners and affiliated lawyers are subject (e.g. procedural, information, accounting and tax obligations), c) pursuant to Article 6(1)(f) of the GDPR (for purposes resulting from legitimate interests pursued by the Controller or by a third party, e.g. to determine, enforce or defend claims related to the activities set out above in items a) and b).


If necessary, we may transfer personal data to:- courts, authorities and other entities which perform activities/handle legal proceedings in Clients’ cases and to the parties involved in such activities/proceedings and their attorneys-in-fact,- professional entities which provide accounting services to the Firm,- professional entities which provide IT services to the Firm,- other providers of services necessary for the correct operation of the Firm where necessary for the correct provision of such services.


In connection with the processing of personal data by the Firm, Clients who are natural persons have the rights set out in Articles 15-22 of the GDPR and in particular:- the right to access their personal data,- the right to withdraw their consent for the processing of their personal data (if the data was processed under the given consent),- the right to correct personal data,- the right to request the removal of personal data,- the right to request restriction of their personal data processing,- the right to object to personal data processing due to a special situation, where the data is processed in pursuit of legitimate interests of the Firm or of a third party (Article 6(1)(f) of GDPR),- the right to data portability, i.e. to receive from the Firm the personal data in a structured, commonly used and machine-readable IT format. The data subject may transfer the data to a different controller or demand that the Firm send the data to a different controller, but the Firm will only do so where this is technically possible. The right to data portability applies only to data processed under an agreement or with the consent of the data subject.- the right to receive from the Firm a confirmation of the processing of personal data and the information set out in Article 15 of the GDPR,- the right to obtain copies of the personal data subject to processing,- the right to file a complaint with a supervisory authority, i.e. the President of the Personal Data Protection Office. To exercise your right, contact our office by phone, email or regular mail (see contact details in item 1).



Personal data is provided on a voluntary basis but without it, the Firm must not incur or perform any contractual obligations or provide any legal services or act on behalf of or for the data subject without a contract. Therefore, without the personal data, the Firm is not able to and will not perform the above activities.


The personal data retention period is 10 years from the end of the year of termination of the proceedings or handling of the case for which the data was collected. After that period, any paper media (documents) including the data should be collected by the data subject from the Firm at the latest within one month of the date when the Firm notifies the data subject of its readiness to release it – otherwise, the Firm may continue to retain such data with the data subject’s consent and at their expense or destroy it in accordance with personal data protection principles. In particular cases, following previous arrangements, the documents may be collected from the Firm before the end of the period indicated above. The application of the above rules must not violate the obligation of a legal adviser or attorney to keep professional secrecy, which is a priority.