Magnusson, Tokaj i Partnerzy Adwokaci i Radcowie Prawni Spółka Partnerska (“Magnusson”, “the law firm” or “we/us/our”) is a Controller under the Regulation (EU) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”) and applicable national law with regard to the personal data that we process in the course of our business.
We gather personal data directly from you, as a data subject, as well as from third parties such as your employer and open sources (e.g., Internet services).If you are a Client
If you have appointed us as your legal representative, we process the personal data received from you in connection with our assignment or otherwise gathered during the performance of the assignment. You are not obligated to provide us with any personal data; however, without such information we may not be able to represent you, as we require some personal data in order to perform regulated conflict of interest and anti-money laundering checks.Why do we process your personal data?
We process your personal data in order to perform regulated conflict of interest and (if necessary) anti-money laundering checks, to perform and manage your assignment, to protect your rights, for communication and marketing purposes, as well as for accounting and invoicing.
Personal data are processed on the following legal basis: (i) it is necessary to fulfil a legal obligation; (ii) it is necessary in order to accomplish a purpose in which Magnusson has a legitimate interest; and (iii) it is necessary in order to perform an agreement to which you, as a data subject, are a party (this is only if we have entered into an agreement with you as an individual).Transfer of your personal data
Personal data may be transferred between the law firm’s different group- and affiliate entities and other partners (e.g. translation agencies) for the purposes of conflict of interest and anti-money laundering checks, for the purpose of exchanging information and knowledge, and for the purpose of allocating resources. We shall not transfer personal data to third parties unless (i) it is agreed upon between you and the law firm; (ii) if it is, within the performance of the assignment, necessary in order to protect your rights; (iii) if it is necessary in order for us to fulfil a statutory obligation or to comply with government decisions or court decisions; or (iv) in case we hire third party service providers who perform assignments on our behalf. The personal data may be disclosed to courts, authorities, opponent’s representative if necessary in order for us to protect your rights.
In some instances, personal data may be transferred to Magnusson’s affiliate offices situated outside of the European Economic Area (EEA). This will only occur to the extent it is necessary for the fulfilment of a specific assignment and will always be communicated to you. Transfers to countries outside of the EEA are always subject to EU’s standard contractual clauses or a comparable method of ensuring that the transfer meet the conditions of the GDPR. Magnusson’s affiliate offices outside of the EEA are based in Belarus, Ukraine, Russia, and China.Storing of personal data
Personal data are stored, in accordance with the obligation Magnusson has under Polish law, for a time of ten (10) years from the day of the assignment’s completion, or as long as it is required by the assignment.
The personal data processed for the purpose of develop, analyse and promote the law firm’s business will be stored for a time of one (1) year from the date of completion of the Clients assignment. If you choose to opt-out from newsletters or similar communications, the personal data stored for such purpose will be deleted, effective immediately.If you are not a Client
We frequently send newsletters and other forms of marketing to you as a former Client, a professional or personal contact of one of our employees, or if you have shown interest in Magnusson’s business, to the e-mail address you have registered with us. Newsletters and marketing information are generally designed and are not aimed at you specifically.
The legal basis for our processing of your personal data in these instances is our legitimate interest of communicating and promoting our business to you.
If you would like to unsubscribe from receiving such newsletters, please contact us. Magnusson’s contact details can be found below.Your rights
According to the GDPR, you have several rights in relation to the processing of your personal data. Please contact us (see contact details below) if you wish to exercise your rights, or if you have any questions relating to any of the rights presented here.
|Access||You have the right to request information on whether we process personal data about you, as well as to request access to the personal data.|
|Rectification||If your personal data are inaccurate or incomplete, you have the right to request rectification of the personal data.|
|Erasure||Under certain circumstances, you have the right to request the erasure of your personal data, for example if the information is no longer necessary.|
|Restriction of processing||You have the right to request that the processing of your personal data is restricted. There is a risk that we will be unable to provide you with our services once the processing is restricted.|
|Data portability||Under some circumstances, you have the right to gain access to your personal data in a structured, commonly used, and machine-readable format. This right is limited to the personal data that you have provided us with, if it is being processed for the purpose of fulfilling an agreement with you or based on your consent.|
|Objection to processing||You have the right to object to personal data processing which is based on Magnusson’s legitimate interests. However, if we have compelling legitimate grounds which override your interests, rights and freedoms, we may have the right to continue the processing.|
|Objection to processing for direct marketing purposes||You always have the right to object to our processing of your personal data for direct marketing purposes.|
If you have complaints relating to our processing of your personal data, you have the right to file a complaint with the President of the Personal Data Protection Office.