Lawberry Privacy Policy
1. PURPOSE AND SCOPE OF THIS PRIVACY POLICY
In accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) („GDPR„), Lawberry hereby provides information regarding the principles governing the processing of personal data collected in the course of our business relationship and through the use of the Lawberry website.
Respect for privacy and the protection of personal data constitute an integral part of Lawberry’s business activities. Personal data are processed with due care, in compliance with the applicable legal requirements and by implementing appropriate technical and organisational measures to ensure their security. By using the Lawberry website, you can be assured that the privacy of our users is treated with the utmost care. The purpose of this Privacy Policy is to inform you about the categories of personal data we collect when you use the Lawberry website or cooperate with us, as well as the measures we take to protect and safeguard your personal information.
This Privacy Policy and its principles apply to personally identifiable information (personal data) that we may ask you to provide and that we process with your consent where applicable. If you wish to establish a business relationship with Lawberry, certain personal data will also be necessary for the performance of a contract concluded with Lawberry. Further information in this regard is provided in the relevant sections of this Privacy Policy.
Lawberry processes personal data in accordance with the principles set out in the GDPR, in particular the principles of lawfulness, fairness and transparency, as well as the principle of data minimisation. This means that we process only such personal data as are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. We ensure transparency regarding the manner, purposes and legal bases of the processing of personal data. Personal data are collected and processed only where there is an appropriate legal basis for doing so and with full respect for the rights of data subjects. Data subjects may obtain further information regarding the processing and protection of their personal data by contacting Lawberry. Contact details enabling data subjects to exercise their rights under the GDPR and to obtain information relating to the processing of personal data are available in the „Contact” section of the Lawberry website.
2. LAWBERRY AS THE DATA CONTROLLER
LAWBERRY Pietrzyk i Partnerzy, Radcowie Prawni sp.p., with its registered office in Kraków, Poland, is the Controller of the personal data collected through our website and of the personal data entrusted to us in the course of our professional relationship with you. Such personal data are processed in accordance with the requirements of the General Data Protection Regulation (GDPR) and other applicable data protection and privacy laws.
Should you have any questions or concerns regarding the manner in which your personal data are processed, we encourage you to contact us in the first instance. We will use our best efforts to provide you with the necessary explanations and to resolve any concerns you may have.
Further information is available in the „Contact” section of our website or by using the following contact details:
LAWBERRY Pietrzyk i Partnerzy Radcowie Prawni sp.p.
Jasnogórska 9, Staircase A, 4th Floor
31-358 Kraków, Poland
Phone: +48 12 395 70 51
E-mail: biuro@lawberry.pl
3. COLLECTION OF PERSONAL DATA
This Privacy Policy has been prepared to ensure transparency regarding the processing of personal data and to enable you to make informed use of your rights under the GDPR. Unless otherwise required by applicable law, the provision of personal data is voluntary.
Where you establish a business relationship with Lawberry, use our services, contact us, subscribe to our newsletter, express an interest in receiving marketing or promotional materials, or otherwise use our available communication channels, we may, depending on the nature of our relationship with you and the purpose of the contact, collect and process the following categories of personal data:
a) contact details: your name and surname, job title, position, the name of the company or organisation you represent, telephone number (including mobile telephone number where provided), e-mail address and postal address;
b) business information: information relating to matters, projects, transactions or proceedings in connection with which you contact Lawberry or in which you participate in your professional capacity;
c) information submitted through forms: information provided by you through contact forms, newsletter subscription forms, registration forms or any other forms available on our website, including the content of correspondence and any documents attached thereto;
d) correspondence data: information contained in e-mail correspondence, contact forms, telephone conversations and any other communications with Lawberry;
e) information obtained from publicly available sources: information published in public registers, on the websites of organisations, in industry publications and other publicly available sources, including professional networking platforms (e.g. LinkedIn);
f) information relating to your matters or proceedings: personal data relating to legal matters, proceedings or legal assistance provided to you, processed solely to the extent necessary for the provision of legal services and in accordance with applicable law, including, in particular, the professional secrecy obligations applicable to attorneys-at-law (radcowie prawni) and advocates (adwokaci);
g) communication preferences: information relating to your marketing consents, newsletter subscriptions and preferences concerning the receipt of publications, legal alerts and other informational materials;
h) supplier and business partner data: contact details and other information relating to you or the company or organisation providing services or support to Lawberry;
i) social media activity: comments, reactions, shares and other interactions relating to Lawberry’s social media profiles;
j) technical data and website usage information: information generated when you use our website or electronic services, including your IP address, information about your device, operating system and web browser, information contained in system and server logs, URLs of visited pages, dates and times of visits, information regarding your activity on the website (including pages visited, time spent on the website, clicks and scrolling behaviour), traffic source information, connection parameters, technical errors and information regarding the effectiveness of electronic communications, including information on whether e-mails have been opened or links contained therein have been accessed;
k) data collected through cookies and similar technologies: online identifiers, information concerning your activity on the website, preferences relating to the use of the website and data used for analytical, statistical, functional and marketing purposes;
l) analytics and marketing data: information concerning the manner in which you use the website for the purposes of website traffic analysis, measuring the effectiveness of marketing activities, website optimisation and promotional activities;
m) recruitment data: personal data contained in job application documents and otherwise provided during the recruitment process, including identification and contact details, information concerning education, professional qualifications, work experience, employment history and any other information voluntarily provided by the applicant;
n) data relating to criminal convictions and offences: where permitted by applicable law, in particular where necessary for the provision of legal services, conducting legal proceedings, protecting clients’ rights and claims or complying with legal obligations;
o) data collected for anti-money laundering and counter-terrorist financing purposes: identification data, information relating to representation, beneficial owners, ownership and control structure, politically exposed person (PEP) status, international sanctions and any other information necessary to comply with obligations arising under applicable anti-money laundering and counter-terrorist financing legislation.
Lawberry does not collect personal data concerning users’ online activities on third-party websites or in relation to online services provided by third parties.
The above categories of personal data may be obtained directly from you, from your employer or the entity which you represent in your dealings with Lawberry, from publicly available sources, as well as from entities supporting Lawberry in fulfilling its legal obligations, including, in particular, obligations relating to anti-money laundering and counter-terrorist financing (AML), sanctions screening and other regulatory compliance requirements
4. COLLECTION OF PERSONAL DATA
The personal data referred to above are processed only to the extent necessary to achieve the specified purposes and on the legal bases provided for in Articles 6 and, where applicable, Articles 9 and 10 of the GDPR. Depending on the nature of your relationship with Lawberry, the legal basis for the processing of your personal data may include, in particular:
a) the taking of steps at your request prior to entering into a contract or the performance of a contract to which the data subject is a party (Article 6(1)(b) GDPR);
b) compliance with legal obligations to which Lawberry is subject, including obligations arising under legislation governing the legal professions of attorneys-at-law (radcowie prawni) and advocates (adwokaci), anti-money laundering and counter-terrorist financing legislation (AML), and other applicable legal and regulatory requirements (Article 6(1)(c) GDPR);
c) the legitimate interests pursued by Lawberry or by a third party, including, in particular, the provision of legal services, maintaining business relationships, establishing, exercising or defending legal claims, ensuring the security of IT systems, carrying out analytical and organisational activities, and conducting direct marketing of Lawberry’s own services (Article 6(1)(f) GDPR);
d) the consent of the data subject, where such consent is required, in particular in relation to the receipt of marketing communications, newsletters, the use of certain cookies or participation in recruitment processes extending beyond the scope required by applicable law (Article 6(1)(a) GDPR).
Where Lawberry processes special categories of personal data or personal data relating to criminal convictions and offences, such data are processed solely in the circumstances permitted under applicable law and only to the extent necessary for the provision of legal services, the conduct of legal proceedings, the protection of clients’ rights or compliance with legal obligations.
Where the processing of your personal data is based on your consent, you may withdraw such consent at any time by contacting us. The withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Following the withdrawal of your consent, Lawberry will cease processing the personal data processed solely on the basis of that consent.
Online Job Applications
Whenever we request that you provide personal data, we will inform you of the categories of personal data collected, the purposes for which they are processed and the applicable processing principles.
Where you participate in a recruitment process conducted by Lawberry, a dedicated Recruitment Privacy Notice containing detailed information regarding the processing of applicants’ personal data is made available together with the application form or, at the latest, at the time your personal data are collected.
Please note that where you submit a job application through our website or via any other communication channel, your personal data will be processed for the purpose of conducting the relevant recruitment process and, where you have provided your separate consent, for the purposes of future recruitment processes carried out by Lawberry.
5. HOW DO WE USE USER PERSONAL DATA?
Your personal data may be processed for the following purposes:
a) provision of legal services – for the purpose of providing legal assistance, legal advice, representation of clients and the performance of other legal services offered by Lawberry;
b) establishing and maintaining business relationships – for the purpose of managing relationships with clients, prospective clients, suppliers and business partners, maintaining records relating to such relationships and tailoring our services to clients’ needs;
c) communication with you – for the purpose of corresponding with you, responding to your enquiries, arranging meetings and providing information relating to the legal services we provide;
d) marketing and information activities – for the purpose of sending newsletters, legal alerts, expert publications, information about events organised by Lawberry and other information relating to the activities of the firm, in accordance with applicable law;
e) client satisfaction surveys and service development – for the purpose of obtaining client feedback, assessing the quality of our services, organising events and improving Lawberry’s services and business offering;
f) compliance with anti-money laundering and counter-terrorist financing (AML) obligations – for the purpose of identifying and verifying clients, beneficial owners and clients’ representatives, carrying out international sanctions screening and complying with other legal obligations arising under applicable AML legislation;
g) ensuring the security and proper functioning of our website and IT systems – for the purpose of administering our website, monitoring its operation, detecting and responding to security incidents, preventing fraud and misuse, and ensuring the continuity and security of our information systems;
h) compliance with legal and regulatory obligations – for the purpose of complying with applicable legal obligations, including those arising under legislation governing the legal professions, accounting, tax, record-keeping, audit and other regulatory requirements;
i) management of supplier and business partner relationships – for the purpose of entering into and performing contracts, managing settlements and maintaining ongoing business relationships with entities providing services to Lawberry;
j) administration of online forms – for the purpose of receiving and responding to enquiries submitted through contact forms, registration forms, newsletter subscription forms and other forms available on our website;
k) recruitment processes – for the purpose of assessing applicants, conducting recruitment processes and, where you have provided your separate consent, considering your application in future recruitment processes carried out by Lawberry;
l) management of Lawberry’s social media presence – for the purpose of communicating with users, carrying out informational and promotional activities, organising events and managing interactions through Lawberry’s social media profiles;
m) management of cookies and similar technologies – for the purpose of ensuring the proper functioning of our website, remembering users’ preferences, conducting statistical analyses and carrying out marketing activities in accordance with the consents provided;
n) website analytics and statistical analysis – for the purpose of monitoring the use of our website, compiling statistics, analysing users’ activity and improving the functionality, performance and usability of the website;
o) establishing, exercising or defending legal claims – for the purpose of protecting the rights and legitimate interests of Lawberry, its clients and other persons whose interests the firm represents.
6. WILL YOUR PERSONAL DATA BE TRANSFERRED OUTSIDE THE EUROPEAN ECONOMIC AREA?
At present, Lawberry does not intend to transfer personal data outside the European Economic Area („EEA”) (i.e. the European Union, Iceland, Liechtenstein and Norway), with the exception of cloud-based electronic communication services provided in accordance with the terms and conditions of the relevant service providers (e.g. Google) or other tools supporting the day-to-day operations of our team.
Where Lawberry engages certain business partners or external service providers, such entities may be established either within the European Union or outside the European Economic Area. The level of protection afforded to personal data in countries outside the EEA may differ from that guaranteed under European data protection law.
Where personal data are transferred outside the EEA, Lawberry ensures that such transfers are carried out in compliance with Chapter V of the GDPR, in particular on the basis of:
a) an adequacy decision adopted by the European Commission pursuant to Article 45 GDPR;
b) appropriate safeguards within the meaning of Article 46 GDPR, including, in particular, the Standard Contractual Clauses (SCCs) adopted by the European Commission or any other legally recognised transfer mechanism;
c) the derogations for specific situations set out in Article 49 GDPR, but only where neither of the transfer mechanisms referred to in points (a) or (b) is available and the transfer is otherwise lawful under the GDPR.
Lawberry exercises due diligence in selecting service providers that ensure compliance with the requirements of Chapter V GDPR, in particular by relying on adequacy decisions adopted by the European Commission or by implementing appropriate safeguards pursuant to Article 46 GDPR.
Where no adequacy decision pursuant to Article 45(3) GDPR exists and no appropriate safeguards pursuant to Article 46 GDPR are available, personal data may be transferred outside the EEA only in the circumstances provided for in Article 49 GDPR, including where:
a) the data subject has explicitly consented to the proposed transfer after having been informed of the possible risks associated with such transfer due to the absence of an adequacy decision and appropriate safeguards;
b) the transfer is necessary for the performance of a contract between the data subject and the Controller or for the implementation of pre-contractual measures taken at the data subject’s request;
c) the transfer is necessary for important reasons of public interest recognised under European Union law or the law of a Member State;
d) the transfer is necessary for the establishment, exercise or defence of legal claims;
e) the transfer is necessary in order to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent;
f) the transfer is required or otherwise permitted under applicable law.
You may obtain further information regarding the safeguards implemented by Lawberry in connection with transfers of personal data outside the EEA by contacting us using the contact details available in the „Contact” section of our website or in the point 2 of the Lawberry Privacy Policy.
7. RECIPIENTS OF PERSONAL DATA
Lawberry does not sell, rent or otherwise disclose personally identifiable information to other companies or individuals for their own purposes.
Your personal data are also protected under the provisions of the Act on Attorneys-at-Law, the Law on the Bar, as well as the professional rules governing the legal professions, including the Code of Ethics for Attorneys-at-Law and the Code of Ethics for Advocates.
Both attorneys-at-law (radcowie prawni) and advocates (adwokaci) are bound by legal professional privilege (professional secrecy), which covers all information obtained in connection with the provision of legal services. This constitutes an additional safeguard ensuring the confidentiality and security of the personal data entrusted to Lawberry.
Subject to the limitations arising from the above legal and professional obligations, personal data may be disclosed only in the following limited circumstances:
a) with your consent.
b) to entities supporting Lawberry’s business operations, including:
(i) processors acting on behalf of Lawberry, such as providers of hosting, cloud computing, IT, electronic communications, information systems, administrative support, accounting, tax advisory, document archiving, legal process outsourcing and other services provided to Lawberry, on the basis of appropriate Data Processing Agreements concluded in accordance with Article 28 GDPR;
(ii) independent data controllers, such as postal operators, courier service providers, banks, payment institutions, public authorities, law enforcement authorities, courts, bailiffs, notaries, other participants in legal proceedings and other entities authorised to receive personal data pursuant to applicable law or where necessary for the provision of legal services by Lawberry.
c) other law firms and legal professionals (i.e. independent data controllers), including other law firms, attorneys-at-law, advocates, expert witnesses and other professionals engaged by Lawberry in connection with the provision of legal services to its clients, to the extent permitted by applicable law.
d) law enforcement authorities and regulatory authorities, or other competent public authorities, where disclosure is required by applicable law, a legally binding request or recognised professional practice.
e) relevant third parties in emergency situations, where disclosure is necessary to protect the health, safety or vital interests of our clients, personnel or organisation.
f) your employer, company or organisation, where such disclosure is necessary for the provision of legal services or the performance of our contractual obligations.
g) verification and compliance service providers, for the purpose of complying with legal obligations relating to the prevention of financial crime, including anti-money laundering and counter-terrorist financing (AML), sanctions screening, identity verification and other legally required compliance and due diligence activities.
Further information regarding the categories of recipients of personal data and the safeguards implemented by Lawberry may be obtained by contacting us using the contact details provided in this Privacy Policy.
8. COMMUNICATIONS WITH LAWBERRY
Please do not send us confidential information or detailed information concerning your legal matter until we have confirmed in writing that we have agreed to establish a professional relationship with you or to provide legal services to you, your company or your organisation.
Sending us an unsolicited e-mail or other correspondence does not, in itself, establish a solicitor-client relationship, attorney-client relationship or any other lawyer-client relationship, nor does it create any obligation on the part of Lawberry to undertake your legal matter.
Until a professional relationship has been formally confirmed, information contained in such correspondence may not be protected by legal professional privilege to the extent applicable to a lawyer-client relationship.
Notwithstanding the above, any personal data contained in such correspondence will be processed in accordance with applicable law, including, in particular, the General Data Protection Regulation (GDPR) and other applicable data protection legislation.
9. SECURITY MEASURES
Lawberry implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, as well as against any other unlawful form of processing. These measures are implemented in accordance with Article 32 GDPR and are intended to ensure a level of security appropriate to the risk associated with the nature, scope, context and purposes of the processing of personal data.
Access to personal data is restricted to those members of our personnel and service providers who require such access in order to perform their duties or provide services on behalf of Lawberry. Such persons are subject to appropriate contractual and statutory confidentiality obligations and are required to process personal data securely and exclusively in accordance with Lawberry’s instructions and applicable data protection legislation.
10. RETENTION OF PERSONAL DATA
Lawberry retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or otherwise communicated to you and, in any event, for the period necessary to provide legal services to our clients.
Personal data collected through our website and in connection with the provision of legal services are retained for the period necessary to achieve the processing purposes set out in this Privacy Policy or for such longer period as required under applicable law. This includes, in particular, the period necessary for the performance of a contract, compliance with statutory retention obligations, and the limitation periods applicable to legal claims under relevant legislation.
Once the relevant processing purpose has been fulfilled, Lawberry will erase or anonymise the personal data. Where Lawberry intends to retain personal data for analytical purposes, the data will be pseudonymised, where appropriate, so that they may be used only to the extent adequate, relevant and necessary for such purposes, while preventing the direct identification of the data subjects.
Where the processing of personal data is based on your consent, you may withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal. Notwithstanding the withdrawal of consent, Lawberry may be required to retain certain personal data for a specified period in order to comply with legal obligations or, where applicable, for the establishment, exercise or defence of legal claims.
Where the legal basis for processing is the legitimate interests pursued by Lawberry pursuant to Article 6(1)(f) GDPR, your personal data will be processed until you effectively object to such processing or until the relevant processing purpose ceases to exist, whichever occurs first, unless Lawberry demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.
11. AUTOMATED DECISION-MAKING AND PROFILING
Lawberry does not make decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.
Lawberry may, however, use analytical and marketing tools that perform certain actions based on information collected through cookies and other tracking technologies. In our assessment, such processing does not produce legal effects concerning users or similarly significantly affect them, as it does not influence their legal status, differentiate their position as clients, or affect the terms and conditions of any legal services agreement that may be concluded with Lawberry.
12. KEEPING YOUR PERSONAL DATA UP TO DATE
Lawberry is committed to ensuring that the personal data it processes are accurate and, where necessary, kept up to date. We will rectify, update or erase personal data that prove to be inaccurate, incomplete or outdated.
Should you wish to update, rectify or otherwise amend your personal data, you may submit a request by contacting us at biuro@lawberry.pl.
13. KEEPING YOUR PERSONAL DATA UP TO DATE
Our website may contain links to third-party websites whose privacy practices differ from those of Lawberry. Such third-party websites may place their own cookies on your device, collect personal data or request that you provide personal information directly to them.
Where you provide personal data to any third-party website, the processing of such data will be governed by the privacy policy of that website. Lawberry has no control over, and accepts no responsibility or liability for, the privacy practices, content or operation of such third-party websites.
We encourage you to read the privacy policy of every website you visit before providing any personal data.
14. RIGHTS OF DATA SUBJECTS
In connection with the processing of your personal data by Lawberry, you are entitled to exercise the following rights under the GDPR:
a) right of access – to obtain confirmation as to whether your personal data are being processed and, where that is the case, to access such personal data, obtain information regarding the processing and receive a copy of the personal data (Article 15 GDPR);
b) right to rectification – to request the rectification of inaccurate personal data and the completion of incomplete personal data (Article 16 GDPR);
c) right to erasure („right to be forgotten”) – to request the erasure of your personal data in the circumstances provided for in Article 17 GDPR;
d) right to restriction of processing – to request the restriction of the processing of your personal data in the circumstances set out in Article 18 GDPR;
e) right to data portability – to receive the personal data concerning you that you have provided to Lawberry in a structured, commonly used and machine-readable format, and to transmit those data to another controller where the processing is based on your consent or on a contract and is carried out by automated means (Article 20 GDPR);
f) right to object – to object, on grounds relating to your particular situation, to the processing of your personal data where such processing is based on the legitimate interests pursued by Lawberry pursuant to Article 6(1)(f) GDPR. Upon receipt of a valid objection, Lawberry will cease processing your personal data for that purpose unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, you have the right to object at any time, without the need to provide any justification;
g) right to withdraw consent – where the processing of your personal data is based on your consent, you may withdraw such consent at any time. The withdrawal of consent:
- may be effected at any time by contacting Lawberry using the contact details provided in this Privacy Policy;
- shall not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal; and
- shall not affect the lawfulness of any further processing carried out on another valid legal basis where such basis exists;
h) right not to be subject to automated individual decision-making, including profiling, where such decision produces legal effects concerning you or similarly significantly affects you, unless one of the exceptions provided for in Article 22 GDPR applies;
i) right to lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data by Lawberry infringes the GDPR or any other applicable data protection legislation.
Contact Details of the Supervisory Authority
President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)
Moniuszki 1A, 00-014 Warsaw, Poland
website: www.uodo.gov.pl
To exercise any of the rights described above, you may contact Lawberry using the contact details provided in this Privacy Policy.
15. COOKIES
Cookies are small text files that are stored on your computer or mobile device when you visit our website. Cookies typically contain the name of the domain from which they originate, the period for which they are stored on your device and a unique, randomly generated identifier. The information collected through cookies helps us tailor the Website to users’ individual preferences and actual needs. Cookies also enable us to compile aggregate statistics concerning the use of the Website and to maintain user sessions.
The entity placing cookies on your terminal device and accessing them is Lawberry or third-party service providers whose services Lawberry uses. This Cookie Policy describes the rules governing the use of both first-party cookies and third-party cookies.
The information collected through cookies is used solely for the purposes of ensuring the proper functioning of the Website, carrying out statistical and analytical activities, supporting marketing activities and adapting the content of the Website to its users. Cookies used on the Website are not intended to identify users directly.
The following categories of cookies are used on the Website:
a) Necessary Cookies
These cookies are necessary for the operation of the Website and enable the use of its core functionalities, including authentication where required. Strictly necessary cookies contribute to the usability of the Website by enabling essential functions such as page navigation and access to secure areas of the Website. The Website cannot function properly without these cookies.
b) Functional Cookies
These cookies enable the Website to remember information that affects the way the Website behaves or appears, such as your preferred language or region.
c) Analytics / Statistical Cookies
These cookies collect information about how users interact with the Website, including the pages visited and error messages displayed. They do not collect information that directly identifies individual users. The information collected is aggregated and, where appropriate, anonymised. These cookies help us understand how visitors use the Website and enable us to improve its performance and functionality.
d) Advertising / Marketing Cookies
These cookies are used to promote products, services or content. They enable advertisements to be better tailored to users’ interests and preferences. For these purposes, third-party cookies may also be used.
Legal Bases for the Processing of Personal Data Through Cookies
Necessary Cookies
The processing of personal data in connection with the use of strictly necessary cookies is based on the necessity of such processing for the performance of a contract or for taking steps at the request of the user prior to entering into a contract, pursuant to Article 6(1)(b) GDPR, and, where applicable, on Lawberry’s legitimate interest in ensuring the secure and proper operation of the Website.
Functional and Analytics Cookies
The use of functional and analytics cookies is subject to your prior consent obtained through our Cookie Consent Management Platform. You may withdraw your consent at any time.
Where permitted under applicable law, the processing of personal data through such cookies may also be based on Lawberry’s legitimate interests pursuant to Article 6(1)(f) GDPR, consisting of ensuring the highest quality, functionality and security of the services provided through the Website.
Advertising / Marketing Cookies
The use of advertising or marketing cookies is subject to your prior consent obtained through our Cookie Consent Management Platform. Such consent may be withdrawn at any time.
Where permitted by applicable law, the processing of personal data in connection with advertising cookies may also be based on Lawberry’s legitimate interests pursuant to Article 6(1)(f) GDPR, consisting of promoting Lawberry’s own legal services and ensuring the effective operation and optimisation of the Website.
Third-Party Cookies
Like most modern websites, the Website uses functionalities provided by third parties, which may involve the use of cookies placed by such third parties.
The Lawberry Website contains links to Lawberry’s official profile on LinkedIn. Through these functionalities, users may access Lawberry’s LinkedIn profile and view the information published there.
Using a link to LinkedIn may result in the transfer of personal data between the user and the provider of that social media platform.
Lawberry has no control over the scope or manner in which LinkedIn processes personal data once you leave the Website or interact with LinkedIn’s services. Accordingly, we recommend that you review LinkedIn’s Privacy Policy and Terms of Service before using its services. LinkedIn may also use cookies and similar technologies independently of Lawberry.
Where you visit Lawberry’s LinkedIn profile, your personal data may be processed both by Lawberry and by LinkedIn. In relation to Page Insights and statistical information regarding users’ interactions with the LinkedIn page, Lawberry and LinkedIn may act as Joint Controllers within the meaning of Article 26 GDPR, to the extent determined by LinkedIn.
The respective responsibilities of Lawberry and LinkedIn are set out in the LinkedIn Page Insights Joint Controller Addendum.
In particular, LinkedIn is responsible for fulfilling the obligations arising under the GDPR in relation to the processing of personal data through the LinkedIn Page Insights service, including enabling data subjects to exercise their rights under the GDPR.
Personal data made available by users through Lawberry’s LinkedIn profile may be processed by Lawberry for the following purposes:
a) managing and administering Lawberry’s LinkedIn profile;
b) communicating with users, including responding to messages, comments and other interactions;
c) providing information regarding Lawberry’s activities, publications and legal services;
d) building and maintaining a professional community around Lawberry’s activities;
e) establishing, exercising or defending legal claims.
Further information regarding LinkedIn’s processing of personal data can be found in the LinkedIn Privacy Policy.
With respect to personal data processed by Lawberry, data subjects may exercise the rights described in the relevant section of this Privacy Policy. Where personal data are processed directly by LinkedIn, the exercise of data subject rights is governed by LinkedIn’s own privacy rules.
Notwithstanding the above, data subjects may exercise their rights under the GDPR against either LinkedIn or Lawberry. Where Lawberry receives a request relating to processing carried out under the Joint Controller arrangement, it will cooperate with LinkedIn to the extent necessary to facilitate the exercise of the data subject’s rights in accordance with applicable law.
16. EXERCISING YOUR DATA PROTECTION RIGHTS
Requests concerning the exercise of your rights under the GDPR should be submitted in writing to Lawberry at the address indicated in the „Contact” section of our website and, where possible, additionally by sending a scanned copy of the signed request to: biuro@lawberry.pl.
To enable Lawberry to verify your identity and process your request securely, your request should be signed and include, at a minimum, your full name, correspondence address and, where possible, your e-mail address.
Where permitted by applicable law, Lawberry may charge a reasonable administrative fee for complying with requests that are manifestly unfounded, excessive or repetitive, or may refuse to act on such requests, in accordance with Article 12(5) GDPR.
Lawberry will handle all requests submitted by data subjects in accordance with the GDPR and other applicable data protection legislation, without undue delay. A response to your request will be provided within one month of its receipt.
Where necessary, taking into account the complexity of the request or the number of requests received, this period may be extended by up to two additional months. In such cases, Lawberry will inform you of the extension and the reasons for the delay within one month of receiving your request, in accordance with Article 12(3) GDPR.
17. REQUIREMENT TO PROVIDE PERSONAL DATA
As a general rule, the provision of personal data is voluntary. However, in certain circumstances, the provision of specific personal data is necessary in order to fulfil the purposes for which such data are collected, including, in particular, to contact Lawberry, use certain functionalities of the Website, subscribe to our newsletter, participate in a recruitment process, enter into or perform a contract, receive legal services or enable Lawberry to comply with its legal obligations.
Failure to provide personal data identified as mandatory may prevent Lawberry from carrying out the relevant activity or providing the requested service, including responding to enquiries, providing legal services, entering into or performing a contract, conducting a recruitment process, delivering newsletters or enabling access to selected Website functionalities.
Where the provision of personal data is required by applicable law, failure to provide such data may prevent Lawberry from fulfilling its statutory obligations, including obligations relating to anti-money laundering and counter-terrorist financing (AML) legislation. In such circumstances, Lawberry may be unable to establish or continue a business relationship or provide the requested legal services.
18. CHANGES TO THIS PRIVACY POLICY
Lawberry reserves the right to amend this Privacy Policy from time to time in order to reflect changes in applicable law, regulatory requirements, our data processing practices or the functionalities of the Website.
While most amendments are expected to be of a minor nature, more significant changes may also be introduced where necessary. The date of the latest update to this Privacy Policy is indicated at the end of this document.
Any amendments to this Privacy Policy will be published on this page and will become effective upon publication unless otherwise stated.
19. CONTACT DETAILS
If you have any questions regarding this Privacy Policy, the processing of your personal data or wish to exercise your rights under the GDPR, please contact Lawberry using the contact details provided in the „Contact” section of our website or use the contact details in section 2 of the Privacy Policy.
20. VERSION
This Privacy Policy was published on 23 June 2026.