Effective from 29 October 2026. This is a translation; in case of discrepancy the Polish version prevails.
1. Data controller
The controller of your personal data is Bogusław Wieczorek, attorney-at-law (radca prawny), conducting business as Kancelaria Radcy Prawnego Bogusław Wieczorek, Al. Grunwaldzka 472C, 80-309 Gdańsk, Poland, Tax ID (NIP) 5832816855.
For matters concerning personal data you can contact me by e-mail (kontakt@boguslawwieczorek.pl), by phone (+48 501 951 937) or by post at the address above. The controller has not appointed a data protection officer, as there is no obligation to do so.
2. Purposes and legal bases
I process data only for the purposes described below, under Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to an e-mail or phone call | name, e-mail, phone number, content of the message | Art. 6(1)(f) GDPR; Art. 6(1)(b) GDPR where the contact concerns entering into a contract |
| Providing legal services | client data and data contained in case documents | Art. 6(1)(b) GDPR; Art. 9(2)(f) GDPR for special categories of data |
| Third-party data in client matters | data contained in case documents | Art. 6(1)(f) GDPR |
| Invoicing, tax and accounting | data from invoices and contracts | Art. 6(1)(c) GDPR |
| Anti-money laundering, where applicable | client identification data | Art. 6(1)(c) GDPR |
| Establishing, pursuing or defending claims | data needed for the matter | Art. 6(1)(f) GDPR |
| Website security | IP address, technical browser data, server logs | Art. 6(1)(f) GDPR |
| Website visit statistics | data from analytics cookies | Art. 6(1)(a) GDPR (consent) |
| Measuring Google Ads performance | data from marketing cookies | Art. 6(1)(a) GDPR (consent) |
Providing data is voluntary, but without it I cannot reply to your message or enter into and perform a contract. I do not make decisions about you based solely on automated processing, including profiling.
3. Professional secrecy
As an attorney-at-law I am bound to keep secret everything I learn in connection with providing legal assistance (Article 3 of the Polish Act of 6 July 1982 on Attorneys-at-Law). This obligation also covers personal data.
For this reason some of the rights described in section 6 may be limited, and third parties whose data appear in case documents may not always be informed of the processing (Art. 14(5)(d) GDPR).
4. Recipients
Your data may be disclosed only to entities that help me run my practice, and only to the extent necessary:
- website and e-mail hosting provider: Prociv Sp. z o.o. (VH.pl), ul. Czerniawska 2A/27, 50-576 Wrocław, Poland;
- Google Ireland Limited – for Google Analytics, Google Ads and Google Search Console;
- the provider of the website security tool (Wordfence, Defiant, Inc.) – IP address and technical data;
- courts, public authorities and offices (e.g. the Polish Patent Office, EUIPO), bailiffs, experts and other legal representatives – where a matter requires it.
Transfers outside the European Economic Area
Using Google and Wordfence tools may involve transferring data to the United States. Such transfers rely on the European Commission’s adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) for certified entities, or on standard contractual clauses adopted by the European Commission.
5. Retention periods
| Data | Retention period |
|---|---|
| Correspondence not leading to a contract | until the matter is resolved, then until any claims become time-barred |
| Client case files | for the term of the contract, then for the period required by law and professional ethics, and until claims become time-barred |
| Accounting and tax records | 5 years from the end of the calendar year in which the tax payment deadline expired |
| Anti-money laundering records | 5 years, calculated in accordance with those regulations |
| Analytics data (Google Analytics) | 14 months |
| Data processed on the basis of consent | until consent is withdrawn, but no longer than the periods stated in the cookies section |
| Website security logs | up to 30 days in Wordfence; server logs – for the period applied by the hosting provider; in the event of a security incident – until it is resolved |
6. Your rights
Subject to the limits arising from professional secrecy (section 3), you have the right to:
- access your data and obtain a copy (Art. 15 GDPR);
- rectification (Art. 16 GDPR);
- erasure (Art. 17 GDPR);
- restriction of processing (Art. 18 GDPR);
- data portability (Art. 20 GDPR);
- object to processing based on legitimate interests (Art. 21 GDPR);
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3) GDPR).
To exercise these rights, write to kontakt@boguslawwieczorek.pl. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
7. Cookies
Cookies are small text files stored on your device when you use the website. I use them in accordance with Article 399 of the Polish Electronic Communications Law of 12 July 2024: cookies necessary for the website to work are stored without consent, all others only after you consent.
| Type | Purpose | Examples and provider | Duration | Consent |
|---|---|---|---|---|
| Necessary | running the website and remembering your cookie choices | WordPress, consent management tool | session or up to 12 months | not required |
| Security | protecting the website against attacks | Wordfence | session or short-term | not required |
| Analytics | visit statistics that help improve the website | Google Analytics: _ga, _ga_[ID] | up to 2 years | required |
| Marketing | measuring Google Ads performance | Google Ads: _gcl_au | up to 90 days | required |
Managing your consent
On your first visit you will see a window where you can accept all cookies, reject non-essential ones or choose categories. You can change your choice at any time via the “Cookie settings” link in the footer. You can also delete or block cookies in your browser settings. For more on how Google uses data, see Google’s privacy policy.
8. Changes to this policy
This policy is effective from 29 October 2026. I may update it, for example when the tools used on the website or the law change. The current version is always available on this page.