Privacy policy

PRIVACY NOTICE (SUPPLIERS AND BUSINESS PARTNERS)

DONIEC GÓRECKI & PARTNERZY SP. K.

The security of your personal data is very important to us. We are committed to processing them to the highest standards. This privacy policy explains how and why we process your personal data and the rights you have.

Why do we process your personal data?

We process your personal data in connection with supplies or services provided to our firm, or other business cooperation with the firm.

What personal data do we process?

In particular, we process the following categories of personal data:

• first name(s) and surname,
• date of birth,
• role or position held,
• academic, honorary, military or other title, and academic degree,
• PESEL number (Polish personal identification number) or, if none, the type and number of an identity document,
• NIP and REGON numbers,
• email address,
• telephone number,
• other contact details,
• name and address of a sole trader’s business or company.

We may also request personal data other than those listed above where necessary to exercise a right or fulfil an obligation arising from the law or a contract.

In some circumstances, failure to provide particular personal data, withholding consent or withdrawing consent to processing may mean that we cannot establish or continue a business relationship.

What is the legal basis for processing personal data?

We process personal data where necessary to enter into or perform contracts with suppliers and business partners (Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, ‘GDPR’) (OJ L 119, 4 May 2016, p. 1, as amended)).

We also process personal data necessary to comply with legal obligations incumbent on our firm in connection with supplies or services provided to the firm, or other business cooperation with the firm (Article 6(1)(c) GDPR).

How long will we process your personal data?

We will process your personal data for as long as relevant to exercising rights and fulfilling obligations under our contracts, taking account of limitation periods, and to complying with the legal obligations incumbent on our firm under the law applicable at the time. Once those periods have expired, the data will be deleted unless continued retention is required by law or remains necessary to fulfil contractual obligations.

Do we process your data automatically, including through profiling, to make decisions?

Personal data are not processed automatically, including through profiling, for the purpose of making decisions.

Who do we share your personal data with?

Service providers

We may also disclose the personal data necessary to providers of accounting, HR and payroll, marketing, IT, financial, legal, consulting and other services connected with running our business. Entities processing personal data when providing services to us must protect those data and respect your rights in accordance with applicable law.

Related entities

In the event of a merger or acquisition, a reorganisation of our business, joint ventures with other entities, or the separation or sale of all or part of our business, we may disclose and/or transfer some or all personal data to other entities.

Legal obligations and security

We may disclose personal data to the competent administrative authorities, institutions and other authorised entities in Poland and abroad where required by applicable law, for example for tax or social security purposes, or at their request under legally prescribed procedures, such as at the request of a court, law enforcement authority or enforcement body. We may also process personal data where necessary to establish and protect our rights or pursue claims.

What rights do you have?

You have a number of rights under applicable law in connection with the processing of your personal data:

• the right to access your personal data and obtain a copy,
• the right to data portability,
• the right to have your personal data rectified,
• the right to erasure of personal data,
• the right to restriction of processing,
• the right to withdraw consent to processing,
• the right to object to the processing of personal data,
• the right to object to processing of personal data for direct marketing purposes,
• the right to lodge a complaint with a supervisory authority.

How can you exercise your rights?

The law does not prescribe a particular form or method of communication for exercising your rights. However, we attach great importance to ensuring that you can exercise them effectively. We have therefore provided a dedicated email contact for enquiries, notifications and requests concerning these rights: biuro@dgp.legal.

The right to lodge a complaint with a supervisory authority

If you believe that we are processing your personal data improperly, you can always contact us and may also lodge a complaint with the supervisory authority, the President of the Polish Personal Data Protection Office.

Changes to our personal data protection practices

We will notify you promptly of any significant changes to our personal data processing practices that affect your rights and obligations.

PRIVACY NOTICE (INFORMATION ABOUT OUR ACTIVITIES)

DONIEC GÓRECKI & PARTNERZY SP. K.

The security of your personal data is very important to us. We are committed to processing them to the highest standards. This privacy notice explains how and why we process your personal data and the rights you have.

Why do we process your personal data?

We process personal data in connection with maintaining social media profiles and pages, sending our newsletter, providing information about our services and the terms on which they are offered, conducting surveys, sending invitations and other direct marketing communications through social media, email, notifications, instant messaging, telephone calls, text messages and traditional correspondence (collectively, ‘information about our activities’).

What personal data do we process?

Depending on the circumstances, in individual cases we may process the following categories of personal data obtained directly from you or from third parties:

• first name(s) and surname,
• correspondence address,
• date of birth,
• role or position held,
• academic, honorary, military or other title, and academic degree,
• email address,
• telephone number,
• other contact details,
• name and address of a sole trader’s business or company,
• other data used to provide information about our activities while respecting the rights and freedoms of the individuals concerned.

What is the legal basis for processing personal data?

In connection with providing information about our activities, we process personal data on the basis of our legitimate interest under Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, ‘GDPR’) (OJ L 119, 4 May 2016, p. 1, as amended).

Where applicable law requires consent to send commercial communications to an identified natural person by electronic means, in particular email, we process personal data in connection with providing information about our activities on the basis of freely given, specific, informed and unambiguous consent under Article 6(1)(a) GDPR.

We may also process personal data where necessary to comply with legal obligations incumbent on our firm (Article 6(1)(c) GDPR), and on the basis of our legitimate interest in establishing and protecting our rights or pursuing claims (Article 6(1)(f) GDPR).

How long will we process your personal data?

We will process your personal data for as long as we communicate information about our activities.

Once the above periods have expired, the data will be deleted unless continued retention is required by law, remains necessary to fulfil contractual obligations, establish and protect our rights or pursue claims, or further processing is permitted or required by law on a basis other than consent.

Regardless of the above, if your consent is the basis for processing your personal data, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. We will stop processing the data promptly following withdrawal, unless further processing is permitted or required by law on a basis other than consent.

Do we process your data automatically, including through profiling, to make decisions?

Personal data are not processed automatically, including through profiling, for the purpose of making decisions. However, they may also be processed automatically, in particular to tailor communications to recipients’ preferences and send reminders and personalised offers based on their use of our website and the information sent to them. Automated processing will not produce legal effects or similarly significantly affect the data subject.

Who do we share your personal data with?

Service providers

We may disclose personal data to third parties providing services or tools that help us communicate information about our activities, analytical services examining interactions with messages or compiling statistics, or tools for sharing content on social networks and external websites. We may also disclose the personal data necessary to other entities providing services to us in connection with running our business. Entities processing personal data when providing services to us must protect those data and respect your rights in accordance with applicable law.

Related entities

In the event of a merger or acquisition, a reorganisation of our business, joint ventures with other entities, or the separation or sale of all or part of our business, we may transfer some or all personal data to other entities.

Legal obligations and security

We may disclose personal data to the competent administrative authorities, institutions and other authorised entities in Poland and abroad where required by applicable law, or at their request under legally prescribed procedures, for example at the request of a court, law enforcement authority or enforcement body. We may also process personal data where necessary to establish and protect our rights or pursue claims.

What rights do you have?

You have a number of rights under applicable law in connection with the processing of your personal data:

• the right to access your personal data and obtain a copy,
• the right to data portability,
• the right to have your personal data rectified,
• the right to erasure of personal data,
• the right to restriction of processing,
• the right to withdraw consent to processing,
• the right to object to the processing of personal data,
• the right to object to processing of personal data for direct marketing purposes,
• the right to lodge a complaint with a supervisory authority.

How can you exercise your rights?

The law does not prescribe a particular form or method of communication for exercising your rights. However, we attach great importance to ensuring that you can exercise them effectively. We have therefore provided a dedicated email contact for enquiries, notifications and requests concerning these rights: biuro@dgp.legal.

The right to lodge a complaint with a supervisory authority

If you believe that we are processing your personal data improperly, you can always contact us and may also lodge a complaint with the supervisory authority, the President of the Polish Personal Data Protection Office.

Changes to our personal data protection practices

We will notify you promptly of any significant changes to our personal data processing practices that affect your rights and obligations.

By submitting a job application to DONIEC GÓRECKI & PARTNERZY SP. K., you consent to the processing of the personal data contained in your application for recruitment to the position specified in our advertisement. This also applies, as appropriate, where you submit an unsolicited application that is not connected with an advertisement or employment offer from us.

If you would like us to retain your CV in our database for future recruitment, please also include the following consent statement in your CV: ‘I consent to the processing of the personal data contained in my job application for future recruitment purposes.’

The security of your personal data is very important to us. We are committed to processing them to the highest standards. This privacy notice explains how and why we process your personal data and the rights you have.

Why do we process your personal data?

We process your personal data in connection with recruitment for the position specified in our advertisement and, if you give separate, freely given, specific, informed and unambiguous consent, for potential future recruitment.

What personal data do we process?

We process only applicants’ personal data that the law permits or requires for recruitment to the position and compliance with any other legal obligations, namely the following categories:

• first name(s) and surname,
• the first names of the applicant’s parents,
• date of birth,
• place of residence (correspondence address),
• education,
• employment history,
• any other personal data whose provision is required by separate legal provisions.

In some cases, failure to provide the above data may prevent an applicant from participating in the recruitment process or may require the missing necessary data to be supplied.

Providing any personal data other than those listed above, including an image, during recruitment is voluntary and does not affect the course or outcome of the recruitment process; in particular, it will not be a basis for rejecting an application. Providing such data on the applicant’s own initiative is regarded as consent to their processing for recruitment purposes.

What is the legal basis for processing personal data?

We process personal data during recruitment under Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, ‘GDPR’) (OJ L 119, 4 May 2016, p. 1, as amended).

If you give separate, freely given, specific, informed and unambiguous consent, we process personal data for potential future recruitment (Article 6(1)(a) GDPR).

We may also process personal data where necessary to comply with legal obligations incumbent on our firm in connection with engaging employees or other personnel (Article 6(1)(c) GDPR), and on the basis of our legitimate interest in establishing and protecting our rights or pursuing claims (Article 6(1)(f) GDPR).

How long will we process your personal data?

We will process your personal data:

• in connection with recruitment for a particular position, until the recruitment process is completed, but for no longer than six months from the date the data were obtained; and
• if you give separate, freely given, specific, informed and unambiguous consent to the processing of your data for potential future recruitment, for no longer than one year from the date the data were obtained.

Once the above periods have expired, the data will be deleted unless continued retention is required by law or remains necessary to fulfil contractual obligations, establish and protect our rights or pursue claims.

Regardless of the above, if your consent is the basis for processing your personal data, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Do we process your data automatically, including through profiling, to make decisions?

Personal data are not processed automatically, including through profiling, for the purpose of making decisions.

Who do we share your personal data with?

Service providers

We may disclose the personal data necessary to entities providing services to us in connection with running our business. Entities processing personal data when providing services to us must protect those data and respect your rights in accordance with applicable law.

Related entities

In the event of a merger or acquisition, a reorganisation of our business, joint ventures with other entities, or the separation or sale of all or part of our business, we may transfer some or all personal data to other entities.

Legal obligations and security

We may disclose personal data to the competent administrative authorities, institutions and other authorised entities in Poland and abroad where required by applicable law, or at their request under legally prescribed procedures, for example at the request of a court, law enforcement authority or enforcement body. We may also process personal data where necessary to establish and protect our rights or pursue claims.

What rights do you have?

You have a number of rights under applicable law in connection with the processing of your personal data:

• the right to access your personal data and obtain a copy,
• the right to data portability,
• the right to have your personal data rectified,
• the right to erasure of personal data,
• the right to restriction of processing,
• the right to withdraw consent to processing,
• the right to object to the processing of personal data,
• the right to object to processing of personal data for direct marketing purposes,
• the right to lodge a complaint with a supervisory authority.

How can you exercise your rights?

The law does not prescribe a particular form or method of communication for exercising your rights. However, we attach great importance to ensuring that you can exercise them effectively. We have therefore provided a dedicated email contact for enquiries, notifications and requests concerning these rights: biuro@dgp.legal.

The right to lodge a complaint with a supervisory authority

If you believe that we are processing your personal data improperly, you can always contact us and may also lodge a complaint with the supervisory authority, the President of the Polish Personal Data Protection Office.

Changes to our personal data protection practices

We will notify you promptly of any significant changes to our personal data processing practices that affect your rights and obligations.

PRIVACY NOTICE

DONIEC GÓRECKI & PARTNERZY SP. K. (EMPLOYEES AND OTHER PERSONNEL)

The security of your personal data is very important to us. We are committed to processing them to the highest standards. This privacy policy explains how and why we process your personal data and the rights you have.

Why do we process your personal data?

We process personal data in connection with your engagement as an employee or other member of our firm’s personnel.

We may also process your personal data if you are a family member or other person close to an employee or other member of our personnel, where that person must provide your data in order to exercise particular entitlements.

On the basis of your freely given, specific, informed and unambiguous consent, we may also process personal data for purposes including: (i) access to services such as training, private healthcare, sports, cultural and health facilities and services, insurance and similar benefits offered to our employees and other personnel; and (ii) our firm’s marketing activities, such as using your image in marketing materials.

What personal data do we process?

We process only employees’ personal data that the law permits for entering into and performing an employment contract and exercising other statutory rights and fulfilling statutory obligations, including in particular:

• first name(s) and surname,
• date of birth,
• PESEL number (Polish personal identification number) or, if none, the type and number of an identity document;
• contact details,
• residential address;
• education,
• professional qualifications,
• employment history,
• payment account number, unless the employee has requested payment of remuneration in cash,
• other personal data of the employee, and personal data of family members or other persons close to an employee or other member of our personnel, where providing those data is necessary to exercise particular statutory entitlements.

We may also request personal data other than those listed above where necessary to exercise a right or fulfil an obligation arising from the law or a contract.

For personnel engaged other than under an employment contract, we process only the personal data necessary to enter into and perform the contract and comply with other legal obligations, including in particular:

• first name(s) and surname,
• date of birth,
• PESEL number (Polish personal identification number) or, if none, the type and number of an identity document;
• contact details,
• residential address;
• education,
• professional qualifications,
• employment history,
• payment account number,
• other personal data of the employee, and personal data of family members or other persons close to an employee or other member of our personnel, where providing those data is necessary to exercise particular statutory entitlements.

We may also request personal data other than those listed above where necessary to exercise a right or fulfil an obligation arising from the law or a contract.

On the basis of separate, freely given, specific, informed and unambiguous consent, we may also process other personal data for purposes including: (i) access to training, private healthcare, sports, cultural and health facilities and services, insurance and similar benefits offered to our personnel and their immediate families; and (ii) our firm’s marketing activities, such as using an employee’s image in marketing materials.

In some circumstances, failure by an employee, other member of our personnel or their family members or other people close to them to provide particular personal data, withholding consent or withdrawing consent to processing may prevent them from exercising certain entitlements or receiving benefits. In such cases, we will make every effort to give those concerned advance, detailed information about the consequences of not providing the data or of withholding or withdrawing consent.

What is the legal basis for processing personal data?

We process personal data where necessary to enter into or perform contracts with employees and other personnel (Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, ‘GDPR’) (OJ L 119, 4 May 2016, p. 1, as amended)).

We also process personal data necessary to comply with legal obligations incumbent on our firm in connection with engaging employees or other personnel, such as tax accounting, social security obligations or requirements under employment law, including occupational health and safety (Article 6(1)(c) GDPR).

In addition, on the basis of separate, freely given, specific, informed and unambiguous consent, we may process other personal data for purposes including providing certain additional benefits to employees, other personnel and their family members or other people close to them, or participation in our firm’s marketing activities (Article 6(1)(a) GDPR).

How long will we process your personal data?

We will process your personal data relating to your engagement for as long as relevant to exercising rights and fulfilling obligations under our contracts, taking account of limitation periods, and to complying with the legal obligations incumbent on our firm under the law applicable at the time, particularly employment, tax and social security law. Once those periods have expired, the data will be deleted unless continued retention is required by law or remains necessary to fulfil contractual obligations.

Regardless of the above, if your consent is the basis for processing your personal data, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. We will stop processing the data promptly following withdrawal, unless further processing is permitted or required by law on a basis other than consent.

Do we process your data automatically, including through profiling, to make decisions?

Personal data are not processed automatically, including through profiling, for the purpose of making decisions.

Who do we share your personal data with?

Personnel duties

We may disclose certain personal data, such as your name, role or position and contact details, to third parties in connection with the performance of your contractual duties in the ordinary course of our business, or in connection with medical examinations, training and similar circumstances relating to your role or position.

Service providers

We may also disclose the personal data necessary to providers of accounting, HR and payroll, marketing, IT, financial, legal, consulting and other services connected with running our business. Entities processing personal data when providing services to us must protect those data and respect your rights in accordance with applicable law.

Benefits

If you use benefits or other additional services offered through us, we may disclose your personal data to third parties involved in providing them, such as healthcare providers, organisations offering access cards for sports, cultural and health facilities and services, and insurers.

Related entities

In the event of a merger or acquisition, a reorganisation of our business, joint ventures with other entities, or the separation or sale of all or part of our business, we may disclose and/or transfer some or all personal data to other entities.

Legal obligations and security

We may disclose personal data to the competent administrative authorities, institutions and other authorised entities in Poland and abroad where required by applicable law, for example for tax or social security purposes, or at their request under legally prescribed procedures, such as at the request of a court, law enforcement authority or enforcement body. We may also process personal data where necessary to establish and protect our rights or pursue claims.

What rights do you have?

You have a number of rights under applicable law in connection with the processing of your personal data:

• the right to access your personal data and obtain a copy,
• the right to data portability,
• the right to have your personal data rectified,
• the right to erasure of personal data,
• the right to restriction of processing,
• the right to withdraw consent to processing,
• the right to object to the processing of personal data,
• the right to object to processing of personal data for direct marketing purposes,
• the right to lodge a complaint with a supervisory authority.

How can you exercise your rights?

The law does not prescribe a particular form or method of communication for exercising your rights. However, we attach great importance to ensuring that you can exercise them effectively. We have therefore provided a dedicated email contact for enquiries, notifications and requests concerning these rights: biuro@dgp.legal.

The right to lodge a complaint with a supervisory authority

If you believe that we are processing your personal data improperly, you can always contact us and may also lodge a complaint with the supervisory authority, the President of the Polish Personal Data Protection Office.

Changes to our personal data protection practices

We will notify you promptly of any significant changes to our personal data processing practices that affect your rights and obligations.

Cookies and browser storage

We do not use advertising, remarketing or analytics cookies on the public pages of this website. We use the mechanisms below to provide features selected by the user.

Language preference — dgp_language

When you select a language manually, we store a functional cookie named dgp_language containing the code pl, en or es. It applies across the website and expires 180 days after your selection. Selecting a language again updates both its value and its storage period. The cookie applies your preference on /start/; a direct link to a particular language version takes precedence. It contains no name, email address or advertising identifier.

Saved articles — localStorage

The Saved feature in Know-how stores the identifiers, titles and URLs of your selected articles in your browser’s localStorage under the key dgp-know-how-saved-v1. Data are saved when you use this feature. The list stays on that device, is not sent to our server as a list of saved articles and requires no account. It has no automatic expiry: you can remove articles from the list or clear the website’s data in your browser.

Signing in to the administration area

People using the WordPress sign-in page and administration area may receive separate technical cookies to test cookie support, authenticate users, maintain sessions and remember administration preferences. These cookies are not needed for ordinary browsing of the public pages.

Device storage and the basis for processing personal data

You activate the language and saved-article preferences yourself. Device storage necessary to provide those requested features is used under Article 399(3)(2) of the Polish Electronic Communications Law. We do not use this exemption for advertising or analytics. To the extent that operating and securing the website involves processing personal data, the basis is the legitimate interests pursued by the controller (Article 6(1)(f) GDPR).

External services and your settings

Social-media and map links lead to external websites; once you open them, the relevant provider’s rules apply. The newsletter form communicates with Brevo through our server and does not embed a Brevo tracking script on the page. Processing for subscriptions and mailings is described separately in the newsletter section of this policy.

You can delete cookies and localStorage data or block their storage in your browser settings. Deletion may clear your language preference and saved-article list; you can still read the website and choose a language version using links. For personal-data enquiries, contact biuro@dgp.legal. The other sections of this policy describe your GDPR rights, including access, rectification, erasure, restriction of processing, data portability and the right to object, where applicable, and your right to lodge a complaint with the President of the Polish Personal Data Protection Office.