Privacy and Cookie Policy

A. Privacy Policy

I. Introduction

The owner of the website https://prwlegal.pl/ (hereinafter referred to as the “Website”) is PRW Legal Wiącek i Wspólnicy spółka komandytowa, with its registered office in Warsaw (02-972), ul. Adama Branickiego 11/32, entered into the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw in Warsaw, 3rd Commercial Division of the National Court Register under KRS number 0000933482, NIP 9512530125, REGON 520510833, hereinafter referred to as the Administrator or “prwlegal.pl”.

II. Personal Data

This Privacy Policy contains information regarding the processing of personal data that you may provide to us while using the Website, as well as the use of cookies on the Website.

Personal data are processed and protected in accordance with applicable laws, in particular in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”).

III. Collection of Personal Data

Whenever the Administrator asks you to provide personal data, the Administrator explains the purpose for which the data are required. Only data necessary to provide a specific service are collected and used solely for that purpose.

The Administrator collects personal data only for specific, explicit, and legitimate purposes presented before or at the time of data collection and does not process them in a manner incompatible with those purposes.

Only data that are adequate, relevant, and necessary for the processing purpose are collected. Where necessary, the Administrator takes reasonable steps to ensure that personal data are accurate and up to date.

IV. Data Retention Period

Personal data will not be stored longer than necessary to achieve the purposes for which they were collected, unless a longer retention period results from legal provisions or the legitimate interests of the Administrator.

V. Data Security

The Administrator applies measures aimed at ensuring the confidentiality, security, and integrity of personal data.

The Administrator makes every effort to prevent personal data from being modified, disclosed, or used by unauthorized third parties.

User actions that may be considered potentially unsafe or unlawful may result in restrictions on access to the Website (e.g., session blocking).

VI. Links to Third-Party Websites

The Website may contain links to third-party websites. The Administrator has no control over such websites and is not responsible for their privacy or data security practices. Users are encouraged to review the privacy policies of those websites before using them or providing any data.

VII. Children Under the Age of 13

The Website is intended for adults, and the Administrator does not knowingly collect personal data from children under the age of 13 without the consent of a parent or legal guardian, where such consent is required. If you are a parent or guardian and believe that a child has provided us with personal data, please contact us at: prwlegal@prwlegal.pl.

VIII. Acceptance of the Privacy and Cookie Policy

Using the Website constitutes acceptance of this Privacy Policy. If you do not agree with any of its provisions, please refrain from using the Website and from providing any data.

B. Detailed Information on the Processing of Personal Data

I. Personal Data Controller

The personal data controller is PRW Legal Wiącek i Wspólnicy spółka komandytowa, with its registered office in Warsaw (02-972), ul. Adama Branickiego 11/32, entered into the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw in Warsaw, 3rd Commercial Division of the National Court Register under KRS number 0000933482, NIP 9512530125, REGON 520510833.

Contact details:

• e-mail: prwlegal@prwlegal.pl

• correspondence address: ul. Adama Branickiego 11/32, 02-972 Warsaw

• phone: (+48) 22 651 86 30

In matters concerning the processing of personal data and the exercise of data protection rights, you may contact the Administrator by e-mail or in writing at the above correspondence address (with the note “Personal Data”).

II. Purposes, Legal Bases, and Data Retention Periods

In connection with the use of the Website, personal data may be processed for the following purposes:

Personal data are not subject to automated decision-making that produces legal effects or similarly significantly affects the User.

III. Is Providing Data Mandatory?

Providing personal data is voluntary; however, it may be necessary to achieve the purpose for which the data are collected.

IV. Rights of Data Subjects

You have the right to:

• access your data (Article 15 GDPR),

• rectification (Article 16 GDPR),

• erasure (Article 17 GDPR),

• restriction of processing (Article 18 GDPR),

• data portability (Article 20 GDPR),

• objection (Article 21 GDPR) – where processing is based on Article 6(1)(f) GDPR,

• withdrawal of consent – where processing is based on consent (without affecting the lawfulness of processing prior to withdrawal).

To exercise these rights, please contact the personal data controller. You also have the right to lodge a complaint with the President of the Personal Data Protection Office regarding the processing of your personal data.

V. Data Recipients

Personal data may be transferred to entities cooperating with the Administrator, in particular IT and hosting service providers. Such entities process data on the basis of an agreement and solely in accordance with the Administrator’s instructions, where they act as data processors.

Personal data may also be disclosed to entities authorized under applicable law, solely in cases where the Administrator is legally obliged to do so.

VI. Transfer of Personal Data to Third Countries (Outside the EEA)

As a rule, personal data are not transferred outside the European Economic Area (EEA). However, due to the use of services and infrastructure of subcontractors (e.g., IT, analytics, marketing), data may be transferred outside the EEA only where necessary and with an adequate level of protection ensured, in particular through:

• a European Commission decision on an adequate level of protection,

• standard contractual clauses,

• binding corporate rules,

• other mechanisms required under the GDPR (including framework programs such as the Data Privacy Framework, where applicable).

C. Cookies

I. General Information

The Website uses cookies and similar technologies.

II. What Are Cookies?

Cookies are IT data (usually text files) stored and saved on the end user’s device (e.g., computer, phone, tablet). Cookies do not cause configuration changes to the device or software.

Data contained in cookies may relate, among other things, to how the Website is used (e.g., visited subpages, duration of visits, navigation paths).

III. Types of Cookies and Legal Bases

Necessary cookies – essential for the operation of the Website and cannot be disabled in our systems. They enable, among other things, correct display of the Website and use of basic functionalities.
Legal basis: Article 6(1)(f) GDPR (legitimate interest: ensuring the operational functionality of the Website).

Analytical / performance cookies – allow analysis of Website traffic (e.g., number of visits, time spent, navigation paths), helping to improve the Website.
Legal basis: user consent (Article 6(1)(a) GDPR).

IV. Consent and Withdrawal of Consent

Consent to the use of cookies (other than necessary cookies) may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To change cookie settings or withdraw consent, please use the cookie settings module (Cookiebot) available on the Website.

V. Cookie Retention Period

Cookies remain on the user’s device for the period specified in their parameters or until they are deleted by the user. Information on retention periods is available in the Cookiebot settings panel.

D. How to Change Settings, Uninstall, or Prevent the Installation of Cookies on Your Device

I. Changing Cookie Settings in Popular Web Browsers

By default, most web browsers allow cookies to be stored on the user’s device. These settings may be changed by the user, in particular to block automatic handling of cookies (including third-party cookies) or to notify the user each time cookies are stored. Detailed information on cookie management options is available in the browser settings and help section.

Restricting the use of cookies may affect certain functionalities available on the Website and, in extreme cases, may prevent proper display of the Website, use of certain functions, or completion of specific actions.

Users may delete stored cookies at any time—either all cookies or selected ones—using the browsing data deletion functions in their browser.

Instructions for changing settings and deleting cookies in popular browsers include:

• Mozilla Firefox – cookie management instructions (including blocking and deleting)

• Google Chrome – instructions for deleting cookies and managing third-party cookie settings

• Microsoft Edge – cookie management instructions (viewing, allowing, blocking, deleting)

• Apple Safari (macOS / iOS) – instructions for clearing history, cache, and cookies, and managing website data

• Opera – instructions for setting cookie preferences and deleting browsing data

It is also possible to configure your browser to block cookies or to warn you each time cookies are installed. Instructions can be found in the browser’s “Help” menu.

II. Duration of Cookie Storage on the User’s Device

Cookies remain on the user’s device for the period specified in their parameters or until they are manually deleted by the user. Information on cookie duration is provided in the Cookiebot used by the Website.

E. Final Provisions

This Privacy Policy is effective as of 5 January 2026. Any amendments will be published on the Website and will become effective upon publication. Users are encouraged to review the Privacy Policy regularly.