Legal Note

Privacy Policy (Legal Notice) applicable at Drzewiecki, Tomaszek i Wspólnicy sp.j.

This Privacy Policy (Legal Notice) sets out the rules for the processing of personal data by Drzewiecki, Tomaszek i Wspólnicy sp.j. (hereinafter also referred to as: „Law Firm”) in connection with the provision of legal services on the basis of agreements concluded with the Law Firm, as well as the terms of use of the website www.dt.com.pl including the rules on the use of cookies and other similar technologies by the website www.dt.com.pl The purposes and legal bases for the processing of personal data, to the extent that this Privacy Policy applies in a given case, are set out in § 5 below.

This Privacy Policy has been drawn up in order to fulfil the duty to inform arising in particular from:

1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC („GDPR”);
2. the Act of 10 May 2018 on the Protection of Personal Data;
3. the Act of 12 July 2024 – Electronic Communications Law (hereinafter: „PKE”);
4. the Act of 26 May 1982 – Law on the Bar (Prawo o adwokaturze);
5. the Act of 6 July 1982 on Legal Counsels (o radcach prawnych);
6. the Act of 11 April 2001 on Patent Attorneys (o rzecznikach patentowych).

PART I — INFORMATION ON THE PROCESSING OF PERSONAL DATA

§ 1. Data Controller

The controller of your personal data is Drzewiecki, Tomaszek i Wspólnicy sp.j., with its registered office in Warsaw, ul. Belwederska 23, 00-761 Warsaw, entered in the register of entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS no.: 0000874734, NIP (Tax ID): 5260021467, REGON: 011079177, tel.: +48 22 840 95 00, e-mail: dt@dt.com.pl.

§ 2. Data Protection Officer

A Data Protection Officer has been appointed within the Law Firm – who may be contacted at the following e-mail address: inspektor.danych@dt.com.pl or in writing (to the registered address of the Law Firm) with the annotation „DPO”.
The Data Protection Officer may be contacted in all matters concerning the processing of personal data and the exercise of rights related to such processing.

§ 3. Scope of this Information

This Information constitutes fulfilment of the duty to inform referred to in Articles 13 and 14 of the GDPR, in respect of:

1. persons whose data the Law Firm has obtained directly from those persons (Article 13 of the GDPR), including persons using the website www.dt.com.pl persons addressing correspondence to the Law Firm, persons applying for employment with the Law Firm, and Clients of the Law Firm;

2. persons whose data the Law Firm has obtained otherwise than directly from those persons (Article 14 of the GDPR), including parties to proceedings conducted by the Law Firm, witnesses, counterparties of the Law Firm’s Clients, and other persons whose data are necessary for the conduct of cases.

§ 4. Categories of Personal Data

Due to the specific nature of its activities, the Law Firm may process the following categories of your data:

1. identification data (including first name, surname, PESEL number, NIP, ID card or passport number, date of birth, citizenship);
2. address data;
3. contact data (e.g. telephone number, e-mail address);
4. financial and asset-related data (e.g. income, liabilities, bank accounts, information necessary for settlements and invoicing);
5. data concerning legal status (e.g. parties to proceedings, case file numbers, content of procedural pleadings);
6. data contained in correspondence (e.g. e-mail, letters, meeting notes, recordings of conversations);
7. contractual data (e.g. agreements, powers of attorney, declarations);
8. technical data concerning the use of the website (e.g. IP address, device identifiers, browser data, system logs, data on activity on the website);
9. data concerning employment or business activity (in employment or corporate matters);
10. in matters entrusted to the Law Firm by you in the area of family law, criminal law, employment law, medical law, compensation claims, disciplinary matters, the Law Firm may also process special categories of data (so-called „sensitive data”) within the meaning of Article 9 of the GDPR, as well as data concerning convictions and criminal offences within the meaning of Article 10 of the GDPR, including data concerning health, data concerning civil status and family life, data concerning trade union membership, data revealing racial or ethnic origin, data concerning religious and philosophical beliefs.

§ 5. Purposes and Legal Basis for the Processing of Personal Data

Your personal data may be processed by the Law Firm for the following purposes:

1. providing legal assistance to the Clients of the Law Firm and performance of professional activities by advocates, legal counsels and patent attorneys of the Law Firm in accordance with the Act of 26 May 1982 – Law on the Bar (Prawo o adwokaturze), the Act of 6 July 1982 on Legal Counsels (o radcach prawnych) and the Act of 11 April 2001 on Patent Attorneys (o rzecznikach patentowych) (the legal basis for processing is Article 6(1)(b) or (f) of the GDPR – depending on whether the data subject is a party to a contract with the Law Firm, or whether the data concerns another person whose data is necessary for the conduct of the case; with regard to data referred to in Article 9 of the GDPR – Article 9(2)(f) of the GDPR);

2. performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract (the legal basis for processing is Article 6(1)(b) of the GDPR);

3. fulfilment of obligations arising from the Act of 1 March 2018 on Counteracting Money Laundering and Terrorist Financing (AML), in particular as regards the identification and verification of the Client’s identity and beneficial owners as well as transaction monitoring (the legal basis for processing is Article 6(1)(c) of the GDPR);

4. establishing and pursuing the Law Firm’s own claims or defending against claims raised against the Law Firm (the legal basis for processing is the legitimate interest pursued by the Law Firm, i.e. Article 6(1)(f) of the GDPR);

5. for archival (evidentiary) purposes constituting the implementation of the Law Firm’s legitimate interest in securing information in the event of a legal need, inter alia, to demonstrate facts (the legal basis for processing is Article 6(1)(f) of the GDPR);

6. for the purpose of conducting recruitment of persons interested in employment or cooperation with the Law Firm (the legal basis for processing is Article 6(1)(c) of the GDPR in conjunction with Article 22¹ of the Polish Labour Code, and Article 6(1)(a) of the GDPR – with regard to data provided voluntarily by the candidate that go beyond the requirements of the Labour Code);

7. for the purpose of conducting correspondence and handling enquiries addressed to the Law Firm via the website, e-mail or other contact channels (the legal basis for processing is Article 6(1)(b) of the GDPR – to the extent that the contact is aimed at concluding a contract, or Article 6(1)(f) of the GDPR – the legitimate interest of the Law Firm in providing a response to the enquiry);

8. for the purpose of ensuring the proper functioning, security and optimisation of the website www.dt.com.pl including protection against abuse (the legal basis for processing is Article 6(1)(f) of the GDPR – the legitimate interest of the Law Firm);

9. for the purpose of fulfilling the legal obligations incumbent on the Law Firm (the legal basis for processing is Article 6(1)(c) of the GDPR, in particular obligations arising from the Accounting Act, the Tax Ordinance, the Act on Counteracting Money Laundering and Terrorist Financing, the Law on the Bar and the Act on Legal Counsels);

10. for the purpose of compiling statistics on the use of the website and measuring its effectiveness with the use of the Google Analytics tool — exclusively on the basis of the User’s prior, freely given consent referred to in Article 6(1)(a) of the GDPR and Article 399(1) of the PKE.

§ 6. Periods of Processing of Personal Data

The Law Firm will store your personal data:

1. in connection with the conclusion of a contract and for the purpose of its performance – for the duration of the contract, and subsequently for the period and to the extent required by law, as well as for the period necessary to establish and pursue the Law Firm’s own claims or to defend against claims raised against the Law Firm; with regard to case files maintained by an advocate or legal counsel – for a period of at least 10 years from the end of the year in which the proceedings in which the personal data were processed have ended, in accordance with Article 16(3) of the Act of 26 May 1982 – Law on the Bar and § 12 of the Rules on the Practice of the Legal Counsel Profession;

2. as regards establishing and pursuing the Law Firm’s own claims or defending against claims raised against the Law Firm – until the limitation period for potential claims arising from the contract or from another title;

3. as regards the fulfilment of legal obligations incumbent on the Law Firm – for the period during which the provisions of law require the retention of documentation and the performance of the resulting obligations vis-à-vis you;

4. as regards data processed for the purpose of conducting recruitment – for the duration of the recruitment process, and in the case of consent given to participate in future recruitment processes – for the period indicated in the consent, but no longer than 12 months;

5. as regards data processed in connection with the use of the website (server logs, technical data) – for the period necessary to ensure the security and proper functioning of the website, but no longer than 12 months, unless a longer period is justified by defence against claims;

6. as regards data processed on the basis of consent – until consent is withdrawn.

§ 7. Recipients of Personal Data

Your data are intended for the Law Firm and may be transferred to the following recipients:

1. entities and authorities to which the Law Firm is obliged or authorised to disclose personal data on the basis of generally applicable provisions of law;

2. entities processing personal data on behalf of the Law Firm pursuant to a data processing agreement concluded with the Law Firm, in particular IT service providers, software providers, hosting and e-mail providers, accounting firms, tax advisory firms and auditors;

3. courts, public administration authorities, law enforcement authorities and other state and local government bodies – to the extent and in cases provided for by law or in connection with ongoing proceedings;

4. counterparties of the Law Firm’s Clients and third parties participating in legal activities conducted by the Law Firm on behalf of Clients (e.g. the other party to a contract, the opposing party in proceedings, notaries, court enforcement officers);

5. the insurer under the compulsory professional civil liability insurance of advocates, legal counsels and patent attorneys – to the extent necessary to handle any claim;

6. the provider of the Google Analytics tool, i.e. Google Ireland Limited, with its registered office in Dublin (with the possibility of further data transfer to Google LLC) — where you have given consent to the use of analytical cookies in accordance with Part II of this Notice.

§ 8. Rights of the Data Subject

Decisions concerning you are not taken in an automated manner, including by means of profiling within the meaning of Article 22 of the GDPR.

You have the following rights:
1. the right of access to your personal data (Article 15 of the GDPR);
2. the right to request rectification of data (Article 16 of the GDPR);
3. the right to request erasure of data (Article 17 of the GDPR);
4. the right to request restriction of processing (Article 18 of the GDPR);
5. the right to data portability (Article 20 of the GDPR) – to the extent provided for by the regulations;
6. to the extent that the basis of processing is the legitimate interest of the Law Firm (Article 6(1)(f) of the GDPR) – the right to object to processing (Article 21 of the GDPR);
7. to the extent that the basis of processing is your consent (Article 6(1)(a) of the GDPR) – the right to withdraw consent at any time; withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal;
8. the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stanisława Moniuszki 1A, 00-014 Warsaw) in the event that you consider that the processing of your personal data infringes the provisions of the GDPR.

The exercise of your rights takes place on the terms and within the limits set out in the GDPR and – with regard to data covered by professional secrecy – taking into account the limitations indicated in § 12 of this Information.

§ 9. Source of the Data

Notwithstanding the data provided to us by you, your data may also originate from:
1. the principal (in case of a power of attorney granted);
2. a statutory representative;
3. the Client of the Law Firm or a party to proceedings in which the Law Firm represents its Client;
4. publicly available sources (e.g. databases and registers: REGON, the Central Register and Information on Economic Activity (CEIDG), the National Court Register, the land and mortgage register).

§ 10. Transfer of Personal Data to a Third Country

In justified and necessary cases, for the purpose of performance of a contract (e.g. carrying out your instructions related to the contract), as well as in cases where the transfer of personal data is necessary (e.g. for technical reasons of managing servers and infrastructure for storing data, including hosting and cloud services), the Law Firm may disclose your personal data to entities having their registered office outside the European Economic Area (EEA).

In the event of transfer of your personal data to a third country which does not ensure an adequate level of protection of personal data, the transfer shall take place on the basis of one of the mechanisms provided for in the GDPR, in particular:
1. on the basis of an adequacy decision of the European Commission, as referred to in Article 45 of the GDPR;
2. on the basis of standard contractual clauses adopted by the European Commission (Article 46(2)(c) of the GDPR);
3. on the basis of specific situations provided for in Article 49 of the GDPR (e.g. explicit consent of the data subject or necessity for the performance of a contract).

A copy of the safeguards applied may be obtained by contacting the Data Protection Officer of the Law Firm at the address indicated in § 2.

§ 11. Obligation to Provide Personal Data

The provision of data by you is voluntary, however, refusal to provide it may hinder or prevent the proper performance of the service or contract concluded by you with the Law Firm, including making it impossible for the Law Firm to fulfil its legal obligations, inter alia, in financial and tax matters. In particular, the provision of certain categories of data may be required by law (e.g. AML provisions).

§ 12. Professional Secrecy

The advocates, legal counsels and patent attorneys of the Law Firm are bound by professional secrecy referred to in Article 6 of the Act of 26 May 1982 – Law on the Bar (Prawo o adwokaturze), in Article 3 of the Act of 6 July 1982 on Legal Counsels (o radcach prawnych) and in Article 14 of the Act of 11 April 2001 on Patent Attorneys (o rzecznikach patentowych), respectively. To the extent that personal data is covered by professional secrecy, the Law Firm’s obligations under the GDPR, including the rights of data subjects, are subject to the limitations provided for in Article 16a of the Law on the Bar, in Article 3(4)–(6) of the Act on Legal Counsels and in Article 14 of the Act on Patent Attorneys, respectively.

§ 13. Technological Tools Supporting the Work of the Law Firm

In the course of providing legal assistance, the Law Firm may use technological solutions supporting the work of the team, in certain situations also including tools based on machine learning or artificial intelligence technologies.
1. Such tools may be used solely as auxiliary instruments, under the supervision of the person in charge of the case.
2. All substantive activities and decisions are always taken by an advocate, legal counsel or patent attorney.
3. The use of such tools takes place with observance of the statutory professional secrecy, in a manner excluding the transfer of information covered by professional secrecy or Client data to publicly available artificial intelligence models, and excluding the use of such information for the training of such models.

PART II — COOKIES POLICY

§ 14. Definitions

Cookies (so-called „cookies”) are IT data, in particular text files, which are stored in the User’s telecommunications terminal device (computer, tablet, smartphone) and are intended for use of the website. These files contain in particular the name of the website from which they originate, the time of their storage on the terminal device, and a unique number.

This Part of the Legal Notice also applies to other technologies of similar operation, including local storage, session storage, tracking pixels, tags, scripts, and other mechanisms for storing information on the terminal device or for accessing such information.

§ 15. Legal Basis

The use of cookies and other technologies referred to in § 14 is subject to:
1. Article 399 of the Act of 12 July 2024 – Electronic Communications Law, which requires prior information of the User and – save for cases set out in Article 399(3) of the PKE – obtaining the User’s consent;
2. the provisions of the GDPR – to the extent that the storage of information or access thereto involves the processing of personal data.

§ 16. Categories of Cookies Used

The Law Firm uses the following categories of cookies:

16.1. Strictly Necessary Cookies
Strictly necessary cookies are exclusively cookies which remember the User’s choice as to giving (or refusing) consent to the use of analytical cookies referred to in section 16.2 below. The use of strictly necessary cookies does not require the User’s consent in accordance with Article 399(3) of the PKE.

16.2. Analytical Cookies — Google Analytics
Analytical cookies consist exclusively of cookies used by the Google Analytics tool provided by Google Ireland Limited, with its registered office in Dublin (with the possibility of further data transfer to Google LLC). These cookies serve to compile statistics on the use of the website and to measure its effectiveness for the purpose of its improvement. The use of analytical cookies requires the User’s prior, freely given consent; the User may, but is not obliged to, give such consent. Refusal of consent does not affect the User’s ability to use the website.

§ 17. List of Cookies

A detailed list of cookies used on the www.dt.com.pl website, together with information on their names, providers, purposes and storage time, is presented in the table below:

Cookie name Provider / domain Purpose Category Storage time
_ga Google Analytics Analyses of the number of people visiting the website analytical 6 months
niezbedne dt.com.pl Remembering user settings for cookies selection necessary 6 months

§ 18. Consent Mechanism

On the User’s first visit to the website, a banner concerning analytical cookies is displayed. In order to continue using the website, the User should close the banner by making one of the following choices:
1. giving consent to the use of analytical cookies (Google Analytics) – by clicking the „Accept” icon
2. refusing consent to the use of analytical cookies – by clicking the “Reject” icon
The use of the website, scrolling through it, or failure to react to the banner does not constitute consent.
Until consent is given, the Law Firm does not use cookies other than strictly necessary ones.

§ 19. Withdrawal of Consent and Settings Management

The User may at any time withdraw consent given to the use of cookies. Withdrawal of consent is as easy as giving it and takes place by:
1. clicking on the „Cookie settings” icon visible in the lower left corner of the website, which allows User to change the previously saved cookie settings by displaying the banner referred to in § 18 again;
2. changing the settings of the web browser in a way that prevents the storage of cookies.
Withdrawal of consent does not affect the lawfulness of data processing carried out on the basis of consent prior to its withdrawal.

§ 20. Managing Cookies in the Browser

Notwithstanding the consent mechanism described in § 18, the User may at any time manage cookies by changing the settings of their web browser. Most browsers allow, in particular, to:
1. block all cookies;
2. block third-party cookies;
3. delete stored cookies;
4. receive notifications each time a cookie is saved.

Detailed information on how to manage cookies is available in the documentation of the chosen web browser. However, it should be noted that blocking strictly necessary cookies may affect the functionality of the website.

§ 21. Third-Party Cookies

The website may contain cookies originating from a third party, i.e. from the provider of the Google Analytics tool — Google Ireland Limited, with its registered office in Dublin (with the possibility of further data transfer to Google LLC). The use of such cookies, including the processing of data by the said entity, is subject to the privacy policies and cookie policies of that entity. A detailed list of Google Analytics cookies together with links to Google’s policies is provided in the table referred to in § 17.

PART III — PROVISIONS REGARDING THE WEBSITE

§ 22. Copyright

All content placed on the website www.dt.com.pl including texts, graphics, graphic layout, logos and trademarks, constitutes the subject of copyright of the Law Firm or third parties and is protected in accordance with the Act of 4 February 1994 on Copyright and Related Rights, as well as other generally applicable provisions of law.

Copying, reproducing, distributing or any other use of the content placed on the website beyond the scope of permitted personal use requires the prior written consent of the Law Firm.

§ 23. Disclaimer of Liability

The content placed on the website www.dt.com.pl is for informational purposes only and does not constitute legal advice, a legal opinion, or any other form of legal assistance within the meaning of the Law on the Bar, the Act on Legal Counsels or the Act on Patent Attorneys.

The Law Firm exercises due diligence to ensure that the content placed on the website is up-to-date and correct; however, it shall not be liable for the consequences of actions taken by Users on the basis of information obtained from the website. In order to obtain legal advice tailored to your individual situation, please contact the Law Firm directly.

The Law Firm shall not be liable for the content of third-party websites to which links are provided on the website www.dt.com.pl

§ 24. Information on the Practice of the Profession

Drzewiecki, Tomaszek i Wspólnicy sp.j. is a registered partnership (spółka jawna) bringing together advocates, legal counsels and patent attorneys, who practise their profession in accordance with, respectively: the Act of 26 May 1982 – Law on the Bar, the Act of 6 July 1982 on Legal Counsels and the Act of 11 April 2001 on Patent Attorneys, as well as in accordance with the relevant principles of professional ethics.

§ 25. Final Provisions

This Legal Notice may be subject to updates in order to reflect changes in legal provisions or in the practice of the Law Firm. The current version of the Legal Notice is available on the website www.dt.com.pl

In matters not regulated by this Legal Notice, the provisions of the GDPR, the Personal Data Protection Act, the Electronic Communications Law and other generally applicable provisions of law shall apply, in particular.

Date of last update: 03.06.2026

DT Legal Note before 2 June 2026.pdf

© 2025 Drzewiecki, Tomaszek i Wspólnicy sp.j.

website created by: Legion