Privacy Policy

GDPR Information Clause

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – “GDPR“, we inform that:

Data Administrator

The administrator of your personal data (“Administrator”) is Project Warszawa spółka z ograniczoną odpowiedzialnością with its registered seat in Warsaw, 16/LU 1 Poznańska Str., 00-680 Warsaw, NIP: 5851466758, REGON: 221918280, share capital in the amount of PLN 5,105,000.00, entered into the Register of Entrepreneurs of the National Court Register under KRS number 0000469452.

Contact Administrator

Administrator has not appointed a Data Protection Officer. In all matters related to the protection of personal data, you may contact the Administrator at the following e-mail address: kasia@barbotin‒larrieu.ch and in writing to the address of the Administrator’s registered office indicated above – with the note “Personal Data Protection”.

Personal Data

We received personal data directly from you when you fill in the contact form available at www.kasiamichalski.com, agreeing to be contacted via provided e-mail address or when you provide personal data as part of contacting the Administrator in a different way.

Administrator processes the following personal data, which are ordinary data:
a) name and surname,
b) e-mail address,
c) other data provided by you in the course of filling in the contact form and further contact in the matter for which you turned to the Administrator.

In addition, we may automatically collect technical data regarding the user’s visit to the Administrator’s websites (e.g. IP address, domain name, browser type, operating system type, etc.).

Purpose and Basic of Processing

The processing of personal data takes place for the following purposes and on the legal grounds indicated therein:

responding to a message sent via the contact form, i.e. in order to take action at the request of the data subject, before concluding the contract and the implementation or striving to conclude a contract with the Administrator – art. 6 sec. 1 lit. a) and b) GDPR;
processing is necessary for the purposes of the legitimate interests of the Administrator – art. 6 sec. 1 lit. f) GDPR, i.e. to present details of the offer, consider inquiries, prepare, conclude and perform the contract, ongoing communication, register correspondence, prepare and archive documents, create reports, analyzes and statistics for the internal needs of the Administrator and entities related to the Administrator and to determine or pursue claims or defend against such claims, care for the quality of cooperation;
processing is necessary to fulfill the legal obligation imposed on the Administrator – art. 6 sec. 1 lit. c) GDPR, i.e. to fulfill the obligations imposed by law, in particular tax and accounting obligations imposed on the Administrator;
sending commercial information by electronic means to the provided e-mail address – based on your voluntary consent to conduct such activities – art. 6 sec. 1 lit. a) GDPR.

in the event that the processing of personal data was to take place for a purpose other than those indicated above, each time it will take place after obtaining your consent to the processing of personal data, to the extent and for the purpose indicated in this consent – art. 6 sec. 1 lit. a) GDPR.

Data Storage Period

The period of personal data processing depends on the purpose for which the data is processed:

in case of processing based on consent – until receiving information about the withdrawal of consent. Consent is voluntary, so you may withdraw it at any time and it will not affect the lawfulness of the processing based on it before its withdrawal,
when data processing is necessary to conclude a contract, the data will be stored until the expiry of any limitation periods for claims and subject to the relevant provisions of generally applicable law,
for the period necessary to protect the interests of the data Administrator,
when data processing is necessary to fulfill the legal obligation incumbent on the Administrator – for the period resulting from the provisions of law,
in relation to other purposes based on the Administrator’s legitimate interest – for the period of validity of these purposes or until you submit your objection.

Data Recipients

The recipients of personal data may be entities or bodies to which the Administrator is obliged to provide data on the basis of generally applicable provisions of law or entities processing personal data on the basis of personal data processing agreements concluded with the Administrator.

We may transfer personal Data:

entities cooperating with the Administrator, including in particular providers of legal, advisory, marketing, consulting, auditing and certification services, document archiving, e-mail service providers, IT service providers, entities providing courier, postal, forwarding or transport services – each time on the basis of relevant agreements ensuring the protection of privacy;
entities and bodies authorized to obtain personal data on the basis of legal provisions;
entities related by capital or personally to the Administrator.

Personal data will not be transferred to a third country/international organization and will not be subject to automated decision making, including profiling.

Rights of Data Subject

On the terms set out in the provisions of the GDPR, you have the right to:

access to your personal data and receive a copy thereof,
rectify (correct) your personal data,
limit the processing of personal data or delete personal data, in cases specified by law,
transfer of personal data,
withdraw of consent to data processing at any time,
lodge a complaint with the President of the Personal Data Protection Office (to the address of the Personal Data Protection Office, 2 Stawki Str., 00 – 193 Warsaw),
object at any time to the processing of personal data in order to implement the Administrator’s legitimate interests.

Rights of Data Subject

On the terms set out in the provisions of the GDPR, you have the right to:

access to your personal data and receive a copy thereof,
rectify (correct) your personal data,
limit the processing of personal data or delete personal data, in cases specified by law,
transfer of personal data,
withdraw of consent to data processing at any time,
lodge a complaint with the President of the Personal Data Protection Office (to the address of the Personal Data Protection Office, 2 Stawki Str., 00 – 193 Warsaw),
object at any time to the processing of personal data in order to implement the Administrator’s legitimate interests.

Voluntary Provision of Data

Providing personal data specified in the contact form as required is a contractual and voluntary requirement. Failure to provide data will result in the inability to send a message using the form. Providing other personal data is voluntary, but it may prevent from taking certain actions or concluding a contract.