Contact and enquiry handling
Purpose: responding to messages and handling correspondence.
Legal basis: Art. 6(1)(f) GDPR.
PRIVACY
Privacy and cookies policy
This page explains who controls your data, why we process it, which analytics tools we use and what rights you have.
Data controller
The controller of your personal data is Maciej Lis Kancelaria Radcy Prawnego, NIP: 5020124707, Pl. Batorego 3/115, 70-207 Szczecin, Poland.
In this policy, we use the term "Controller" or "we".
Contact
For privacy and data protection matters, contact us at kontakt@lis.legal or by post: Pl. Batorego 3/115, 70-207 Szczecin, Poland.
The consultation form requires only your email address. Other answers and your description are optional. We use them to respond to your enquiry and arrange a call. Form contents, selected answers and the message preview are not sent to Google Analytics or Microsoft Clarity. Clarity is not loaded on contact pages and is stopped before the form opens on other pages. The form also works when analytics cookies are rejected and does not store your enquiry in localStorage.
To limit spam and prevent duplicate sending, we store protected hashes of your IP address, email address and enquiry, together with the technical sending status. This state does not contain your enquiry text. Entries are valid for no more than 25 hours after the last operation recorded in them and are removed on the next request or by an hourly cleanup task. When that task runs as scheduled, entries remain in the live form state for no more than 26 hours. This period does not apply to email correspondence, hosting logs or hosting backups, which have separate retention rules. The legal basis is our legitimate interest in keeping the form secure and reliable (Art. 6(1)(f) GDPR).
Purposes and legal bases
We process personal data to operate the website, answer enquiries, provide legal services, handle accounting and tax duties, manage social media, organise events, conduct recruitment and pursue or defend legal claims.
Contract conclusion and performance
Purpose: pre-contract actions, conclusion and performance of legal services.
Legal basis: Art. 6(1)(b) GDPR.
Accounting and tax obligations
Purpose: invoicing, accounting and statutory obligations.
Legal basis: Art. 6(1)(c) GDPR and Art. 6(1)(b) GDPR.
Claims and legal defence
Purpose: establishing, pursuing or defending legal claims.
Legal basis: Art. 6(1)(f) GDPR.
Events
Purpose: event organisation and participant handling.
Legal basis: Art. 6(1)(b) GDPR.
Newsletter, if launched
Purpose: expert updates and service-related information.
Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.
Recruitment
Purpose: recruitment process and candidate communication.
Legal basis: Art. 6(1)(c) GDPR and consent under Art. 6(1)(a) GDPR for additional data and future recruitment.
Analytics and website operation
We process technical data and server logs to ensure operation, security and optimisation of the website, based on Art. 6(1)(f) GDPR.
With your consent, we use Google Analytics and Microsoft Clarity to analyse website usage. This includes identifiers, browser and device data, approximate location, visited pages, time on page and interactions. Legal basis: Art. 6(1)(a) GDPR and consent for storing or accessing information on your device.
We do not use marketing cookies. We do not use remarketing advertising cookies.
Data recipients
- IT and hosting providers, including OVHcloud
- Email providers, including OVHcloud MX Plan
- Analytics providers, including Google and Microsoft
- Accounting providers
- Subcontractors and collaborators
- Work management tools
- Public authorities and courts when required by law
Where providers process data on our behalf, this is based on data processing agreements.
Transfers outside the EEA
When using tools such as Google Analytics and Microsoft Clarity, data may be transferred outside the EEA, including to the United States. Transfers rely on GDPR mechanisms such as adequacy decisions, standard contractual clauses or other required safeguards.
Your rights
Under the GDPR, you have the right to access, rectify, erase or restrict processing of your data, to data portability, to object, to withdraw consent, and to file a complaint with the Polish supervisory authority.
right of access
right to rectification
right to erasure
right to restriction
right to data portability
right to object
right to withdraw consent
right to complain to the supervisory authority
Withdrawal of consent does not affect lawfulness of processing carried out before withdrawal.
Profiling
We may analyse browsing behaviour for analytics purposes. We do not make decisions based solely on automated processing, including profiling, that would produce legal effects or similarly significant effects for you.
Final provisions
We may update this policy due to legal, technological or business changes. External websites linked from our site may have their own policies and terms.
Have a privacy question?
Write to us if you want to ask about personal data processing or exercise your rights.
Contact us
Social media
We run profiles on Facebook, Instagram and LinkedIn. If you interact with our profiles, we may process profile name, visible image, comments, messages and interaction statistics. Legal basis: Art. 6(1)(f) GDPR.