top of page

Privacy Policy

1. ABOUT US
The controller of personal data collected via the Website is Natalia Bartkiewicz-Zalewska, conducting business activity under the business name NATALIA BARTKIEWICZ-ZALEWSKA, with its registered address at ul. Grzybowska 87, 00-844 Warsaw, Poland, Tax Identification Number (NIP): 5311707365, REGON: 385207435, e-mail address: kontakt@nataliabartkiewicz.com (the "Controller").
The Controller operates the Website and is responsible for its proper functioning.

 

2. GENERAL PROVISIONS
This Privacy Policy sets out the rules for the processing of personal data of persons using the Website, including the purposes, legal bases and retention periods of such data, as well as the rights of data subjects.
The Controller exercises particular care to protect the interests of data subjects and, in particular, ensures that the collected data is:

  • processed lawfully,

  • collected for specified, lawful purposes,

  • not further processed in a manner incompatible with those purposes,

  • factually accurate and adequate in relation to the purposes for which it is processed,

  • stored for no longer than necessary.

This Privacy Policy is for information purposes only and does not create obligations for users of the Website.
Personal data is processed in accordance with:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR),

  • the Polish Personal Data Protection Act of 10 May 2018,

  • the Polish Act of 18 July 2002 on Providing Services by Electronic Means, insofar as applicable.

 

3. PURPOSE AND SCOPE OF DATA COLLECTION
The scope of processed data depends on which functionality of the Website the user uses.
The Controller may process personal data for the following purposes:

  • handling the contact form and responding to messages,

  • taking steps prior to entering into a contract, as well as concluding and performing a contract,

  • fulfilling obligations arising from legal provisions, in particular tax and accounting regulations,

  • establishing, pursuing or defending claims,

  • archiving correspondence and documentation for evidentiary purposes,

  • conducting direct marketing of the Controller's own services,

  • handling complaints or other requests.

The Controller may process the following data:

  • first and last name,

  • e-mail address,

  • phone number,

  • company or organisation name,

  • the content of a message sent via the contact form or e-mail,

  • other data voluntarily provided by the user.

Providing data is voluntary, but in some cases it may be necessary to respond, conclude a contract or perform a service.
Recipients of the data may include entities providing services necessary for the Controller's business operations, in particular:

  • hosting and e-mail service providers,

  • accounting service providers,

  • law firms or legal advisers,

  • IT tool providers,

  • entities supporting the operation of the Website.

Data may also be disclosed to public authorities if such an obligation arises from legal provisions.
The Controller applies appropriate technical and organisational measures to ensure the protection of personal data appropriate to the risk of infringement of the rights and freedoms of data subjects.
Personal data will be stored:

  • for the period necessary to handle contact or an enquiry,

  • for the duration of the contract and until the expiry of the limitation period for claims,

  • for the period required by law in the case of accounting and tax documentation,

  • until an effective objection is raised or consent is withdrawn, if the legal basis for processing is consent or the Controller's legitimate interest.

 

4. COOKIES AND OPERATIONAL DATA
The Website may use cookies, i.e. small text files stored on the user's end device.
Cookies may be used for the following purposes:

  • ensuring the proper operation of the Website,

  • adapting the Website to the user's preferences,

  • maintaining the session,

  • creating statistics regarding the use of the Website,

  • conducting marketing activities, if the user has given appropriate consent.

The user may manage cookies through their web browser settings. Restricting the use of cookies may affect certain functionalities of the Website.

 

5. LEGAL BASES FOR DATA PROCESSING
Personal data may be processed on the basis of:

  • Article 6(1)(a) GDPR - the consent of the data subject,

  • Article 6(1)(b) GDPR - necessity for the conclusion or performance of a contract,

  • Article 6(1)(c) GDPR - compliance with legal obligations incumbent on the Controller,

  • Article 6(1)(f) GDPR - the legitimate interests of the Controller, consisting in particular in handling correspondence, pursuing claims, archiving and direct marketing of the Controller's own services.

If processing is based on consent, the user has the right to withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.

 

6. RIGHTS OF THE DATA SUBJECT
The data subject has the right to:

  • access their data,

  • rectify their data,

  • erase their data,

  • restrict processing,

  • data portability,

  • object to processing,

  • withdraw consent at any time if processing is based on consent,

  • lodge a complaint with the President of the Personal Data Protection Office.

In order to exercise their rights, the user may contact the Controller at: kontakt@nataliabartkiewicz.com.

 

7. INFORMATION ON AUTOMATED DECISION-MAKING
As a rule, personal data is not processed in a manner leading to decisions concerning the user based solely on automated processing, including profiling, which would produce legal effects concerning the user or similarly significantly affect the user.

 

8. FINAL PROVISIONS
The Website may contain links to other websites. The Controller recommends that after visiting other websites, users read the privacy policy applicable there. This Privacy Policy applies only to this Website.
The Controller applies technical and organisational measures to protect personal data, including in particular:

  • securing systems against unauthorised access,

  • using an SSL certificate, if implemented on the Website,

  • restricting access to data solely to authorised persons.

In all matters related to the processing of personal data, the Controller may be contacted at:

bottom of page