Information Clause on the Principles of Personal Data Processing
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter: "GDPR"), we inform you as follows:
[Controller's, contact details]

1. The Controller of your personal data is esb Justyna Matuszak, Kancelaria Radcy Prawnego with its registered office in Warsaw (03-317), 12/27 Wrzesińska Street, National Tax Identification Number (NIP): 5242555359, Business Identification Number (REGON): 221884976 (hereinafter referred to as the "Controller").
2. Contact with the Controller is possible:

1. by post to the following address esb Justyna Matuszak, Kancelaria Radcy Prawnego, ul. Wrzesińska 12 lok 27, 03-317 Warszawa
2. electronically at the address: biuro@esb-legal.pl
3. by telephone at: +48 22 401 06 13.

[Purpose and basis of personal data processing]

3. Your personal data, voluntarily provided by you in the contact form, will be processed for the following purposes:
   1. communication with you in relation to your message sent via the contact form - on the basis of Article 6(1)(f) of the GDPR, i.e. on the basis of the legitimate interest pursued by the Controller, which is communication with the person who initiated the contact;
   2. with the Controller
4. to establish, exercise or defend possible claims between you and the Controller - on the basis of Article 6(1)(f) GDPR, i.e. on the basis of a legitimate interest pursued by the Controller, which is the possibility to assert and defend against claims.
5. Providing personal data is voluntary, however, providing data concerning telephone number or e-mail address is necessary for the Controller to reply to the message sent in the contact form. No decisions will be taken with regard to you in an automated manner, including as a result of profiling.

[Categories of recipients of personal data]

6. Your personal data may be disclosed to the following entities: employees and associates of the Controller, IT service providers and hosting providers.
7. Your personal data may be disclosed to entities and authorities authorised to process such data under the provisions of law.
8. The Controller does not intend to transfer your personal data to countries outside the European Economic Area or to an international organisation.

[Retention period of personal data]

9. Your personal data will be processed for the period necessary for the purposes for which the data are processed (see point 3), or until you object (if the processing is based on the legitimate interest of the Controller) - depending on which of these events occurs first.
10. Afterwards, the Controller will store them until the statute of limitations for possible claims.

[Rights]

11. You have the right to access your personal data and the right to request its rectification, erasure or restriction of its processing.
12. You have the right to data portability, i.e. to receive from the Controller your personal data which you provided to the Controller in a structured, commonly used and machine-readable format. You may request the Controller to transfer this data to another controller.
13. To the extent that the basis for the processing of your personal data is the prerequisite of a legitimate interest of the Controller, you have the right to object to the processing of your personal data.
14. In order to exercise the above rights, you should contact the Controller using the contact details indicated above (see point 2).

Furthermore, you have the right to lodge a complaint with the supervisory authority in charge of personal data protection (the President of the Personal Data Protection Office) if you believe that the processing violates the GDPR.