{"id":23,"date":"2026-10-05T07:12:34","date_gmt":"2026-10-05T05:12:34","guid":{"rendered":"https:\/\/filiprak.noinputsignal.pl\/privacy-policy\/"},"modified":"2026-10-05T10:10:05","modified_gmt":"2026-10-05T08:10:05","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/filiprak.noinputsignal.pl\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"

In force from: [DATE \u2014 to be completed]<\/strong><\/p>\n

\n

This is a translation provided for convenience. In the event of any discrepancy, the Polish-language version of this Privacy policy is the binding one.<\/strong><\/p>\n<\/div>\n

1. General provisions<\/h2>\n

This Privacy policy sets out the rules for processing the personal data of persons using the website www.filiprak.pl (the \u201eWebsite\u201d) and contacting Filip Rak, attorney-at-law, through the contact form, by e-mail or through other communication channels available on the Website.<\/p>\n

The controller of personal data is: Filip Rak, attorney-at-law<\/strong>, address: ul. Wilcza 29a\/7, 00-544 Warsaw, Poland, tax ID (NIP): 7011071421, e-mail: filip.rak@adwokatura.pl \u2014 hereinafter the \u201eController\u201d.<\/p>\n

The Controller takes particular care to protect the privacy of persons using the Website and the security of the personal data processed.<\/p>\n

2. Contacting the Controller<\/h2>\n

For all matters relating to the processing of personal data, the Controller can be contacted at: filip.rak@adwokatura.pl<\/p>\n

The Controller has not appointed a Data Protection Officer. Matters concerning the protection of personal data should be addressed directly to the Controller.<\/p>\n

3. What personal data may be processed?<\/h2>\n

Depending on how the Website is used, the Controller may process in particular:<\/p>\n

    \n
  • first name and surname<\/li>\n
  • e-mail address<\/li>\n
  • telephone number<\/li>\n
  • data contained in a message sent through the contact form<\/li>\n
  • information concerning the legal matter to which the enquiry relates<\/li>\n
  • data of other persons provided by the person contacting the Controller<\/li>\n
  • data necessary to continue correspondence or to provide legal assistance<\/li>\n
  • technical data relating to the use of the Website, such as IP address, device data or browser information \u2014 to the extent that these are processed in connection with the operation of the Website<\/li>\n<\/ul>\n

    The contact form may allow information about the legal situation of the person contacting the Controller to be provided.<\/p>\n

    Such information may contain specially protected data, including data concerning health, private life or other special categories of data, as well as information concerning the commission of criminal offences or criminal proceedings.<\/p>\n

    \n

    For this reason, before making contact, please do not provide through the form a wider range of information than is necessary to describe the nature of the matter. In particular, please do not send documents containing sensitive data unless this is necessary at this stage.<\/strong><\/p>\n<\/div>\n

    4. For what purposes is the data processed?<\/h2>\n

    Personal data may be processed for the following purposes:<\/p>\n

    a) responding to an enquiry sent through the contact form<\/h3>\n

    Data is processed in order to respond to the message, to gain an initial understanding of the legal problem presented, and to determine whether and on what terms cooperation is possible. The legal basis is Article 6(1)(b) GDPR, where steps are taken at the request of the data subject prior to entering into a contract, or \u2014 where applicable \u2014 Article 6(1)(f) GDPR, namely the legitimate interest of the Controller in handling correspondence and organising professional activity.<\/p>\n

    b) conclusion and performance of a legal services agreement<\/h3>\n

    If contact leads to cooperation, data will be processed in order to conclude and perform a legal services agreement. The legal basis is Article 6(1)(b) GDPR.<\/p>\n

    c) compliance with legal obligations<\/h3>\n

    Data may be processed in order to fulfil obligations arising from the law, in particular tax and accounting provisions and the rules governing the practice of the profession of attorney-at-law. The legal basis is Article 6(1)(c) GDPR.<\/p>\n

    d) establishing, pursuing or defending claims<\/h3>\n

    Data may be processed in order to establish, pursue or defend against claims connected with the Controller’s activity. The legal basis is Article 6(1)(f) GDPR.<\/p>\n

    5. Data relating to criminal matters and other specially protected information<\/h2>\n

    Given the Controller’s specialisation in white-collar crime, information provided through the Website may relate in particular to criminal proceedings, suspicion of an offence, charges, judgments, preparatory proceedings or other information concerning criminal offences.<\/p>\n

    To the extent that such information constitutes personal data, the Controller processes it solely to the extent necessary to carry out professional activities and in accordance with applicable law.<\/p>\n

    The processing of data relating to criminal convictions and offences is governed by Article 10 GDPR, which requires an appropriate legal basis and safeguards provided for by Union or Member State law.<\/p>\n

    In the case of special categories of data, the Controller applies the relevant condition provided for in Article 9 GDPR where applicable, in particular to the extent necessary for the establishment, exercise or defence of legal claims.<\/p>\n

    6. Attorney\u2013client privilege<\/h2>\n
    \n

    Information provided to the Controller in connection with the provision of legal assistance is covered by attorney\u2013client privilege on the terms set out in the Act on the Bar and in the rules governing the practice of the profession of attorney-at-law.<\/strong><\/p>\n<\/div>\n

    Under Article 6 of the Act on the Bar, an attorney-at-law is obliged to keep confidential everything learned in connection with providing legal assistance. This duty of professional secrecy is not limited in time.<\/p>\n

    The duty covers, in particular, information provided by a client or a prospective client in connection with seeking or receiving legal assistance, as well as information obtained in connection with conducting a case.<\/p>\n

    The Controller takes appropriate organisational and technical measures to protect information covered by attorney\u2013client privilege against access by unauthorised persons, disclosure, loss or improper use.<\/p>\n

    7. Does submitting the form create an attorney\u2013client relationship?<\/h2>\n

    No.<\/strong><\/p>\n

    Sending a message through the contact form or by e-mail does not automatically constitute a legal services agreement, nor does it mean that the matter has been accepted.<\/p>\n

    Submitting the form serves in particular to enable contact and an initial assessment of whether cooperation is possible.<\/p>\n

    Where a potential conflict of interest arises, the Controller may be obliged to decline to take on the matter.<\/p>\n

    8. To whom may the data be disclosed?<\/h2>\n

    Personal data may be disclosed to:<\/p>\n

      \n
    • entities providing IT services to the Controller<\/li>\n
    • the hosting and e-mail provider<\/li>\n
    • providers of IT systems used to operate the Website<\/li>\n
    • entities providing accounting, legal or administrative services \u2014 to the extent necessary to provide those services<\/li>\n
    • entities entitled to obtain the data under applicable law<\/li>\n<\/ul>\n

      Entities to which the Controller entrusts data processing receive access to the data solely to the extent necessary to perform the services entrusted to them.<\/p>\n

      Information covered by attorney\u2013client privilege is disclosed only to the extent permitted by applicable law and by the rules governing the practice of the profession of attorney-at-law.<\/strong><\/p>\n

      9. Transfers of data outside the European Economic Area<\/h2>\n

      As a rule, the Controller does not intend to transfer personal data outside the European Economic Area.<\/p>\n

      \n

      [THIS SECTION MUST BE VERIFIED ONCE THE HOSTING, E-MAIL, ANALYTICS AND OTHER TOOLS HAVE BEEN CHOSEN.]<\/strong><\/p>\n<\/div>\n

      If, in connection with the use of a particular provider’s services, data is transferred to a third country, the Controller will ensure that the appropriate mechanisms provided for in the GDPR are applied.<\/p>\n

      10. How long is the data retained?<\/h2>\n

      Personal data will be retained for the period necessary to achieve the purpose for which it was collected. In particular:<\/p>\n

      a) enquiries that do not lead to cooperation<\/h3>\n

      Data will be retained for the period necessary to handle the enquiry and conclude the correspondence, and thereafter for the period necessary to secure any claims or to demonstrate that the Controller acted properly, where further retention is justified.<\/p>\n

      b) client data<\/h3>\n

      Data will be retained for the period necessary to perform the agreement, and thereafter for the period arising from the law and for the period necessary for protection against any claims.<\/p>\n

      c) accounting and tax data<\/h3>\n

      Data will be retained for the period required by the relevant legal provisions.<\/p>\n

      In the case of data covered by attorney\u2013client privilege, the retention period may also arise from obligations connected with practising as an attorney-at-law and from the nature of the matter handled.<\/p>\n

      11. Rights of the data subject<\/h2>\n

      The data subject has \u2014 to the extent provided for in the GDPR \u2014 the right to:<\/p>\n

        \n
      • access to their personal data<\/li>\n
      • rectification of the data<\/li>\n
      • erasure of the data<\/li>\n
      • restriction of processing<\/li>\n
      • data portability<\/li>\n
      • object to the processing of the data<\/li>\n
      • withdraw consent, where consent is the basis of processing<\/li>\n<\/ul>\n

        Withdrawal of consent does not affect the lawfulness of processing carried out before it was withdrawn.<\/p>\n

        The scope of individual rights may be subject to limitations arising from the law. This applies in particular where certain data must be retained because of a legal obligation, or where its disclosure or erasure would conflict with obligations connected with practising as an attorney-at-law.<\/p>\n

        12. Right to lodge a complaint<\/h2>\n

        If a data subject considers that their data is being processed in breach of the GDPR, they have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urz\u0119du Ochrony Danych Osobowych).<\/p>\n

        13. Voluntary provision of data<\/h2>\n

        Providing data through the contact form is voluntary.<\/p>\n

        However, providing the data marked as required is necessary to enable the Controller to respond to the message or to take steps at the request of the person making contact prior to entering into a contract.<\/p>\n

        Failure to provide the data may make it impossible to respond or to establish contact.<\/p>\n

        14. Automated decision-making and profiling<\/h2>\n

        The Controller does not use personal data to take decisions in relation to persons using the Website based solely on automated processing, including profiling, which would produce legal effects concerning them or similarly significantly affect them.<\/p>\n

        15. Cookies<\/h2>\n

        The Website may use cookies and similar technologies. Cookies may be used in particular in order to:<\/p>\n

          \n
        • ensure the proper functioning of the Website<\/li>\n
        • remember user settings<\/li>\n
        • ensure security<\/li>\n
        • compile statistics on the use of the Website<\/li>\n<\/ul>\n
          \n

          Detailed information on the cookies used, including their types, retention periods and how consent can be managed, is set out in [the Cookies policy \/ the cookie settings panel].<\/strong><\/p>\n<\/div>\n

          16. Security<\/h2>\n

          The Controller applies appropriate technical and organisational measures to ensure the security of the personal data processed, proportionate to the risk associated with that processing. In particular, the Controller takes steps to protect the data against:<\/p>\n

            \n
          • access by unauthorised persons<\/li>\n
          • loss<\/li>\n
          • destruction<\/li>\n
          • unauthorised alteration<\/li>\n
          • disclosure<\/li>\n
          • other unlawful processing<\/li>\n<\/ul>\n

            With regard to information connected with the provision of legal assistance, the Controller also takes into account the specific requirements arising from the duty of attorney\u2013client privilege.<\/p>\n

            17. Changes to the Privacy policy<\/h2>\n

            The Controller may update this Privacy policy from time to time, in particular in the event of:<\/p>\n

              \n
            • changes in the law<\/li>\n
            • changes in how the Website operates<\/li>\n
            • changes in the IT tools used<\/li>\n
            • changes in how personal data is processed<\/li>\n<\/ul>\n

              The current version of the Privacy policy is always available on the Website.<\/p>\n","protected":false},"excerpt":{"rendered":"

              In force from: [DATE \u2014 to be completed] This is a translation provided for convenience. In the event of any discrepancy, the Polish-language version of this Privacy policy is the binding one. 1. General provisions This Privacy policy sets out the rules for processing the personal data of persons using the website www.filiprak.pl (the \u201eWebsite\u201d) […]<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":6,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-23","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/filiprak.noinputsignal.pl\/en\/wp-json\/wp\/v2\/pages\/23","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/filiprak.noinputsignal.pl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/filiprak.noinputsignal.pl\/en\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/filiprak.noinputsignal.pl\/en\/wp-json\/wp\/v2\/comments?post=23"}],"version-history":[{"count":1,"href":"https:\/\/filiprak.noinputsignal.pl\/en\/wp-json\/wp\/v2\/pages\/23\/revisions"}],"predecessor-version":[{"id":71,"href":"https:\/\/filiprak.noinputsignal.pl\/en\/wp-json\/wp\/v2\/pages\/23\/revisions\/71"}],"wp:attachment":[{"href":"https:\/\/filiprak.noinputsignal.pl\/en\/wp-json\/wp\/v2\/media?parent=23"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}