Privacy policy

This document explains which personal data I process in connection with the operation of this website, for what purpose, on what legal basis and for how long, as well as the rights you have. I apply Regulation (EU) 2016/679 (GDPR) and the Polish Act on Legal Advisers, including the rules of professional secrecy.

1. Data controller

The data controller is Jakub Owczarek, attorney-at-law (radca prawny), conducting business under the name Jakub Owczarek your tax guide - kancelaria radcy prawnego, tax identification number (NIP): 7831845005, statistical number (REGON): 520243349.

In matters concerning personal data you may contact me by email: jakub@yourtaxguide.pl. I have not appointed a data protection officer, as I am not required to do so.

2. Contact form and correspondence

When you send the form or write to me, I process the data you provide: your full name, email address, optionally your phone number and company name, the topic and the content of your message. Together with the form I also store technical information about the source of the visit: the page on which you started your visit, campaign parameters (UTM) and the referring page, where available. This helps me understand which content is useful.

• Purpose: replying to your enquiry, arranging a conversation and, at your request, preparing a proposal for cooperation.
• Legal basis: Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and Article 6(1)(f) GDPR (my legitimate interest, namely conducting correspondence and handling enquiries).
• Retention period: if no cooperation is established, up to 12 months from the last contact. If cooperation is established, the data becomes part of the case file and is retained for the period required by law, including the rules on documenting the activities of a legal adviser and tax law.

Sending the form does not constitute consent to receiving marketing information. I do not send newsletters or offers without your explicit, separate consent.

Please do not include details covered by professional secrecy or special categories of data (for example health data) in the form. We will discuss the details of the matter during the conversation.

3. Website security and spam protection

To protect the form against automated submissions, I use the Cloudflare Turnstile service. The service analyses technical information about the browser and the connection in order to distinguish a person from a program. In addition, I limit the number of submissions from a single IP address. For this purpose I store a hash of the IP address for no longer than 24 hours. The hosting servers keep standard technical logs (including the IP address, date and time of the request) for the short period required to ensure security.

Legal basis: Article 6(1)(f) GDPR (my legitimate interest, namely the security of the website and protection against abuse).

5. Recipients of data

Data may be transferred to entities that provide services to me, on the basis of data processing agreements:

• Vercel Inc. (website hosting; the application runs in the Frankfurt region),
• Neon Inc. (form database, servers in the European Union, Frankfurt),
• Resend (sending email notifications about new enquiries),
• Cloudflare Inc. (protection of the form against spam),
• the email provider through which I conduct correspondence: Microsoft Ireland Operations Ltd. (Microsoft 365),
• where necessary, and with your knowledge: cooperating specialists (for example tax advisers, notaries), an accounting office and authorities entitled under the law.

Where data is stored

Data from the form, website content and photographs are stored on servers in the European Union (Frankfurt am Main, Germany).

6. Transfers of data outside the European Economic Area

Some providers are based in the United States. Data is transferred on the basis of the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) in respect of certified entities, or standard contractual clauses approved by the European Commission. You may obtain a copy of the safeguards by contacting me.

7. Your rights

You have the right to:

• access your data and obtain a copy of it,
• rectification of your data,
• erasure of your data,
• restriction of processing,
• data portability (for data processed in connection with a contract or on the basis of consent),
• object to processing based on legitimate interest, on grounds relating to your particular situation,
• withdraw consent at any time, where processing is based on consent,
• lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) if you consider that the processing infringes the law.

These rights may be subject to limitations arising from the rules on the professional secrecy of legal advisers.

8. Voluntary provision of data

Providing data is voluntary. Without your name, email address and a description of the matter, however, I cannot reply to an enquiry sent through the form.

9. Automated decision-making

I do not make decisions based solely on automated processing, including profiling.

10. Cookies and similar technologies

Information about cookies and other mechanisms for storing data in the browser can be found in the cookie policy.

11. Changes to this policy

I update this policy when the ways of processing data or the law change. The date of the last update is shown at the top of the page.