Privacy and cookie policy

Your privacy matters to us. That is why we want to explain clearly what personal data we collect, why we use it and what rights you have.

We process personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR).

1. Who is responsible for your data?

The controller of your personal data is Sylwia Kilińska-Łokieć, running a business under the name Sylwia Kilińska-Łokieć radca prawny, tax ID (NIP): 1181729804, address: ul. Bażancia 2, 02-892 Warsaw, Poland, operating under the Legal Resilience brand (the “Controller”).

If you have any questions about your data, you can contact us:

• e-mail: kontakt@legalresilience.pl
• phone: +48 506 149 254

2. What data do we collect and why?

When you contact us

If you send us an e-mail or call us, we may process your first name, surname, e-mail address, phone number and the information you provide in your message.

We use this data to answer your question, stay in touch with you or discuss working together.

The legal basis for processing is:

• Article 6(1)(f) GDPR: our legitimate interest in handling enquiries and correspondence;
• Article 6(1)(b) GDPR: where you contact us in order to take steps prior to entering into a contract with you.

When you visit our website

When you use the website, technical data may be processed, such as your IP address and information about your browser or the device you are using.

This data is used to keep the website working properly and securely and to produce aggregate visitor statistics (Cloudflare Web Analytics). These statistics do not use cookies, do not track you across other websites and do not allow us to identify you.

The legal basis is Article 6(1)(f) GDPR: our legitimate interest in ensuring the efficient and secure operation of the website and in keeping aggregate statistics on its use.

When it is necessary to establish, pursue or defend claims

We may also process data where this is necessary to establish, pursue or defend legal claims.

The legal basis is Article 6(1)(f) GDPR.

3. Do you have to provide your data?

No. Providing your data is voluntary.

However, if you would like a reply, we need contact details we can reply to.

4. How long do we keep your data?

We keep data only for as long as necessary to achieve the purpose for which it was collected.

• Correspondence data: for as long as needed to deal with your enquiry and bring the correspondence to a close.
• Data relating to a potential contract: for as long as needed to take the steps you asked for.
• Data needed to establish, pursue or defend claims: for as long as necessary for this purpose, taking limitation periods into account.
• Technical data: for as long as needed to ensure the proper and secure operation of the website.

In justified cases, correspondence data may be kept longer if this is necessary to establish, pursue or defend claims.

5. Who may receive your data?

We use the services of other companies to run the website and handle correspondence:

• Cloudflare, Inc.: website hosting, protection against attacks and aggregate visitor statistics (technical data);
• Google Ireland Ltd.: e-mail (Google Workspace);
• Sanity US Inc.: the website's content management system, from which some of the images are displayed (technical data);
• IT support providers: to the extent necessary to maintain the website.

These companies may access data only to the extent necessary to provide their services.

Data may also be disclosed to competent authorities where required by law.

6. What are your rights?

In connection with the processing of your data, you may:

• access your data and receive a copy of it;
• request that your data be corrected or completed;
• request that your data be erased;
• request that processing be restricted;
• object to processing based on our legitimate interest;
• exercise your right to data portability, where applicable.

These rights apply under the conditions set out in the GDPR. This means that not every request will result in your data being erased or transferred straight away.

If you wish to exercise your rights, write to kontakt@legalresilience.pl.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) in Poland if you believe that your data is being processed unlawfully.

7. Is your data transferred outside the European Economic Area?

Cloudflare, Inc., Google and Sanity may also process data outside the European Economic Area, in particular in the United States.

Such transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework or, where that does not apply, on standard contractual clauses approved by the European Commission.

8. Do we use cookies?

Cookies are small text files saved on your device when you visit a website.

Our website does not use cookies or any similar technologies. We do not use advertising tools or social media plugins, which is why you will not see a cookie consent banner here.

The website relies on two external providers: Cloudflare, which hosts it, and Sanity, the system from which some of the images are displayed. During your visit, your browser connects to their servers, which receive only the technical data needed to display the website, such as your IP address and browser information. Cloudflare uses this to give us aggregate visitor statistics (such as page views, country and device type), without cookies and without building a profile of you. You do not connect to the servers of any advertising network or social media platform.

If we start using cookies in the future, we will update this policy and, where required, ask for your consent.

9. Do we make automated decisions based on your data?

We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

10. Can this privacy policy change?

Yes. We may update this policy if the law, the way the website works or the tools we use change.

The current version of the privacy policy will always be available on the Legal Resilience website.