Schedule a consultation
PLEN

Privacy Policy

INFORMATION ON PERSONAL DATA PROTECTION

I. DEFINITIONS

  1. Administrator – Aleksander Olender conducting business under the name Kancelaria Radcy Prawnego Aleksander Olender, NIP: 759-174-99-79, REGON: 383420892, ul. Sadowa 43, 07 – 300 Ostrów Mazowiecka, tel.: +48 667 431 706,
  2. Personal data – all information concerning an identified or identifiable natural person, including individual details that in connection with themselves can lead to the identification of that person’s identity, particularly based on identifiers such as name and surname, identification number, location data, online identifier or one or more specific factors defining the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person,
  3. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (general Data Protection Regulation) (OJ EU L 2016 No 119, p. 1 as amended),
  4. Processing of personal data – means an operation or set of operations performed on personal data or sets of personal data, whether by automated or non-automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, aligning or combining, restricting, deleting or destroying.

II. PROCESSING OF PERSONAL DATA

  1. The Administrator, in connection with the business activity it carries out, processes personal data.
  2. The Administrator ensures that personal data is processed in a manner that ensures the security of that data, in accordance with applicable laws, including particularly the GDPR.
  3. The Administrator employs appropriate technical and organizational measures to ensure the protection of processed data, particularly securing data against unauthorized access, processing in violation of the provisions of law, as well as alteration, loss, damage or destruction.

III. CONTACT WITH THE ADMINISTRATOR

Contact with the Administrator is possible via: (i) email at: biuro@olenderlegal.pl, (ii) phone at: +48 667 431 706, (iii) traditional mail at: ul. Sadowa 43, 07-300 Ostrów Mazowiecka.

IV. PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

  1. Personal data may be processed: a) for contact purposes (legal basis for processing art. 6 sec. 1 lit. f GDPR – justified interest of the Administrator consisting of enabling contact), b) in connection with the performance of a contract to which the data subject is a party or to take actions at the request of the data subject prior to entering into a contract (legal basis for processing art. 6 sec. 1 lit. b GDPR), c) in cases where it is necessary to comply with a legal obligation to which the Administrator is subject (legal basis for processing art. 6 sec. 1 lit. c GDPR), d) in connection with establishing claims or defending against claims related to the activities carried out by the Administrator (legal basis for processing art. 6 sec. 1 lit. f GDPR), e) to secure the Service and contact forms against spam and abuse from automatons (bots), using the Cloudflare Turnstile service – described in detail in section VI below (legal basis for processing art. 6 sec. 1 lit. f GDPR – justified interest of the Administrator consisting of ensuring the security of the Service and limiting spam and abuse).
  2. The Administrator provides a contact form, through which one can contact the Administrator. Using this form of contact requires providing personal data marked as mandatory. Providing this data is necessary to enable the Administrator to establish contact and handle the submitted inquiry. The legal basis for processing this personal data is art. 6 sec. 1 lit. f GDPR. The legal basis for processing personal data provided voluntarily is the consent of the data subject (art. 6 sec. 1 lit. a GDPR).

V. RECIPIENTS OF PERSONAL DATA

Personal data may be disclosed to persons authorized by the Administrator, entities providing services to the Administrator, including technical and organizational services, hosting services, email management services, as well as services aimed at securing the Service against spam and abuse (described in detail in section VI below), through which the Administrator fulfills the purposes specified in section IV above. Personal data may also be disclosed to other entities/persons/authorities to the extent and under the conditions specified by law.

VI. FORM SECURITY – CLOUDFLARE TURNSTILE

In order to protect the forms available on the Service against spam and abuse from automatons (bots), the Administrator uses the Cloudflare Turnstile service, provided by Cloudflare, Inc. based in San Francisco, USA. The service operates in the background and verifies whether the form is filled out by a human without the necessity of the user solving tests.

As part of the operation of the Cloudflare service, it may process technical data concerning the user’s device and browser as well as the manner of his interaction with the site, to the extent necessary to detect automatic traffic. This processing is carried out on the basis of the legitimate interest of the Administrator (art. 6 sec. 1 lit. f GDPR), consisting of ensuring the security of the Service and limiting spam and abuse.

Detailed information on the rules of data processing by Cloudflare in connection with this service can be found in the document “Cloudflare Turnstile Privacy Addendum” and in Cloudflare’s Privacy Policy, available on the provider’s website: https://www.cloudflare.com/privacypolicy/.

VII. DATA TRANSFER TO THIRD COUNTRIES

In principle, personal data of Users of the Service is not transferred to third countries (outside the European Economic Area) in connection with the processing described in this Privacy Policy.

Exceptions include data processed in connection with the use of the Cloudflare Turnstile service, described in section VI above. The provider of this service – Cloudflare, Inc. – is based in the United States, which means that processing data under this service may involve transferring them outside the European Economic Area. Cloudflare, Inc. has certification under the EU-U.S. Data Privacy Framework, recognized by the European Commission as a mechanism ensuring an adequate level of protection of personal data, and additionally – as a supplementary safeguard – uses standard contractual clauses approved by the European Commission (SCC).

VIII. STORAGE PERIOD FOR PERSONAL DATA

  1. Personal data is stored until an objection is raised or consent is withdrawn, and in contractual relationships, for the duration of the contract and after its completion for the period specified by the archiving and limitation of claims regulations.
  2. The retention period for data may be extended if necessary for establishing or pursuing claims or defending against claims.
  3. Data processed by legal advisors in the course of their profession is stored for a period of 10 years from the end of the year in which the proceedings in which the data was collected ended.

IX. RIGHTS OF THE DATA SUBJECT

  1. Providing personal data is voluntary, but in contractual relationships, it is necessary for the conclusion and performance of the contract, and in cases where data is not provided in connection with the conclusion and performance of a contract, providing data is necessary to contact and resolve the matter being referred to.
  2. The person providing personal data has the right to: request access to their personal data and obtain a copy thereof, request rectification, deletion or restriction of processing, as well as to object to processing, and also to data portability.
  3. Consent granted for the processing of personal data may be withdrawn at any time, which does not affect the lawfulness of the processing of personal data based on that consent that took place before it was withdrawn.
  4. Everyone has the right to file a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
  5. Any questions regarding personal data protection in connection with the activities of the Administrator can be directed to the email address biuro@olenderlegal.pl.

X. AUTOMATED DECISION MAKING

Personal data will not be used by the Administrator for automated decision-making, including profiling.

XI. CHANGES TO THE PRIVACY POLICY

The Administrator reserves the right to make changes to this Privacy Policy in connection with the development of technology, changes in legal regulations on the protection of personal data, and the development of the Service. The Administrator will inform about any changes by publishing the new content of the Privacy Policy on the Service’s website.

The date of the last update: July 26, 2026.