PRIVATE CLIENTS · PERSONAL DATA

Privacy and GDPR

Updated: 31 October 2026

1. Data controller and contact

The controller of private clients’ contact data is Vadym Rekel, trading as VADYM REKEL, Polish tax identification number (NIP) 6793053128, ul. Kielecka 2/53, 31-526 Kraków, Poland. Contact: , telephone +48 735 753 383. Requests concerning personal data may also be sent to this address.

2. Purposes and legal bases

Identification and contact details, the description of an enquiry and arrangements concerning an assignment are used to respond and to prepare or perform a contract under Article 6(1)(b) GDPR. Accounting obligations are fulfilled under Article 6(1)(c) GDPR. Establishing, pursuing or defending legal claims and protecting correspondence and the website are legitimate interests of the controller under Article 6(1)(f) GDPR.

Providing data is voluntary, but a response or service may be impossible without information needed to make contact and agree the assignment. Sending an enquiry does not constitute consent to marketing. The website does not make automated decisions concerning clients or profile them for advertising purposes.

3. Personal data in material for examination

In the first message, please provide a general description, without passwords, PESEL numbers, complete case files or third parties’ personal data. The scope of the material, authority to provide it, a secure transfer channel and the parties’ roles in processing are agreed before an assignment is accepted. A client’s consent alone does not make access to another person’s data lawful.

Material containing special categories of personal data requires an additional condition under Article 9 GDPR; data concerning criminal convictions and offences is subject to Article 10 GDPR. Where the cooperation requires processing on behalf of a controller, the relevant arrangements are made before data is transferred. Information concerning third parties is also assessed in light of Article 14 GDPR and its exceptions.

4. Recipients, retention and transfers

Email and IT service providers, accounting service providers, advisers and authorities empowered by law may need access to the extent necessary for the task concerned. The transfer channel and any additional service providers are agreed as part of the assignment.

Correspondence is retained for the period needed to handle the matter; contract and accounting documentation is retained for the period arising from legal obligations and limitation periods for claims. This does not automatically mean retaining complete device copies throughout that period. The date for returning or deleting working copies is agreed before material is accepted, according to the purpose and scope of the service and any duty to retain data.

The public website is hosted by Vercel. Connections to global services may involve processing outside the European Economic Area. Any such transfer requires a mechanism under Chapter V GDPR, such as an adequacy decision or standard contractual clauses. Provider information: Vercel Privacy Policy. Evidential material is not uploaded through the website’s form.

5. Your rights

Subject to the conditions in the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. Where an activity is based on consent, consent may be withdrawn for the future. You may complain to the President of the Polish Personal Data Protection Office (UODO). The right to erasure does not override a legal duty to retain data.

6. How the website handles data

The contact form prepares a message in your email application. Your data reaches the office only after you send it. The text you enter is not saved in a website database. The browser’s session storage records the last time the email application was opened and whether the contact prompt was dismissed, to limit repeated clicks and repeated display of the prompt. The website code contains no analytics or advertising tools.

The hosting service may record technical connection data, including your IP address and the requested resource. The Google map loads only after you select “Load Google Maps”. Links to Google Maps and LinkedIn lead to external services with their own policies: Google and LinkedIn. The LinkedIn icons themselves do not load tracking plugins.

7. Assignments from judicial and investigative authorities

The information above primarily concerns relations with private clients. Processing for proceedings conducted by a court, prosecutor’s office or the Police is governed by the rules applicable to the proceedings and purpose concerned. An authority’s assignment is not automatically excluded from the GDPR. In crime prevention and law enforcement, the Polish Act of 14 December 2018 and procedural legislation may also apply. Duties are determined according to the entity’s role, not solely the client’s name.

Legal sources and further information

GDPR — Articles 6, 9–10, 13–22, 28 and Chapter V · UODO — data protection in courts (in Polish) · Terms for individual clients (in Polish).