Privacy Policy
This Privacy Policy explains how personal data is processed in connection with the MK Legal Doradztwo Prawne website, including the contact form, consultation booking module, blog, e-mail communication, ICS calendar files and cookie consent management mechanism.
1. Data controller
The controller of personal data is MK Legal Doradztwo Prawne, Miłosz Kłosowski, address: ul. Bracka 20/7A, 00-028 Warszawa, e-mail: kontakt@mkldp.pl, phone: +48 505 975 365.
2. Categories of personal data
Depending on how the website is used, the following data may be processed: full name, e-mail address, phone number, message subject and content, selected consultation date and time, consultation format, meeting location provided by the person booking the consultation, online meeting link, technical website-use data, IP address recorded in server logs and data voluntarily included in documents or messages.
3. Purposes and legal bases
| Purpose | Legal basis | Typical data |
|---|---|---|
| Handling enquiries submitted through the contact form or by e-mail. | Article 6(1)(b) GDPR where the contact concerns steps prior to entering into a contract, and Article 6(1)(f) GDPR, namely the controller’s legitimate interest in handling correspondence. | Name, e-mail address, phone number, message subject and content. |
| Booking and managing consultations. | Article 6(1)(b) GDPR and, where relevant, Article 6(1)(f) GDPR for work organisation and communication security. | Contact details, date and time, consultation format, meeting location, phone number, online link and ICS file. |
| Creating an online consultation link through Jitsi Meet. | Article 6(1)(b) GDPR to the extent necessary to provide the requested service and Article 6(1)(f) GDPR for meeting organisation. | Meeting room identifier, meeting time, data visible in the invitation and technical data processed by the service provider. |
| Securing the website, preventing spam and abuse, and handling server logs. | Article 6(1)(f) GDPR, namely the controller’s legitimate interest in website security and abuse prevention. | IP address, connection date and time, browser data and technical events. |
| Complying with legal, accounting, tax and record-keeping obligations where cooperation is established. | Article 6(1)(c) GDPR. | Identification, contact and billing data, arrangements and documents. |
| Establishing, pursuing or defending legal claims. | Article 6(1)(f) GDPR. | Data necessary to evidence contact history, bookings, arrangements or service delivery. |
| Optional analytics or marketing, if such tools are enabled in the future. | Article 6(1)(a) GDPR and consent required under rules on storing information on, or accessing information from, the user’s terminal equipment. | Data specified for each tool in the Cookie Policy. |
4. Contact form
Data submitted through the contact form is used to respond to the enquiry, conduct correspondence and assess whether cooperation is possible. Providing data is voluntary, but without contact details responding may be impossible.
5. Booking module, Jitsi Meet and ICS files
The booking module stores the consultation slot, blocks the selected time, sends an e-mail confirmation and creates an ICS file that can be added to a calendar. For online consultations, a Jitsi Meet link is generated. The public meet.jit.si service is provided by 8×8, Inc. and may involve the processing of technical data by that provider. Anyone using the online link should also review the privacy information of the video-conferencing provider.
6. Recipients
Data may be disclosed to providers of hosting, e-mail, website maintenance, video-conferencing tools, calendar systems, accounting, legal and administrative services, and to public authorities where required by law. Data is not sold or disclosed to data brokers.
7. Transfers outside the EEA
The website does not activate external analytics or marketing tools before the user gives consent. The use of external tools, in particular the public Jitsi Meet service, may involve transfers of data outside the European Economic Area or access to data from third countries. Where required, appropriate transfer mechanisms, in particular standard contractual clauses, should be applied.
8. Retention periods
| Category | Retention period |
|---|---|
| Contact-form messages that do not lead to cooperation. | As a rule, up to 12 months from the last contact, unless longer retention is justified by claims protection or continued discussions. |
| Consultation bookings that do not lead to further cooperation. | As a rule, up to 12 months from the consultation date. |
| Data connected with a contract, billing or service delivery. | For the period required by law and for the limitation period of potential claims. |
| Server logs and security data. | For the period resulting from hosting configuration and security needs, usually no longer than necessary to analyse incidents. |
| Cookie preferences stored in local storage. | Until the user changes the decision or removes browser data, no longer than the period indicated in the consent mechanism. |
9. Data subject rights
Data subjects have the right to access their data, rectify it, erase it, restrict processing, data portability, object to processing based on legitimate interest and withdraw consent where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Data subjects also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland.
10. Voluntary provision of data
Providing data is voluntary, but may be necessary to handle an enquiry, book a consultation, prepare a response or enter into and perform a contract.
11. Automated decision-making
Data is not used for decisions based solely on automated processing that would produce legal effects concerning a person or similarly significantly affect them.
12. Cookies and similar technologies
The use of cookies, local storage and similar technologies is described in the separate Cookie Policy.
13. Updates
This Privacy Policy may be updated if the website, tools, data recipients, categories of data or applicable law change.