When you visit our website www.techlawyer.pl, Kancelaria Adwokacka Katarzyna Szczudlik, with its registered office in Warsaw (“TechLawyer”, “we”) is the data controller and processes your personal data. We value your privacy and take appropriate care in the processing and protection of personal data. When processing your personal data, we comply with applicable data protection laws, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
In this document (“Privacy Policy”) we explain what types of personal data we collect, why we collect such data, how we handle personal data, and we describe the rights you have in connection with the processing of your personal data.
This Privacy Policy was last amended on 17 July 2026.
1. Categories of personal data processed, purposes and legal bases for processing personal data
When you use our website and its functionalities, various categories of personal data may be processed. We collect your data to the extent necessary to provide the services and functionalities described below.
Contact form and enquiries
If you contact us via the contact form on our website, by email or through other available channels, we process the following personal data: first name, last name, email address, telephone number (if provided), and any other personal data included in the content of your message.
We process your personal data on the basis of our legitimate interest in responding to enquiries directed to us, i.e. on the basis of Article 6(1)(f) GDPR.
Providing personal data is not a statutory requirement, but is necessary to handle your enquiry.
Newsletter subscription
If you subscribe to our newsletter, we process your email address in order to send you updates on EU regulation, fintech compliance, AI governance and other topics relevant to technology businesses operating in Europe.
We process your personal data on the basis of your consent, i.e. on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time by clicking the unsubscribe link included in each newsletter or by contacting us directly.
Providing personal data is not a statutory requirement, but is necessary to receive the newsletter.
Scheduling a consultation
If you use the online consultation booking functionality on our website, we process your first name, last name, email address, telephone number (if provided), and any other information you choose to include when scheduling a meeting.
We process your personal data in order to arrange and confirm the consultation, i.e. on the basis of Article 6(1)(b) GDPR (performance of a contract or pre-contractual steps taken at your request) and, where relevant, on the basis of our legitimate interest in organising our business activities, i.e. Article 6(1)(f) GDPR.
Provision of legal services
Where you engage us for legal services, we process personal data to the extent necessary to perform the engagement, comply with our professional obligations, and fulfil applicable legal requirements. The scope and legal basis for processing in the context of a specific engagement will be communicated separately, as required by applicable law.
As a law firm, we are subject to professional secrecy obligations under Polish law. Personal data processed in connection with the provision of legal services is processed in accordance with those obligations.
Other purposes
We may also process your personal data for the following purposes:
- for marketing purposes, including promoting our legal services and publications via social media (in particular LinkedIn), on the basis of our legitimate interest in promoting our activities to interested persons (Article 6(1)(f) GDPR);
- complying with our legal and regulatory obligations, on the basis of Article 6(1)(c) GDPR;
- establishing, pursuing or defending against potential legal claims, on the basis of our legitimate interest (Article 6(1)(f) GDPR).
2. Period of processing personal data
As a rule, we store your personal data only for the period necessary to achieve the purpose for which the data was collected, as described in this Privacy Policy. We store your data:
- for the duration of the provision of services or for the term of any agreement concluded with us;
- until the consent granted is withdrawn — where the basis for processing is consent;
- until a justified objection to the processing of personal data is raised — where the basis for processing is our legitimate interest and your legitimate interest prevails.
The period of storing personal data may in each case be extended by the applicable statute of limitations for claims, if the processing of personal data is necessary for pursuing or defending against potential claims.
Personal data processed in connection with the provision of legal services will be retained in accordance with our professional obligations and applicable legal requirements.
3. Data recipients and transfers outside the EEA
We may transfer your personal data to other entities, including:
- service providers, including IT service providers, hosting service providers and email service providers, who host our website or other IT systems or otherwise store or process your information on our behalf, under strictly defined conditions of confidentiality and security;
- providers of tools used for scheduling, newsletter distribution and website analytics, to the extent necessary for the operation of those functionalities;
- in exceptional circumstances where we are required to do so under the law or pursuant to court judgments or administrative decisions, the relevant law enforcement, judicial or regulatory authorities.
Some of our service providers may be located outside the European Economic Area. In such cases, we will ensure that appropriate safeguards are in place to protect your personal data to the same standard required under GDPR, including, where applicable, on the basis of standard contractual clauses approved by the European Commission.
You can obtain more information about the safeguards implemented by contacting us at the contact details set out in Section 9 below.
4. Security
We take appropriate technical and organisational security measures to protect your personal data. In particular, we apply the following measures:
- access to personal data is restricted to authorised persons only;
- we use secure connections (TLS) to encrypt data transmitted between your browser and our website;
- we apply physical and organisational measures to protect access to systems in which personal data is stored;
- we regularly review and update our security practices in line with applicable standards.
5. Third-party websites
This Privacy Policy does not apply to third-party websites linked to from this website. We cannot guarantee that these third parties will handle your personal data securely or in accordance with applicable law. Before using these websites, we recommend that you review their privacy policies.
6. Cookies
When you visit our website www.techlawyer.pl, we may use cookies and similar tracking technologies. Cookies are small files sent by a website and stored on your device. They help us operate the website, analyse website traffic and improve the user experience.
Some cookies are necessary for the website to function correctly. Others are used for analytical or functional purposes and are only placed with your consent, which you may provide or withdraw through the cookie consent mechanism available on the website.
7. Your rights
In connection with the processing of your personal data, you have the following rights:
- the right to request access to your personal data;
- the right to request rectification of inaccurate or incomplete personal data;
- the right to request erasure of your personal data (“right to be forgotten”), where the conditions set out in applicable law are met;
- the right to request restriction of processing of your personal data;
- the right to object to the processing of your personal data, where the processing is based on our legitimate interest;
- the right to object at any time to the processing of your personal data for direct marketing purposes;
- the right to data portability, i.e. to receive your personal data in a structured, commonly used and machine-readable format;
- the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you;
- the right to lodge a complaint with the supervisory authority — the President of the Office for Personal Data Protection (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise any of the above rights, please contact us using the contact details set out in Section 9 below. We may ask you to provide information necessary to verify your identity before processing your request. We will respond to your request within the statutory timeframe — as a rule within one month, which may be extended by a further two months where necessary due to the complexity or number of requests.
8. Changes to the Privacy Policy
This Privacy Policy may be updated from time to time, in particular where changes arise from amendments to applicable legal provisions or changes to the way in which we process personal data.
We will inform you of any material changes to this Privacy Policy with appropriate advance notice, by publishing the updated version on our website.
9. Contact information
If you have any questions or concerns regarding this Privacy Policy or the processing of your personal data, you can contact us:
- by email: katarzyna.szczudlik@gmail.com
- by post: Kancelaria Adwokacka Katarzyna Szczudlik, Warsaw, Poland