Legal information

Privacy policy

Last updated: 2 October 2026

This policy explains how we process personal data when you use kancelariaschneider.pl or contact the office, in accordance with Regulation (EU) 2016/679 (GDPR).

1. Controller

The controller is Małgorzata Schneider, trading as Kancelaria Radcy Prawnego Małgorzata Schneider, ul. Starowiejska 16/2, 81-356 Gdynia, Poland, NIP (tax ID) 5811909907, REGON 221860740. For any data protection matter, please contact us by email: kontakt@kancelariaschneider.pl, phone 606 350 573.

2. No cookies, no analytics

This website uses no cookies, no analytics, no advertising pixels and no third-party scripts or fonts. The only script is a small first-party JavaScript file that fills a hidden form field with the page address and any campaign parameters in the URL (e.g. utm_source), so that we know where an enquiry was sent from. It stores nothing in your browser and sends nothing anywhere except as part of the form you choose to submit. We do not profile visitors.

3. Technical data processed by the server

When a page is displayed, the hosting provider processes the technical data needed to deliver it, such as IP address, date and time of the request, the page requested and browser information, and may keep it temporarily in server logs. This data is processed to deliver the website and keep it secure, on the basis of our legitimate interest (Art. 6(1)(f) GDPR). We do not use it to identify or profile visitors.

The website is hosted by Netlify, Inc., based in the USA, acting as our processor. Transfers to the USA are based on the European Commission's adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework, in which Netlify, Inc. participates; the data processing agreement provides that, should that basis lapse, the standard contractual clauses adopted by the European Commission apply, a copy of which is available on request sent to the address above. Server logs are kept only as long as needed for security, in line with the hosting provider's policies.

4. Contacting the office

If you contact us by email, phone or the contact form, we process the data you provide (e.g. name, email address, phone number, the content of your message and any documents) in order to:

• reply to you and take steps at your request before entering into a contract, and, once a contract is concluded, to perform the legal services agreement (Art. 6(1)(b) GDPR);
• handle correspondence not related to a contract, establish, pursue or defend legal claims, and process data of other people contained in documents you send (e.g. family members) to the extent needed to handle the case (Art. 6(1)(f) GDPR);
• comply with legal obligations, in particular accounting and tax obligations (Art. 6(1)(c) GDPR).

Please do not send health data or other special categories of data in your first message unless the office asks for it. Where such data is needed to handle a case, we process it under Art. 9(2)(f) GDPR (establishment, exercise or defence of legal claims, including in administrative proceedings) or, where applicable, on the basis of the data subject's explicit consent (Art. 9(2)(a) GDPR).

The contact form is handled by the Netlify Forms service. The data you enter in the form (name, email or phone, topic and message, the page address and any campaign parameters in the URL) is received by Netlify, Inc. as our processor, on the terms described in section 3, and then forwarded to the office. Ticking the checkbox confirms that you have read this policy; the legal basis for processing form data is Art. 6(1)(b) or (f) GDPR, as above.

The office's email is hosted on Microsoft 365. Microsoft processes data as our processor under its Data Protection Addendum; any transfer to the USA is based on the European Commission's adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework and, as a fallback, standard contractual clauses.

5. Professional secrecy

Information obtained in connection with providing legal assistance is protected by the professional secrecy of a radca prawny under the Polish Act of 6 July 1982 on Legal Advisers.

6. Recipients

Data may be disclosed only to the extent necessary: to providers of hosting, form handling, email and IT services, to our accounting office and, within a case, to the public authorities and courts before which we represent the client.

7. Retention

Data collected in connection with legal assistance is kept for 10 years from the end of the year in which the proceedings in which it was collected ended (Art. 5c(1) of the Act on Legal Advisers) and then deleted. Accounting and tax records are kept for the period required by law. Correspondence that does not lead to an engagement is kept only as long as needed to handle it or to protect against claims.

8. Your rights

You have the right to access your data, to have it rectified, erased or its processing restricted, to data portability and to object to processing based on legitimate interest, to the extent provided by the GDPR and the Polish Act on Legal Advisers. Under Art. 5a of that Act, the right of access (Art. 15(1) and (3) GDPR), the right to restriction (Art. 18 GDPR) and the notification obligation (Art. 19 GDPR) apply insofar as they do not breach the professional secrecy of a radca prawny, and the right to object (Art. 21(1) GDPR) does not apply to data obtained in connection with legal assistance. Where processing is based on consent, you may withdraw it at any time by contacting the office; withdrawal does not affect the lawfulness of processing before it. You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).

Providing data is voluntary, but without it we cannot reply to your message or handle your case. We do not make automated decisions, including profiling.

9. External websites

This website links to other websites (including pobytlegal.pl, polishlineage.com and Google). Their own privacy policies apply once you go to them.

10. Google reviews

The home page may show the office's overall Google rating, the number of reviews and up to 5 reviews from its Google profile. This data is fetched from the Google Places API by our hosting provider's server (Netlify) when the page is loaded; we do not store it, and no data about the visitor is sent to Google in that request. Your browser loads the reviewers' profile pictures directly from Google's servers (lh3.googleusercontent.com), which means your IP address and basic browser information are sent to Google LLC. The legal basis is our legitimate interest in presenting client reviews (Art. 6(1)(f) GDPR). This content comes from Google Maps: the Google Maps/Google Earth Additional Terms of Service and the Google Privacy Policy apply. When the review block is not shown, the page only contains a link to the reviews on Google.

11. Changes

We will publish any updated version of this policy on this page together with its date.