Privacy Policy

Last updated: 6 July 2026

1. Introduction

Kancelaria Radcy Prawnego Mikołaj Kawka ("we", "our", "the Firm") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website or use our legal services. It is drafted to comply with Regulation (EU) 2016/679 (GDPR) and, where applicable, the Swiss Federal Act on Data Protection (FADP).

2. Data Controller

3. What data we collect

• Contact information: name, email address, phone number, postal address
• Case information: details of your legal matter, documents you provide, correspondence
• Billing information: invoicing details and payment records
• Website usage data: IP address, browser type, pages visited (see the Cookie Policy)
• Communication records: emails, letters, notes from consultations

4. How we collect your data

• Directly from you — when you contact us, use the contact form, or engage our services
• Through your use of the website (see the Cookie Policy)
• From third parties, such as courts, authorities or other professionals, where necessary for your matter
• From publicly available registers where necessary for legal representation

Providing your personal data is voluntary. However, without the data necessary for a given purpose we may be unable to respond to your enquiry, arrange a consultation, or provide legal services.

5. Legal bases for processing

• Performance of a contract (Art. 6(1)(b) GDPR): providing the legal services you request, including pre-contractual steps such as a first consultation
• Legal obligation (Art. 6(1)(c) GDPR): compliance with statutory and professional obligations, including anti-money-laundering rules and the professional rules applicable to attorneys-at-law (radcowie prawni)
• Legitimate interests (Art. 6(1)(f) GDPR): managing the Firm, keeping records, establishing or defending legal claims, website security
• Consent (Art. 6(1)(a) GDPR): optional cookies and any marketing communications — you may withdraw consent at any time

6. How we use your data

• To provide legal advice and representation and communicate about your matter
• To issue invoices and maintain accounting records
• To comply with legal, regulatory and professional obligations, including mandatory retention of case files
• To operate, secure and improve the website

7. Professional secrecy

Information you entrust to us in connection with legal services is additionally protected by the professional secrecy of an attorney-at-law (radca prawny), which is independent of and stricter than general data-protection rules. Professional secrecy is not limited in time.

8. Data sharing and disclosure

• Courts and authorities: where required for your representation or by law
• Other professionals: lawyers, experts, translators or notaries involved in your matter, with your knowledge
• Service providers: IT, hosting, email and accounting providers, bound by data-processing agreements
• Website hosting and email: this website and the Firm's email are hosted by OVH SAS (2 rue Kellermann, 59100 Roubaix, France), acting as a processor under a data-processing agreement, on servers located within the European Economic Area

We never sell personal data.

9. International data transfers

Because the Firm serves clients in both Poland and Switzerland, your data may be processed in either country. Switzerland benefits from a European Commission adequacy decision. Any transfer outside the EEA and Switzerland takes place only with appropriate safeguards (such as Standard Contractual Clauses) or with your explicit consent.

10. Data retention

We keep personal data only as long as necessary: for the duration of the engagement and afterwards for the periods required by law and professional regulations applicable to attorneys-at-law (as a rule, case files are retained for a number of years after the matter closes; accounting records for the statutory period). Retention periods also reflect limitation periods for potential claims and the needs of actual or anticipated disputes. After the applicable period, data are securely deleted or anonymised.

11. Your rights

You have the rights listed below. They are not absolute — each is subject to conditions and exceptions under the GDPR and other laws (for example, professional secrecy and statutory retention duties).

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion, subject to our legal and professional retention obligations
• Restriction — request limitation of processing in certain circumstances
• Data portability — receive data you provided in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for direct marketing
• Withdrawal of consent — at any time, without affecting processing already carried out

To exercise any of these rights, contact contact@kawkalegal.com. Note that professional secrecy and statutory retention duties may limit certain rights (e.g. erasure of case files).

Before acting on a request we may need to verify your identity. We respond within one month of receiving a request; for complex or numerous requests this may be extended by a further two months, in which case we will inform you. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive (in particular repetitive), in which case we may charge reasonable administrative costs or refuse to act.

12. Cookies

The website uses cookies and similar technologies in the categories offered by our consent banner: technical (required), analytics, personalization and social media (all optional and off by default). Full details, including third-party services and how to change your choices, are in the Cookie Policy.

13. Security

We apply appropriate technical and organisational measures, including encrypted transmission (SSL/TLS), access controls, and secure storage of files and correspondence. This website and the associated email accounts are hosted on servers located within the European Economic Area. No method of transmission over the internet is completely secure; we cannot guarantee absolute security, but we treat the protection of client information — reinforced by professional secrecy — as a core duty.

14. Children's privacy

Our services are directed to adults. We do not knowingly collect personal data from children except where necessary in the course of legal representation (for example, family or immigration matters involving minors), in which case the data are processed with particular care.

15. Changes to this policy

We may update this Privacy Policy from time to time. The current version, with its date, is always available on this page.

16. Complaints

If you believe your personal data have not been handled properly, you may lodge a complaint with a supervisory authority:

• Poland: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa — uodo.gov.pl
• Switzerland: Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch
• EU: the data protection authority of your habitual residence