Privacy policy
This privacy policy contains information regarding the processing of personal data by Markiewicz Sroczyński Mioduszewski Kancelaria Radców Prawnych sp. j. (hereinafter “MSM”), in various cases, depending on the subject of personal data and the purpose of contact. In this document, we explain how and on what principles we process personal data and what rights data subjects have, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”).
The protection of data processed by MSM is primarily ensured by professional secrecy, which attorneys-at-law and attorneys are obligated to maintain under penalty of disciplinary liability. This secrecy covers all information obtained in connection with the provision of legal assistance.
Due to professional secrecy, the Act on Attorneys-at-Law limits the exercise of certain rights under the GDPR. The right to access data and receive a copy thereof pursuant to Article 15(1) and (3) of the GDPR, the right to restrict processing pursuant to Article 18 of the GDPR, and the related obligation to notify pursuant to Article 19 of the GDPR apply to the extent that they do not violate the obligation of professional secrecy, in accordance with Article 5a of the Act on Attorneys-at-Law.
The right to object to processing pursuant to Article 21(1) of the GDPR does not apply to personal data obtained in connection with the provision of legal assistance, in accordance with Article 5a of the Act on Attorneys-at-Law.
The obligation to maintain professional secrecy does not cease when a supervisory authority within the meaning of the GDPR, i.e. the Personal Data Protection Office, requests the disclosure of information obtained in connection with the provision of legal assistance, in accordance with Article 5b of the Act on Attorneys-at-Law.
In relation to data obtained in a manner other than from the data subject (e.g. data of persons indicated by the client, participants in proceedings, opposing parties, witnesses), MSM may not be obliged to fulfil the information obligation if the data must remain confidential in accordance with the obligation of professional secrecy, pursuant to Article 14(5)(d) of the GDPR.
As a rule, we do not transfer personal data outside the European Economic Area. Transfers may occur in connection with maintaining MSM profiles on social media and using certain IT services whose providers process data outside of this area. In such cases, transfers are based on mechanisms ensuring an adequate level of data protection, as provided for in the GDPR.
Your data is not used for automated decision-making, including profiling, that produces legal effects on you or significantly affects you in a similar way.
This privacy policy may be updated, in particular in the event of changes to the scope of our business, the tools we use, or applicable regulations. The current version, along with its effective date, is published on the MSM website. This version is effective as of 23 July 2026.
I. Information regarding the processing of personal data of potential clients, customers or contractors who are natural persons and, in the case of legal persons, employees or associates of the above-mentioned entities contacting MSM
1) Data controller details
The administrator of your personal data is Markiewicz Sroczyński Mioduszewski Kancelaria Radców Prawnych sp. j. with its registered office in Kraków.
You can contact us:
a) by post at: ul. Lekarska 1, apt. 6, 31-203 Kraków
b) by email at: office@msmlegal.pl
c) by phone: +48 (12) 428 55 05
We have not appointed a Data Protection Officer, as the conditions for its mandatory appointment specified in Article 37 of the GDPR do not apply. If a Data Protection Officer is appointed, their contact details will be provided in this Notice and on the MSM website.
2) Type of data we process
Name and surname, work telephone number, work email address, position, scope of responsibilities; in the case of natural persons running a business – also company details.
In connection with the provision of legal assistance to clients who are natural persons, we also process identification data, including the PESEL number and identity document details, address, data on assets, as well as data resulting from the nature of the case being handled, including in some cases data of special categories, in particular concerning health, and data relating to convictions and prohibited acts.
Providing the above data is necessary to perform the concluded contract or to receive an offer or response as part of an ongoing contact. Providing the data is voluntary, but failure to provide the data will prevent the conclusion of the contract, presentation of the offer, or response to the inquiry.
Providing data required by anti-money laundering and combating the financing of terrorism (AML/CFT) regulations is a condition for establishing cooperation.
3) Purposes of data processing and legal basis for processing
We process your data for the following purposes:
a) providing services under concluded contracts,
b) providing legal assistance,
c) taking actions necessary to conclude a contract,
d) accepting orders,
e) submitting offers,
f) maintaining ongoing contact,
g) verifying and preventing conflicts of interest before accepting a case and during its conduct,
h) fulfilling obligations arising from the Act on Attorneys-at-Law and the Code of Ethics for Attorneys-at-Law and archiving files and documents,
i) concluding and performing contracts with MSM’s suppliers and service providers and maintaining ongoing contact in connection with such cooperation,
j) identifying and verifying the identity of the client and the beneficial owner, as well as risk assessment, in the performance of obligations related to anti-money laundering and countering the financing of terrorism (AML/CFT) regulations,
k) settling accounts, issuing invoices, and fulfilling tax and accounting obligations,
l) establishing, pursuing or defending claims.
The legal basis for processing the data is the necessity to perform a concluded contract or the necessity to take steps before concluding the contract, as well as the legitimate interest of the data controller in the possibility of ongoing contact with our clients and contractors, including potential ones (submitting offers), maintaining relationships with clients and contractors and securing possible claims.
Another legal basis for processing the data is fulfilling the obligations arising from legal provisions, in particular anti-money laundering and countering the financing of terrorism (AML/CFT), tax, and accounting regulations.
4) Data storage period
We store your data for the duration of the contract or until the expiry of the limitation period for claims. MSM stores files and documentation in accordance with the regulations and rules of the profession, taking into account the periods specified in the Act on Attorneys-at-Law.
We retain case files and documentation for 10 years from the end of the year in which the proceedings concluded or in which we terminated the provision of legal assistance. We retain settlement and tax documentation for 5 years from the end of the year in which the tax payment deadline expired, and documentation prepared in compliance with anti-money laundering and countering the financing of terrorism (AML/CFT) obligations for 5 years from the first day of the year following the year in which we terminated our relationship.
5) Recipients of personal data
We shall transfer your data to our service providers, e.g. IT or accounting services.
In connection with the provision of legal assistance, your data may be transferred to courts, administrative bodies, bailiffs and other bodies and participants in proceedings, as well as to parties to proceedings, their representatives, and other authorised attorneys-at-law or attorneys.
6) Rights related to the processing of personal data:
You have the following rights:
a) the right to request access to, rectification, erasure, or restriction of processing of your personal data from the controller;
b) the right to data portability;
c) the right to object to data processing due to your particular situation (if the processing is based on the controller’s legitimate interest).
To exercise these rights, please contact us at the address indicated in point 1.
Furthermore, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office.
II. Information regarding the processing of personal data of job candidates
1) Data controller details
The administrator of your personal data is Markiewicz Sroczyński Mioduszewski Kancelaria Radców Prawnych sp. j. with its registered office in Kraków.
You can contact us:
a) by post at: ul. Lekarska 1, apt. 6, 31-203 Kraków
b) by email at: office@msmlegal.pl
c) by phone: +48 (12) 428 55 05
2) Type of data we process
Name(s) and surname, date of birth, contact details, education, professional qualifications, previous employment history, other information provided by the job candidate.
Providing the above data is necessary to participate in the recruitment process conducted by MSM. Providing the data is voluntary, but failure to provide it will prevent you from taking part in the recruitment process.
Providing data other than those indicated above, either in your CV or cover letter, is entirely voluntary, and failure to provide it will not result in any negative consequences for you.
3) Purposes of data processing and legal basis for processing
We process the data necessary to verify the candidate’s qualifications for a given position and to maintain a database of candidates for future recruitment processes.
The basis for data processing is:
a) with respect to data: first name(s) and surname, date of birth, contact details, education, professional qualifications, and previous employment history – Article 221 § 1 of the Labor Code;
b) with respect to data other than described in point a) above, provided in a CV or cover letter – your consent;
c) with respect to data required for future recruitment – your consent;
d) with respect to data collected during a recruitment interview – MSM’s legitimate interest in finding the right candidate for the job.
4) Data storage period
We store your data until the recruitment process is completed, unless you have consented to the processing of your data for further recruitment purposes.
We store data for no longer than three months after the end of the recruitment process. If you consent to the processing of your data for future recruitment purposes, we store it for twelve months from the date you express your consent or until you withdraw your consent.
5) Recipients of personal data
We shall transfer your data to our service providers, e.g. IT services.
6) Rights related to the processing of personal data
You have the following rights:
a) the right to request access to, rectification, erasure, or restriction of processing of your personal data from the controller;
b) the right to data portability;
c) the right to object to data processing due to your particular situation (if the processing is based on the controller’s legitimate interest).
To exercise these rights, please contact us at the address indicated in point 1. Furthermore, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office.
To the extent that your data is processed based on consent, you have the right to withdraw your consent to data processing at any time. Withdrawing consent does not affect the lawfulness of processing based on your consent before its withdrawal. To withdraw your consent, please contact us at the address indicated in point 1.
III. Information regarding the processing of personal data of persons participating in trainings and other events organized by MSM
1) Data controller details
The administrator of your personal data is Markiewicz Sroczyński Mioduszewski Kancelaria Radców Prawnych sp. j. with its registered office in Kraków.
You can contact us:
a) by post at: ul. Lekarska 1, apt. 6, 31-203 Kraków
b) by email at: office@msmlegal.pl
c) by phone: +48 (12) 428 55 05
2) Type of data we process
Name and surname, telephone number, email address; in the case of natural persons running a business – also company details.
Providing the above data is necessary to participate in a training or other event organized by MSM. Providing the data is voluntary, but failure to provide it will prevent you from participating in the aforementioned events.
3) Purposes of data processing and legal basis for processing
We process your data for the following purposes: registering you for a training or other event, sending you information or materials regarding the event, and organizing the event.
The legal basis for processing is the legitimate interest of the data controller in organizing and conducting a training or event.
4) Data storage period
We store your data for a period of 1 year from the commencement of data processing.
We count this period from the end of the training or other event to which your data pertained.
5) Recipients of personal data
We shall transfer your data to our service providers, e.g. IT services.
6) Rights related to the processing of personal data
You have the following rights:
a) the right to request access to, rectification, erasure, or restriction of processing of your personal data from the controller;
b) the right to data portability;
c) the right to object to data processing due to your particular situation (if the processing is based on the controller’s legitimate interest).
To exercise these rights, please contact us at the address indicated in point 1.
Furthermore, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office.
IV. Website and social media profiles
1) Data controller details
The administrator of your personal data is Markiewicz Sroczyński Mioduszewski Kancelaria Radców Prawnych sp. j. with its registered office in Kraków.
You can contact us:
a) by post at: ul. Lekarska 1, apt. 6, 31-203 Kraków
b) by email at: office@msmlegal.pl
c) by phone: +48 (12) 428 55 05
2) Type of data we process
Name and surname, telephone number, email address; in the case of natural persons running a business – also company details.
If you contact us via a social media profile, we will also process the data visible in your profile and the content of your interactions with the MSM profile, including reactions, comments and messages.
3) Purposes of data processing and legal basis for processing
We process your data for the following purposes: maintaining the website www.msmlegal.pl and social media profiles, ensuring their operation and security, and maintaining statistics.
The basis for processing is the legitimate interest of the controller. In terms of statistics and interactions on social media platforms, MSM may be a joint controller along with the platform provider.
The essential content of the agreements between the joint controllers is provided by the platform provider in its terms of service. Regardless of which joint controller you direct your request regarding your data to, it will be recognized.
4) Data storage period
We store your data until you object or in accordance with platform settings and policies.
We store correspondence conducted via the website or social media profile for the period necessary to resolve the matter and then until the expiry of the limitation period for claims.
5) Recipients of personal data
We shall transfer your data to our service providers, e.g. IT services.
Your data may also be transferred to providers of social media platforms on which MSM maintains profiles and to providers of analytical tools used on the website.
6) Rights related to the processing of personal data
You have the following rights:
a) the right to request access to, rectification, erasure, or restriction of processing of your personal data from the controller;
b) the right to data portability;
c) the right to object to data processing due to your particular situation (if the processing is based on the controller’s legitimate interest).
To exercise these rights, please contact us at the address indicated in point 1.
Furthermore, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office.