Documents
Privacy policy of statutfundacji.pl
This document explains what personal data I process in connection with the statutfundacji.pl site, for what purpose, on what legal basis and for how long, to whom I entrust it and what rights you have. Version of 8 November 2026. In case of discrepancies, the Polish version prevails.
1. Controller
The controller of your data is Jakub Pawłowski, conducting business under the name Kancelaria Radcy Prawnego Jakub Pawłowski, ul. Litewska 3/2, 60-605 Poznań, Poland, Tax ID (NIP) 557 16 24 541, REGON 365403620. In matters relating to personal data you can contact me through the contact form, by phone (+48 61 646 04 60) or by post to the firm's address.
2. Contact form
What data: name, e-mail address, telephone number (if you provide it), the content of the message and technical data of the submission (date, IP address). Purpose: replying to your message and any further discussions about legal assistance. Legal basis: my legitimate interest in replying (Article 6(1)(f) GDPR) and, if the message concerns the conclusion of a contract, steps taken at your request prior to entering into it (Article 6(1)(b) GDPR). How long: I keep the message in the firm's mailbox for up to 12 months after the last contact, unless it becomes part of the case file – in that case for the retention period of that file. The form does not store the content of the message on the server; it sends it by e-mail to the firm's address. To limit spam, the server keeps only a hash of the IP address from which the form was sent, for one hour.
3. Family foundation monitor (e-mail sign-up)
Sign-up to the monitor is available in the Polish version of the site, and its messages are in Polish. What data: e-mail address, date of sign-up and confirmation, IP address at the time of sign-up and confirmation. Purpose: sending information on changes in the law and practice concerning family foundations and sending the calendar of a family foundation's obligations as a PDF. Legal basis: your consent (Article 6(1)(a) GDPR), which you confirm by clicking the link in the e-mail. How long: if you do not confirm the sign-up, I delete the address automatically after 30 days; after confirmation – until consent is withdrawn; afterwards, for three years, I keep only the information that consent was given and withdrawn, in order to demonstrate that the mailing was lawful (Article 6(1)(f) GDPR). You can withdraw consent at any time using the link in every message or by writing to me through the contact form. Withdrawal of consent does not affect the lawfulness of mailings sent earlier.
4. Server logs
The server on which the site runs records technical data about each connection in its logs: IP address, date and time, the address of the page visited, browser information. They serve security and error diagnosis (Article 6(1)(f) GDPR) and are kept for the period set by the hosting provider.
5. Visitor statistics and cookies
The site uses no cookies or advertising tools and does not track you across websites. To count visits it may use Umami, which stores no cookies and no IP addresses; it collects aggregated information on the pages visited, the referral source, the type of device and the country (Article 6(1)(f) GDPR – legitimate interest in improving the site). The site's fonts are loaded from my server, not from external services.
6. To whom I entrust data
Data are processed on my behalf by the hosting and e-mail provider – OVH, on servers in the European Union – under a data processing agreement. Data may also be received by entities authorised under the law. I do not transfer data to countries outside the European Economic Area and do not make automated decisions about you.
7. Your rights
You have the right to access your data, to rectify, erase and restrict its processing and to data portability, as well as the right to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
Providing data is voluntary; without an e-mail address I cannot reply to your message.
8. Professional secrecy
As a radca prawny I am bound by professional secrecy. It covers everything I learn in connection with providing legal assistance – including from a message sent through the form.