Privacy policy

Hello,

If you have found this page, the protection of your personal data matters to you. We want to assure you that we care about your privacy and take it seriously. To protect it, we have put in place both legal and technical measures.

In line with the GDPR, below we set out how we process your personal data. Please read the key questions about your personal data, and if you have any doubts about this Privacy policy, feel free to contact us.

This English version is a translation. In case of any discrepancy, the Polish version prevails.

§1 Introductory information

Acting under Article 13 GDPR (and, where we obtain data from other sources, also Article 14 GDPR) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation), hereinafter the “GDPR”, we provide below information on the processing of your personal data.

This Privacy policy contains information on how we process your personal data. Detailed information on the use of cookies and similar technologies is set out in the Cookie policy below.

§2 Who is the Controller of your personal data?

The controller of your data is JUSIS & PARTNERS spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw, ul. Kabacki Zakątek 19, 02-834 Warsaw, Poland, NIP (tax ID): 9512639945, REGON: 543881098, entered in the register of entrepreneurs of the National Court Register under KRS number 0001221209 by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, share capital PLN 5,000.00. You can contact the Controller by e-mail at z.jusis@juspart.com.

§3 Why do we collect your data and how long do we keep it?

We may process your data for the following purposes:

1. Communicating with you to resolve or complete the matter the correspondence concerns, including answering questions sent via the contact form, by e-mail, etc. (Article 6(1)(f) GDPR)

The data will be processed on the basis of the Controller’s legitimate interest in communicating with you (Article 6(1)(f) GDPR). Your data will be processed no longer than until you object or the business purpose ceases. Providing this data is voluntary but necessary to communicate with you. The data may also be processed during archiving for internal purposes, on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR), until you object or the business purpose ceases.

2. Concluding and performing a contract, and communication preceding the conclusion of a contract in matters concerning the contract (Article 6(1)(b) GDPR)

3. Establishing, defending and pursuing claims as part of the Controller’s legitimate interest (Article 6(1)(f) GDPR)

4. Fulfilling the Controller’s legal obligations, including tax and archiving obligations (Article 6(1)(c) GDPR)

Data necessary to conclude and perform a contract will be processed for the duration of the contract, including the time needed to exercise rights arising from the contract (Article 6(1)(b) and (f) GDPR). Providing this data is voluntary but necessary to conclude and perform the contract. Additional data provided, among other things, to make performance of the contract easier will be processed no longer than until you object or the business purpose ceases, on the basis of the legitimate interest in serving Clients (Article 6(1)(f) GDPR).

The data will be processed for the limitation period for claims set by law, including Article 118 of the Polish Civil Code, and then for an additional 12 months on the basis of the Controller’s legitimate interest in defending against claims and in establishing and pursuing claims (Article 6(1)(f) GDPR).

Where data is processed to fulfil legal obligations, it will be processed for the period during which separate, generally applicable laws require the Controller to keep it. Where data is necessary to fulfil the Controller’s legal obligations (such as issuing and storing invoices or archiving obligations), the processing period is 5 years from the end of the calendar year in which the tax obligation arose, unless the law provides otherwise (Article 6(1)(c) GDPR). In other cases of legal obligations, the retention period is set by the laws governing those obligations (Article 6(1)(c) GDPR).

The data may also be archived for internal and statistical purposes until you object or the business purpose ceases, on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR).

5. Sending marketing and commercial information (hereinafter Marketing information) (Article 6(1)(a) or (f) GDPR)

We process the data on the basis of consent (Article 6(1)(a) GDPR), when we ask you to subscribe to a newsletter or to agree to commercial communication, or on the basis of legitimate interest (Article 6(1)(f) GDPR) to the extent permitted by law. The communication channel (e-mail, SMS, telephone) requires prior consent under the laws on electronic communication. You may withdraw your consent at any time.

Providing the data is voluntary but necessary to receive Marketing information. If you opt out of Marketing information, we will no longer be able to send it to you.

The data may also be archived for the possible establishment, pursuit or defence of claims, including to be able to demonstrate that marketing activities were carried out lawfully, on the basis of Article 6(1)(f) GDPR. Data processed on the basis of Article 6(1)(f) GDPR will be processed no longer than until you object or the business purpose ceases, whichever comes first.

6. Administering and managing our company page on the LinkedIn social platform, where data is processed on that platform, including communication and directing marketing content (Article 6(1)(f) GDPR)

Data provided in order to use the platform will be processed no longer than until you object or the business purpose ceases, whichever comes first, on the basis of the legitimate interest in serving platform users.

This data will be processed only if you choose to click “Follow” or otherwise leave your data on the page we manage, for example as a reaction or comment. The data will be processed for as long as the page exists or until you object, which you can do by clicking “Follow” again to unfollow, deleting your comment, in any other way provided by the platform, or by contacting us. The rules for the company page are set by the Controller, while the rules for using the social platform on which the page is hosted are set by the entity that operates the platform.

7. Analytics and statistics (Article 6(1)(a) or (f) GDPR)

We process data for analytical and statistical purposes to better understand how you use our products and services and how we can develop them. This data may come from various sources, for example analytics tools (if we use a website or app), customer service systems, accounting software, booking or communication systems, as well as summaries and reports prepared for our internal needs.

Where we use cookies or similar technologies, we activate tools other than strictly necessary ones only after you give your consent (Article 6(1)(a) GDPR) in the cookie banner. Data necessary for the proper operation, security and functionality of the website is processed on the basis of legitimate interest (Article 6(1)(f) GDPR). Where we do not use cookies, analytical data comes from our own systems and is processed on the basis of legitimate interest (Article 6(1)(f) GDPR) to produce statistics, analyse trends and improve our services.

Where possible, we use pseudonymisation or anonymisation, and reports are aggregated (for example the number of enquiries, average contact time, most frequently chosen service categories) so they cannot be attributed to a specific person. We process the data until you object or the business purpose ceases, whichever comes first, and where processing is based on consent, until you withdraw it. You have the right to object to processing based on our legitimate interest and, where processing is based on consent, to withdraw it at any time.

8. Promotion and marketing of products (Article 6(1)(a) or (f) GDPR)

If you provide us with your data, in particular in the form of a review or testimonial, it will be processed on the basis of the Controller’s legitimate interest in marketing, in order to improve the quality of services and products and to promote the Controller’s services and products. This data will be processed for the period necessary to achieve the business purposes or until you object. Providing the data is voluntary.

9. Recruitment (Article 6(1)(b) and Article 6(1)(c) GDPR)

The data may be processed for the time necessary for the recruitment process and for concluding a contract (Article 6(1)(b) GDPR). Data required by employment law is processed on the basis of Article 6(1)(c) GDPR in conjunction with Article 22¹ of the Polish Labour Code. For additional data provided voluntarily, the legal basis is your consent (Article 6(1)(a) GDPR).

With your consent, your data may also be used for future recruitment for a maximum of 3 years, given the recruitment cycle in the industry (counted from the end of the year in which the application was received). Providing personal data is voluntary, but some data may be necessary to carry out the recruitment and to conclude a contract. If you do not provide it, we will not be able to take these steps.

For data processed on the basis of Article 6(1)(f) GDPR for the purposes described above, every 12 months we review whether further retention is justified and delete or anonymise data that is no longer needed.

§4 Who may we share your data with?

We share your data with other entities only when this is necessary for the processing purposes referred to in §3, and only to the extent necessary for that purpose. As a rule, we collect and process only the data you have provided to us yourself, except for data collected automatically or semi-automatically (for example online identifiers, system logs, cookies and similar technologies). You can find more about cookies in §8.

We may share your data with entities that process it on our behalf. Data is made available to other companies or entities only when necessary.

We entrust your data to a hosting company, a provider of CRM and marketing tools, an IT company or the entity managing the website, an accounting firm, an invoicing software provider, a newsletter service provider, a cloud service provider, entities providing marketing services, entities providing administrative services, entities providing consulting services, subcontractors, lawyers, couriers or postal operators, a social media platform, a customer service platform and other entities that support the Controller in achieving the processing purposes. The Controller may disclose personal data to entities entitled to receive it under applicable law, including public authorities, common and administrative courts, bailiffs, notaries, etc.

As a rule, data will not be transferred outside the EEA, subject to the situations described below. In other cases, where data is transferred outside the EEA, this will be done on the basis of your consent, standard contractual clauses or other safeguards provided for in the GDPR, after fulfilling, among other things, the information obligation.

Services provided by Microsoft Ireland Operations Ltd, Google Ireland Ltd., LinkedIn Ireland Unlimited Company and HubSpot Ireland Limited are performed by entities established in the EU; however, due to the global nature of these entities’ operations, data may be transferred to the USA on the basis of standard contractual clauses or other legal safeguards that meet GDPR requirements. In any case, these entities have implemented GDPR-compliant safeguards to protect personal data, including the use of standard contractual clauses. More information on how these providers process data can be found in each provider’s privacy policy.

Your data (where the processing purpose requires it) may also be transferred outside the EEA to the following entities:

• HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, United States.

§5 What rights do you have?

Under the GDPR, you have the right to access your personal data, to rectify it, to erase it, to restrict its processing, to object to its processing, to data portability, and to withdraw consent to data processing; withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal. Detailed information on these rights is set out in the GDPR, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). As a rule, we respond to your requests within 1 month (Article 12(3) GDPR).

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). We encourage you, however, to contact us first so that we can clarify your concerns.

§6 Is your data profiled?

The Controller analyses personal data in an automated way, using tools provided by software vendors (for example statistics and history), only to the extent that this produces no legal effects for you and does not significantly affect your situation, including your guaranteed rights and freedoms. The purpose of automated processing is to learn about Users’ preferences (more information about this analysis can be found in §8 - Cookie policy).

§7 Applicable data protection law

In matters not covered by this policy, the relevant provisions of law apply, including European law (in particular the GDPR).

§8 Cookie policy

While you use the Website, technical information and online identifiers may be collected automatically, in particular through cookies and similar technologies. This data may constitute personal data.

Cookies are IT data, in particular text files, stored on the User’s end device and intended for use of the Website. Cookies usually contain the name of the website they come from, how long they are stored on the end device and a unique number.

Cookies are used in particular for the following purposes:

• technical and functional - necessary for the Website and its features to work properly (for example maintaining the session, remembering your choices in the cookie banner, forms),
• analytics and statistics - making it possible to analyse how the Website is used, which helps improve its structure and content (for example Google Analytics 4, Microsoft Clarity, HubSpot),
• marketing and advertising - making it possible to run remarketing and show personalised advertising content.

The current list of cookies used on the Website, with information on their categories, providers and retention periods, is available in the consent management tool (the cookie banner shown on the website). You can change your choices at any time in the cookie settings.

You can change your cookie settings yourself in your web browser. In many cases the browser allows cookies to be stored on the User’s end device by default. Detailed information on how to manage cookies is available in your browser settings. Not consenting to cookies may limit some features of the Website.

The Controller uses technologies that observe the actions taken by the User on the Website:

HubSpot

The Website runs on the HubSpot platform, provided by HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland. We use it to run the contact form, send e-mails, display the cookie banner and maintain our contact database (CRM).

HubSpot sets cookies that are necessary for the Website to work and to remember your choices in the cookie banner (Article 6(1)(f) GDPR). HubSpot analytics cookies (including __hstc, hubspotutk, __hssc), which measure visits and link them to a submitted form, are activated only after you consent in the cookie banner (Article 6(1)(a) GDPR). Details can be found in the HubSpot Privacy Policy and in the list of HubSpot cookies.

Google Tag Manager (GTM)

Our website uses Google Tag Manager (GTM), provided by Google Ireland Limited.

Google Tag Manager is a technical tool for managing other tags and scripts placed on the website (for example Google Analytics 4, Microsoft Clarity). GTM itself does not collect or process users’ personal data; it only fires other tags, which may collect data.

If individual tags (for example analytics or marketing tags) are enabled on the website through GTM, it is those tags that may collect user data in accordance with the rules described in this Privacy policy.

The legal basis for using GTM is the Controller’s legitimate interest (Article 6(1)(f) GDPR) in ensuring that the website works properly and in making the tools easier to manage. Tags that require consent are fired by GTM only after consent is given.

Information on how data is processed can be found in the Google Privacy Policy. Information about GTM can be found at https://marketingplatform.google.com/about/tag-manager/.

Google Analytics 4

To analyse and optimise the use of our website, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies and similar technologies to collect information about user activity on the website (for example the traffic source, pages visited, device type and web browser). We use this information to produce statistics that help us improve the website and tailor its content to users’ needs.

For strictly necessary technical purposes we rely on legitimate interest (Article 6(1)(f) GDPR). Analytics tools other than strictly necessary ones are activated after you consent in the cookie banner (Article 6(1)(a) GDPR). You can manage your consent or objection at any time in the cookie settings or by using the browser add-on provided by Google.

Detailed information on data processing in Google Analytics can be found in the Google Privacy Policy.

Microsoft Clarity

To analyse the use of our website, we use Microsoft Clarity, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Microsoft Clarity uses cookies and similar technologies to record how the website is used, including clicks, cursor movements and scrolling. From this it produces heatmaps and session recordings that help us improve the layout and content of the website.

We activate this tool only after you consent to analytics cookies in the cookie banner (Article 6(1)(a) GDPR). You can manage your consent at any time in the cookie settings. Details can be found in the Microsoft Privacy Statement.

§9 Social media

The Website contains links to profiles on LinkedIn. The rules for processing personal data are described directly on LinkedIn.

§10 Joint controllership

Data processed on the LinkedIn platform is jointly controlled by the Controller and LinkedIn Ireland Unlimited Company, address: Legal Dept. (Privacy Policy and User Agreement), Wilton Place, Dublin 2, Ireland, hereinafter the Joint Controller. The detailed rules of joint controllership, including information on your rights, are described in the LinkedIn Pages Joint Controller Addendum and in the LinkedIn Privacy Policy. The Controller processes the data on the basis of its legitimate interest in analysing Users’ activity and preferences in order to improve the features used and the services provided. In matters concerning personal data, you may contact both the Controller and the Joint Controller.

The division of the parties’ obligations as joint controllers is set out in the arrangements under Article 26 GDPR published in the privacy policies of the platform.

This Privacy policy is effective from 2 November 2026.