Purpose and Legal
The Recipients of Personal Data Grounds
Data Retention Period
The Rights of the Data Subject
Information on the Data Requirement
Automated Data Processing
1.1 Queritius is an international legal network that provides services through independent law firms operating under a single brand but constituted and regulated in accordance with their domestic laws and regulations. The term “firm” or “Queritius” describes one or more independent law firms that are members of the international legal network. Personal data is collected and processed by each member firm of the Queritius alliance.
The primary data controller is Queritius Wojciech Sadowski, ul. Senatorska 2, 00-075 Warsaw, Poland.
1.2 We process your personal data in accordance with the principles set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDRP”) and applicable domestic law, in particular the Polish Act of 10 May 2018 on the Protection of Personal Data and/or French Act No. 78-17 of 6 January 1978 on information technology, data files and civil liberties.
2.1 Your personal data may be processed:
(a) for the purposes of executing contracts concluded by Queritius with our clients and affiliates (GDPR Article 6(1)(b));
(b) for the purposes of recruitment or cooperation (GDPR Articles 6(1)(c) and 6(1)(a), respectively);
(c) for the purposes of meeting Queritius’s legal obligations, in particular under tax, social security and labour law (GDPR Article 6(1)(c));
(d) in order to protect the vital interests of the data subjects or of any other natural person (GDPR Article 6(1)(d));
(e) for the protection of Queritius’s vital interests, including direct marketing and the assertion or defence of claims (GDPR Article 6(1)(f)). Such processing shall be carried out only with due regard to the interests and fundamental rights and freedoms of the data subject.
2.2 When so-called special category data revealing racial or ethnic origin, political views, religious or philosophical beliefs, trade union membership, health, sexuality or sexual orientation, or personal data relating to criminal convictions and criminal offences are transmitted to us, their processing, if any, requires the explicit consent of the data subject (GDPR Article 9(2)(a) and Article 10).
2.3 Where the processing of your personal data is based on your consent, you may withdraw your consent at any time. In other cases, in particular direct marketing, you may object to the processing of your data. You may object or withdraw your consent by sending an e-mail to email@example.com or by regular mail to Queritius.
3.1 Your personal data may be shared between Queritius’s local offices, including their management, lawyers, staff and contractors, to the extent necessary to provide legal services.
3.2. Your personal data may be transferred or entrusted for processing to entities providing services necessary for the operation of Queritius, in particular ICT services, data storage, archiving, banking and insurance services, accounting, tax, personnel services, and experts, consultants and advisors, with the consent of the data subjects. The transfer or entrustment of data may also be carried out for the purposes of fulfilling the obligations incumbent on the controller, in particular its obligations towards state and local government bodies, including professional self-government.
3.3 If the processing of personal data is transferred or entrusted, Queritius will oblige the recipients to observe the relevant rules of personal data processing and protect their confidentiality.
3.4 Without written consent, the transfer of personal data to a country outside the European Economic Area or to an international organization will only take place in accordance with the applicable requirements of the GDPR, in particular with regard to an adequate level of protection or appropriate safeguards, and only if doing so is necessary for Queritius’s ability to provide legal services.
Queritius will retain your data for no longer than is necessary for the purposes for which it was originally obtained, in particular until the expiry of the statute of limitations on claims and the obligation to archive, or until you object to the processing in accordance with applicable law(s).
5.1 You have the right to demand access to your personal data, to rectify, erase or limit the processing, to object to the processing and to transfer the data. If your habitual residence or place of work is in the European Economic Area, or if the alleged infringement occurred in the European Economic Area, you may at any time exercise your right to file a complaint with the domestic data privacy authority about the way Queritius has processed your personal data. The list of national data protection authorities in EEA states is provided by the European Union here.
5.2 We obtain personal data primarily from the data subject. If we obtain personal data from third parties, including public sources (e.g. registers), official documents, court or arbitration records, or other attorneys, advisors or participants in our proceedings, Queritius will inform the data subject of this in accordance with applicable laws, in particular the obligation to respect professional confidentiality.
5.3 The rights of data subjects are exercised in accordance with the mandatory laws and ethics incumbent on the controller, in particular respect for professional secrecy and the obligation to avoid conflicts of interest. If you have any doubts about Queritius’s processing of your personal data, do not hesitate to contact us at firstname.lastname@example.org.
To the extent that the provision or transfer of personal data is based on your consent, the processing of such data is performed on a voluntary basis. However, failure to provide your data may render contact or cooperation impossible.
Your data will not be subject to automated processing, including profiling, for the purposes of automated decision-making in a way that produces legal effects or in a similar way which significantly affects the data subject.
Version of: 06.2020.