LEGALWINWARSZAWA
Home
/ legal

Privacy Policy

Updated: 10 April 2026

This policy describes how LegalWin processes your personal data under the GDPR, the Polish Data Protection Act (RODO) and the Polish Electronic Communications Law (PKE 2024).

01

Data controller

Name
LegalWin sp. z o.o.
Address
ul. Świętokrzyska 30/63, 00-116 Warszawa, Poland
Email
legalwin.warszawa@gmail.com
Phone
+48 506 55 07 21

Contact for data protection matters is the controller. A Data Protection Officer (DPO) has not been appointed — not required for our activity under Art. 37 GDPR.

02

Purposes and legal bases

We process your data only for the lawful purposes listed below:

Art. 6(1)(a) GDPR
Consent — handling form and AI-chat enquiries, sending the lawyer's reply.
Art. 6(1)(b) GDPR
Performance of a legal-services contract.
Art. 6(1)(c) GDPR
Compliance with legal obligations — accounting and tax records.
Art. 6(1)(f) GDPR
Legitimate interests — fraud prevention, site security.
03

Categories of recipients

Your data may be shared with the following processors acting on our behalf:

  • Partner accounting firm (Poland) — bookkeeping, Art. 28 GDPR.
  • Hosting provider Vercel Inc. (USA) — EU Standard Contractual Clauses, IDTA.
  • Telegram Messenger LLP (UK/EU) — enquiry notifications to our private channel.
  • Groq Inc. (USA) — AI-chat processing, zero retention of content.
  • Polish public authorities — only on lawful request.
04

Retention period

Enquiries & messages
up to 24 months from last contact or until consent is withdrawn.
Contracts & invoices
5 years from end of tax year (Art. 86 §1 Polish Tax Ordinance).
Attorney-client privilege
10 years (Art. 5c Polish Bar Act).
AI-bot chats
not stored on our servers; forwarded to Telegram only with explicit consent.
05

Your rights

Under the GDPR you have the following rights:

  • Right of access (Art. 15 GDPR).
  • Right to rectification (Art. 16 GDPR).
  • Right to erasure — "right to be forgotten" (Art. 17 GDPR).
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR).
  • Right to object to processing based on legitimate interest (Art. 21 GDPR).
  • Right to withdraw consent at any time — without affecting lawfulness of processing before withdrawal.
  • Right to lodge a complaint with the supervisory authority — Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl/.

To exercise any right, email legalwin.warszawa@gmail.com — we reply within 30 days.

06

Transfers outside the EEA

Some of our processors (Vercel, Groq) are based in the USA. Transfers rely on EU Standard Contractual Clauses (Decision 2021/914) and Transfer Impact Assessments. We do not transfer data to countries without adequate protection.

07

Automated decision-making

We do not take decisions producing legal effects based solely on automated processing. The AI chat is a helper tool — its answers are not legal advice and don't substitute a consultation.

08

Cookies

For details on the cookies we use, how to change settings and the categories — see the separate Cookie Policy page.

09

Policy changes

We may update this policy. The last-updated date is shown at the top. Material changes are also announced via a site banner.