PRIVACY POLICY
CURRENT VERSION: AUGUST 2025
In accordance with Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: "GDPR").
In certain cases, we may obtain personal data from other sources, particularly from publicly available registers (e.g., National Court Register, Central Register of Business Activity), business partners, marketing and analytics providers, database suppliers, and online platforms (including social media and industry platforms).
Personal data may also be obtained from interactions via social media (Telegram, X, Instagram, LinkedIn), including private messages, comments, reactions, and publicly available information posted on users’ profiles.
WHO IS THE DATA CONTROLLER?
The controller of your personal data is AVP Group sp. z o.o., with its registered office in Warsaw, Poland.
HOW TO CONTACT THE DATA CONTROLLER
You can contact the Controller via:
- Postal address: ul. Młynarska 42, Suite 115, 01-171 Warsaw, Poland
- Email: office@avpgroup.pl
PURPOSES AND LEGAL BASES FOR PROCESSING YOUR PERSONAL DATA
Providing your personal data is voluntary but necessary for the conclusion of a contract or for us to respond to your inquiries. Failure to provide data may result in the inability to deliver services or prepare an offer.
Below you will find detailed information regarding the purposes, legal bases, scope, and retention periods for processing your personal data:
| Purpose of Processing | Legal Basis | Scope of Data | Data Retention Period |
|---|---|---|---|
| Handling inquiries sent via contact form, email, phone, or messenger (including Telegram) | Art. 6(1)(f) GDPR (legitimate interest – communication with a potential client) | Name, email address, phone number, messenger ID/username, content of the inquiry | For the duration of the client relationship and up to the statutory limitation period (max. 6 years) |
| Communication and marketing activities via social media (Telegram, X, Instagram, LinkedIn) | Art. 6(1)(f) GDPR (legitimate interest – brand building, marketing) or Art. 6(1)(a) GDPR (consent – for subscriptions, event registrations, marketing content) | Username/ID, message content, public information on profiles, contact details, other voluntarily provided data | For the duration of the client relationship and up to the statutory limitation period (max. 6 years) |
| Conclusion and performance of service contracts (including correspondence, document preparation, representation in proceedings) | Art. 6(1)(b) GDPR (contract performance) | Name, contact details, identification data (e.g., tax ID, ID number), case-related data, documents, and evidence | For the duration of the contract and up to the statutory limitation period (max. 6 years) |
| Compliance with legal obligations, including tax and accounting regulations | Art. 6(1)(c) GDPR (legal obligation) | Name, address, tax ID, payment data, accounting documents | 6 years after the end of the tax year |
| Obtaining data from case files or other sources for client representation | Art. 6(1)(f) GDPR (legitimate interest – client representation) | Identification data, contact details, data from case files or public registers | For the duration of proceedings and as required by law for archiving |
| Recruitment processes | Art. 6(1)(a), 6(1)(c) GDPR (consent and legal obligation under labor law) | Identification data, contact details, education, professional experience, CV, cover letter, recruitment documents | Up to 6 months after recruitment ends, or until consent withdrawal for future recruitment |
| HR and payroll services for employees and contractors | Art. 6(1)(b), 6(1)(c) GDPR (contract, legal obligation) | Identification data, contact details, employment data, salary data, tax and social security data | During employment/cooperation and for the period required by labor and tax law |
| Direct marketing (newsletter, event information, publications) | Art. 6(1)(a), 6(1)(f) GDPR (consent or legitimate interest for clients) | Name, email, relationship with the firm | Until consent withdrawal or objection |
| Claims and legal defense | Art. 6(1)(f) GDPR (legitimate interest) | Name, contact details, case information, correspondence history | Until the statutory limitation period (max. 6 years) |
DATA RECIPIENTS
Your personal data may be disclosed to:
- Accounting and bookkeeping service providers
- IT, hosting, and maintenance service providers
- Communication and conferencing tool providers (e.g., Google Meet, Microsoft Teams, Telegram)
- External specialists and subcontractors (e.g., sworn translators, tax advisors, experts)
- Authorized employees and contractors
- Social media platform providers (e.g., Telegram, X, Instagram, LinkedIn)
- Public authorities, courts, and other authorized institutions when required by law or necessary to protect clients’ rights and interests
Your personal data will not be transferred outside the European Economic Area (EEA).
YOUR RIGHTS UNDER GDPR
You have the following rights:
- Access to data (Art. 15 GDPR)
- Rectification of data (Art. 16 GDPR)
- Erasure of data (“right to be forgotten”) (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent (Art. 7(3) GDPR)
- Lodging a complaint with the supervisory authority (Art. 77 GDPR) – President of the Personal Data Protection Office (PUODO) in Poland
Requests regarding these rights can be submitted via email: office@avpgroup.pl
We will respond within one month, extendable by up to two months in justified cases.
PROFILING
We do not use automated decision-making, including profiling, as referred to in Article 22 GDPR.
COOKIES
Our website uses cookies for proper operation and to improve user experience.
- Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest for essential cookies).
- Types of cookies used:
| Name | Type | Purpose | Storage Period | Provider |
|---|---|---|---|---|
| pll_language | Essential, session | Language selection on the website | Session | avpgroup.pl |
Instructions for managing cookies are available here:
This Privacy Policy may be updated. The current version will always be available on the Administrator's website https://optout.aboutads.info/?c=2&lang=EN