ITR

MDDP The Best Tax Advisory Firm in Poland and the Best Consultancy Firm within the scope of Transfer Pricing in Poland according to a ranking compiled by International Tax Review. more
 

 

MDDP’s Privacy Policy

Discretion and trust are values that are particularly important in our daily consulting activities. Therefore we take good care of all information made available to us by our clients, co-workers and other persons we have contact with, and the safety of the processed personal data is of significance to us.

"MDDP’s Privacy Policy" (hereinafter referred to as: “Privacy Policy”) is a collection of key information on how we protect and process personal information. This information is divided into information that is common to all individuals we have contact with (hereinafter referred to as: “General Information”) and information that differs depending on which group of individuals it relates to.

General information

The controller of personal data of each of the following groups of persons, for the purposes indicated for each group, is MDDP Michalik Dłuska Dziedzic i Partnerzy Spółka doradztwa podatkowego spółka akcyjna with its registered office in Warsaw (00-542), address: Mokotowska 49, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under the number: 0000755371, NIP: 5213287732, REGON: 015699764, share capital: PLN 100,150.00 paid in full and entities from the MDDP group: MDDP Spółka z ograniczoną odpowiedzialnością Akademia Biznesu sp.k. (00-854 Warszawa, address: Aleja Jana Pawła II 25, KRS number 0000288782), MDDP Spółka z ograniczona odpowiedzialnością Finanse i Księgowość sp.k. (00-838 Warszawa, address: Prosta 69, KRS number 0000267836) and MDDP Olkiewicz i Wspólnicy Kancelaria Adwokatów i Radców Prawnych sp. k. (00-542 Warszawa, address: Mokotowska 49, KRS number 0000225667)(or by post to the address of our registered office.

We process all personal data in accordance with the applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)(hereinafter referred to as „GDPR”) and Act On The Protection Of Personal Data of 10.05.2018 (Dz.U. z 2018 r. poz. 1000).

 

We are responsible for the fact that every person whose personal data we process may exercise the rights granted to him/her by law, which include in particular:

the right to have access to his/her personal data, to obtain their copies and to be informed, i.a, on the purposes of processing, categories, recipients and the duration of storage of such data;

the right to request that we delete his/her personal data (also referred to as “the right to be forgotten”) in certain situations, including when processing of the data is unlawful, is no longer necessary for the purposes for which the data were collected or in the event of objection and absence of other legal grounds for processing;

the right to demand that we restrict the processing of his/her personal data in specific situations, e.g. during the period of verification by the Controller of the correctness of personal data, which has been questioned, or until the verification of the objection raised;

the right to transfer his/her personal data, i.e. to receive them in a structured, commonly used format and to be able to send them to another controller;

the right to object to the processing of his/her data if it is executed for the performance of a task carried out in the public interest or for the performance of legitimate interests of the Controller - for reasons related to the specific situation of a person;

the right to object to the processing of his/her if it is carried out for the purposes of direct marketing;

the right not to be subject to a decision which is based solely on automated processing, including profiling;

the right to lodge a complaint to the supervisory authority (President of the Office for the Protection of Personal Data) in the event that the our processing of personal data does not comply with the applicable regulations.

We make every effort to collect only the personal information that is necessary and appropriate for the purposes indicated below. We will store them as long as it will be necessary to achieve these purposes.

We may share personal information with third parties (recipients) which cooperate with us in the provision of our services and provide MDDP with services related to our day-to-day operations, in particular legal, tax, accounting, IT, marketing, debt collection, security and other services. All these entities are obliged to meet the highest standards of protection of data we provide them.

We would also like to inform  that the personal data we process are not transferred outside of the European Economic Area (hereinafter referred to as “EEA”).

We know how important it is to protect children's personal data on the Internet and we pay particular attention to this. Therefore this Privacy Policy does not provide for the collection and processing of personal data of children under the age of 16.

We would also like our Clients and potential Clients to know that…

personal data of our Clients or persons who contact us in order to make use of our legal and tax advisory services will be processed for the following purposes:

v  promotion and advertising of the activity, products and services of entities belonging to the MDDP group in the event of obtaining appropriate consent - pursuant to Article 6(1)(a) of the GDPR and no longer than until withdrawal of the consent - the consent may be withdrawn at any time, but this will not affect the lawfulness of the processing performed on the basis of the consent before its withdrawal;

v  preparation and conclusion of a contract for the provision of legal and tax advisory services and the exercise of the rights and obligations of the MDDP arising therefrom (pursuant to Article 6(1)(b) of the GDPR and no longer than until the expiry of claims in connection with the contract);

v  fulfillment of obligations imposed on MDDP by relevant regulations, e.g. tax law, the Accounting Act (pursuant to Article 6(1)(c) of the GDPR and no longer than by the statute of limitations of claims for public-law receivables);

v  pursuit of our legitimate interests (pursuant to Article 6(1)(f) of the GDPR), i.e. promotion and advertising of our activity, services and products (no longer than until objection), pursuit of possible claims, archiving for the purpose of protecting our legal interest (no longer than until the time these purposes are met). As far as archiving purposes related to the protection of our legal interest are concerned, we are entitled to process the data in an automated manner.

The provision of services by MDDP requires that we remain in constant contact with Clients and potential Clients, i.e. that we process personal data (name, surname, position, e-mail address, telephone number) of persons who contact us on behalf of Clients and potential Clients. Most often these data are transferred to us by themselves. We take the utmost care to ensure that these data are safe and are not made available

to unauthorized persons.

Providing personal data by our Clients and potential Clients is voluntary but it is necessary for us to provide legal and tax advisory services - this will not be possible in case of a refusal to provide such data.

 

We would also like our business partners to know that…

their personal data are processed by us for the following purposes:

v  promotion and advertising of the activity, products and services of entities belonging to the MDDP group (in case of obtaining appropriate consent - pursuant to Article 6(1)(a) of the GDPR and no longer than until withdrawal of the consent) - the consent may be withdrawn at any time, but this will not affect the lawfulness of the processing performed on the basis of consent before its withdrawal;

v  conclusion and performance of the contract concluded with them for the provision of services to MDDP (pursuant to Article 6(1)(b) of the GDPR and no longer than until the expiry of claims in connection with this contract);

v  fulfillment of obligations imposed on MDDP by relevant regulations, e.g. tax law, the Accounting Act (pursuant to Article 6(1)(c) of the GDPR and no longer than by the statute of limitations of claims for public-law receivables);

v  pursuit of our legitimate interests (pursuant to Article 6(1)(f) of the GDPR), i.e. promotion and advertising of our activity, services and products (no longer than until objection), pursuite of possible claims, archiving for the purpose of protecting our legal interest (no longer than until these purposes are met). As far as archiving purposes related to the protection of our legal interest are concerned, we are entitled to process the data automatically.

Providing personal data by our business partners is voluntary, but necessary for the conclusion and performance of the contract for the provision of services to us - this will not be possible in case of refusal to provide them.

We would also like persons who apply for employment at MDDP  to know that…

their personal data are processed by us for the following purposes:

v  conducting the recruitment process for the position candidate applies for, including contacting him/her in order to organize and conduct a recruitment interview (pursuant to Article 6(1)(a) of the GDPR and no longer than by the end of the recruitment process);

v  performance of obligations resulting from the applicable provisions of law, related to the employment process, in particular the Labour Code (pursuant to Article 6(1)(c) of the GDPR, no longer than it is necessary for the full implementation of the purposes of processing in connection with employment);

v  the pursuit of our legitimate interests (pursuant to Article 6(1)(f) of the GDPR, i.e. the pursuit of possible claims, archiving for the protection of our legal interest (no longer than by the time these purposes are met).

Personal data of candidates that we process are included in their CV, cover letter and in any other documentation that will be provided to us in connection with the recruitment process. If a candidate decides to give us access to special categories of data in the documents sent to us, e.g. includes his biometric picture or information on his health or political views in his CV , we will only be entitled to process them if he/she includes in the document a clause with express consent to the processing of these data. Then the basis for our data processing will be Article 9(2)(a) of the GDPR.

In connection with the recruitment processes, MDPP requires provision of certain personal data only. However, if you provide other data that are not required by MDDP, we consider that you have given your consent to the processing of such data, provided that you can withdraw it at any time without affecting the lawfulness of the processing carried out prior to the withdrawal.

The provision of personal data by applicants for employment is voluntary but necessary to enable them to participate in the recruitment process - this will not be possible if they refuse access to such data.

We would also like visitors of our websites and blogs to know that...

their personal data are processed by us for the following purposes:

v  sending our newsletter which may contain commercial information (in the case of appropriate consent - pursuant to Article 6(1)(a) of the GDPR and no longer than until the withdrawal of the consent);

v  promotion and advertising of activity, products and services of entities belonging to the MDDP group (in case of receiving appropriate consent - pursuant to Article 6(1)(a) of the GDPR and no longer than until withdrawal of the consent);

v  the pursuit of our legitimate interests (pursuant to Article 6(1)(f) of the GDPR), i.e. promotion and advertising of our activity, services and products (no longer than until objection), answering messages and enquiries sent to us, monitoring traffic on our websites and blogs, ensuring their proper functioning and adapting them to the needs and interests of specific visitors, pursuing possible claims, archiving in order to protect our legal interest (no longer than by the time these purposes are met). As far as archiving purposes related to the protection of our legal interest are concerned, we have the right to process data automatically, including by means of profiling in accordance with the principles described below.

Please note that if personal data are processed on the basis of consent, this consent may be revoked at any time, but this will not affect the lawfulness of the processing that was carried out on the basis of the consent prior to its revocation.

Personal data are usually collected by us when you browse our websites and blogs and sometimes sent to us directly to the e-mail addresses provided there or by contact forms.

Our profiling is based on the verification and adjustment of content to preferences on the basis of feedback from users.

The provision of personal data by visitors of our websites and blogs is voluntary, but necessary for the purposes mentioned above - this will not be possible in the event of a refusal to provide such data.

We would also like the representatives of the media we contact to know that…

their personal data are processed by us for the following purposes:

v  promotion and advertising of the activity, products and services of entities belonging to the MDDP group (in case of obtaining appropriate consent - pursuant to Article 6(1)(a) of the GDPR and no longer than until withdrawal of such consent) - the consent may be withdrawn at any time, and this will not affect the lawfulness of the processing performed on the basis of the consent prior to its withdrawal;

v  pursuit our legitimate interests (pursuant to Article 6(1)(f) of the GDPR), i.e. promotion and advertising of our activity, services and products (no longer than until objection), answering messages and enquiries sent to us, archiving for the protection of our legal interest (no longer than until these purposes are met).

Personal data of media representatives have been collected by us from themselves or through the media (websites, press), in which they publish their content, often indicating contact details.

Providing personal data by the representatives of the media we contact is voluntary, but necessary to achieve the abovementioned purposes - this will not be possible in case of refusal to provide them.

We would also like everyone who enters our office to know that…

we use a video surveillance system and registration of entrances and exits from the office to ensure the safety of persons, objects and confidential documentation. Therefore, for the abovementioned purpose, we also collect and process personal data (image) of persons who enter our office, which is our legitimate interest. The processing of such data therefore takes place on the basis of Article 6(1)(f) of the GDPR and no longer than it is necessary to protect the office.

As we have already mentioned, in all matters related to personal data protection, including the exercise of the rights of persons whose personal data are processed, please contact us by e-mail: or by post to the address of our registered office indicated at the beginning of our Privacy Policy.