§1 Administration of Personal Data

1. The Controller of your personal data is Damian Wójcicki, conducting business activity under the name Damian Wójcicki Wójcicki Translations, Aleja 600-lecia 31/12, 96-500 Sochaczew. The business is entered in the Central Registration and Information on Business (CEIDG) under the following numbers: Tax Identification Number (NIP): 8371887148, National Official Business Register Number (REGON): 543953946.
2. The person supervising the processing of personal data in the organisation can be contacted by email at kontakt@wojcicki-translations.pl in writing at the Controller’s address or by telephone at 571 277 665.
3. This Policy contains rules regarding the processing of personal data by the Controller on the Website, including the basis, purposes and scope of the processing of personal data. as well as the rights of data subjects.
4. Personal data are processed by the Controller in accordance with applicable law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) Official text of the GDPR: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679&qid=1772200514976.
5. The User’s rights are not absolute and do not apply to all personal data processing activities.

§2 Definitions

1. Controller – Damian Wójcicki, conducting business activity under the name Damian Wójcicki Wójcicki Translations, Aleja 600-lecia 31/12, 96-500 Sochaczew. The business is entered in the Central Registration and Information on Business (CEIDG) under the following numbers: Tax Identification Number (NIP): 8371887148, National Official Business Register Number (REGON): 543953946.
2. Personal Data – information about a natural person identified or identifiable by one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, internet identifier and information collected through cookies and other similar technology.
3. Policy – this Privacy Policy.
4. Cookie Policy – a document specifying the rules for the use of cookies on the Website, available at: https://wojcicki-translations.pl/cookies-policy/.
5. Profiling – automated processing of personal data consisting of the analysis and prediction of the User’s behaviour.
6. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC./
7. Website – the website operated by the Collector at wojcicki-translations.pl
8. User – any natural person visiting the Website or using one or more of the services or functionalities described in the Policy.

§3 Security

1. The Controller has implemented appropriate technical and organisational measures to ensure the security of the processing of personal data, and in particular is responsible for and ensures that the data collected by him are:
   
   
   • processed lawfully;
   • collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes;
   • accurate and adequate in relation to the purposes for which they are processed;
   • kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed and
   • processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

§4 Purposes and Legal Bases for the Processing of Data

1. Pursuant to Article 6(1)(a) of the GDPR (consent), personal data may be processed for the following purposes:
   
   
   • Storing data in cookies in accordance with the Cookies Policy available at: https://wojcicki-translations.pl/cookies-policy/.
   • Contact via remote communication tools, in particular: telephone, email or applications.
2. Pursuant to Article 6(1)(b) of the GDPR (performance of a contract), personal data may be processed for the following purposes:
   
   
   • Performance of a sales contract or a contract for the provision of services or taking action at the request of the data subject prior to or after the conclusion of the contract, in particular: the right to warranty, consideration of complaints.
   • Complaints or withdrawal from a distance contract.
3. Pursuant to Article 6(1)(c) of the GDPR (legal obligation incumbent on the Controller), personal data may be processed for the following purposes:
   
   
   • Issuing and storing invoices, bills or fulfilling other obligations under tax and accounting regulations (archiving obligation regarding accounting documents).
   • Cooperation with law enforcement authorities and public institutions.
   • Creating registers and other documentation required by the GDPR.
4. Pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the Controller), personal data may be processed for the following purposes:
   
   
   • Operating the wojcicki-translations.pl Website.
   • Storing data necessary for the proper functioning of the Website in cookies in accordance with the Cookies Policy.
   • Maintaining accounts on LinkedIn and Facebook and interacting with Users of these portals.
   • Ensuring the security of the Website, managing the Website and its proper functioning.
   • Determining claims raised by or against the Controller.
   • Contacting the User.
5. Personal data may also be processed for other purposes if the Controller has an appropriate legal basis for doing so, in particular under Article 6 of the GDPR, provided that this purpose does not infringe the rights and freedoms of the User. In such a case, the User will be informed of the new purpose of the processing before the processing for that purpose begins.

§5 Processing of Special Categories of Data

1. The Controller may process special categories of data, in particular data concerning health, racial or ethnic origin, religious or philosophical beliefs, trade union membership, genetic data, biometric data processed for the purpose of uniquely identifying a natural person, data concerning sex life or sexual orientation.
2. Special categories of data are provided for the purpose of performing certified translation services for documents entrusted by the client, including the fulfilment of obligations arising from the provisions of law regulating the profession of a sworn translator.
3. These data are processed on the basis of Article 9 (2)(a) of the GDPR – explicit consent of the data subject.
4. The Controller particularly protects the data provided in this regard, ensuring its confidentiality, security and access only to authorised persons who are obliged to maintain confidentiality.
5. The provision of data is voluntary, but may be necessary to use certain services offered by the Controller.

§6 Profiling

1. The Collector does not use profiling that would lead to automated decision-making with legal effects for the User or otherwise significantly affect their rights and obligations.
2. Users’ personal data are not used to analyse their preferences or to automatically tailor offers and advertisements.

§7 Period of Processing of Personal Data

1. The period of processing of data by the Controller depends on the type of service provided and the purpose of processing. As a rule, data are processed for the duration of the service provision, until consent is withdrawn or an effective objection to data processing is raised in cases where the legal basis for data processing is the legitimate interest of the Controller.
2. The period of data processing may be extended if processing is necessary to establish and pursue possible claims or defend against claims, and after that time only if and to the extent required by law. After the period of processing expires, data are irreversibly deleted or anonymised.
3. Detailed periods of retention of data depending on the purpose, e.g.:
   • Data related to the performance of a contract – kept for the duration of the contract and then until the expiry of the limitation period for claims (3 or 6 years).
   • Accounting and tax data – kept for the period required by tax law (currently 5 years).
   • Data obtained on the basis of consent – stored until consent is withdrawn.
   • Data related to user enquiries – kept for up to 12 months after the end of correspondence.

§8 Rights of the User

1. The User has the following rights in relation to their personal data:
   • the right to access their personal data,
   • the right to rectify their personal data at any time,
   • the right to erase their personal data at any time,
   • the right to receive a copy of their data,
   • the right to restrict processing of personal data,
   • the right to object to processing of personal data,
   • the right to transfer personal data,
   • the right to withdraw consent; withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal,
   • the right to object to processing of personal data based on the legitimate interest of the Controller for marketing purposes, direct marketing and purposes other than marketing,
   • the right to lodge a complaint with a supervisory authority.
2. In order to exercise the above rights, the User may contact the Controller by sending an e-mail to kontakt@wojcicki-translations.pl or correspondence to the Controller’s registered office. The Controller undertakes to consider the request within 30 days of its receipt.
3. In certain cases, the Controller may refuse to comply with the User’s request if the provisions of law impose an obligation to continue processing the data.

§9 Recipients of Personal Data

1. In order to properly operate the Website, the Controller provides the User’s personal data to other external entities, in particular: hosting providers, courier companies, postal operators, accounting firms, banks, payment operators, law firms and debt collection agencies.
2. The Controller reserves the right to disclose personal data in situations where this is required by applicable law, including the obligation to provide information to the relevant administrative or law enforcement authorities.

§10 Security of Personal Data

1. The Controller conducts an ongoing risk analysis to ensure that personal data are processed by him in a secure manner. Through his actions, he ensures, above all, that only authorised persons have access to data and only to the extent necessary for the performance of their tasks.
2. The Controller is obliged to take all measures permitted by law to ensure that all operations on personal data are recorded and performed only by an authorised entity
3. The Controller is also obliged to ensure that other entities cooperating with the Controller guarantee the application of appropriate security measures in each case where they process personal data on behalf of the Controller.
4. The Controller uses technical security measures such as data transmission encryption (SSL/TLS), access restriction to systems and procedures to protect against unauthorised access to data.

§11 Changes to the Privacy Policy

1. The Policy is reviewed and updated on an ongoing basis.
2. The current version of the Policy was adopted and has been in force since 2026-03-01.

The compliance with the law of this document is guaranteed by lawyers from

Kancelaria KZ