OF LOEWEN KACZMAREK ZAWADOWSKI SPÓŁKA KOMANDYTOWA
(HEREINAFTER: “LOEWEN”, THE “LAW FIRM” OR THE “CONTROLLER”)

This Privacy Policy fulfils the information obligation set out in Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter: the “GDPR”.

The Controller has not appointed a Data Protection Officer.

1. INFORMATION ON THE PROCESSING OF PERSONAL DATA OF USERS OF THE LOEWEN.PL WEBSITE (HEREINAFTER: THE “WEBSITE USER”)

   The controller of the Website User’s personal data is the law firm Loewen Kaczmarek Zawadowski sp.k., with its registered office in Warsaw, ul. Tytusa Chałubińskiego 8, 00-613 Warsaw, Poland, tel. +48 22 102 25 60, e-mail: kancelaria@loewen.pl

   Loewen processes the Website User’s personal data in connection with the use of the Website, including in particular data such as the IP address, online identifiers, device and browser data, and data collected through cookies and similar technologies.

   The Website User’s personal data will be processed by Loewen for the purpose of:

   1. ensuring the proper functioning and security of the Website,
   2. compiling statistics and analysing Website traffic,/li>
   3. upon consent, personalising content and carrying out marketing activities./li>

   Providing data related to the use of the Website is voluntary; however, blocking cookies other than strictly necessary cookies or failure to provide certain data may limit the functionality of some features of the Website.

   The legal basis for the processing of the Website User’s personal data is:

   1. Article 6(1)(f) GDPR (the Controller’s legitimate interest consisting in ensuring the operation and security of the Website), and/li>
   2. Article 6(1)(a) GDPR with respect to data collected through analytical, functional and marketing cookies upon consent./li>

   The Website User’s personal data may be disclosed to entities providing technical and analytical services to the Controller, including hosting and IT service providers, as well as providers of statistical and marketing tools (e.g. Google LLC/Google Ireland Ltd., Meta Platforms Ireland Ltd.) to the extent resulting from the use of the Website and cookie settings.
   The Controller does not make automated decisions with regard to the Website User, including profiling, except for activities carried out by marketing tools based on cookies solely upon the Website User’s consent.

   Detailed information on cookies used and on how to give and withdraw consent is available in the Cookie Policy published on the Website.

   The Website User’s personal data is stored for the period necessary to achieve the above purposes, in accordance with applicable cookie retention periods, or until the cookies are deleted by the Website User/consent is withdrawn.

   In connection with the processing of their personal data, the Website User has the right to:

   1. obtain information about the processing of personal data, including the categories of data processed and any recipients of such data,
   2. request rectification of inaccurate personal data or completion of incomplete personal data,
   3. request erasure of personal data or restriction of processing, subject to the statutory conditions,
   4. object to the processing of personal data based on Article 6(1)(f) GDPR due to the Website User’s particular situation, subject to the statutory conditions,
   5. receive personal data from the Controller in a structured, commonly used and machine-readable format and transmit those data to another controller (data portability),
   6. withdraw consent where processing is based on consent (e.g. analytical/marketing cookies) at any time, without affecting the lawfulness of processing carried out prior to withdrawal,
   7. lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, if personal data are processed unlawfully.

   All requests and enquiries related to the processing of personal data should be sent to: kancelaria@loewen.pl

2. INFORMATION ON THE PROCESSING OF PERSONAL DATA OF NATURAL PERSONS TO WHOM LOEWEN PROVIDES LEGAL ASSISTANCE (HEREINAFTER: THE “CLIENT”)

   The controller of the Client’s personal data is the law firm Loewen Kaczmarek Zawadowski sp.k., with its registered office in Warsaw, ul. Tytusa Chałubińskiego 8, 00-613 Warsaw, Poland, tel. +48 22 102 25 60, e-mail: kancelaria@loewen.pl

   The Client’s personal data will be processed where Loewen provides legal assistance to the Client in a matter entrusted to Loewen, for the purpose of proper and diligent performance of professional legal activities.

   The Client’s personal data will be processed by Loewen within the following scope:

   1. basic personal data: first name, surname, place of work, job title, contact details (correspondence address, telephone number, e-mail address, social media accounts),
   2. any other data provided by the Client to Loewen in connection with the provision of legal assistance, including special categories of personal data within the meaning of the GDPR, which will be protected in accordance with Loewen’s professional secrecy obligations.

   Providing personal data by the Client is necessary for concluding and performing the agreement for the provision of legal assistance; failure to provide data may prevent the provision of legal services.

   The legal basis for processing the Client’s personal data is:

   1. Article 6(1)(b) GDPR, i.e. processing necessary for the performance of the agreement for the provision of legal assistance concluded with the Client,
   2. Article 6(1)(c) GDPR, i.e. processing necessary to comply with legal obligations incumbent on the Law Firm in connection with the provision of legal services, including accounting obligations and obligations arising from the Act on Counteracting Money Laundering and Terrorist Financing,
   3. Article 6(1)(f) GDPR, i.e. the Controller’s legitimate interest in the establishment, exercise or defence of claims arising from or related to the agreement between the Client and Loewen, and
   4. Article 9(2)(f) GDPR, i.e. processing is necessary for the establishment, exercise or defence of legal claims in connection with legal assistance provided by Loewen to the Client.

   The source of the data is data received directly from the Client.

   The Client’s data will be processed until the definitive termination of cooperation with the Law Firm and thereafter for the limitation periods of claims arising from or related to the agreement between the Client and Loewen.

   The Client’s basic personal data may be disclosed by Loewen to entities providing services to the Law Firm (including external IT, accounting and courier companies).

   In connection with the processing of their personal data by Loewen, the Client has the right to:

   1. obtain information about the processing of personal data, including the categories of personal data processed and any recipients of such data,
   2. request rectification of inaccurate personal data or completion of incomplete personal data,
   3. request erasure of personal data or restriction of processing, subject to the statutory conditions,
   4. object to the processing of personal data based on Article 6(1)(f) GDPR due to the Client’s particular situation, subject to the statutory conditions,
   5. receive personal data from the Controller in a structured, commonly used and machine-readable format and transmit those data to another controller (data portability),
   6. lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, if personal data are processed unlawfully.

   All requests and enquiries related to the processing of personal data should be sent to: kancelaria@loewen.pl

3. INFORMATION ON THE PROCESSING OF PERSONAL DATA OF LOEWEN’S CONTRACTORS (HEREINAFTER: THE “CONTRACTOR”)

   The controller of the Contractor’s personal data is the law firm Loewen Kaczmarek Zawadowski sp.k., with its registered office in Warsaw, ul. Tytusa Chałubińskiego 8, 00-613 Warsaw, Poland, tel. +48 22 102 25 60, e-mail: kancelaria@loewen.pl

   The Contractor’s personal data (of a natural person) will be processed by Loewen where such person becomes a Contractor of Loewen or where a potential contractor intends to cooperate with Loewen during their business activity.

   The Contractor’s personal data will be processed for the purpose of maintaining ongoing contact, performing agreements concluded between the Contractor and Loewen, presenting offers, receiving orders, etc.

   Providing personal data by the Contractor is necessary for concluding and performing the agreement; failure to provide data may prevent establishing or carrying out cooperation.

   The Law Firm may exercise its rights under the agreement concluded with the Contractor and may defend against or pursue claims arising from the conclusion and performance of such agreement, in the event of a dispute relating to such agreement.
   The Contractor’s data will be processed by Loewen within the following scope: first name, surname, PESEL, NIP, REGON, address details (including place of business), place of work, job title, contact details (correspondence address, telephone number, e-mail address).

   The legal basis for the processing of the Contractor’s data is:

   1. Article 6(1)(b) and (c) GDPR, i.e. processing necessary for the performance of an agreement concluded with the Contractor and for compliance with legal obligations incumbent on the Controller, and
   2. Article 6(1)(f) GDPR, i.e. the Controller’s legitimate interest in pursuing or defending claims arising from and/or related to the agreement.

   The source of the data processed by Loewen is data obtained directly from the Contractor.

   Where data relate to person acting on behalf of the Contractor (e.g. representatives, contact persons), the source of the data may also be the Contractor itself or publicly available sources.

   The Contractor’s data will be processed until the end of cooperation with Loewen, and thereafter for the period necessary to comply with legal obligations (e.g. tax regulations) and for the limitation periods of claims arising from or related to the agreement between the Contractor and Loewen.

   The Contractor’s data may be disclosed by Loewen to entities providing services to the Law Firm (including external IT, courier, HR and accounting service providers, entities servicing contractors, etc.).

   Loewen may also transfer the Contractor’s data to other interested entities (including entities independent of the Law Firm) if the Contractor provides the data to Loewen in a form that clearly indicates the Contractor’s wish to be contacted by third parties in business matters.

   In connection with the processing of their data by Loewen, the Contractor has the right to:

   1. obtain information about the processing of personal data, including the categories of personal data processed and any recipients of such data,
   2. request rectification of inaccurate personal data or completion of incomplete personal data,
   3. request erasure of personal data or restriction of processing, subject to the statutory conditions,
   4. object to the processing of personal data based on Article 6(1)(f) GDPR due to the Contractor’s particular situation, subject to the statutory conditions,
   5. receive personal data from the Controller in a structured, commonly used and machine-readable format and transmit those data to another controller (data portability),
   6. lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, if personal data are processed unlawfully.

   All requests and enquiries related to the processing of personal data should be sent to: kancelaria@loewen.pl

4. INFORMATION ON THE PROCESSING OF PERSONAL DATA OF REPRESENTATIVES OF LOEWEN’S CONTRACTORS AND PERSONS INDICATED BY LOEWEN’S CONTRACTORS (HEREINAFTER: THE “REPRESENTATIVE”)

   The controller of the Representative’s personal data is the law firm Loewen Kaczmarek Zawadowski sp.k., with its registered office in Warsaw, ul. Tytusa Chałubińskiego 8, 00-613 Warsaw, Poland, tel. +48 22 102 25 60, e-mail: kancelaria@loewen.pl

   The Representative’s personal data will be processed by Loewen where the Representative is a representative of a Contractor of Loewen or a natural person who is an employee or associate of a Contractor of Loewen (regardless of the form of engagement) designated by the Contractor as a person responsible for cooperation with Loewen or for establishing such cooperation.

   The Representative’s personal data will be processed for the purpose of maintaining ongoing contact, performing agreements concluded between Loewen and the employer/entity represented by the Representative, and presenting offers, receiving orders, etc.

   Providing personal data by the Representative is necessary for contact and cooperation with the Contractor; failure to provide data may hinder or prevent contact in contractual matters.

   Loewen may provide information about its activities and possible forms of cooperation.

   The Law Firm may defend against or pursue claims related to the agreement concluded with the Contractor represented by, or employing, the Representative, in the event of a dispute relating to such agreement.

   The following data of the Representative will be processed: first name, surname, place of work, job title, contact details (correspondence address, telephone number, e-mail address, social media accounts).

   The legal basis for processing is Article 6(1)(f) GDPR, i.e. the Controller’s legitimate interest in establishing and maintaining cooperation/contact and in pursuing or defending claims.

   The source of the data processed by Loewen will be the Representative’s data obtained from the employer/entity represented by the Representative.

   The Representative’s data will be processed until the definitive termination of cooperation with the Law Firm and thereafter for the limitation periods of claims arising from the agreement concluded with the Contractor.

   The Representative’s data may be erased earlier if the Representative objects to the processing, or if the Law Firm determines that the data is no longer necessary to achieve a legitimate purpose.

   The Representative’s data will not be erased earlier where retention is required by applicable law or is necessary for settlements or claims within the scope of the Representative’s activities.

   The Representative’s personal data may be disclosed to entities providing services to the Law Firm (including external IT, courier, HR and accounting service providers, and entities servicing contractors).

   In connection with the processing of their data, the Representative has the right to:

   1. obtain information about the processing of personal data, including the categories of personal data processed and any recipients of such data,
   2. request rectification of inaccurate personal data or completion of incomplete personal data,
   3. request erasure of personal data or restriction of processing, subject to the statutory conditions,
   4. object to the processing of personal data based on Article 6(1)(f) GDPR due to the Representative’s particular situation, subject to the statutory conditions,
   5. receive personal data from the Controller in a structured, commonly used and machine-readable format and transmit those data to another controller (data portability),
   6. lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, if personal data are processed unlawfully.

   All requests and enquiries related to the processing of personal data should be sent to: kancelaria@loewen.pl

5. INFORMATION ON THE PROCESSING OF PERSONAL DATA OF JOB APPLICANTS (HEREINAFTER: THE “APPLICANT”)

   The controller of the Applicant’s personal data is the law firm Loewen Kaczmarek Zawadowski sp.k., with its registered office in Warsaw, ul. Tytusa Chałubińskiego 8, 00-613 Warsaw, Poland, tel. +48 22 102 25 60, e-mail: kancelaria@loewen.pl

   The Applicant’s personal data will be processed within the following scope: data required by labour law or necessary to conclude a civil-law contract, as well as data voluntarily provided by the Applicant in application documents, in particular: first name and surname, date of birth, contact details, education, employment history.

   Providing data required by labour law or necessary to conclude an agreement is necessary to participate in the recruitment process; failure to provide such data may prevent the application from being considered.

   The legal basis for processing is:

   1. Article 6(1)(a) GDPR with respect to processing for future recruitment purposes, where the Applicant gives consent,
   2. Article 6(1)(a) GDPR with respect to processing the Applicant’s image, where the Applicant gives consent,
   3. Article 6(1)(a) GDPR where the Applicant provides a CV/cover letter containing data beyond the scope listed above, where the Applicant gives consent,
   4. Article 6(1)(b) and (c) GDPR with respect to processing under a civil-law contract,
   5. Article 6(1)(c) GDPR in conjunction with Article 22¹ § 1 of the Labour Code with respect to processing within an employment relationship,
   6. Article 6(1)(f) GDPR with respect to data collected during the interview, i.e. the Controller’s legitimate interest in assessing whether the Applicant is suitable for the position applied for.

   The source of the data is data obtained directly from the Applicant.

   Loewen will store the Applicant’s personal data until the recruitment process for the position applied for is completed. Where separate consent is given for future recruitment purposes, the Law Firm will store the Applicant’s data for 2 years from the date of collection.

   The Law Firm may disclose the Applicant’s personal data to entities providing services to Loewen (e.g. external IT companies).

   In connection with the processing of their personal data, the Applicant has the right to:

   1. obtain information about the processing of personal data, including the categories of personal data processed and any recipients of such data,
   2. request rectification of inaccurate personal data or completion of incomplete personal data,
   3. request erasure of personal data or restriction of processing, subject to the statutory conditions,
   4. object to the processing of personal data based on Article 6(1)(f) GDPR due to the Applicant’s particular situation, subject to the statutory conditions,
   5. withdraw consent where processing is based on consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal,
   6. receive personal data from the Controller in a structured, commonly used and machine-readable format and transmit those data to another controller (data portability),
   7. lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, if personal data are processed unlawfully.

   All requests and enquiries related to the processing of personal data should be sent to: kancelaria@loewen.pl

6. INFORMATION ON THE PROCESSING OF PERSONAL DATA OF PERSONS CONTACTING LOEWEN VIA MEANS OF REMOTE COMMUNICATION AND PERSONS CONTACTED BY LOEWEN (HEREINAFTER: THE “INDIVIDUAL”)

   The controller of the Individual’s personal data is the law firm Loewen Kaczmarek Zawadowski sp.k., with its registered office in Warsaw, ul. Tytusa Chałubińskiego 8, 00-613 Warsaw, Poland, tel. +48 22 102 25 60, e-mail: kancelaria@loewen.pl

   Loewen will process the personal data of the Individual where the Individual is not one of the persons referred to in Sections 1 – 5 of this Privacy Policy, but contacts Loewen in any matter, or Loewen contacts the Individual in any matter, and as a result the Individual is included in the Law Firm’s contact database.

   Loewen will process the Individual’s personal data for the purpose of contacting the Individual in current matters (including sending enquiries and providing answers), as well as for the purpose of possible cooperation.

   Providing personal data is voluntary; however, failure to provide data may prevent responding or establishing contact.

   Loewen will process the following data of the Individual: first name, surname, place of work, job title, contact details (correspondence address, telephone number, e-mail address, social media accounts).

   The legal basis for processing is Article 6(1)(f) GDPR, i.e. the Controller’s legitimate interest consisting in communicating with the Individual (including asking questions and responding to enquiries) and establishing and maintaining business relationships.

   The sources of the data may include data obtained directly from the Individual, from the Individual’s associates, and from publicly available sources.

   Loewen will process the Individual’s data for the duration of the business relationship and for one year after its termination. After this period, the Law Firm may contact the Individual to enquire about the possibility of further processing.

   The Individual’s data may be erased earlier if the Individual objects to the processing or if the Law Firm determines that the data is no longer necessary to achieve a legitimate purpose.
   The Individual’s personal data may be disclosed to entities providing services to the Law Firm (including external IT, courier, HR and accounting service providers, and entities servicing Contractors).

   Loewen may also disclose the Individual’s personal data to other interested entities (including entities independent of the Law Firm) if the Individual provides such data in a form that clearly indicates the Individual’s wish to be contacted by third parties in business matters.

   In connection with the processing of their personal data, the Individual has the right to:

   1. obtain information about the processing of personal data, including the categories of personal data processed and any recipients of such data,
   2. request rectification of inaccurate personal data or completion of incomplete personal data,
   3. request erasure of personal data or restriction of processing, subject to the statutory conditions,
   4. object to the processing of personal data based on Article 6(1)(f) GDPR due to the Individual’s particular situation, subject to the statutory conditions,
   5. receive personal data from the Controller in a structured, commonly used and machine-readable format and transmit those data to another controller (data portability),
   6. lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, if personal data are processed unlawfully.

   All requests and enquiries related to the processing of personal data should be sent to: kancelaria@loewen.pl

7. INFORMATION ON THE PROCESSING OF PERSONAL DATA OF USERS WHO FOLLOW LOEWEN’S SOCIAL MEDIA PROFILES (HEREINAFTER: THE “USER”)

   The controller of the User’s personal data is the law firm Loewen Kaczmarek Zawadowski sp.k., with its registered office in Warsaw, ul. Tytusa Chałubińskiego 8, 00-613 Warsaw, Poland, tel. +48 22 102 25 60, e-mail: kancelaria@loewen.pl

   The rules governing following Loewen’s profiles on social media platforms, posting and deleting comments, and conducting correspondence are set out in the separate terms and policies of the relevant social media platforms, which act as controllers of personal data processed within the User’s account.

   Loewen and the providers of individual social media platforms (e.g. Meta Platforms Ireland Ltd.) may act as joint controllers with respect to statistics and analytical tools relating to Loewen’s profiles (e.g. Page Insights).

   Loewen processes the User’s personal data in connection with the User’s activity on Loewen’s social media profiles for the purpose of presenting the Law Firm’s activities and events.

   The User may contact the Law Firm via chat or messaging functionalities available on Loewen’s social media profiles (e.g. to ask a question or submit a request). In such a case, the User’s data will be processed in order to respond.

   The User’s personal data may also be processed by Loewen for statistical purposes, using analytical tools provided by social media platforms, which may involve profiling. Detailed information on the processing of personal data by such platforms is set out in their rules, policies and terms.

   Loewen will process the data provided and made available by the User through the functionalities of social media platforms.

   Providing personal data is voluntary; however, failure to provide certain data may, in some cases, prevent the User from using the full functionalities of Loewen’s social media profiles.

   The legal basis for processing is Article 6(1)(f) GDPR, i.e. the Controller’s legitimate interest in presenting the Law Firm’s activities and responding to enquiries.

   Loewen processes data obtained directly from the User.

   The storage period of the User’s data and the possibility of its deletion depend on the functionalities of the relevant social media platform. In each case, Loewen will comply with a request for erasure where possible, provided that the Law Firm is not required by law to continue processing such data.

   The User’s personal data will also be erased when it is no longer necessary for the purposes specified above, to the extent permitted by the functionalities of the relevant social media platform.

   Comments and posts published by Users and deemed by Loewen to be unnecessary, inappropriate, or infringing applicable laws or third-party rights may be removed from Loewen’s profiles at any time.

   Loewen does not make automated decisions with regard to Users, including profiling, except for profiling carried out by social media platforms and/or marketing tool providers in accordance with their rules and, where applicable, on the basis of the User’s consent (e.g. marketing cookies).

   The User has the right to:

   1. obtain information about the processing of personal data, including the categories of personal data processed and any recipients of such data,
   2. request rectification of inaccurate personal data or completion of incomplete personal data,
   3. request erasure of personal data or restriction of processing, subject to the statutory conditions,
   4. object to the processing of personal data based on Article 6(1)(f) GDPR due to the User’s particular situation, subject to the statutory conditions,
   5. receive personal data from the Controller in a structured, commonly used and machine-readable format and transmit those data to another controller (data portability),
   6. lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, if personal data are processed unlawfully.

   All requests and enquiries related to the processing of the User’s personal data should be sent to: kancelaria@loewen.pl

8. INFORMATION ON THE PROCESSING OF PERSONAL DATA OF USERS OF CALCULATORS AVAILABLE ON THE LAB.LOEWEN.PL WEBSITE (HEREINAFTER: THE “TOOL USER”)

   The controller of the Tool User’s personal data is the law firm Loewen Kaczmarek Zawadowski sp.k., with its registered office in Warsaw, ul. Tytusa Chałubińskiego 8, 00-613 Warsaw, Poland, tel. +48 22 102 25 60, e-mail: kancelaria@loewen.pl

   Loewen processes the Tool User’s personal data in connection with the use of lab.loewen.pl, in particular technical data such as the IP address, online identifiers, device and browser data, and data collected through cookies and similar technologies.

   The tools available on lab.loewen.pl are provided for informational purposes and enable the Tool User to perform calculations independently. Data entered into calculators is not saved or stored by Loewen in the Controller’s systems; calculations are performed in the Tool User’s browser. Loewen does not use such data to identify the Tool User.

   The purposes of processing include:

   1. ensuring the proper functioning and security of the tools and the lab.loewen.pl website,
   2. compiling statistics and analysing traffic on lab.loewen.pl,
   3. upon consent personalising content and carrying out marketing activities.

   The legal basis for processing is:

   1. Article 6(1)(f) GDPR (the Controller’s legitimate interest consisting in ensuring the operation and security of the tools), and
   2. Article 6(1)(a) GDPR with respect to data collected through analytical, functional and marketing cookies upon consent.

   The Tool User’s data may be disclosed to entities providing technical and analytical services to the Controller, including hosting and IT service providers and providers of statistical and marketing tools to the extent resulting from the use of the tools and cookie settings.

   The Tool User’s data is stored for the period necessary to achieve the above purposes, in accordance with applicable cookie retention periods, or until the cookies are deleted by the Tool User/consent is withdrawn.

   Providing data related to the use of the tools on lab.loewen.pl is voluntary; however, blocking cookies other than strictly necessary cookies or failure to provide certain data may limit the functionality of certain features of the website.

   The Tool User has the right to:

   1. obtain information about the processing of personal data, including the categories of personal data processed and any recipients of such data,
   2. request rectification of inaccurate personal data or completion of incomplete personal data,
   3. request erasure of personal data or restriction of processing, subject to the statutory conditions,
   4. object to the processing of personal data based on Article 6(1)(f) GDPR due to the Tool User’s particular situation, subject to the statutory conditions,
   5. receive personal data from the Controller in a structured, commonly used and machine-readable format and transmit those data to another controller (data portability),
   6. lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, if personal data are processed unlawfully.

   All requests and enquiries related to the processing of the Tool User’s personal data should be sent to: kancelaria@loewen.pl

9. INFORMATION ON TRANSFERS OF DATA OUTSIDE THE EEA (THIRD COUNTRIES)

   Due to Loewen’s use of technology providers (e.g. analytical, marketing, hosting or postal service providers), personal data may be transferred to third countries, in particular to the United States. Such transfers are based on GDPR-compliant mechanisms (e.g. the EU–US Data Privacy Framework where the provider is certified or Standard Contractual Clauses).

   The data subject may obtain from the Controller a copy of the safeguards applied in connection with transfers to third countries or information about where such safeguards are made available.