Andrzej Lulka i Wspólnicy Kancelaria Prawna sp. k.
Aleje Jerozolimskie 65/79, Suite 13.14, 00-697 Warsaw
VAT ID (NIP): 7010433359
REGON: 147332410
KRS: 0000515292
I. General Provisions
This Privacy Policy defines the principles of processing and protecting personal data provided by Users in connection with their use of the services offered by Andrzej Lulka i Wspólnicy Kancelaria Prawna sp. k. via the law firm’s website.
The controller of the personal data contained on the website is Andrzej Lulka i Wspólnicy Kancelaria Prawna sp. k., Aleje Jerozolimskie 65/79, Suite 13.14, 00-697 Warsaw, NIP: 7010433359, REGON: 147332410, KRS: 0000515292.
In order to ensure the security of entrusted personal data, the Controller acts in accordance with internal procedures and the applicable provisions of law, particularly the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
The Controller reserves the right to amend this Privacy Policy. All changes will be published on the Controller’s website and will take effect upon publication.
II. Scope of Data Collection
The Controller collects Users’ personal data to the extent necessary to provide the services available on the website, conclude and perform sales contracts, and for accounting, marketing, and operational purposes.
The Controller may collect the following personal data:
- first and last name,
- home address and/or delivery address,
- email address,
- phone number,
- payment information (e.g. bank account number),
- the User’s IP address.
Providing personal data is voluntary but is necessary in order to use the services offered through the online store.
III. Purpose of Data Processing
The personal data of Users is processed for the purpose of:
- concluding and performing sales contracts,
- managing the User’s account,
- contacting the User in relation to performing orders and sales contracts,
- processing payments,
- fulfilling legal obligations (e.g., accounting and tax),
- conducting marketing activities and sending commercial information (if consent has been given),
- securing and pursuing potential claims and defending against claims.
IV. Legal Basis for Data Processing
The processing of the User’s personal data is based on the applicable legal grounds, in particular:
- Article 6(1)(b) of the GDPR – processing necessary for the performance of a contract
- Article 6(1)(c) of the GDPR – processing necessary to comply with a legal obligation
- Article 6(1)(f) of the GDPR – processing based on the legitimate interests of the Controller
V. Sharing of Personal Data
Users’ personal data may be shared with external entities only to the extent necessary to perform services provided by the Controller, including:
- courier and postal service providers (to deliver orders),
- payment operators (to process transactions),
- accounting and legal service providers,
- marketing service providers (if the User has given consent).
The users’ data will not be transferred outside the European Economic Area or to any international organizations.
VI. User Rights
The User has the right to access their personal data, rectify it, delete it, restrict processing, and the right to data portability. They also have the right to object to data processing and to withdraw their consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights, the User should contact the Controller by email at kontakt@lulka.eu or by mail at Aleje Jerozolimskie 65/79, Suite 13.14, 00-697 Warsaw.
The User also has the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office) if they believe their data is being processed unlawfully.
VII. Data Retention Period
Personal data will be stored for the time necessary to fulfill the purposes for which it was collected, including:
- throughout the period when the contract is binding and, after its completion, until the limitation period for claims expires,
- for the time required by law (e.g. for accounting and tax purposes),
- until consent is withdrawn (in cases where processing is based on consent).
VIII. Data Security
The Controller uses technical and organizational measures to protect personal data against unauthorised access, theft, unlawful processing, alteration, loss, damage, or destruction, appropriate to the risks and category of the data being protected.
IX. Cookies
The website lulka.eu uses cookies to ensure proper functioning of the site, personalize content, and analyse traffic. Cookies are small text files stored on the User’s device.
The User can change their browser settings at any time to block or delete cookies. However, this may affect the functionality of the website.
X. Final Provisions
In matters not regulated by this Privacy Policy, the relevant provisions of Polish law and the GDPR shall apply.
Any changes to the Privacy Policy will be published on the website. lulka.eu
This Privacy Policy is effective as of 01.01.2025.
