I. Who is the data controller?
Controller of personal data is an entity that collects and process your personal data and decides on the manner and the purpose of their use.
Controller of your personal data is: My Legal Solutions spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw (address: ul. Hrubieszowska 2, 01-209 Warsaw), entered in the business register of the National Court Register kept by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division with number 0000242123, NIP: 5252342010, share capital of PLN 50,000.00.
The controller has not designated a data protection officer.
If, when using the Inquiry Service (as defined in the Regulations governing the provision of services by electronic means of communication on MyLegalStore portal, further the “Regulations”) you opt for services provided by our Partners, we will provide your personal data to our Partner(s) that will implement those services, so they can start working with you..
A full list of our Partners can be found here.
II. How can you contact us?
You can contact us by one of the following means of communications:
1) by ordinary mail to the address: My Legal Solutions sp. z o.o., ul. Hrubieszowska 2, 01-209 Warsaw,
2) through a contact form to be found at www.mylegalstore.com, and
3) by e-mail to the address: email@example.com
III. Why do we collect and process your personal data?
The purpose of collecting your personal data is the correct provision of services offered on MyLegalStore.. We need your data to perform these services, to contact you and to comply with statutory obligations we are bound by such as regarding the counteracting of money laundering and terrorist financing.
If you opted for services provided by one of our Partners, your personal data would be processed by us to implement your instruction. In such a case, we will provide your personal data to our Partner that will directly provide these services to you.
IV. On what basis do we process your personal data?
The basis for the processing of your personal data with regard to the Document Template Service (as defined in the Regulations), is that processing is necessary for the performance of a contract, i.e. provision of the service. This legal basis is set out in Article 6 paragraph 1 letter b) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).
The basis for the processing of your personal data with regard to the Inquiry Service (as defined in the Regulations) is your consent. This legal basis is set out in Article 6 paragraph 1 letter a) GDPR.
In addition, we may process your personal data for the purposes of pursuing our legitimate interests, in accordance with the legal basis set out in Article 6 paragraph 1 letter f) GDPR. Our legitimate interests which justify the processing of your personal data include:
1) direct marketing or providing information and communication which includes promotion of our services. Should this information be sent to you electronically, we will not send it unless we receive your consent before we act. It may therefore happen that at one point we will ask you to give such a consent. Absence of your consent will by no means affect our provision of services to you. In addition, you can at any time notify us that you no longer wish to receive any information or communication containing promotion of our services;
2) counteracting fraud related to the use of personal data, such as identity theft and counteracting hacker attacks;
3) transfer of your personal data to our Partners to pursue our internal administrative purposes. We have to say here that Partners whom we transfer your personal data are our affiliated companies. Together we form one group of undertakings;
4) ensure security of our networks and IT systems against data leakage or violation of integrity of those networks and systems (such as network intrusions). This may involve giving access to data to persons running safety tests of our networks and IT systems or to persons servicing those networks or systems;
Sometimes, we process your personal data under the legal basis set out in Article 6 paragraph 1 letter e) GDPR i.e. when processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. This may happen in a situation where we use your personal data to apply protective measures related to counteracting money laundering and terrorist financing.
Whenever we process your personal data to pursue our legitimate interests, we are guided by the principle of proportionality. It means that we process your data for the above purposes only when your interests in respect of data confidentiality are not more important. If, for any reasons, we would become aware of your sensitive data (such as data pertaining to your health status or your political opinions), we will not process those data in any way and we will immediately destroy all copies of such data.
V. What categories of your personal data do we process?
Categories of personal data are collectively defined forms of personal data that we process. Depending on the services we provide for you, we process various categories of personal data. All categories of personal data that we may process in connection with the functioning of the MyLegalStore portal are listed below:
1) name and surname;
2) e-mail address;
3) telephone number;
4) residing address;
6) PESEL number;
7) in absence of PESEL number – date of birth;
8) country of birth;
9) type of identity document;
10) series and number of identity document;
11) validity date of identity document;
12) country issuing the identity document;
13) IP number;
14) in the case of natural persons carrying out economic activity:
- NIP number;
- business name;
- place of business.
When providing the Document Template Service (as defined in the Regulations) and the Inquiry Service (as defined in the Regulations), we process only the necessary personal data, i.e. name and surname, e-mail address and IP number. We process other personal data only in a situation where, after using the Inquiry Service (as defined in the Regulations), you decided to buy a Ready-Made Company from us (as defined in the Regulations) or use other portal services.
The above categories of personal data are necessary to provide the service and to comply with public-law obligations imposed on us, especially as regards the counteracting money laundering and terrorist financing. The processing is necessary, among other things, to contact you in order to perform the service, but also to prepare relevant documents, in particular when, after using the Inquiry Service (as defined in the Regulations), you decided to buy a Ready-Made Company from us (as defined in the Regulations) or use other portal services, such as preparing appropriate powers of attorney, share sale agreement, notification to business register of the National Court Register and other public authorities, notification to banks operating accounts of the company you buy.
VI. How do we collect your personal data?
We collect your personal data in two different ways.
Primarily, we obtain your personal data as you register with MyLegalStore as a user or as you fill out and send a contact form (as part of the Inquiry Service)..
Another way we collect your personal data is through direct contact with you. This occurs when you expressed your interest to buy a Ready-Made Company (as defined in the Regulations) or to use other portal services.
VII. Is the provision of data obligatory?
Providing your personal data is discretionary, however, failure to provide us with your data will prevent us from providing you with the services.
VIII. For how long do we retain your data?
We retain your personal data for as long as necessary to implement the services.
Also, due to the fact that data may give rise to our claims against you or yours against us, your personal data will be stored by the time any potential establishment, exercise or defence of claims have become barred by the statute of limitations. The basis for such processing is set out in Article 17 paragraph 3 letter e) GDPR.
If personal data are processed for direct marketing purposes, we process your personal data until you notify us that you no longer wish to receive any information or communication containing promotion of our services.
IX. Who are the recipients of your personal data?
If, after using the Inquiry Service (as defined in the Regulations), you decided to buy a Ready-Made Company from us (as defined in the Regulations) or use other portal services, your personal data are transferred to our Partners responsible for providing such services.
We do not transfer your personal data to any third countries (from outside of the European Union) or international organisations.
X. What are your rights resulting from the processing of your personal data by us?
In connection with the processing of your personal data, you have the following rights:
1) you may request that we provide you with an access to your personal data,
2) you may request that we restrict the processing, rectify or erase your data (‘right to be forgotten’),
3) you are entitled to request that we move your personal data to another controller,
4) you have the right to lodge a complaint against unlawful processing of your personal data by us. The competent supervisory authority is the President of the Personal Data Protection Office.
You can exercise the above rights by notifying us through the means of communications specified in item II (How can you contact us?).Your requests will be considered forthwith, no later than within 3 weeks of receipt. You will receive an answer by the same means you used when lodging your request.
XI. Are your data subject to profiling or other automated decision-making processes?
We do not use your personal data for profiling or automated decision-making processes.
Cookies are installed on your end devices (computers, tablets, smartphones etc). We can access them whenever you visit MyLegalStore.
Cookies indicate their originating website, their unique number and retention time on your end device.
By ticking ‘I agree’ option, you agree to us using the cookies. You may withdraw your consent by changing settings of the browser installed on your end device. If you do this, however, you may lose or change some functionalities of our website. You will no longer be constantly logged in and automatic logging will be disactivated.