PRIVACY POLICY
Using MyLegalStore involves the processing of your personal data. In the course of this processing we use our best efforts to make it safe. Safety of your personal data is the highest priority for us. To this end, we adopted this privacy policy and we encourage you to read it. You will learn who is responsible for the processing of your personal data, what we do with personal data, what rights you have or how you can contact us.
This privacy policy contains also information on how we use cookies and your related rights.
I. Who is the data controller?
Controller of personal data is an entity that collects and process your personal data and decides on the manner and the purpose of their use.
Controller of your personal data is: My Legal Solutions spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw (address: ul. Hrubieszowska 2, 01-209 Warsaw), entered in the business register of the National Court Register kept by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division with number 0000242123, NIP: 5252342010, share capital of PLN 50,000.00.
The controller has not designated a data protection officer.
If, when using the Inquiry Service (as defined in the Regulations governing the provision of services by electronic means of communication on MyLegalStore portal, further the “Regulations”) you opt for services provided by our Partners, we will provide your personal data to our Partner(s) that will implement those services, so they can start working with you..
A full list of our Partners can be found here.
II. How can you contact us?
You can contact us by one of the following means of communications:
1) by ordinary mail to the address: My Legal Solutions sp. z o.o., ul. Hrubieszowska 2, 01-209 Warsaw,
2) through a contact form to be found at www.mylegalstore.com, and
3) by e-mail to the address: contact@mylegalstore.com
III. Why do we collect and process your personal data?
The purpose of collecting your personal data is the correct provision of services offered on MyLegalStore.. We need your data to perform these services, to contact you and to comply with statutory obligations we are bound by such as regarding the counteracting of money laundering and terrorist financing.
If you opted for services provided by one of our Partners, your personal data would be processed by us to implement your instruction. In such a case, we will provide your personal data to our Partner that will directly provide these services to you.
IV. On what basis do we process your personal data?
The basis for the processing of your personal data with regard to the Document Template Service (as defined in the Regulations), is that processing is necessary for the performance of a contract, i.e. provision of the service. This legal basis is set out in Article 6 paragraph 1 letter b) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).
The basis for the processing of your personal data with regard to the Inquiry Service (as defined in the Regulations) is your consent. This legal basis is set out in Article 6 paragraph 1 letter a) GDPR.
In addition, we may process your personal data for the purposes of pursuing our legitimate interests, in accordance with the legal basis set out in Article 6 paragraph 1 letter f) GDPR. Our legitimate interests which justify the processing of your personal data include:
1) direct marketing or providing information and communication which includes promotion of our services. Should this information be sent to you electronically, we will not send it unless we receive your consent before we act. It may therefore happen that at one point we will ask you to give such a consent. Absence of your consent will by no means affect our provision of services to you. In addition, you can at any time notify us that you no longer wish to receive any information or communication containing promotion of our services;
2) counteracting fraud related to the use of personal data, such as identity theft and counteracting hacker attacks;
3) transfer of your personal data to our Partners to pursue our internal administrative purposes. We have to say here that Partners whom we transfer your personal data are our affiliated companies. Together we form one group of undertakings;
4) ensure security of our networks and IT systems against data leakage or violation of integrity of those networks and systems (such as network intrusions). This may involve giving access to data to persons running safety tests of our networks and IT systems or to persons servicing those networks or systems;
Sometimes, we process your personal data under the legal basis set out in Article 6 paragraph 1 letter e) GDPR i.e. when processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. This may happen in a situation where we use your personal data to apply protective measures related to counteracting money laundering and terrorist financing.
Whenever we process your personal data to pursue our legitimate interests, we are guided by the principle of proportionality. It means that we process your data for the above purposes only when your interests in respect of data confidentiality are not more important. If, for any reasons, we would become aware of your sensitive data (such as data pertaining to your health status or your political opinions), we will not process those data in any way and we will immediately destroy all copies of such data.
V. What categories of your personal data do we process?
Categories of personal data are collectively defined forms of personal data that we process. Depending on the services we provide for you, we process various categories of personal data. All categories of personal data that we may process in connection with the functioning of the MyLegalStore portal are listed below:
1) name and surname;
2) e-mail address;
3) telephone number;
4) residing address;
5) nationality;
6) PESEL number;
7) in absence of PESEL number – date of birth;
8) country of birth;
9) type of identity document;
10) series and number of identity document;
11) validity date of identity document;
12) country issuing the identity document;
13) IP number;
14) in the case of natural persons carrying out economic activity:
- NIP number;
- business name;
- place of business.
When providing the Document Template Service (as defined in the Regulations) and the Inquiry Service (as defined in the Regulations), we process only the necessary personal data, i.e. name and surname, e-mail address and IP number. We process other personal data only in a situation where, after using the Inquiry Service (as defined in the Regulations), you decided to buy a Ready-Made Company from us (as defined in the Regulations) or use other portal services.
The above categories of personal data are necessary to provide the service and to comply with public-law obligations imposed on us, especially as regards the counteracting money laundering and terrorist financing. The processing is necessary, among other things, to contact you in order to perform the service, but also to prepare relevant documents, in particular when, after using the Inquiry Service (as defined in the Regulations), you decided to buy a Ready-Made Company from us (as defined in the Regulations) or use other portal services, such as preparing appropriate powers of attorney, share sale agreement, notification to business register of the National Court Register and other public authorities, notification to banks operating accounts of the company you buy.
VI. How do we collect your personal data?
We collect your personal data in two different ways.
Primarily, we obtain your personal data as you register with MyLegalStore as a user or as you fill out and send a contact form (as part of the Inquiry Service)..
Another way we collect your personal data is through direct contact with you. This occurs when you expressed your interest to buy a Ready-Made Company (as defined in the Regulations) or to use other portal services.
Moreover, we can process your personal data if the inquirer provided us with your data, in particular when you were to become a shareholder of the acquired company or be appointed to its governing bodies. Please note that the person providing us with personal data of other people acts as data controller. Such person is fully responsible for legality of sharing personal data of other people with us. In particular, this applies to whether or not this person is authorized by data subject to provide us with their data. At the initial stage of processing personal data by us, it may therefore happen that we process them despite the fact that you did not authorize the person who sent us an inquiry to provide us with this data, or we process data that are incorrect or incomplete. In order to remedy this problem, as soon as we receive your personal data from another person, we inform you to e-mail address provided by the user that we process your personal data. If the user provided us with your data unlawfully or if the data we collected were false, you have the right to object to our further processing of your personal data or to inform us that the personal data are incomplete or incorrect. If we receive an objection or information that personal data is false or incomplete, your personal data will be immediately removed from our IT systems and will no longer be processed by us or will be properly corrected to reflect the reality. Communication with us in the above matters takes place via e-mail, to the address indicated in point II of this Privacy Policy.
VII. Is the provision of data obligatory?
Providing your personal data is discretionary, however, failure to provide us with your data will prevent us from providing you with the services.
VIII. For how long do we retain your data?
We retain your personal data for as long as necessary to implement the services.
Also, due to the fact that data may give rise to our claims against you or yours against us, your personal data will be stored by the time any potential establishment, exercise or defence of claims have become barred by the statute of limitations. The basis for such processing is set out in Article 17 paragraph 3 letter e) GDPR.
If personal data are processed for direct marketing purposes, we process your personal data until you notify us that you no longer wish to receive any information or communication containing promotion of our services.
IX. Who are the recipients of your personal data?
If, after using the Inquiry Service (as defined in the Regulations), you decided to buy a Ready-Made Company from us (as defined in the Regulations) or use other portal services, your personal data are transferred to our Partners responsible for providing such services.
We do not transfer your personal data to any third countries (from outside of the European Union) or international organisations.
X. What are your rights resulting from the processing of your personal data by us?
In connection with the processing of your personal data, you have the following rights:
1) you may request that we provide you with an access to your personal data,
2) you may request that we restrict the processing, rectify or erase your data (‘right to be forgotten’),
3) you are entitled to request that we move your personal data to another controller,
4) you have the right to lodge a complaint against unlawful processing of your personal data by us. The competent supervisory authority is the President of the Personal Data Protection Office.
You can exercise the above rights by notifying us through the means of communications specified in item II (How can you contact us?).Your requests will be considered forthwith, no later than within 3 weeks of receipt. You will receive an answer by the same means you used when lodging your request.
XI. Are your data subject to profiling or other automated decision-making processes?
We do not use your personal data for profiling or automated decision-making processes.
XII. Use of cookies
MyLegalStore uses cookies to optimize portal processes.
Cookies are installed on your end devices (computers, tablets, smartphones etc). We can access them whenever you visit MyLegalStore.
Cookies are small text files stored on your end devices. We use cookies to facilitate your online experience.
Cookies indicate their originating website, their unique number and retention time on your end device.
Our website may use cookies for controlling how the website’s contents are supplied, for monitoring the website’s activity and to optimise its functionality by adapting its content to your needs or enabling you to be constantly logged. By using cookies we may also maintain statistics concerning visits to the website and adjust it to current trends.
By ticking ‘I agree’ option, you agree to us using the cookies. You may withdraw your consent by changing settings of the browser installed on your end device. If you do this, however, you may lose or change some functionalities of our website. You will no longer be constantly logged in and automatic logging will be disactivated.
