GDPR

In accordance with Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), we provide the following information on the processing of personal data of users of the cherrylaw.pl website and of persons who contact us.

Data Controller

The controller of your personal data is Cherry Law Ziółek sp.k., with its registered office at ul. Prosta 20, 00-850 Warsaw, Poland (Mennica Tower), entered in the Register of Entrepreneurs of the Polish National Court Register (KRS) under number 0001238869, tax identification number NIP 527 321 74 22, REGON 544634864.

For all matters relating to the processing of personal data you may contact us:

• e-mail: office@cherrylaw.pl
• phone: +48 602 455 406
• by post: ul. Prosta 20, 00-850 Warsaw, Poland

Purposes and legal bases of processing

We process personal data for the following purposes and on the following legal bases:

• Handling correspondence and enquiries (e.g. when you e-mail or call us) — based on our legitimate interest in responding and maintaining communication (Art. 6(1)(f) GDPR).
• Taking steps prior to entering into a contract and performing a contract — where the contact is aimed at establishing cooperation (Art. 6(1)(b) GDPR).
• Compliance with legal obligations to which the controller is subject, including obligations arising from the rules on the provision of legal services and from tax and accounting law (Art. 6(1)(c) GDPR).
• Statistics and analysis of website traffic (statistical cookies) — solely on the basis of your voluntary consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
• Ensuring the security of the website and establishing, exercising or defending legal claims — based on the controller’s legitimate interest (Art. 6(1)(f) GDPR).

Recipients of data

Recipients of the data may include entities that support us in operating the website and our business, in particular: the hosting provider, providers of IT and analytics tools (including Google), the website security provider and, to the necessary extent, entities providing accounting and legal services. These entities process data solely on our documented instructions or on the basis of their own legal obligations.

Transfers outside the European Economic Area

In connection with the use of Google tools (statistics), data may be transferred to countries outside the EEA. Any such transfer takes place with appropriate safeguards in place, in particular on the basis of standard contractual clauses approved by the European Commission.

Data retention period

We retain data for as long as necessary to achieve the purposes for which it was collected: for the duration of the correspondence and cooperation, and thereafter for the period arising from the law and until any potential claims become time-barred. Data processed on the basis of consent is retained until that consent is withdrawn.

Your rights

You have the right to: access your data, rectify it, erase or restrict its processing, object to processing, data portability, and withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal).

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).

Voluntary nature of providing data

Providing data is voluntary; however, in some cases it may be necessary in order to respond to an enquiry or to establish cooperation.

Automated decision-making

Your data is not used for automated decision-making, including profiling that produces legal effects.

Detailed information about cookies and analytics tools can be found in our Privacy Policy.

Last updated: 28 July 2026.