Privacy Policy

The Law Firm Kubiczek Michalak Sokół (“KMS”, “we,” “our”) are committed to being responsible custodians of the personal information that we collect in the course of operating our business as a global provider of legal and other services.

This Privacy Policy describes how we collect, use, share, or otherwise process personal information as a data controller in the course of operating our business, particularly in association with our marketing and business development practices and the operation of our website (

While we may also process personal information during our legal representation of a client, such processing is performed on behalf of and at the direction of our client, subject to our client agreements and professional responsibilities, and is not covered by this Policy.

“Personal information” as used in this Privacy Policy means information that identifies, relates to, describes, or can reasonably be linked, directly or indirectly, to a specific natural person. It does not include information that is considered anonymous, de-identified, or aggregated by applicable law.

1. What types of information do we collect?

The types of personal information we collect about you depend on your interactions with us and are described below.

Information you provide to us

We collect personal information that you provide to us. For example, we may collect personal information when you contact us, request that we send you our materials or newsletter, register for a webinar or event, respond to a survey, or otherwise communicate with us.

  • Unique Identifiers that we can use to identify you as a unique individual, such as your name, telephone number, postal or e-mail address, signature, and government issued identification numbers (such as your social security number or passport number).
  • Demographic Information, which may include sensitive personal information or information about protected classifications, such as your age, gender, race status.
  • Geolocation Information, such as your city, state or province, and country.
  • Audio and Visual Information, such as your voice and likeness as captured in photographs, video or audio recordings if you attend our events, or leave us a voicemail.
  • Preferences, such as your stated interests, how frequently you wish to receive our newsletters, or other communications.
  • Any other information you choose to provide.

Information we may collect automatically

We may automatically collect information from and about you when you interact with us:

  • Unique Identifiers: We might automatically collect information that uniquely identifies you or the device through, such as your name, e-mail address, IP address.
  • Geolocation Information: We might automatically collect information regarding your location, such as your ZIP code, city, state or province, country, or general geographic location as derived from your device data (such as your IP address).
  • Inferences drawn from your interactions with our website.

2. How do we process the information we collect?

We may use the information:

  • to respond to your inquiries or communications,
  • to provide you with legal and other services,
  • to send you newsletters, legal updates, marketing communications, and other information or materials that may interest you,
  • to expand and maintain our list of contacts,
  • to understand how people use our services, including by generating and analyzing statistics.

We may use anonymous, de-identified, or aggregate information that does not reasonably identify you for any purpose, as permitted by applicable law.

3. To whom do we provide information?

We may share personal information with third parties including:

  • Our service providers: We may share information with third parties that perform services on our behalf, such as web-hosting companies, mailing vendors, analytics providers, event hosting services, and information technology providers.
  • Law enforcement, government authorities, or third parties with legal rights: We may share information as may be permitted or required by the laws of any jurisdiction that may apply to us, as provided for under contract, or as we deem reasonably necessary to provide legal services. In these circumstances, we strive to take reasonable efforts to notify you before we disclose information that may reasonably identify you or your organization, unless prior notice is prohibited by applicable law or is not possible or reasonable in the circumstances.
  • Parties in connection with a business transaction: We may share information with service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets, as well as any bankruptcy or corporate reorganization.

We may share anonymous, de-identified, or aggregate information that cannot reasonably identify you with others for any purpose, as permitted by applicable law.

4. The basis upon which we use personal information

  • Performance of a contract.
  • Your consent.
  • Legitimate interests.
  • Legal obligation.

5. How we protect personal information?

We have put in place appropriate security measures to prevent personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We have put in place appropriate measures to inform our staff about how we collect, handle and keep information secure.

We have put in place measures to deal with any suspected personal information breach and will notify relevant individuals and the Information Commissioner of a breach when we are legally required to do so.

6. Your choices and rights

  • Request access to their personal information (commonly known as a „data subject access request”). This enables individuals to receive a copy of the personal data we hold about them and to check that we are lawfully processing it.
  • Request correction of the personal information that we hold about them. This enables individuals to have any incomplete or inaccurate information we hold, though we will need to verify the accuracy of the new information provided to us.
  • Request erasure of their personal information. This enables individuals to ask us to delete or remove personal information where there is no good reason for us continuing to process it. Individuals also have the right to ask us to delete or remove their personal information where they have successfully exercised their right to object to processing (see below), where we may have processed their information unlawfully or where we are required to erase their personal information to comply with local law. Note, however, that we may not always be able to comply with a request of erasure for specific legal reasons which will be notified to the individual, if applicable, at the time of their request.
  • Object to processing of personal information where we are relying on a legitimate interest (or that of a third party) and there is something about the individual’s particular situation which makes her/him want to object to processing on this ground as she/he feels it impacts on her/his fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process the information which overrides those rights and freedoms. Individuals also have the right to object where we are processing their personal information for direct marketing purposes. 
  • Request restriction of processing of their personal information. This enables individuals to ask us to suspend the processing of their personal information in the following scenarios: (a) if the individual wants us to establish the information’s accuracy; (b) where our use of the information is unlawful but an individual does not want us to erase it; (c) where the individual needs us to hold the information even if we no longer require it as she/he needs it to establish, exercise or defend legal claims; or (d) the individual has objected to our use of their information but we need to verify whether we have overriding legitimate grounds to use it
  • Withdraw consent at any time where we are relying on consent to process the personal information. However, this will not affect the lawfulness of any processing carried out before consent is withdrawn. 

If you wish to exercise any of these rights please contact our Data Protection Officer using the contact details given above.

7. How to contact us

If you would like to contact us with questions about our privacy or data protection practices, please contact our data protection officer at or send us an email via our Contact page.