I. General information
1. This Privacy Policy is a set of rules aimed at informing you about all aspects of the process related to the acquisition, processing and security of your personal data on the JWP Group websites (hereinafter: “Users”). JWP Group collects and processes users’ personal data in accordance with relevant regulations, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR).
2. The personal data controller deciding on the purposes and manner of data processing are jointly the entities constituting the JWP Group (hereinafter : JWP Group, the Controller):
• JWP Patent Attorneys Dorota Rzążewska sp. k., address: 75 Mińska Street, 03-828 Warsaw, registered at the District Court for the m.st of Warsaw in Warsaw, XII Commercial Division of the National Court Register. KRS: 0000717985 | NIP: PL 526 011 18 68 | REGON: 010532597
• JWP Legal Dorota Rzążewska i Wspólnicy sp. k. address: 75 Mińska Street, 03-828 Warsaw, registered in the register of entrepreneurs kept by the District Court for the m.st of Warsaw in Warsaw, XIV Commercial Division of the National Court Register under KRS number: 0001132866, NIP: 1133148995, REGON: 529930643
• JWP Foundation Do you have an idea? You have a patent. You have a profit!, address: 75 Mińska Street, 03-828 Warsaw, registered at the District Court for m.st Warsaw in Warsaw, XII Commercial Division of the National Court Register. KRS: 0000379117 | NIP: PL 701 028 28 77 | REGON: 142823770
In order to ensure an appropriate level of personal data protection, the JWP Group has appointed a Data Protection Officer, Ms. Karolina Praszek-Gołębiewska, who can be contacted at the following e-mail address: dane@jwp.pl, iod@odokancelaria.pl or by post at: 75 Mińska Street, 03-828 Warsaw
3. This Policy may be amended and updated in the event of changes in practices related to the processing of personal data (taking into account the current case law and guidelines of the Personal Data Protection Authority) or changes in the provisions of generally applicable law. The Administrator will appropriately inform the Website Users about the changes to the Policy by placing the relevant information on the Website.
4. The use of the Administrator’s Website is associated with the need for the User to familiarize themselves with the content of this Privacy Policy.
5. Providing personal data to the Administrator is voluntary, but it is a prerequisite for using the Website.
II. Definitions
1. Administrator means the entity that decides how and for what purposes Personal Data is Processed. The Controller is responsible for the compliance of the processing with the applicable data protection law.
2. Personal Data means any information about any identified or identifiable natural person.
3. Process, Processing or Processed means any operation related to Personal Data, whether carried out by automated means or not, such as: acquisition, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, making available by transmission, dissemination or making available in any other way, structuring or combination, restriction, erasure or destruction.
4. Processor means any person or entity that Processes Personal Data on behalf of the Controller (other than an employee of the Controller).
5. Websites:
6. Administrator’s fanpage on social networks:
• Facebook at the link https://www.facebook.com/pomysl.patent.zysk
• LinkedIn at the link https://www.linkedin.com/company/jwp-legal/
• Twitter at the link https://x.com/jwp_ip
• YouTube at the link https://www.youtube.com/@jwp_ip5720
III. Processing of Users’ Personal Data
1. The manner and scope of the collection of personal data depends in particular on whether you visit our website for information purposes or use the services offered via the website or the services described therein, but provided in a different way.
The Administrator may obtain the Users’ Personal Data in particular, in the following cases:
a. providing Personal Data by Users (e.g. contact by e-mail, telephone, contact form or in any other way) pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the Administrator – responding to a message, inquiry) in connection with the need to deal with the reported matter or handle the inquiry,
b. obtaining the Users’ Personal Data as a result of registration on the Administrator’s Website, concluding an agreement, e.g. creating an Account and ensuring the possibility of using it, handling requests and complaints, in order to conclude and perform the agreement, pursuant to Article 6(1)(b) of the GDPR (performance of the agreement/acceptance of the Terms and Conditions of the Administrative Procedure Act), including, for example, handling the process of filing complaints, pursuant to Article 6(1)(b) of the GDPR,
c. pursuing claims and taking actions in connection with defending the rights of the Administrator, conducting court proceedings and, m.in. enabling the use of the Website via cookies, preventing fraud when using the Website and Electronic Services, in particular operating, maintaining, improving and making available all its functions, as well as creating summaries, analyses and statistics for the internal needs of the Administrator, this includes, in particular: reporting, marketing research, planning the development of the Website, development works, opinion surveys, creating statistical models pursuant to Article 6(1)(f) of the GDPR (the above-mentioned legitimate interest of the Administrator),
d. obtaining the Users’ Personal Data published in social media (Administrator’s Fanpage) (e.g. obtaining information from the Users’ private profile in social media, to the extent that this information is visible as public) pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the Administrator – promotion of its own activities and services, running a social profile (Fanpage), building and strengthening relationships with customers, conducting analyses and statistics on the popularity and functioning of the profile, as well as determining, marketing own services during the term of the contract, investigating and defending against possible claims regarding the use of the profile, responding to contact),
e. consent by the User to the processing of the personal data provided for the purpose of sending the Newsletter, organizing workshops and trainings, on the basis of Article 6(1)(a) (consent) sending commercial information – Newsletter, making marketing content available via electronic communication on the basis of the Act of 12 July 2024 on the Law on Electronic Communication,
f. obtaining or asking Users to provide Personal Data of Users, during Users’ visits to the Administrator’s websites or using any functions or resources available on or through the Website – cookies and third parties. When Users visit the Site, Users’ devices and browsers may automatically share certain information (such as device type, operating system, browser type, browser settings, IP address, language settings, dates and times of connection to the Site, and other technical information regarding communications), some of which may constitute Personal Information. During your visit to the Website, no Personal Data of Users will be stored by the Administrator, without an appropriate legal basis. With regard to cookies, the Administrator – in addition to the necessary files, each time the User will obtain the User’s consent to install other cookies (including third-party Google Analytics files). Granting the above-mentioned consent is optional and does not affect the possibility of using the Website. The processing is carried out on the basis of Article 6(1)(a) (consent – in the scope of other, except necessary cookies) and Article 399 of the Electronic Communication Law (provision of law – in the scope of necessary cookies).
2. Providing personal data is voluntary, it is not a statutory obligation. In certain cases, however, it is not possible to use the Website without providing personal data. The categories of Users’ Personal Data Processed by the Administrator may include, in particular:
a. Personal data: first name(s), last name(s),
b. Contact details: company details, email address, phone number.
c. Content of communications: all messages (inquiries, statements, views and opinions) sent via the contact form or published on the Administrator’s website or its Fanpages by the User.
d. IP number, cookies and information about how you use our Website – when you use the Website.
e. Image: in the case of publishing an opinion, leaving a comment, clicking the “Like” button on the Administrator’s social network (Fanpage) (if the User has their image shared on the private account of this portal).
f. Behavioral data (Google Ads consent): Information about user activity on websites, clicks on ads, time spent on the site and interactions with content.
3. The Administrator uses Fanpage profiles on social networks. Public data shared by Social Media Users may be used to:
a. respond to private messages that are addressed to us,
b. conducting discussions within the comments under individual posts,
c. share our posts with people who follow our Fanpage,
d. marketing consisting in informing about our services and ourselves by means of posts that we place on our Fanpage, including sponsored posts that are displayed to a wider group of Users,
e. statistical – – presenting data on the viewability of our posts, their reach, number of interactions; the data presented to us by the owners of social networks are statistical data, but they are created on the basis of observations of behavior on our Fanpage.
4. Currently, the Administrator’s Websites use redirects to the following social networks (Fanpages):
• Facebook,
• LinkedIn,
• Twitter
5. As soon as the Administrator likes a post, leaves a comment, sends a private message, subscribes to the Administrator’s channel together with:
• Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Irlandia
• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
• Twitter International Unlimited Company, Attn: Data Protection Officer, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND
• Google Ireland Limited Google Building Gordon House, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Irlandia
become the Administrators of your personal data made available on your Fanpage in the scope of data processing for statistical and advertising purposes.
6. Therefore, we encourage you to read the privacy policy:
• Facebook – https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
• Linkedin – https://pl.linkedin.com/legal/privacy-policy
• Serwis X – https://twitter.com/pl/privacy#x-privacy-9.1
• Youtube-https://policies.google.com/privacy?hl=pl
IV. Sharing Personal Information with Third Parties
1. The Administrator may share the Users’ Personal Data:
a. entities entrusted with data processing, e.g. technical service providers or entities providing consulting services,
b. other administrators, if required by law or in good faith that such action is necessary in order to comply with applicable law, in particular in response to a request from a court, state authorities.
2. If we engage a third party to process your Personal Data, in accordance with the processing agreement concluded with such entity, the Processor will be obliged to:
a. Processing only the Personal Data indicated in the Controller’s previous, written instructions; and
b. to take all measures to protect the confidentiality and security of Personal Data and to ensure compliance with all other requirements of generally applicable law.
3. Due to the use of Facebook, Instagram or Linkedin services, data may be transferred by these entities to third countries – the United States of America (USA) in connection with sharing them internally, m.in. to Facebook-Meta Platforms Inc., LinkedIn Corporation, X Corp., Google LLC (USA), which the Administrator has no influence on
V. Third-party services
1. The Website may contain features or links to websites and services provided by third parties that are not operated by us. The information you provide on these sites or services will be subject to their own privacy policies and data processing procedures.
2. The Administrator is not responsible for the procedures related to the processing by independent Website Administrators and service providers.
3. We encourage you to review the privacy and security policies of third parties before providing information to them.
VI. Data protection
1. The Administrator informs that it has implemented appropriate technical and organizational measures to protect Personal Data, in particular including safeguards against accidental or unlawful destruction, loss, alteration, unauthorized publication, unauthorized access and other unlawful and unauthorized forms of Processing, in accordance with the applicable law.
2. The Administrator is not responsible for the actions or omissions of the Users. Users are responsible for ensuring that all Personal Data is transmitted to the Controller in a secure manner.
3. Personal data will not be subject to automatic profiling, i.e. automated decision-making against the User, i.e. decisions made by technical means without human involvement, causing legal effects against the profiled person or otherwise significantly influencing the profiled person.
VII. Data accuracy
1. The Controller shall take all reasonable measures to ensure that:
a. The Personal Data of the Users that the Controller Processes is accurate and, if necessary, updated;
b. all Personal Data of Users that are Processed by the Administrator and that are incorrect (having regard to the purpose for which they are Processed) will be deleted or corrected without undue delay.
2. The Administrator may, at any time, ask Users about the accuracy of the Processed Personal Data.
VIII. Minimizing the scope of Data
The Administrator takes all appropriate measures to ensure that the scope of the Users’ Personal Data that it Processes is limited to the Personal Data adequately required for the purposes indicated in this Policy.
IX. International Data Transfer
Personal data may be shared and processed outside the European Economic Area (the European Economic Area consists of: the European Union and Iceland, Liechtenstein and Norway, collectively “EEA”). If personal data is transferred outside the EEA, the Controller requires appropriate safeguards. The Controller will fulfil its obligations under Chapter V of the GDPR to ensure the correctness of this type of processing.
X. Copyright
The content of the Website is protected by copyright. Its content may not be used in any fields of exploitation, unless JWP gives its written consent, subject to the possibility of non-commercial use for personal use.
The logo of an entity belonging to the JWP Group placed on the website is a registered trademark and is subject to protection. The content that is works, transmitted on the blog, in social media and in the newsletter, is also protected by copyright belonging to the JWP Group.
XI. Personal Data Retention Period
1. The criteria determining the duration of the period in which the Administrator stores the Users’ Personal Data are as follows: The Administrator stores the Users’ Personal Data in a form that allows for identification, only for as long as it is necessary to achieve the purposes indicated in this Policy, unless the provisions of generally applicable law require a longer period of storage of Personal Data. The Administrator may, in particular, store the Users’ Personal Data for the entire period necessary to establish, exercise or defend claims (limitation of claims in accordance with Article 118 of the Civil Code).
2. Personal data is stored:
a. for a period of 30 days from the moment of contact (telephone, e-mail from the Website) personal data may be processed for a longer period if, as a result of the inquiry sent, the User decides to use the services of the Administrator (Account on the Website, Newsletter, conclusion of a contract);
b. in the case of using our services (concluding a contract), for the period of performance of the contract the period necessary to consider the submitted complaints, until the resolution of any disputes and settlement of the parties, taking into account the relevant limitation periods for claims;
c. within the scope of the Administrator’s internal purposes where the legal basis for processing is the legitimate interest of the Administrator, personal data will be stored until the Administrator’s legitimate interests constituting the basis for data processing are fulfilled or an objection to such processing is previously lodged, after the Administrator has made a proper analysis of the User’s interest and the grounds for the Administrator’s processing;
d. in the case of data processed on our Fanpage until you resign from further following/commenting on our Fanpage, e.g. by clicking “dislike”, unliking the post or deleting a comment on the post, canceling the Subscription. Your activity related to the use of our fan page is not archived by us outside of Facebook.
e. in the case of using our services of the Newsletter for the period of service provision or until the consent to send commercial information by electronic means is withdrawn.
XII. Server logs
1. The use of the Websites involves sending requests to the server on which the Websites are stored.
2. Each query to the server is recorded in the server logs. The logs include, among m.in other things, the User’s IP address, the date and time of the server, information about the web browser and the operating system used by the User.
3. The logs are saved and stored on the server.
4. The data stored in the server logs are not associated with specific persons using the Websites and are not used by the Administrator to identify the User of the Websites.
5. Server logs are only auxiliary material used to administer the Websites, and their content is not disclosed to anyone other than persons authorized to administer the server.
XIII. Google Analytics
1. The Administrator uses the Google Analytics tool provided by Google LLC, the infrastructure of which is located at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Administrator indicates that Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA) has joined the EU-US Data Privacy Framework Agreement, i.e. it ensures an appropriate level of security for the processing of personal data, in accordance with the GDPR.
2. Google Analytics pozwala na:
a) Tracking website traffic: information about the number of users, number of visits, sources of entry (e.g. ads, search engines, social media).
b) Monitoring user behavior: analysis of which pages are visited the most, time spent on the site, bounce rate.
c) User segmentation: demographic, geographic, and technological data (e.g., device type, browser).
d) Goal and conversion tracking: Analyze how users complete specific actions, such as shopping, signing up for a newsletter, or downloading content.
3. Google Analytics processes data, which may include:
a) IP addresses: used to identify the geographical location of users, which in combination with other data may constitute personal data.
b) Cookies: storing unique identifiers of users and sessions, allowing tracking of their activity, only after the appropriate consent of the User
c) Specifications: e.g. browser type, operating system, screen resolution, Internet service provider.
4. The Administrator uses the IP anonymization function, which disables the possibility of identifying Users (the last octet of the IP address is masked before data is stored or processed).
5. The Administrator processes data using the indicated tool in order to provide analyses and reports on website traffic and the effectiveness of marketing activities based on the legitimate interest of the Administrator and the User’s consent (acceptance of Google Analytics cookies). The Controller has entered into an appropriate data processing agreement with Google (Data Processing Agreement), which regulates the issue of data security in the manner required by law.
6. The Administrator uses the Consent Mode whichallows to measure traffic and conversions on the Website also in the event that the User does not consent to the storage of cookies, while maintaining full compliance with the requirements of the GDPR, where a tracking code is implemented that allows the collection of only basic, anonymized and aggregated data on the time of visit to the Website, information about the referring website and allowing you to measure conversions from advertising campaigns. If the User consents to specific types of data processing (Google Analytics cookies), the relevant tags will work to the full extent. If they do not give consent, the tools will continue to function, but in a limited mode, collecting anonymous data without the possibility of any identification of the User. The Consent Mode tool helps you meet the requirements of the GDPR and the ePrivacy Directive, respecting your cookie consent decisions.
7. The retention period of the collected data in the event of acceptance of Google Analytics cookies is 14 months.
8. We encourage you to read Google’s Privacy Policy at: https://policies.google.com/privacy?hl=pl
9. The user can configure the browser to block cookies related to Google Analytics. Google Analytics uses cookies such as _ga, _gid and _gat.
10. You can also use the Google Analytics blocking plugin. Google offers a browser add-on to block Google Analytics, you can download it from the official website: https://tools.google.com/dlpage/gaoptout. Once installed, the plugin will prevent data from being sent to Google Analytics from all the pages you visit.
XIV. Google Ads
1. The Administrator uses the Google Ads tool, an advertising tool provided by Google LLC, the infrastructure of which is located in Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Administrator indicates that Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA) has joined the EU-US Data Privacy Framework Agreement, i.e. it ensures an appropriate level of security for the processing of personal data, in accordance with the GDPR.
2. Google Ads allows you to use tracking technologies, such as cookies and remarketing tags, to show ads that are tailored to your interests.
3. Google Ads may collect and process data about how users interact with our ads and website, including:
a. IP addresses,
b. Device identifiers
c. information about the web browser,
d. geolocation data and
e. Browsing history.
This data is processed in order to evaluate the effectiveness of advertising campaigns and to optimize advertising content.
4. Users can manage their advertising preferences through their Google Ads settings (https://adssettings.google.com) and opt out of personalized ads on the Network Advertising Initiative’s website: https://www.networkadvertising.org/choices/
5. We encourage you to read Google’s Privacy Policy at: https://policies.google.com/privacy?hl=pl
XV. Users’ rights
1. You have the following rights in connection with the processing of your personal data:
a. the right of access to the processed personal data – on this basis, the Administrator, at the request of the data subject, provides information on the processing of personal data concerning him/her, including, in particular, the purposes and legal bases of processing, the scope of the data held, the entities to whom the personal data are disclosed and the planned date of their deletion. As part of the right of access to data, the data subject may also request information about who their personal data is shared with and whether it is subject to profiling and automated decision-making. The data subject also has the right to obtain a copy of his or her data.
b. the right to rectify data – on this basis, the Administrator, at the request of the data subject, removes any inconsistencies or errors regarding the processed personal data, and supplements or updates them if they are incomplete or have changed;
c. the right to delete data – on this basis, the Administrator, at the request of the data subject, deletes data the processing of which is no longer necessary to achieve any of the purposes for which they were collected, the consent to their processing has been withdrawn or an objection has been lodged and it is not required to establish, pursue or defend the Administrator’s claims;
d. the right to limit and transfer processing – on this basis, the Administrator, at the request of the data subject, ceases to perform operations on such personal data, to the extent appropriate to the law, and also issues these personal data, in a format that allows them to be read by a computer;
e. the right to lodge a complaint – using this right, a person who believes that their personal data is being processed in violation of the applicable law may lodge a complaint with the President of the Office for Personal Data Protection
f. the right to object – the data subject may at any time object to the processing of personal data for the purposes for which they were collected and are processed, objection to direct marketing – if personal data are processed for the purposes of direct marketing, the person whose data is processed has the right to object to the processing of personal data concerning him or her in this regard at any time;
g. Right to withdraw consent – if we process personal data on the basis of consent, then the data subject may withdraw this consent at any time. The withdrawal of the consent does not make the processing of personal data illegal until that moment, the withdrawal of consent does not affect the lawfulness of the previous processing, but it will result in the personal data no longer being used for these purposes from the moment of withdrawal of consent.
2. An application for the exercise of the rights described above may be submitted by traditional mail by writing to the address of the Administrator’s registered office or by e-mail: iod@odokancelaria.pl
3. The application should, as far as possible, indicate precisely what the request concerns, i.e. in particular the addressee of the application and whose rights the person submitting the application wants to exercise as described above. If the Administrator is not able to determine the content of the request or identify the person submitting the application based on the submitted application, it will ask the applicant for additional information.
XVI. Cookies
1. When the User uses the Website, data about the User is automatically collected. These data may include:
a. IP address,
b. Domain name
c. Browser type
d. operating system type.
2. This data may be collected by:
a. Cookies
b. system Google Analytics
c. and can be stored in server logs.
3. Cookies are small text pieces of information in the form of text files that are stored by your browser on your computer’s hard drive or on your smartphone’s memory card. On subsequent visits to the Website, the information stored in the cookie is sent back to the Website. This allows the Website to recognize you and tailor the content to your needs.
4. In order to improve our Website, provide the most relevant content and analyse how Users use our Website, we may use cookies.
5. We may process the data contained in cookies for the purposes of:
a. personalize the Website: remember information about the User so that the User does not have to re-enter this information on subsequent visits;
b. Provide you with tailored advertising, content, and information.
c. Monitor aggregated site usage metrics, such as total visitors and pages viewed.
6. We use the following types of files:
a. session cookies, which are temporary files and are stored on the visitor’s device until they leave the Site;
b. permanent cookies, which are stored on the end device of the visitor to the Website for the time specified in the file parameters or until they are manually deleted;
7. Cookies can be divided into the following categories of cookies:
a. Necessary cookies: Necessary cookies contribute to the usability of the website by enabling basic functions such as navigation on the website and access to secure areas of the website. The website cannot function properly without these cookies.
b. Statistical cookies: Statistical cookies help website owners understand how different users behave on the site by collecting and reporting anonymous information. (checkbox to be selected);
c. Preference cookies: Preference cookies allow a website to remember information that changes the look or feel of the website, e.g. your preferred language or the region in which you are located (checkbox to check).
d. Marketing cookies: Marketing cookies are used to track users across websites. The goal is to display ads that are relevant and interesting to individual users and thus more valuable to publishers and third-party advertisers (checkbox to be checked).
e. Unclassified cookies: Unclassified cookies are cookies that are in the process of being classified, along with the providers of the individual cookies
8. We use analytics and similar services that contain third-party cookies. When using the Website, third-party cookies may be used to enable the use of the functionality of the Website and websites integrated with it, or to analyse the effectiveness of advertising campaigns and collect anonymous information about the use of the Website for statistical purposes.
9. This Privacy Policy does not govern the use of third-party cookies. Each third party sets out its own cookie policy in its privacy policy.
10. The website uses the Google Analytics tool. Please note that you can prevent Google from recording the data collected by cookies about your use of the Website, as well as the processing of this data by Google, by installing the browser plug-in at the following address: https://tools.google.com/dlpage/gaoptout
11. You can also change how cookies are used using the shared file management tool – cookie declaration.
12. At the same time, we inform you that the lack of consent, deletion, blocking or restriction of the placement of cookies may cause difficulties or even prevent the use of the Website.
