Privacy Policy

Effective date: 4 June 2026

This Privacy Policy (hereinafter referred to as the “Policy”) sets out how VK LEGAL (hereinafter referred to as “VK LEGAL”, the “Data controller”, “we”, “us”, “our”) processes your personal data when you visit our website www.vklegal.eu (hereinafter referred to as the “Website”), contact us by e-mail or telephone, or submit an enquiry via the Website. It also covers personal data VK LEGAL receives in the course of executing contracts with its partners or clients that are legal entities, where you act as their employee or representative.

“Personal data” means any information collected by VK LEGAL about a natural person that helps to identify that person (e.g. name, surname, address, IP address, etc.) (hereinafter referred to as “Personal data”).

It is important that you read this Policy carefully, as it explains how VK LEGAL processes Personal data and what rights you have in relation to such processing.

By submitting Personal data, you acknowledge that VK LEGAL will process it for the purposes and on the legal bases described in this Policy and in accordance with applicable law.

By using the Website, you represent and warrant that you are of legal age and have full legal capacity.

If you provide us with Personal data of other persons, you are responsible for ensuring that you have the right and, where required, an appropriate legal basis to provide such data to us, and that such persons have been informed about the processing of their Personal data as described in this Policy.

1. INFORMATION ON THE PROCESSING OF PERSONAL DATA

1.1. Processing of received enquiries

Purpose
To process and respond to enquiries received.

Legal basis
Our legitimate interest in providing legal services.

Personal data processed
Personal data that you provide to us when you call us, fill in an enquiry form on our Website, email us or come to our office.

Retention period
Personal data for this purpose is retained for 2 (two) years from the date of receipt of the enquiry. In the event that you enter into a contract with VK LEGAL, such Personal data shall be stored in accordance with the procedure set out in section 1.2 “Provision of legal services”.

1.2. Provision of legal services

Purpose
To provide legal services based on your instructions.

Legal basis
Taking actions at your request before concluding a contract and/or performance of a contract and/or performance of statutory duties and/or our legitimate interest.

Personal data processed

Personal data contained in the legal services contract;
Personal data of the client (natural person) who has entered into a contract with us for the provision of legal services;
Personal data of the client’s (natural or legal person’s) representatives, employees and other persons related to the client’s instructions;
Personal data provided by the client or by the client’s representatives or employees;
Personal data that VK LEGAL collects from other sources for the purpose of the provision of legal services (e.g., registers, etc.).

Retention period
Personal data for this purpose shall be retained for a period of 10 (ten) years after the end of the client’s last instruction to VK LEGAL, unless a longer data retention period is provided for by laws and/or other legal acts.

1.3. Performance of contracts with service providers and partners

Purpose
To conclude and perform contracts with our suppliers, service providers and partners.

Legal basis
Performance of the contract and/or our legitimate interest in the performance of the contract.

Personal data processed
Personal data of employees of suppliers, service providers or partners (legal persons) and personal data of suppliers, service providers or partners (natural persons): name, surname, date of birth, email address, content of correspondence, telephone number and other data relating to the performance of the contract.

Retention period
Such Personal data is processed for as long as the contract continues. Personal data shall be retained for 10 (ten) years from the date of termination of the contract, if the data is specified in the contracts and documents related to the performance of the contracts.

1.4. Direct marketing

Purpose
To send you information about our services, news, events and other marketing communications.

Legal basis

Consent, where direct marketing is addressed to a natural person and consent is required by law; or

Our legitimate interest in marketing our services and maintaining business relationships, where direct marketing is permitted without prior consent in accordance with Article 81 of the Law on Electronic Communications, namely: (i) to existing natural-person clients for our own similar services; or (ii) to legal persons, including existing or potential clients and partners, including through the business contact details of their representatives or employees.

Personal data processed
Name, surname, email address, phone number, position, represented legal entity, consent records and opt-out records.

Retention period

If we rely on your prior consent, we will retain your Personal data for a period of 5 (five) years after receiving your consent.
If we process Personal data on the basis of legitimate interest, we will retain it for the duration of the legal services contract or business relationship, or, in the case of potential clients or partners, 2 years from collection or last meaningful business contact.

1.5. Recruitment of job candidates

Purpose
To select and evaluate candidates for employment.

Legal basis
Our legitimate interest in selecting the right candidate.

Personal data processed
Personal data is obtained directly from you as a candidate and/or from third parties providing recruitment services.

Retention period
We will delete and/or destroy your Personal data within 5 (five) working days after the conclusion of the relevant contract with the selected candidate, unless you have expressly consented to the processing of your Personal data after the end of the recruitment process.

Irrespective of the retention periods specified in this Policy, we may retain Personal data for a longer period where this is necessary to comply with legal obligations, establish, exercise or defend legal claims, respond to competent authorities, or protect our legitimate interests or those of our clients in connection with legal services.

2. COOKIES AND SIMILAR TECHNOLOGIES

Our Website uses cookies and similar technologies to ensure that the Website functions properly and, where you consent, to use certain optional technologies. Cookies are small text files placed on your device when you visit a website. Similar technologies may be used for comparable purposes, for example to read or store information on your device or browser.

Essential cookies and technologies

Some cookies and technologies are necessary for the operation of the Website. They enable basic Website functions, support the technical delivery of the Website, and help ensure that the Website and privacy settings operate properly.

Based on the current Website scan, the Website uses Wix CMS as a standard website component. This component is treated as essential because it is required for the Website content management and proper functioning of the Website.

Essential cookies and technologies are used without asking for your consent, because they are necessary to provide the Website requested by you. Where personal data are processed through essential cookies or technologies, the legal basis is our legitimate interest in operating a secure and functional website.

Optional advertising / marketing technologies

Based on the current website scan, the Website may use Google Tag Services as a marketing integration. Google Tag Services may allow the Website to use Google products or services, such as advertising, measurement or related tag-based services, depending on how the relevant Google services are configured.

These technologies are not treated as essential. They are used only if you give your consent through the cookie consent banner or the privacy settings tool. If you do not consent, these optional advertising / marketing technologies should not be activated.

Where personal data are processed through optional advertising / marketing technologies, the legal basis is your consent. You may withdraw or change your consent at any time.

Managing your cookie choices

When you first visit the Website, you may be asked to accept, reject or manage non-essential cookies and similar technologies through the cookie consent banner.

You can also change your choices at any time by using the privacy settings button available on the Website pages. The button is shown as a blue round icon with a fingerprint and allows you to review and adjust your privacy settings.

You may also control or block cookies through your browser settings. Blocking cookies may affect Website functionality and may require you to set your cookie preferences again.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Information available in the privacy settings tool

The privacy settings tool may provide more detailed and updated information about the cookies and similar technologies detected on the Website, including their category, provider and purpose, where such information is available.

Where you consent to optional cookies or similar technologies, such technologies may be provided by third-party providers, including Google, if the relevant Google services are enabled on the Website.

3. DISCLOSURE OF INFORMATION TO THIRD PARTIES

We may disclose your personal data:

where there is your consent to the disclosure of the Personal data;
to partner lawyers or relevant service providers (such as translators, auditors, etc.) for the purpose of providing legal services;
to a court, bailiff, notary, state or local authority, institution and/or organisation for the purpose of providing legal services;
to lawyers and/or staff of VK LEGAL;
to data processors who provide us with accounting, translation, parcel delivery, website platform, website hosting, data centre and/or server rental, IT maintenance, external audit and other services;
if we are required to do so by law;
to public authorities and bodies and other persons who perform functions assigned to them by law;
to protect our rights or interests.

Where it is necessary to transfer your personal data to a third country or an international organisation, we will ensure that at least one of the following applies: (i) the transfer is made to a country recognised as ensuring an adequate level of protection; (ii) appropriate safeguards required by law are in place; or (iii) where neither of the above applies, the transfer is based on a derogation permitted by law.

4. YOUR RIGHTS

Your rights in relation to VK LEGAL’s processing of your Personal data include the right to:

at any time get acquainted with the Personal data provided. When making such a request, please observe the principles of fairness and reasonableness;
upon request, be informed about the use of your Personal data;
withdraw your consent to the processing of your Personal data at any time, if you have provided us with such consent;
request the correction of Personal data that is incorrect, incomplete or inaccurate. In this case, we may ask you to confirm the corrected information;
object to the processing of your Personal data. This right shall be exercised in accordance with the procedures and conditions set out in Article 21 of the General Data Protection Regulation;
request the erasure of the Personal data provided. This right shall be exercised in the cases provided for in Article 17 of the General Data Protection Regulation;
request to limit the actions of the processing of the Personal data;
request that the Personal data you have provided, if it is processed on the basis of your consent or on the basis of a contract, and if it is processed by automated means, be transferred to another data controller, if this is technically feasible (data portability);
lodge a complaint with the State Data Protection Inspectorate in relation to the processing of the Personal data.

If you would like to exercise any of these rights, please contact us via e-mail: info@vklegal.eu.

Your request shall be fulfilled, or fulfilment of your requests shall be refused by specifying the reasons for such refusal, within 30 (thirty) calendar days from the date of submission of the request that complies with our internal rules and the applicable law. The aforementioned term may be extended by 60 (sixty) calendar days taking into account the complexity and number of the requests. We will inform you of any such extension within 30 (thirty) calendar days of receipt of the request, together with the reasons for the delay. We may refuse to satisfy your request if the exceptions and/or limitations to the exercise of data subjects' rights set out in the applicable law apply, and/or if your request is found to be manifestly unfounded or disproportionate. If we refuse to satisfy your request, we will give you our reasons for such refusal in writing.

If, after receiving a request, complaint or claim, we have doubts about the identity of the person submitting the relevant document, we have the right to ask such person to provide proof of identity or to confirm his or her identity in any other manner acceptable to us.

5. LINKS TO OTHER WEBSITES

Our Website contains links to other websites that we do not own or administer. Please note that we are not responsible for the privacy policies of such websites or third parties. When you are directed from our Website to other websites, please read the privacy policy of each website where personal information may be collected.

6. INFORMATION SECURITY

We make all reasonable efforts, through our internal organisational and technical measures, to ensure that the Personal data is protected against any unlawful activity. We remind you that although we take reasonable steps to protect your information, no website, operation performed online, computer system or wireless connection is completely secure.

7. RESPONSIBILITY

You are entirely responsible for ensuring that the data you provide to us is true, complete and accurate. You undertake to notify us immediately by email of any changes to the data you have provided to us. In no event shall we be liable for any damage caused to you as a result of incomplete or incorrect Personal data provided by you or your failure to inform us of any changes to such data.

8. CHANGES TO THIS POLICY

We may update or amend this Policy at any time. The updated or amended Policy will take effect from the date it is published on the Website. Please review this Policy from time to time to stay updated regarding any changes. The ‘Last updated’ date above indicates when this Policy was last revised.

9. CONTACT US

If you have any questions about this Policy, please contact us:

Email: info@vklegal.eu