I General information

1. This Privacy Policy is a set of rules aimed at informing you about all aspects of the process related to the acquisition, processing and security of your personal data on the JWP Group websites (hereinafter: “Users”). JWP Group collects and processes users’ personal data in accordance with relevant regulations, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR).
2. The personal data controller deciding on the purposes and manner of data processing are jointly the entities constituting the JWP Group (hereinafter : JWP Group, the Controller):

• JWP Patent Attorneys Dorota Rzążewska sp. k., address: 75 Mińska Street, 03-828 Warsaw, registered at the District Court for the m.st of Warsaw in Warsaw, XII Commercial Division of the National Court Register. KRS: 0000717985 | NIP: PL 526 011 18 68 | REGON: 010532597
• JWP Legal Dorota Rzążewska i Wspólnicy sp. k. address: 75 Mińska Street, 03-828 Warsaw, registered in the register of entrepreneurs kept by the District Court for the m.st of Warsaw in Warsaw, XIV Commercial Division of the National Court Register under KRS number: 0001132866, NIP: 1133148995, REGON: 529930643
• JWP Foundation Do you have an idea? You have a patent. You have a profit!, address: 75 Mińska Street, 03-828 Warsaw, registered at the District Court for m.st Warsaw in Warsaw, XII Commercial Division of the National Court Register. KRS: 0000379117 | NIP: PL 701 028 28 77 | REGON: 142823770

In order to ensure an appropriate level of personal data protection, the JWP Group has appointed a Data Protection Officer, Ms. Karolina Praszek-Gołębiewska, who can be contacted at the following e-mail address: dane@jwp.pl, iod@odokancelaria.pl or by post at: 75 Mińska Street, 03-828 Warsaw

3. This Policy may be amended and updated in the event of changes in practices related to the processing of personal data (taking into account the current case law and guidelines of the Personal Data Protection Authority) or changes in the provisions of generally applicable law. The Administrator will appropriately inform the Website Users about the changes to the Policy by placing the relevant information on the Website.
4. The use of the Administrator’s Website is associated with the need for the User to familiarize themselves with the content of this Privacy Policy.
5. Providing personal data to the Administrator is voluntary, but it is a prerequisite for using the Website.

II Definitions

1. Administrator means the entity that decides how and for what purposes Personal Data is Processed. The Controller is responsible for the compliance of the processing with the applicable data protection law.
2. Personal Data means any information about any identified or identifiable natural person.
3. Process, Processing or Processed means any operation related to Personal Data, whether carried out by automated means or not, such as: acquisition, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, making available by transmission, dissemination or making available in any other way, structuring or combination, restriction, erasure or destruction.
4. Processor means any person or entity that Processes Personal Data on behalf of the Controller (other than an employee of the Controller).
5. Websites:

• https://www.jwp.pl/
• https://www.jwp-legal.pl/
• https://www.jwp-fundacja.pl/
• https://www.jwp-poland.com/

6. Administrator’s fanpage on social networks:

• Facebook at the link https://www.facebook.com/pomysl.patent.zysk
• LinkedIn at the link https://www.linkedin.com/company/jwp-legal/
• Twitter at the link https://x.com/jwp_ip
• YouTube at the link https://www.youtube.com/@jwp_ip5720

III Processing of Users’ Personal Data

1. The manner and scope of the collection of personal data depends in particular on whether you visit our website for information purposes or use the services offered via the website or the services described therein, but provided in a different way.
   The Administrator may obtain the Users’ Personal Data in particular, in the following cases:
   a. providing Personal Data by Users (e.g. contact by e-mail, telephone, contact form or in any other way) pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the Administrator – responding to a message, inquiry) in connection with the need to deal with the reported matter or handle the inquiry,
   b. obtaining the Users’ Personal Data as a result of registration on the Administrator’s Website, concluding an agreement, e.g. creating an Account and ensuring the possibility of using it, handling requests and complaints, in order to conclude and perform the agreement, pursuant to Article 6(1)(b) of the GDPR (performance of the agreement/acceptance of the Terms and Conditions of the Administrative Procedure Act), including, for example, handling the process of filing complaints, pursuant to Article 6(1)(b) of the GDPR,
   c. pursuing claims and taking actions in connection with defending the rights of the Administrator, conducting court proceedings and, m.in. enabling the use of the Website via cookies, preventing fraud when using the Website and Electronic Services, in particular operating, maintaining, improving and making available all its functions, as well as creating summaries, analyses and statistics for the internal needs of the Administrator, this includes, in particular: reporting, marketing research, planning the development of the Website, development works, opinion surveys, creating statistical models pursuant to Article 6(1)(f) of the GDPR (the above-mentioned legitimate interest of the Administrator),
   d. obtaining the Users’ Personal Data published in social media (Administrator’s Fanpage) (e.g. obtaining information from the Users’ private profile in social media, to the extent that this information is visible as public) pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the Administrator – promotion of its own activities and services, running a social profile (Fanpage), building and strengthening relationships with customers, conducting analyses and statistics on the popularity and functioning of the profile, as well as determining, marketing own services during the term of the contract, investigating and defending against possible claims regarding the use of the profile, responding to contact),
   e. consent by the User to the processing of the personal data provided for the purpose of sending the Newsletter, organizing workshops and trainings, on the basis of Article 6(1)(a) (consent) sending commercial information – Newsletter, making marketing content available via electronic communication on the basis of the Act of 12 July 2024 on the Law on Electronic Communication,
   f. obtaining or asking Users to provide Personal Data of Users, during Users’ visits to the Administrator’s websites or using any functions or resources available on or through the Website – cookies and third parties. When Users visit the Site, Users’ devices and browsers may automatically share certain information (such as device type, operating system, browser type, browser settings, IP address, language settings, dates and times of connection to the Site, and other technical information regarding communications), some of which may constitute Personal Information. During your visit to the Website, no Personal Data of Users will be stored by the Administrator, without an appropriate legal basis. With regard to cookies, the Administrator – in addition to the necessary files, each time the User will obtain the User’s consent to install other cookies (including third-party Google Analytics files). Granting the above-mentioned consent is optional and does not affect the possibility of using the Website. The processing is carried out on the basis of Article 6(1)(a) (consent – in the scope of other, except necessary cookies) and Article 399 of the Electronic Communication Law (provision of law – in the scope of necessary cookies).
2. Providing personal data is voluntary, it is not a statutory obligation. In certain cases, however, it is not possible to use the Website without providing personal data. The categories of Users’ Personal Data Processed by the Administrator may include, in particular:
   a. Personal data: first name(s), last name(s),
   b. Contact details: company details, email address, phone number.
   c. Content of communications: all messages (inquiries, statements, views and opinions) sent via the contact form or published on the Administrator’s website or its Fanpages by the User.
   d. IP number, cookies and information about how you use our Website – when you use the Website.
   e. Image: in the case of publishing an opinion, leaving a comment, clicking the “Like” button on the Administrator’s social network (Fanpage) (if the User has their image shared on the private account of this portal).
   f. Behavioral data (Google Ads consent): Information about user activity on websites, clicks on ads, time spent on the site and interactions with content.
3.  The Administrator uses Fanpage profiles on social networks. Public data shared by Social Media Users may be used to:
   a. respond to private messages that are addressed to us,
   b. conducting discussions within the comments under individual posts,
   c. share our posts with people who follow our Fanpage,
   d. marketing consisting in informing about our services and ourselves by means of posts that we place on our Fanpage, including sponsored posts that are displayed to a wider group of Users,
   e. statistical – – presenting data on the viewability of our posts, their reach, number of interactions; the data presented to us by the owners of social networks are statistical data, but they are created on the basis of observations of behavior on our Fanpage.
4. Currently, the Administrator’s Websites use redirects to the following social networks (Fanpages):
   • Facebook,
   • LinkedIn,
   • Twitter
5. As soon as the Administrator likes a post, leaves a comment, sends a private message, subscribes to the Administrator’s channel together with:
   • Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Irlandia
   • LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
   • Twitter International Unlimited Company, Attn: Data Protection Officer, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND
   • Google Ireland Limited Google Building Gordon House, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Irlandia
   become the Administrators of your personal data made available on your Fanpage in the scope of data processing for statistical and advertising purposes.
6. Therefore, we encourage you to read the privacy policy:
   • Facebook – https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
   • Linkedin – https://pl.linkedin.com/legal/privacy-policy
   • Serwis X – https://twitter.com/pl/privacy#x-privacy-9.1
   • Youtube-https://policies.google.com/privacy?hl=pl

IV Sharing Personal Information with Third Parties

1. The Administrator may share the Users’ Personal Data:
   a. entities entrusted with data processing, e.g. technical service providers or entities providing consulting services,
   b. other administrators, if required by law or in good faith that such action is necessary in order to comply with applicable law, in particular in response to a request from a court, state authorities.
2. If we engage a third party to process your Personal Data, in accordance with the processing agreement concluded with such entity, the Processor will be obliged to:
   a. Processing only the Personal Data indicated in the Controller’s previous, written instructions; and
   b. to take all measures to protect the confidentiality and security of Personal Data and to ensure compliance with all other requirements of generally applicable law.
3. Due to the use of Facebook, Instagram or Linkedin services, data may be transferred by these entities to third countries – the United States of America (USA) in connection with sharing them internally, m.in. to Facebook-Meta Platforms Inc., LinkedIn Corporation, X Corp., Google LLC (USA), which the Administrator has no influence on

V Third-party services

1. The Website may contain features or links to websites and services provided by third parties that are not operated by us. The information you provide on these sites or services will be subject to their own privacy policies and data processing procedures.
2. The Administrator is not responsible for the procedures related to the processing by independent Website Administrators and service providers.
3. We encourage you to review the privacy and security policies of third parties before providing information to them.

VI Data protection

1. The Administrator informs that it has implemented appropriate technical and organizational measures to protect Personal Data, in particular including safeguards against accidental or unlawful destruction, loss, alteration, unauthorized publication, unauthorized access and other unlawful and unauthorized forms of Processing, in accordance with the applicable law.
2. The Administrator is not responsible for the actions or omissions of the Users. Users are responsible for ensuring that all Personal Data is transmitted to the Controller in a secure manner.
3. Personal data will not be subject to automatic profiling, i.e. automated decision-making against the User, i.e. decisions made by technical means without human involvement, causing legal effects against the profiled person or otherwise significantly influencing the profiled person.

VII Data accuracy

1. The Controller shall take all reasonable measures to ensure that:
   a. The Personal Data of the Users that the Controller Processes is accurate and, if necessary, updated;
   b. all Personal Data of Users that are Processed by the Administrator and that are incorrect (having regard to the purpose for which they are Processed) will be deleted or corrected without undue delay.
2. The Administrator may, at any time, ask Users about the accuracy of the Processed Personal Data.

VIII Minimizing the scope of Data

The Administrator takes all appropriate measures to ensure that the scope of the Users’ Personal Data that it Processes is limited to the Personal Data adequately required for the purposes indicated in this Policy.

IX International Data Transfer

Personal data may be shared and processed outside the European Economic Area (the European Economic Area consists of: the European Union and Iceland, Liechtenstein and Norway, collectively “EEA”). If personal data is transferred outside the EEA, the Controller requires appropriate safeguards. The Controller will fulfil its obligations under Chapter V of the GDPR to ensure the correctness of this type of processing.

X Copyright

The content of the Website is protected by copyright. Its content may not be used in any fields of exploitation, unless JWP gives its written consent, subject to the possibility of non-commercial use for personal use.

The logo of an entity belonging to the JWP Group placed on the website is a registered trademark and is subject to protection. The content that is works, transmitted on the blog, in social media and in the newsletter, is also protected by copyright belonging to the JWP Group.

XI Personal Data Retention Period

1. The criteria determining the duration of the period in which the Administrator stores the Users’ Personal Data are as follows: The Administrator stores the Users’ Personal Data in a form that allows for identification, only for as long as it is necessary to achieve the purposes indicated in this Policy, unless the provisions of generally applicable law require a longer period of storage of Personal Data. The Administrator may, in particular, store the Users’ Personal Data for the entire period necessary to establish, exercise or defend claims (limitation of claims in accordance with Article 118 of the Civil Code).
2. Personal data is stored:
3. for a period of 30 days from the moment of contact (telephone, e-mail from the Website) personal data may be processed for a longer period if, as a result of the inquiry sent, the User decides to use the services of the Administrator (Account on the Website, Newsletter, conclusion of a contract);
4. in the case of using our services (concluding a contract), for the period of performance of the contract the period necessary to consider the submitted complaints, until the resolution of any disputes and settlement of the parties, taking into account the relevant limitation periods for claims;
5. within the scope of the Administrator’s internal purposes where the legal basis for processing is the legitimate interest of the Administrator, personal data will be stored until the Administrator’s legitimate interests constituting the basis for data processing are fulfilled or an objection to such processing is previously lodged, after the Administrator has made a proper analysis of the User’s interest and the grounds for the Administrator’s processing;
6. in the case of data processed on our Fanpage until you resign from further following/commenting on our Fanpage, e.g. by clicking “dislike”, unliking the post or deleting a comment on the post, canceling the Subscription. Your activity related to the use of our fan page is not archived by us outside of Facebook.
7. in the case of using our services of the Newsletter for the period of service provision or until the consent to send commercial information by electronic means is withdrawn.

XII Server logs

1. The use of the Websites involves sending requests to the server on which the Websites are stored.
2. Each query to the server is recorded in the server logs. The logs include, among m.in other things, the User’s IP address, the date and time of the server, information about the web browser and the operating system used by the User.
3. The logs are saved and stored on the server.
4. The data stored in the server logs are not associated with specific persons using the Websites and are not used by the Administrator to identify the User of the Websites.
5. Server logs are only auxiliary material used to administer the Websites, and their content is not disclosed to anyone other than persons authorized to administer the server.

XIII Google Analytics

1. The Administrator uses the Google Analytics tool provided by Google LLC, the infrastructure of which is located at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Administrator indicates that Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA) has joined the EU-US Data Privacy Framework Agreement, i.e. it ensures an appropriate level of security for the processing of personal data, in accordance with the GDPR.
2.  Google Analytics pozwala na:
   a. Tracking website traffic: information about the number of users, number of visits, sources of entry (e.g. ads, search engines, social media).
   b. Monitoring user behavior: analysis of which pages are visited the most, time spent on the site, bounce rate.
   c. User segmentation: demographic, geographic, and technological data (e.g., device type, browser).
   d. Goal and conversion tracking: Analyze how users complete specific actions, such as shopping, signing up for a newsletter, or downloading content.
3. Google Analytics processes data, which may include:
   a. IP addresses: used to identify the geographical location of users, which in combination with other data may constitute personal data.
   b. Cookies: storing unique identifiers of users and sessions, allowing tracking of their activity, only after the appropriate consent of the User
   c. Specifications: e.g. browser type, operating system, screen resolution, Internet service provider.
4. The Administrator uses the IP anonymization function, which disables the possibility of identifying Users (the last octet of the IP address is masked before data is stored or processed).
5. The Administrator processes data using the indicated tool in order to provide analyses and reports on website traffic and the effectiveness of marketing activities based on the legitimate interest of the Administrator and the User’s consent (acceptance of Google Analytics cookies). The Controller has entered into an appropriate data processing agreement with Google (Data Processing Agreement), which regulates the issue of data security in the manner required by law.
6. The Administrator uses the Consent Mode whichallows to measure traffic and conversions on the Website also in the event that the User does not consent to the storage of cookies, while maintaining full compliance with the requirements of the GDPR, where a tracking code is implemented that allows the collection of only basic, anonymized and aggregated data on the time of visit to the Website, information about the referring website and allowing you to measure conversions from advertising campaigns. If the User consents to specific types of data processing (Google Analytics cookies), the relevant tags will work to the full extent. If they do not give consent, the tools will continue to function, but in a limited mode, collecting anonymous data without the possibility of any identification of the User. The Consent Mode tool helps you meet the requirements of the GDPR and the ePrivacy Directive, respecting your cookie consent decisions.
7. The retention period of the collected data in the event of acceptance of Google Analytics cookies is 14 months.
8. We encourage you to read Google’s Privacy Policy at: https://policies.google.com/privacy?hl=pl
9. The user can configure the browser to block cookies related to Google Analytics. Google Analytics uses cookies such as _ga, _gid and _gat.
10. You can also use the Google Analytics blocking plugin. Google offers a browser add-on to block Google Analytics, you can download it from the official website: https://tools.google.com/dlpage/gaoptout. Once installed, the plugin will prevent data from being sent to Google Analytics from all the pages you visit.

XIV Google Ads

1. The Administrator uses the Google Ads tool, an advertising tool provided by Google LLC, the infrastructure of which is located in Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Administrator indicates that Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA) has joined the EU-US Data Privacy Framework Agreement, i.e. it ensures an appropriate level of security for the processing of personal data, in accordance with the GDPR.
2. Google Ads allows you to use tracking technologies, such as cookies and remarketing tags, to show ads that are tailored to your interests.
3. Google Ads may collect and process data about how users interact with our ads and website, including:
   a. IP addresses,
   b. Device identifiers
   c. information about the web browser,
   d. geolocation data and
   e. Browsing history.
   This data is processed in order to evaluate the effectiveness of advertising campaigns and to optimize advertising content.
4. Users can manage their advertising preferences through their Google Ads settings (https://adssettings.google.com) and opt out of personalized ads on the Network Advertising Initiative’s website: https://www.networkadvertising.org/choices/
5. We encourage you to read Google’s Privacy Policy at: https://policies.google.com/privacy?hl=pl

XV Users’ rights

1.  You have the following rights in connection with the processing of your personal data:
   a. the right of access to the processed personal data – on this basis, the Administrator, at the request of the data subject, provides information on the processing of personal data concerning him/her, including, in particular, the purposes and legal bases of processing, the scope of the data held, the entities to whom the personal data are disclosed and the planned date of their deletion. As part of the right of access to data, the data subject may also request information about who their personal data is shared with and whether it is subject to profiling and automated decision-making. The data subject also has the right to obtain a copy of his or her data.
   b. the right to rectify data – on this basis, the Administrator, at the request of the data subject, removes any inconsistencies or errors regarding the processed personal data, and supplements or updates them if they are incomplete or have changed;
   c. the right to delete data – on this basis, the Administrator, at the request of the data subject, deletes data the processing of which is no longer necessary to achieve any of the purposes for which they were collected, the consent to their processing has been withdrawn or an objection has been lodged and it is not required to establish, pursue or defend the Administrator’s claims;
   d. the right to limit and transfer processing – on this basis, the Administrator, at the request of the data subject, ceases to perform operations on such personal data, to the extent appropriate to the law, and also issues these personal data, in a format that allows them to be read by a computer;
   e. the right to lodge a complaint – using this right, a person who believes that their personal data is being processed in violation of the applicable law may lodge a complaint with the President of the Office for Personal Data Protection
   f. the right to object – the data subject may at any time object to the processing of personal data for the purposes for which they were collected and are processed, objection to direct marketing – if personal data are processed for the purposes of direct marketing, the person whose data is processed has the right to object to the processing of personal data concerning him or her in this regard at any time;
   g. Right to withdraw consent – if we process personal data on the basis of consent, then the data subject may withdraw this consent at any time. The withdrawal of the consent does not make the processing of personal data illegal until that moment, the withdrawal of consent does not affect the lawfulness of the previous processing, but it will result in the personal data no longer being used for these purposes from the moment of withdrawal of consent.
2. An application for the exercise of the rights described above may be submitted by traditional mail by writing to the address of the Administrator’s registered office or by e-mail: iod@odokancelaria.pl
3. The application should, as far as possible, indicate precisely what the request concerns, i.e. in particular the addressee of the application and whose rights the person submitting the application wants to exercise as described above. If the Administrator is not able to determine the content of the request or identify the person submitting the application based on the submitted application, it will ask the applicant for additional information.

XVI Cookies

1.  When the User uses the Website, data about the User is automatically collected. These data may include:
   a. IP address,
   b. Domain name
   c. Browser type
   d. operating system type.
2. This data may be collected by:
   a. Cookies
   b. system Google Analytics
   c. and can be stored in server logs.
3. Cookies are small text pieces of information in the form of text files that are stored by your browser on your computer’s hard drive or on your smartphone’s memory card. On subsequent visits to the Website, the information stored in the cookie is sent back to the Website. This allows the Website to recognize you and tailor the content to your needs.
4. In order to improve our Website, provide the most relevant content and analyse how Users use our Website, we may use cookies.
5. We may process the data contained in cookies for the purposes of:
   a. personalize the Website: remember information about the User so that the User does not have to re-enter this information on subsequent visits;
   b. Provide you with tailored advertising, content, and information.
   c. Monitor aggregated site usage metrics, such as total visitors and pages viewed.
6. We use the following types of files:
   a. session cookies, which are temporary files and are stored on the visitor’s device until they leave the Site;
   b. permanent cookies, which are stored on the end device of the visitor to the Website for the time specified in the file parameters or until they are manually deleted;
7. Cookies can be divided into the following categories of cookies:
   a. Necessary cookies: Necessary cookies contribute to the usability of the website by enabling basic functions such as navigation on the website and access to secure areas of the website. The website cannot function properly without these cookies.
   b. Statistical cookies: Statistical cookies help website owners understand how different users behave on the site by collecting and reporting anonymous information. (checkbox to be selected);
   c. Preference cookies: Preference cookies allow a website to remember information that changes the look or feel of the website, e.g. your preferred language or the region in which you are located (checkbox to check).
   d. Marketing cookies: Marketing cookies are used to track users across websites. The goal is to display ads that are relevant and interesting to individual users and thus more valuable to publishers and third-party advertisers (checkbox to be checked).
   e. Unclassified cookies: Unclassified cookies are cookies that are in the process of being classified, along with the providers of the individual cookies
8. We use analytics and similar services that contain third-party cookies. When using the Website, third-party cookies may be used to enable the use of the functionality of the Website and websites integrated with it, or to analyse the effectiveness of advertising campaigns and collect anonymous information about the use of the Website for statistical purposes.
9. This Privacy Policy does not govern the use of third-party cookies. Each third party sets out its own cookie policy in its privacy policy.
10. The website uses the Google Analytics tool. Please note that you can prevent Google from recording the data collected by cookies about your use of the Website, as well as the processing of this data by Google, by installing the browser plug-in at the following address: https://tools.google.com/dlpage/gaoptout
11. You can also change how cookies are used using the shared file management tool – cookie declaration.
12. At the same time, we inform you that the lack of consent, deletion, blocking or restriction of the placement of cookies may cause difficulties or even prevent the use of the Website.

1. The Controller of your personal data is the JWP Group, which consists of the entities being Members of the JWP Group:

• Fundacja JWP Masz Pomysł Masz Patent Masz Zysk with its registered office in Warsaw, entered under number 379117 in the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw, 12th Commercial Division of the National Court Register, with Tax Identification Number (NIP) 7010282877,
• JWP Legal Dorota Rzążewska with its registered office in Warsaw at ul. Mińska 75, 03-828, Tax Identification Number (NIP) 5211276411, Business Identification Number (REGON) 012877745,
• JWP Rzecznicy Patentowi Dorota Rzążewska spółka komandytowa (a Polish limited partnership) with its registered office in Warsaw at ul. Mińska 75, 03-828, entered under number 00000717985 in the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw, 12th Commercial Division of the National Court Register, Tax Identification Number (NIP) 526-011-18-68, Business Identification Number (REGON) 010532597.

2. In matters related to the protection of your personal data, you may contact the Data Protection Officer appointed by the Controller at the following email address: iod@odosc.pl, or in writing to the Controller’s registered office address.
3. General Information:

• Our fan page is run in compliance with the requirements specified in Facebook terms and policies.
• The information contained in your profile and the activities resulting from its use are directly controlled by Facebook.
• We control your data exclusively for the purpose of answering to your questions, commenting on your posts, and communicating with users as part of our activity and the content we make available.
• We process personal data collected through communication with users only for the purpose of providing responses, if necessary.
• We do not archive your activity related to the use of our fan page outside Facebook.
• We have no control over what data the provider of plug-ins or social media sites collects and how it processes such data. For information about the purpose and scope of data collection, including the cookies used, their further processing and application by third-party providers, and your rights and privacy protections settings offered by those providers, you can refer to a data protection policy of the relevant provider at: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA https://www.facebook.com/privacy/explanation

4. The Controller processes personal data of the persons who:

• have subscribed to the fan page by clicking the “Like” or “Follow” button,
• have posted their comment under any of the fan page posts,
• have sent a message.

5. Personal data is processed for the purposes of running a fan page on Facebook, on the terms and conditions specified by Facebook, and providing information via the fan page about the Controller’s activities, promoting the JWP Group and various events, building and maintaining a community connected with the Controller, and for the purpose of communicating through available Facebook functionalities (comments, chats, messages) (pursuant to Article 6(1)(c) and (e) of GDPR). Your personal data may also be processed on the basis of a separate consent to the extent and for the purpose specified in the consent and until the consent is withdrawn (pursuant to Article 6(1)(a) of GDPR) or for the purpose of pursuing claims (pursuant to Article 6(1)(c) and (f) of GDPR – a legitimate interest of the controller or a third party).
6. The Controller of personal data will process the following data:

• basic identification data (usually including your name and surname) to the extent published by you in your Facebook profile,
• data you have published in your Facebook profile,
  • your profile picture (and using it, in some cases, we can get to know your image),
  • other pictures (which may also represent an image) resulting from the fan page-user relationship. Posting pictures under our posts is voluntary on your part.
  • the content of your comments and the content of conversations made via the Messenger application;
    • anonymous statistics on fan page visitors, accessible via the Facebook Insights feature as provided by Facebook in accordance with non-amendable Facebook terms of use, collected through tracking files (i.e. cookies), each of which contains a unique user code, which can be linked to the connection data of Facebook’s registered users, and which is collected and processed when the fan page is opened.

7. Data Recipients:

As part of the fan page, due to Facebook specificity, information about fan page followers, likes, and the content of comments, posts and other information provided by users are public.

8. We may share your data with the entities of the following categories:

• entities whose services we use when processing your data and with which we have signed personal data processing agreements;
• entities to which we are obliged to transfer your data under applicable law;
• the owner of Facebook social networking site under non-amendable principles regarding data specified by Facebook and available at https://www.facebook.com/about/privacy.

9. At the same time, we would like to inform you that we do not transfer your data outside the European Economic Area, subject to the transborder nature of data flow as part of Facebook service. Facebook may transfer your data outside the European Economic Area. However, please note that Facebook is EU-US Privacy Shield certified. Under a relevant agreement between the USA and the European Commission, the European Commission regards companies with Privacy Shield certification as providing an adequate level of data protection.
10. Your data will be processed for the period necessary to accomplish the following purposes:

• the information about users that we hold in private messages will be retained until your questions are answered, not longer than for 1 month;
• in the case of information that we hold as part of the comments you have provided, it will be available on our website until it is deleted by the author;
• Your personal data collected by Facebook, i.e., your post history, your Messenger activity history, your Instagram activity history is subject to retention

on the terms set out in the Facebook terms and policies;

• data processed on the basis of the Controller’s legitimate interest will be processed until an objection is effectively made or the interest ceases to exist,
• statistics on fan page visitors available through the Facebook Insights feature shall be processed for a 2-year period of availability of this data on Facebook;
• data processed on the basis of the consent will be processed until the consent is withdrawn.

11. Rights of Data Subjects:

You have the right to

• access and receive copies of your data;
• rectify (correct) your data;
• data erasure;
• restrict the processing of data;
• object to the processing of data;
• data portability;
• withdraw your consent at any time;
  • file a complaint with the President of the Personal Data Protection Office, with its registered office in ul. Moniuszki 1A, 00-014 Warszawa.

Providing your data is voluntary, but the failure to provide your data will make it impossible for you to view the fan page or make comments.

Pursuant to Article 13(1) and (2) and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”), below we provide information on how we will process your personal data made available during the use of our social networking site profile (hereinafter referred to as the “fan page”):

1. The Controller of your personal data is the JWP Group, which consists of the entities being members of the JWP Group:

• Fundacja JWP Masz Pomysł Masz Patent Masz Zysk with its registered office in Warsaw, entered under number 379117 in the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw, 12th Commercial Division of the National Court Register, with Tax Identification Number (NIP) 7010282877,
• JWP Legal Dorota Rzążewska with its registered office in Warsaw, at ul. Mińska 75, 03-828, Tax Identification Number (NIP) 5211276411, Business Identification Number (REGON) 012877745,
• JWP Rzecznicy Patentowi Dorota Rzążewska spółka komandytowa (a Polish limited partnership) with its registered office in Warsaw at ul. ul. Mińska 75, 03-828, entered under number 00000717985 in the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw, 12th Commercial Division of the National Court Register, Tax Identification Number (NIP) 526-011-18-68, Business Identification Number (REGON) 010532597.

2. In matters related to the protection of your personal data, you can contact the Data Protection Officer appointed by the Controller at the following email address: iod@odosc.pl, or in writing to the Controller’s registered office address.
3. Personal data will be processed for the following purposes:
   • to run a fan page on the YouTube social media platform, on the terms and conditions specified by YouTube LLC, and to inform, via the fan page, about the Controller’s activities, promote various events, build and maintain the community associated with us,
   • to communicate via available YouTube functionalities, i.e., comments, chats, messages.
   • Your personal data may also be processed on the basis of a separate consent to the extent and for the purpose specified in the consent and until the consent is withdrawn pursuant to Article 6(1)(a) of GDPR and pursuant to statutory requirements in accordance with Article 6(1)(c) of GDPR for pursuing potential claims
4. Categories of personal data to be processed:
   • The personal data Controller will process the data of the persons who have subscribed to the fan page by clicking the “Like” or “Follow” button,
   • who have posted their comments on the fan page,
     • to the extent published by you on your YouTube profile, the data that you have published on your YouTube profile, available anonymous statistics on fan page visitors, made available by YouTube in accordance with non-amendable YouTube terms of use, collected through tracking files (i.e., cookies), each of which contains a unique user code that can be linked to the connection data of YouTube’s registered users, and which is collected and processed at the time the fan page is opened.

In addition, please note that YouTube retains your data as user profiles and uses it for advertising, market research and/or its non-standard website design. Such assessment is carried out (even for users who are not logged in) in particular to provide relevant advertising and inform other social network users about their activities on our website.

5. Data recipients:
   • public authorities and entities carrying out public tasks or acting on behalf of public authorities, to the extent and for the purposes arising from the provisions of generally applicable law;
   • other entities that, on the basis of relevant personal data processing agreements signed with the Controller, process personal data on behalf of the Controller.
   • YouTube social media platform owner under the non-amendable YouTube data policy available at https://www.youtube.com/intl/pl/about/.
6. Transfer of data to third countries or international organisations:

The data Controller will not transfer data outside the territory of Poland/EU/European Economic Area, subject to a transborder nature of data flow as part of YouTube service, pursuant to contractual clauses used by YouTube and approved by the European Commission and the decisions of the European Commission acknowledging an appropriate level of data protection as regards specific countries in accordance with the principles specified by YouTube at

https://www.youtube.com/intl/en/about/ or www.privacyshield.gov/EU-USFramework

7. Data retention period:
   • data processed on the basis of your consent will be processed until the consent is withdrawn,
   • data processed on the basis of statutory requirements will be processed for the time during which the provisions of law require the data to be retained, e.g., data processed for the purpose of pursuing or defending against claims will be processed for the time equal to the period of limitation of these claims,
   • statistics on fan page visitors available by means of the “YouTube Insights” feature will be processed as long as this data is available on YouTube in accordance with the principles of the functioning of YouTube service.

8. Your rights:

In connection with the processing of personal data, you gave the right to:

• access and receive copies of your data,
• rectify (correct) your data,
• data erasure,
• restrict the processing of data,
• object to the processing of data,
• data portability,
• withdraw your consent to the processing of your personal data – you have the right to withdraw your consent to the processing of such personal data processed on the basis of your consent at any time. The withdrawal of the consent will not affect the lawfulness of the processing made on the basis of the consent before its withdrawal.
• You have the right to file a complaint with the President of the Personal Data Protection Office, ul. Moniuszki 1A, 00-014 Warszawa, should you consider that the processing of your personal data violates the provisions of the GDPR.

9. Data source information:

We obtain your data from YouTube and from your public profile and fan page posts on the YouTube platform.

10. Other information:

Personal data will not be subject to automated decision-making, including profiling. The data obtained from you by the Controller will be processed on the basis of its voluntary submission when your personal data is processed on the basis of your consent. Processing may also be required by law, e.g., when documentary archiving is necessary.

Pursuant to Article 13(1) and (2) and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”), below we provide information on how we will process your personal data made available during the use of social networking media profile (hereinafter referred to as the “fan page”):

1. The Controller of your personal data is the JWP Group, which consists of the entities being Members of the JWP Group:

• Fundacja JWP Masz Pomysł Masz Patent Masz Zysk with its registered office in Warsaw, entered under number 379117 in the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw, 12th Commercial Division of the National Court Register, with Tax Identification Number (NIP) 7010282877,
• JWP Legal Dorota Rzążewska with its registered office in Warsaw, at ul. Mińska 75, 03-828, Tax Identification Number (NIP) 5211276411, Business Identification Number (REGON) 012877745,
• JWP Rzecznicy Patentowi Dorota Rzążewska spółka komandytowa (a Polish limited partnership) with its registered office in Warsaw, at ul. Mińska 75, 03-828, entered under number 00000717985 in the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw, 12th Commercial Division of the National Court Register, Tax Identification Number (NIP) 526-011-18-68, Business Identification Number (REGON) 010532597.

2. In matters related to the protection of your personal data, you can contact the Data Protection Officer appointed by the Controller at the following email address: iod@odosc.pl, or in writing to the Controller’s registered office address.
3. Categories of persons whose data is processed:

The Controller processes the data of persons who:

• provide their data on the LinkedIn platform in connection with the use of the Controller’s profile. This data may be available to the controller of this platform – i.e. LinkedIn,
• any personal data contained in the comments posted in the Controller’s profile may also be available to other users of LinkedIn platform.

4. Personal data will be processed for the following purposes:
   • to run the Controller’s profile on the LinkedIn social media platform, on the terms and conditions specified by LinkedIn, and to inform, via the profile, about the Controller’s activities, promote various events, build and maintain the community associated with us,
   • to communicate through available LinkedIn functionalities, such as comments, chat and messages, or by posting comments under any posts posted in the Controller’s profile,
   • for analytical purposes related to the analyses of profile functioning, popularity or use,
   • to establish, pursue or defend against any possible claims,
   • Your personal data may also be processed on the basis of a separate consent to the extent and for the purpose specified in the consent and until the consent is withdrawn in accordance with Article 6(1)(a) of GDPR),
   • Your personal data may also be processed on the basis of statutory requirements (pursuant to Article 6 (1)(c) of GDPR) for the Controller to comply with legal obligations arising from the provisions of law.

In addition, please note that the LinkedIn platform controller, as a tool provider, is jointly responsible for the processing of data of persons using the Controller’s company profile, and may process their data for its own purposes based on other legal basis. In particular, LinkedIn may, pursuant to its own provisions and regulations, collect and process information contained in the cookies of profile visitors. On the basis of the data so collected, LinkedIn may have anonymous summaries and statistics (e.g., on the number or profile of visitors) created, which can be made available to the Controller as the entity running the profile.

5. Data retention period:
   • data processed on the basis of your consent will be processed until the consent is withdrawn,
   • data processed on the basis of statutory requirements will be processed for the period during which the provisions of the law require the data to be retained,
   • data processed on the basis of the Controller’s legitimate interest will be processed until an objection is effectively submitted or the interest ceases to exist, e.g., data processed for the purpose of pursuing or defending against claims will be processed for the period equal to the period of limitation of these claims,
   • in connection with the LinkedIn platform specificity, information about profile followers, as well as the content of comments, posts and other information provided by users is public,
   • your data, which will be processed as part of the comments you post in the profile, will be available on the website until they are deleted by the author or the Controller of the profile.
6. Your rights:

In connection with the processing of personal data, you gave the right to:

• access and receive copies of your data,
• rectify (correct) your data,
• data erasure,
• restrict the processing of data,
• object to the processing of data,
• data portability,
• withdraw your consent to the processing of personal data – you have the right to withdraw your consent to the processing of the personal data processed on the basis of your consent at any time. The withdrawal of your consent will not affect the lawfulness of the processing made on the basis of the consent before its withdrawal.
• You have the right to file a complaint with the President of the Personal Data Protection Office, ul. Moniuszki 1A, 00-014 Warszawa, if you consider that the processing of your personal data violates the provisions of the GDPR.

7. Data source information:

We obtain your data from the LinkedIn provider, from your public profile and from posts in the Controller’s profile.

8. Other information:
   • Personal data will be processed in an automated manner, also in the form of profiling. Automated decision-making will take place as specified in LinkedIn regulations and such processing will result in a contact, display of information on the part of the profile Controller.
   • The data obtained from you by the Controller will be processed on the basis of voluntary submission when personal data is processed on the basis of consent. Processing may also be required by law, e.g., when documentation archiving including data is necessary in accordance with applicable legal provisions.

Pursuant to Article 13(1) and (2) and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”), below we provide information on how we will process your personal data during the use of our social networking media profile (hereinafter referred to as the “fan page”):

1. Data Controller:

The Controller of data of persons using the JWP profile is the JWP Group, which consists of the entities being Members of the JWP Group:

• Fundacja JWP Masz Pomysł Masz Patent Masz Zysk with its registered office in Warsaw, entered under number 379117 in the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw, 12th Commercial Division of the National Court Register, with Tax Identification Number (NIP) 7010282877,
• JWP Legal Dorota Rzążewska with its registered office in Warsaw, at ul. Mińska 75, 03-828, Tax Identification Number (NIP) 5211276411, Business Identification Number (REGON) 012877745,
• JWP Rzecznicy Patentowi Dorota Rzążewska spółka komandytowa (a Polish limited partnership) with its registered office in Warsaw, at ul. Mińska 75, 03-828, entered under number 00000717985 in the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw, 12th Commercial Division of the National Court Register, Tax Identification Number (NIP) 526-011-18-68, Business Identification Number (REGON) 010532597,

and the Twitter platform controller, as an entity jointly responsible for the processing of data of persons using the JWP profile. For further information on Twitter’s data processing, please visit https://cdn.cms-twdigitalassets.com/content/dam/legal-twitter/site-assets/privacy-page-gdpr/pdfs/PP_Q22018_April_EN.pdf

2. Contact details:

The Controller may be contacted by mail at the following address: ul. Mińska 75, 03-828, by email: info@jwp.pl or by phone: 22 436 05 07.

3. Data Protection Officer:

We’ve appointed a data protection officer. This is a person you may contact in all matters regarding the processing of personal data and the exercise of your rights related to the processing of data. You may contact the officer as follows: by mail to the Controller’s address or by email at: iod@odosc.pl

4. The purposes of processing and legal basis for processing:

Your data will be processed to:

• control and manage the profile of the JWP GROUP, including to respond to your posts and comments, and to supervise the content published by users – the legal basis for the processing is the legitimate interest of the JWP GROUP consisting in the ability to run and manage the the JWP GROUP profile;
• respond to inquiries addressed to JWP – the legal basis for the processing is the legitimate interest of the JWP GROUP, consisting in the ability to provide responses to the persons contacting the JWP GROUP,
• pursue other legitimate interests of the JWP GROUP, and in particular, as recognized by the JWP GROUP, the ability to pursue and defend claims, prevent fraud and economic crimes, or ensure a secure ICT environment.

In addition, please note that the Twitter controller, as a tool provider, is jointly responsible for the processing of data of profile users and may process their data for its own purposes on other legal basis.

In particular, Twitter may, on the basis of its own provisions and regulations, collect and process the information contained in the cookies of profile visitors.

On the basis of the data so collected, Twitter may have anonymous summaries and statistics (e.g., on the number or profile of fan page visitors) created, which can be made available to the JWP GROUP as the entity running the fan page.

1. Data recipients

Your personal data provided on Twitter in connection with the use of the JWP GROUP profile may be available to the controller of this platform – i.e., Twitter.

At the same time, any personal data contained in the comments posted on the JWP GROUP’s fan page may also be accessible to other Twitter users.

1. Data retention period

Your personal data will be processed by the JWP GROUP for the period necessary to accomplish the above purposes of processing, in particular for the period in which you are an active fan page user or until you object to the processing of data.

The data contained in posts or comments can be processed until they are deleted. Should you be unable to delete a specific comment, you can ask us to do so.

You can always opt out of following the profile of the JWP GROUP, you can also object to the processing of your data for these purposes.

Regardless of the retention of data by the JWP GROUP, the Twitter controller may use its own retention periods.

1. Rights of Data Subject

You have the right to access your data and the right to request its rectification, its erasure or restriction of its processing.

To the extent that your personal data is processed on the basis of the JWP GROUP’s legitimate interest, you have the right to object to the processing of your personal data.

You also have the right to file a complaint with a supervisory authority dealing with the protection of personal data.

In order to exercise the above rights, please contact the data controller. Contact details are indicated above.

The JWP GROUP may implement your rights within the scope of its technical capabilities (e.g. by deleting a comment or a post containing personal data at your request).

Regardless of your contact with the JWP GROUP regarding the processing of your data via Twitter, you may also contact the Twitter controller.

1. Information about the requirement to provide data

Providing data as part of using the profile is voluntary. Failure to provide such data may prevent your from using certain functionalities (such as those used to post comments or contact the JWP GROUP).