Privacy Policy

Last updated: February 8, 2026

1. Data Controller

The controller of your personal data is Mateusz Dysiewicz conducting business activities under the name Law Office of Mateusz Dysiewicz, with office at ul. Witolda 22, 35-302 Rzeszów, NIP: 8133637901, REGON: 361599069.

For matters concerning personal data protection, you can contact us:

2. What Data We Collect and Why

In connection with the operation of the website mecenasbiznesu.com and related services, we may process the following data:

• Newsletter — email address provided voluntarily in the subscription form. Purpose: sending periodic summaries of changes in law and educational content.
• Contact Form / Consultation Booking — name, email address, optionally phone number and description of the matter. Purpose: scheduling a meeting, providing answers to inquiries.
• Legal Services Provision — data necessary to conclude and perform a legal services agreement (name, surname, address, PESEL, NIP, contact details). Purpose: contract performance and fulfillment of legal obligations.
• Technical Data (cookies) — IP address, browser type, visit time, visited pages. Purpose: proper website functioning, analytics, security. Details in Cookie Policy.

3. Legal Basis for Processing

We process your data on the basis of:

• Art. 6(1)(a) GDPR — Your voluntary consent (newsletter subscription, analytics cookies consent).
• Art. 6(1)(b) GDPR — Necessity for contract performance or pre-contractual actions (consultation, legal services provision).
• Art. 6(1)(c) GDPR — Fulfillment of legal obligation binding on the controller (e.g., tax and accounting obligations).
• Art. 6(1)(f) GDPR — Legitimate interests of the controller (website analytics, protection against claims, direct marketing of own services).

4. Data Retention Period

• Newsletter — until consent is withdrawn (unsubscribe from the list).
• Contact Form — for the duration necessary to provide a response, no longer than 12 months from last contact, unless a contract is concluded.
• Legal Services Agreement — during the duration of the agreement and for the time required by law (particularly tax and archival regulations) or until expiration of the limitation period for potential claims.
• Technical Data (cookies) — according to periods specified in Cookie Policy.

5. Recipients of Personal Data

Your data may be shared only with entities we cooperate with to provide services:

• hosting and IT service providers,
• email marketing service provider (newsletter management),
• consultation booking system provider (Calendly),
• accounting service providers,
• state authorities — only on the basis of applicable law.

Each of these entities processes data solely on the basis of a data processing agreement or other legal basis provided for in GDPR.

6. Data Transfer to Third Countries

As a general rule, we do not transfer your data outside the European Economic Area (EEA). When using tools from providers with offices outside the EEA (e.g., Google services, Calendly), the transfer is based on Standard Contractual Clauses approved by the European Commission or a decision confirming an adequate level of protection.

7. Your Rights

In connection with the processing of your personal data, you have the following rights:

• Access — you have the right to obtain information about whether and what data we process about you.
• Rectification — you can request correction of incorrect or completion of incomplete data.
• Erasure — you can request deletion of data if there is no basis for further processing.
• Restriction of Processing — you can request temporary suspension of operations on your data.
• Data Portability — you have the right to receive your data in a machine-readable format.
• Objection — you can object at any time to processing based on the legitimate interests of the controller.
• Withdrawal of Consent — if processing is based on consent (e.g., newsletter), you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before its withdrawal.

To exercise the above rights, contact us at: kancelaria@mecenasbiznesu.com.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw), if you believe that processing of your data violates GDPR provisions.

8. Voluntary Nature of Data Provision

Providing personal data is voluntary, but necessary to use certain website functions (newsletter subscription, consultation booking) or to conclude and perform a legal services agreement. Failure to provide data may prevent you from using a given service.

9. Automated Decision-Making

Your personal data will not be subject to automated decision-making, including profiling as defined in Art. 22 GDPR.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. All matters related to the provision of legal services are covered by attorney-client privilege.

11. Changes to Privacy Policy

This Privacy Policy may be updated to reflect changes in applicable law or in the way we process data. We will inform you of significant changes through the website. We recommend regularly reviewing this document.