NewTechLaw.eu sp. z o.o.

ul. Telimeny 38/5
30-838 Kraków
Polska
KRS 0001059923
NIP/VAT PL6793277655
REGON 52646618000000

biuro@newtechlaw.eu

Szczepan WATRAS - członek zarządu
Tomasz IZYDORCZYK - członek zarządu

NewTechLaw.eu sp. z o.o.

ul. Telimeny 38/5
30-838 Kraków
Poland
KRS 0001059923
NIP/VAT PL6793277655
REGON 52646618000000

biuro@newtechlaw.eu

Szczepan WATRAS - Member of the Board
Tomasz IZYDORCZYK - Member of the Board

GDPR ad hoc support

We support clients in the course of "accident" cases. This applies to the following aspects:

data subject request -> e.g. request for a copy of data, data deletion, consent withdrawal;
security incident -> e.g. theft of media with personal data, data leakage, loss of data availability; this includes both the analysis of the facts as well as reporting to the Data Protection Authority and informing the persons who are the subject of the incident (personal data breach);
Data Protection Authority cases/data processing control -> it includes, among others response to the complaint of the data subject submitted to the Data Protection Authority; participation in the control of data processing; reply to the letter from the Data Protection Authority;
Provincial Administrative Court/Supreme Administrative Court cases -> it includes, among others, filing a complaint against the decision of the Data Protection Authority with the Provincial Administrative Court.

Implementation of activities

Fast response is the key when carrying out the above mentioned activities. In particular, please note that:

in the event of a breach of personal data protection, the controller without undue delay – no later than 72 hours after detecting the breach – is obliged to report the incident to the Data Protection Authority, unless it is unlikely that the breach would result in a risk of violating the rights or freedoms of natural persons;
in a situation where a breach of personal data protection may result in a high risk of violation of the rights or freedoms of natural persons, the controller is obliged to notify the data subject of such a breach without undue delay;
in the event of a request to exercise the rights (e.g. request to delete data), the controller is obliged (no later than within one month of receiving the request) to provide the data subject with information about the actions taken in connection with this request (exceptionally, i.e. due to the complexity of the request or the number of requests, this period may be extended by another two months).

biuro@newtechlaw.eu

ul. Telimeny 38/5
30-838 Kraków
Poland