This privacy policy, hereinafter referred to as the "Policy," is addressed to users of the website www.immilegal.pl (hereinafter referred to as the "Website"). The Policy describes the principles of collecting and using data from users of the Website, which is collected directly from them or via cookies and similar technologies.

Data Controller and their Contact Details

1. The controller of data collected in connection with the use of the Website is Maksymilian Imbirski, conducting business under the name of Kancelaria Adwokacka Adwokat Maksymilian Imbirski, Al. Gen. Józefa Hallera 82/8, 53-203 Wrocław, Poland, NIP: 8943080637, REGON: 364784548.

2. In matters related to the processing of your data by the Controller, you can contact them using the above address details.

Scope of Data Collected

1. The Website allows you to contact the Controller and provide them with your identification, contact information, and information related to the content of messages.

2. The Controller collects data related to your activity, such as time spent on the website, search phrases, number of subpages viewed, date and source of the visit.

Data Source

1. If you contacted the Controller, the data was provided to us directly by you.

2. If your data was provided in connection with a matter reported by another person, the source of the data is that person. In such a case, the Controller receives identification, address, and other data related to the matter, such as a description of the matter.

Purpose and Legal Basis for Personal Data Processing

Your data may be processed for the following purposes:

• analyzing network traffic, ensuring security within the Website, and adapting content to user needs based on the Controller's legitimate interest (Article 6, Section 1, Letter f of the GDPR);

• answering questions, providing the requested offer, and conducting correspondence to process the matter, based on your consent and the Controller's legitimate interest in fulfilling user requests (Article 6, paragraph 1, letters a and f of the GDPR).

Right to withdraw consent

You may withdraw your consent to the processing of your contact data at any time by contacting the Controller. Withdrawing consent may hinder or prevent contact with you.

Obligation or Voluntary Data Provision

1. Providing data for the purposes of handling the matter is voluntary, but necessary. Failure to provide it may hinder or prevent the processing of the matter.

2. Providing data necessary for statistical analysis of the Website's users is voluntary. You may use the so-called incognito mode to browse the Website without sharing information about your visit with the Controller. Using incognito mode, and therefore not providing data, does not affect your ability to use the Website. Rights arising from the GDPR regarding data processing

You have the right to:

1. request access to your data from the Controller and receive a copy thereof (Article 15 of the GDPR);

2. request rectification or correction of your data from the Controller (Article 16 of the GDPR) – in relation to the request for rectification, if you notice that the data is incorrect or incomplete;

3. request deletion of your data from the Controller (Article 17 of the GDPR);

4. request restriction of processing from the Controller (Article 18 of the GDPR) – for example, if you notice that the data is incorrect, you may request restriction of processing of your data for a period allowing us to verify the accuracy of the data);

5. file a complaint regarding the Controller's processing of your personal data with the President of the Personal Data Protection Office. Recipients of Your Personal Data

Recipients of your personal data may only be entities authorized to receive them under applicable law. Furthermore, your data may be made available to couriers, postal operators, hosting providers, and mail servers.

Data Retention Period

Your personal data will be retained until you withdraw your consent or until the matter is resolved, and then until the statute of limitations for any claims by the parties related to its implementation expires.

Data related to web traffic analysis collected via cookies and similar technologies may be retained until the cookie expires. Some cookies never expire, therefore the data retention period will be equivalent to the time necessary for the controller to achieve the data collection purposes, such as ensuring security and analyzing historical data related to website traffic.

Data Transfer to a Third Country or International Organization

Your data will not be transferred to third countries or international organizations.

Use of Cookies and Similar Technologies

The website allows the collection of user information via cookies and similar technologies, the use of which usually involves installing this tool on the user's device (computer, smartphone, etc.). This information is used to remember user decisions (font selection, contrast, acceptance of the policy), maintain the user's session (e.g., after logging in), remember the password (with consent), collect information about the user's device and their visit for security purposes, as well as to analyze visits and customize content.

Information obtained via cookies and similar technologies is not combined with other user data, nor is it used to identify users by the Administrator.

The user can set their browser to block certain types of cookies and other technologies, for example, by specifying that only those necessary for the correct display of the website will be allowed. By default, most browsers allow the use of all cookies, but the user can change these settings at any time and can also delete already installed cookies. Each browser allows this through one of the options available in the settings or preferences.

The user can also use the website in a so-called "browser" mode. Incognito mode, which blocks the collection of data about your visit.

Using the Website without changing your browser settings, i.e., by default accepting cookies and similar technologies, constitutes consent to their use for the purposes specified above. The Administrator does not use the information obtained for marketing purposes.

Google Analytics Data

Traffic on the Administrator's websites is monitored by the Google Analytics analytical system, which collects data on website usage and popularity. This data (e.g., browser used or IP address) will not be shared by the Administrator with third parties.

Privacy Policy Statement

This Privacy Policy entered into force on November 4, 2025. The Administrator reserves the right to change the Privacy Policy if necessary as a result of changes to the Policy, Website management, law, or jurisdiction. Changes will be effective from the date they are published on the website, along with an indication of the date of their introduction. Contact Information

If you have any questions or comments regarding this Privacy Policy, please contact the Administrator: Maksymilian Imbirski, tel. +48 503 060 537, e-mail: maksymilian@adwokatimbirski.pl.