Lions Estate, based in Warsaw (00-480), ul. Wiejska 11/13, registered in the register of entrepreneurs kept by the District Court for the Capital City of Warsaw, XII Commercial Division of the National Court Register under KRS number 0000552455, NIP 521 369 37 74. Hereinafter referred to as the Company in this Privacy Policy.
The Company has appointed a Data Protection Officer available at [email protected]. Personal data is collected and processed in the manner and under the principles specified in this Policy.
We place great importance on protecting the privacy of our clients, contractors, and employees. A key aspect of this is safeguarding the rights and freedoms of individuals in connection with the processing of their personal data.
We ensure that the processing of your data complies with the General Data Protection Regulation (GDPR) 2016/679/EU, the Personal Data Protection Act, and other relevant laws (including labor law and accounting regulations).
The Group companies are data controllers under Article 4(7) of the GDPR. We also use data processors as per Article 4(8) of the GDPR — these entities process personal data on behalf of the controller (e.g., accounting firms, IT service providers, real estate agents).
As a Group, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of violating the rights or freedoms of individuals. We also develop policies and procedures and organize regular training to enhance the knowledge and skills of our employees in this area.
As an employer, we process data of employees and individuals cooperating with us on bases other than employment contracts. Contact details obtained from contractors are used to conclude and efficiently execute agreements and provide services. We also carry out marketing activities to reach a broad audience and provide up-to-date information about our products and services.
We share your data with third parties either with your consent or when required by law.
We ensure that the interests of data subjects are protected, and in particular, that their data is:
We process your data based on consent, which can be withdrawn at any time. Alternatively, processing may be necessary for contract performance or to take steps at your request before entering into a contract.
Processing may also be required for compliance with legal obligations (e.g., labor law, accounting regulations) or for our legitimate interests, such as pursuing business claims.
We take appropriate measures to communicate information and respond to your requests regarding personal data processing in a clear and understandable way. You have the right to:
To exercise these rights, please contact us at [email protected]
We provide information in writing or by other means, including electronically. Upon request and after confirming your identity, we may also provide information orally. If you submit your request electronically, we will, where possible, respond electronically unless you indicate a different communication preference.
We aim to respond without undue delay — typically within one month of receiving a request. If necessary, we may extend this by two additional months due to the complexity or volume of requests, and we will inform you of any delay within one month of receiving your request.
We only cooperate with processors that provide sufficient guarantees to implement appropriate technical and organizational measures, ensuring GDPR compliance and protection of data subject rights.
We thoroughly vet these entities, sign detailed agreements, and conduct periodic audits to ensure compliance.
We have developed detailed procedures covering topics such as:
We regularly review and update our documentation to demonstrate legal compliance and adopt market best practices.
We retain personal data in an identifiable form for no longer than necessary. After that period, data is anonymized or deleted. Deletion is complete and irreversible.
Our retention policy ensures:
Data retention periods are based on legal obligations (e.g., employment or accounting document retention) or legitimate interests (e.g., marketing activities). Our retention policy applies to both paper and electronic data.
We ensure that any person acting under our authority and having access to your personal data processes it solely on our instructions, unless otherwise required by EU or national law.
"Cookies" are small files stored on your computer containing settings and other information used on visited websites. Cookies may include site settings or be used to track user interactions with the site. We use cookies to customize content to your preferences, optimize site usage, and enforce security actions.