Personal data protection

At Mrowiec Fiałek and Partners, we provide consulting services in the field of personal data protection, including:

  • due diligence on personal data processing procedures and documentation in terms of their compliance with the law and with good practices,
  • ongoing advice on personal data protection and GDPR requirements, including preparing documentation (internal policies, data processing agreements, documents required under information obligations, employee documentation), as well as representing clients in proceedings before the Polish Data Protection Commissioner,
  • advice on structuring the transaction, taking into account various data protection issues, including legal analysis and preparation of the relevant documentation,
  • advising on selecting legal measures to ensure the required level of protection of personal data, should any irregularities in this regard be identified in the course of due diligence,
  • advisory services in the field of e-commerce and direct marketing.


Completed projects

  • Technology company

    Advice on the implementation of the GDPR by a technology company that processes a large amount of personal data in its IT systems.

  • A company from the medical industry

    Conducting a due diligence study covering, inter alia, verification of compliance with the requirements for the protection of personal data, taking into account the specificity of the conducted medical and research activities.

  • Technology company

    Conducting due diligence encompassing the verification of compliance with personal data protection requirements at a capital group, taking into account the historical assignment of a large number of contracts.

  • Company in the food industry

    Conducting due diligence encompassing the verification of compliance with personal data protection requirements, including the correctness and completeness of the prepared documentation, as well as the fulfilment of information obligations and the verification of concluded personal data processing agreements, among other aspects.

  • Company from the service and trade industry

    Conducting due diligence encompassing the verification of compliance with personal data protection requirements (accounting for the division of activities between two companies and the regularisation of the legal relationship between them), including the correctness and completeness of the prepared documentation as well as the fulfilment of information obligations and the verification of concluded personal data processing agreements, among other aspects.

  • A company from the production and service industry

    Conducting a due diligence study covering, inter alia, verification of compliance with personal data protection requirements, taking into account the division of activities between two companies and the regulation of legal relations between them, including the correctness and completeness of the prepared documentation, fulfillment of information obligations and verification of concluded personal data entrustment agreements.

  • Company providing financial intermediation services

    Conducting due diligence encompassing the verification of compliance with personal data protection requirements (accounting for the fact that the company conducts business via a network of agents), including the correctness and completeness of the prepared documentation, the fulfilment of information obligations, as well as verification of the concluded personal data processing agreements and an analysis of the applied model for transferring personal data, among other aspects.

  • Company in the e-commerce sector

    Conducting due diligence encompassing the verification of compliance with personal data protection requirements (accounting for the correct processing of data for direct marketing activities), including the correctness and completeness of the prepared documentation, as well as the fulfilment of information obligations and the verification of concluded personal data processing agreements, among other aspects.

  • Company from the construction industry

    They conducted a due diligence study covering, inter alia, verification of compliance with the requirements for the protection of personal data, including the correctness and completeness of the documentation prepared, fulfillment of information obligations and compliance of the video monitoring with the law.

  • Company in the financial intermediation industry

    Advice on structuring the acquisition of another entrepreneur, taking into account the issue of personal data protection (in particular clients’ personal data), including conducting a legal analysis and preparing the relevant documentation.

Practices
  1. 01. Mergers and acquisitions
  2. 02. Private equity, venture capital
  3. 03. Acquiring an investor
  4. 04. Share offers
  5. 05. Bond issues
  6. 06. Due diligence
  7. 07. Restructuring
  8. 08. Real estate
  9. 09. Collateral administration
  10. 10. Investment funds
  11. 11. Acquisitions, capital market transactions
  12. 12. Regulatory advice
  13. 13. Dispute resolution
  14. 14. Obtaining financing
  15. 15. Corporate law
  16. 16. Competition law
  17. 17. Manager option programs
  18. 18. Labour law
  19. 19. Intellectual property
  20. 20. Personal data protection