§ 1Data controller
- The controller of your personal data is HLBC Sp. z o.o. w organizacji (company in organisation), with its registered office at Plac Europejski 1, 00-844 Warsaw, which operates the HLBC – Hexagon Law & Business Consulting website (“HLBC”, “we”).
- For personal data matters, you can write to hello@hl-bc.com or call +48 505 460 020.
- This policy covers data collected through the HLBC website, forms, shop, e-mail correspondence and online meetings.
§ 2What data we collect
- Data you provide yourself:
- full name, e-mail, phone number
- company name, country, NIP or EU VAT number, invoicing address
- the content of your enquiry or order and any documents sent
- Technical data: country determined from the IP address (only to tailor content on the website, without storing the address), choices in the consent banner and cart contents stored in your browser.
- Visit statistics are counted anonymously and only with your consent.
§ 3Purposes and legal bases
- We process data in order to:
- answer your enquiry and prepare an offer – Art. 6(1)(b) GDPR
- perform the ordered service – Art. 6(1)(b) GDPR
- issue invoices and keep accounts – Art. 6(1)(c) GDPR
- fulfil obligations under the Anti-Money Laundering Act (AML) – Art. 6(1)(c) GDPR
- send the comparison, materials and newsletter you request – Art. 6(1)(a) GDPR (consent)
- establish, pursue and defend claims – Art. 6(1)(f) GDPR
- Providing data is voluntary, but without it we cannot answer your enquiry or perform the service.
§ 4Data recipients
- Data may be received by entities that help us perform the service: an attorney-at-law, an accounting firm, a notary, a sworn translator, a bank (when opening an account) and providers of IT, hosting and e-mail services.
- Each of them acts under a data processing agreement or its own professional duty of confidentiality.
- We disclose data to public authorities only when required by law.
§ 5Transfers of data outside the EEA
- Where a matter requires cooperation with a partner outside the European Economic Area, we transfer data only on the basis of a European Commission adequacy decision or standard contractual clauses.
- On request we will provide a copy of the safeguards applied.
§ 6Retention period
- We retain data as follows:
- enquiries without an order – up to 12 months from the last contact
- contract data – for the term of the contract and until the limitation period for claims expires
- accounting documents – 5 years from the end of the year in which the tax payment deadline passed
- AML documentation – 5 years from the end of the relationship
- data processed on the basis of consent – until consent is withdrawn
§ 7Your rights
- You have the right to:
- access your data and receive a copy
- rectify your data
- erase your data
- restrict processing
- data portability
- object to processing based on legitimate interest
- withdraw consent at any time, without affecting earlier processing
- You may lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
§ 8Professional secrecy
- Information provided in connection with a legal matter is covered by the professional secrecy of an attorney-at-law. We do not use it for any other purpose.
§ 9Cookies and browser storage
- The website stores in your browser only what is needed for it to work: choices in the consent banner, the cart and view settings.
- We do not use advertising cookies or Google tools. You can change your consent to statistics at any time in the banner settings.
§ 10Changes to the policy
- We announce changes on this page, stating the date of the new version. Clients with an active contract are notified by e-mail.






