GDPR - Piotr Korolko Law Firm

31 March 2023

Data protection officer

GDPR provides for the function of a data protection officer, who should be appointed by the controller in certain situations. I explain when it is mandatory and who and how to appoint to this position, as well as what are his tasks.

Read More →

18 January 2023

Providing information by personal data controller

GDPR imposes many requirements on the personal data controller. One of the first that the controller should perform is to provide information.

Read More →

5 January 2023

Processing of sensitive personal data

It is the best to avoid sensitive personal data. However, if you must process them, remember that this is only allowed in strictly defined cases.

Read More →

12 October 2022

Personal data processing for marketing

Advertising triggers sales so every company processes personal data in connection with marketing.

Read More →

29 August 2022

Purposes of legitimate interests pursued controller

The legitimate interest of the administrator is a convenient base for data processing. Therefore, it is sometimes abused by entrepreneurs.

Read More →

8 August 2022

Consent for personal data processing

It often happens that consent to the processing of personal data is not obtained in accordance with GDPR. I explain how to do it correctly.

Read More →

10 July 2022

Legal bases for personal data processing

Controller may not process personal data at his discretion. For this to be possible, there must be a legal basis. Determining this is one of the first steps an entrepreneur should take when dealing with personal data.

Read More →

26 February 2022

Controller of personal data

About personal data, processing and application of GDPR, I wrote in previous posts. Form today's post you will learn who is a controller of personal data and what obligations does he have.

Read More →

13 February 2022

When you have to apply GDPR?

If data coming to your company are personal data, and what you do with them is processing, be aware that the President of the Personal Data Protection Office may get interested in you.

Read More →

30 January 2022

Personal data processing definition in GDPR

In the previous post I explained what data should be considered to be personal data. Now I would like to concentrate on the second definition from article 4 of GDPR explaining what personal data processing is.

Read More →