The privacy and data protection practice at Bird & Bird Szepietowski i wspólnicy sp. k. is praised as a ‘premier consumer data protection law firm'. The team advises global, EU and Polish clients on data breaches, multi-jurisdictional strategic projects and data transfers, cookie compliance and direct marketing. Other recent work includes assisting clients with the national implementation of the European Electronic Communications Code and its consequences. ‘Outstanding’ and dedicated data protection lawyer Izabela Kowalczuk-Pakuła heads the practice. Senior associate Marta Kwiatkowska-Cylke is adept at coordinating data breaches and cross-border mandates, as well as having ‘very good knowledge of GDPR in marketing’. Counsel Emilia Stępień is an ‘excellent data privacy expert’.
Data privacy and data protection in Poland
Bird & Bird Szepietowski i wspólnicy sp. k.
Practice head(s):
Other key lawyers:
Marta Kwiatkowska-Cylke; Emilia Stępień; Paulina Jaraczewska
Testimonials
‘It’s my favourite data protection team to work with. They have profound knowledge of data protection issues which they use perfectly to provide always practical advice.’
‘The Bird & Bird team is very focused on delivering business-oriented advice. They can think out of the box and find business-friendly solutions. They respond and act quickly when needed.’
‘At times they have brought added value by going beyond the primary instructions and flagging issues that we ought to be aware of even if it is not within the strict premise of our instructions.’
‘Bird & Bird in my experience have proven to be the premier consumer data protection law firm in the world. They know the law and know how to accordingly guide business practices and solutions in a challenging multi-jurisdictional environment. Their billing is fair, and you always get high value.’
‘Izabela Kowalczuk-Pakuła is an outstanding privacy lawyer with deep knowledge of the subject matter. She is truly devoted to the common work and always updated in this fast-paced changing environment of privacy rules and provisions. Her remarks and suggestions have highly contributed to the project. Her understanding of the Internet and marketing industry is also exceptional in comparison to the other privacy leaders in Poland.’
‘Izabela Kowalczuk-Pakuła is a person with high knowledge, I consider her as a highly professional advisor and at the same time as a good friend whose help and care I can always count on. Marta Kwiatkowska-Cylke is professional with a very good knowledge of GDPR in marketing, very helpful and dedicated to her clients. Emilia Stępieñ helps us periodically when her extensive experience and involvement is needed.’
‘Izabela Kowalczuk-Pakuła is just brilliant and Paulina Jaraczewska is highly motivated and reliable’
‘Emilia Stępieñ she is also an excellent data privacy expert, very thorough and business-oriented at the same time. You can feel safe, when you ask for her for advice and rely on it.’
Key clients
Samba TV
BBDO Warszawa Sp. z o.o.
Michael Page
Benefit Systems
IGT
Verizon
Stock Polska
Work highlights
- Advising Samba TV on its personalised TV experiences and tailored, preference-based ads as well as acting as a DPO for its European operations, advising on the content of consents and privacy notices, and helping design intuitive UIs for users to express flexible choices.
- Supporting BBDO with organising digital marketing activities and providing comprehensive legal assistance on a variety of issues related to the implementation of the GDPR requirements.
- Assisting Benefit Systems on various privacy and data protection issues.
Kobylanska Lewoszewski Mednis
Data and privacy is a core part of Kobylanska Lewoszewski Mednis' offering in both contentious and non-contentious mandates, especially in e-commerce, media, technology, video games and finance. The team also counts international law firms in its client roster. Co-founders Anna Kobylańska, Marcin Lewoszewski and Arwid Mednis lead the team. Kobylañska has substantial experience in handling projects regarding internet domain names protection as well as cases before the Polish data protection authority; Lewoszewski is skilled in handling regulation matters for companies on the global media and telecoms market; and Mednis is active in GDPR implementation projects for financial institutions and public entities.
Practice head(s):
Testimonials
‘Kobylańska Lewoszewski Mednis sp.j. is a great team of professionals with a deep knowledge in the field of personal data protection. They take into account the particular needs of the client and deliver substantiated advice with proper risk assessments. They have great experience in GDPR proceedings and are the go-to firm in Poland in that regard. They always deliver their advice on time.’
‘The most unique thing about this team is the collaboration; they are very close to the client and do as much as possible to understand the client’s case. What is more, they are always available and ready to support.’
‘They try to wear the client’s shoes; the way they understand the client’s needs is incredible. Opinions are always suited to clients’ structures.’
‘Great relationship with the client, advice based on in-depth knowledge and understanding of the topic. Significant practical experience that allows them to easily estimate risks and evaluate the correct business approach.’
‘Excellent knowledge on the side of prof. Mednis who has outstanding know-how of GDPR and privacy issues.’
‘The practice is composed of specialists in their fields – with great knowledge of the law, market trends and jurisprudence of the courts and GDPR authority. I work with Anna Kobylanska on a daily basis, and the cooperation with her, her knowledge and the information provided by her are exceptional.’
‘Anna Kobylanska’s answers regarding personal data protection and copyright law are always at the highest level. She has a lot of knowledge about the conditions and nature of our business, cooperating with us in the preparation of solutions that best meet business needs, but within the framework of applicable law.’
‘Prof. Mednis is, in our opinion, the best expert on GDPR issues in Poland.’
Rymarz Zdort Maruta assists both Polish and European clients with data protection projects involving multiple jurisdictions and cross-border data transfers. Other core areas of focus for the group include privacy protection, GDPR compliance, profiling, cookies, real-time bidding and AI across the retail, IT, media and financial services sectors. Data protection expert Marcin Serafin and Sławomir Kowalski, who was previously a member of the personal data protection working party at the Ministry of Digital Affairs, jointly lead the practice. Paweł Tobiczyk, who is skilled in the implementation of GDPR, was recently promoted to the partnership.
Practice head(s):
Other key lawyers:
Testimonials
‘Provides multiple solutions with pros and cons descriptions.’
‘They have mastered their niche and are the go to place for IT projects.’
‘A broad view of the problem, high level of understanding of business problems and effectiveness in finding solutions which apply to me.’
‘The team has a high competence of personal data processing and protection, the team has its own working methods, proven operating patterns and templates.’
‘The people I work with have high competences, their own proprietary working methods, proven operating patterns and templates in the field of personal data protecting. They are open minded and also flexible in terms of new innovative forms of cooperation. They have a high personal culture, which translates into a professional approach to the customer.’
‘Rymarz Zdort Maruta is one of the best law firms we have worked with. We value Rymarz Zdort Maruta for their accessibility and out-of-the-box approach to difficult topics. The firm provides us with comprehensive support on large projects. In addition to typical service, the firm also provides us with in-house lawyer development opportunities. This ability to share knowledge is something that sets Rymarz Zdort Maruta apart from others.’
‘I am very satisfied with the cooperation with the lawyers from Rymarz Zdort Maruta. Each person is very well prepared for the matters Rymarz Zdort Maruta entrusts to them. In addition to the obvious things such as transparent settlements, huge knowledge of lawyers (including practical knowledge), Rymarz Zdort Maruta is distinguished by knowledge of the e-commerce and IT industry.’
‘Marcin Serafin is hands down the best data privacy lawyer in Poland.’
Key clients
Agora
Allegro
Circle K
Eurocash
InPost
Inter Cars
NTT Poland
Perła – Browar Lubelski
Warta
Żabka
Work highlights
- Advised InPost on setting up data protection framework and privacy programmes.
- Advising Operator Chmury Krajowej on various aspects of personal data protection, including setting up a subsidiary and negotiating and cooperating with Microsoft and Google
- Advised Główny Geodeta Kraju in administrative and court cases regarding the qualification of the number of the Land and Mortgage Register as personal data and in a charge of obstruction of the investigation by the DPA.
Traple Konarski Podrecki & Partners
The team at specialist TMT firm Traple Konarski Podrecki & Partners has a core focus on all three disciplines and is particularly active in matters regarding internet, e-commerce and telecoms regulations and contentious matters. Kracow-based co-founder Xawery Konarski and Grzegorz Sibiga in Warsaw, who has expertise in personal data protection and GDPR implementation, are the practice heads. Jan Byrski, who has strengths in financial innovation law, and senior associate Katarzyna Syska are also names of note.
Practice head(s):
Other key lawyers:
Testimonials
‘The People, technology and collaboration are strengths of the team.’
CMS Cameron McKenna Nabarro Olswang Posniak i Bejm sp.k.
‘Outstanding’ IT and data protection specialist Tomasz Koryzma leads the team at CMS Cameron McKenna Nabarro Olswang Posniak i Bejm sp.k., which handles IT system implementation projects and related disputes, data protection and GDPR advisory services, including representing clients before the data protection authorities, telecoms projects and cybersecurity support. Damian Karwala specialises in TMC law and fellow senior associate Paulina Komorowska is skilled in new technologies and cybersecurity.
Practice head(s):
Other key lawyers:
Testimonials
‘Individual approach to the client with a business approach to the problem. A broader understanding of the problem while providing concrete support.’
‘They are always available and ready to solve your problems.’
‘High availability of the team, always prepared, always ready to give advice, thorough analysis of the case, exceptional knowledge of the market and data privacy issues, in-depth knowledge of Polish DPA decisions and practice; and able to prepare complex documentation on the basis of information given by the client, no matter how limited this information is.’
‘Tomasz Koryzma is an outstanding person in this area. He’s always very professional and involved. What is also very important he has comprehensive knowledge and experience.’
‘Damian Karwala has broad knowledge of international data transfers – I always take part in webinars, conferences if his speech is in the agenda. Excellent understanding of the Polish and international data privacy environment and always available to consult on difficult/urgent issues.’
Key clients
International Paper
Partner in Pet Food
Apo Discounter
Apologistics
Diageo
eBay. Inc.
Iron Mountain
Medicover
Ubezpieczenia Pocztowe
Grid Dynamics
Komatsu
Work highlights
- Advising International Paper on various compliance and data-protection issues, including verification of GDPR implementation in a Polish subsidiary of International Paper and assistance in full-scope GDPR implementation in another International Paper subsidiary.
- Advising the Polish subsidiary of Partner in Pet Food with regard to GDPR implementation.
- Advising Diageo in relation to data privacy issues, including preparation of a model of cooperation with external marketing agencies and on the fulfilment of data protection notices.
DLA Piper Giziński Kycia sp.
Data protection and data privacy law, including data breach responses, audit and data mapping and compliance, are key areas of focus for the team at DLA Piper. In particular, the group acts for domestic and international clients in highly regulated sectors, such as banking, insurance, pharmaceutical and media. The group also handles complex GDPR implementation projects. Ewa Kurowska-Tober leads the practice and is also firm's global co-chair in this area; she has expertise in IT and advanced technologies law, and is particularly active in highly regulated sectors. Senior associate Magdalena Koniarska advises clients on personal data protection and data transfer.
Practice head(s):
Other key lawyers:
Testimonials
‘The team understands the client’s needs very well and responds very quickly to the changing realities of the particular case they are handling.’
‘Each member of the team is an outstanding professional, each of them is characterised by very large knowledge supported by many years of experience, which is visible in the actions of the team.’
‘High competence of lawyers, rich experience in legal issue. Understanding client needs and business.’
‘The team is dependable.’
‘They are always well organised and professional.’
‘Their workshops are very useful, informative and valuable. I am always very content.’
‘They give short, clear, specific opinions, their opinions are good and professional and they have substantive knowledge.’
Key clients
Allegro (with Cinven, Permira, and Mid Europa Partners as the majority owners)
Ardagh
AUDI
Axalta
BASF
BNP Paribas
BorgWarner
Cap Gemini
Cognizant
Credit Suisse
DataTag
Dentsu Aegis
Equinix
HSBC
ING Bank
LEGO
LEVI Strauss
mBank
Mid Europa
Moroccan Oil
Naspers
PEKAO SA
Philips
Prada
PZU
Revolut
Rituals
TelePerformance
UK Department of Digital Culture, Media and Sport
Vodafone
Żabka (a CVC Partners company)
Work highlights
- Advised mBank on day-to day data protection matters related to its operations in Poland and Central and Eastern Europe, including analysis of applicable data retention policies in light of sectorial regulations and advising on a potential GDPR infringement in Slovakia which resulted in administrative proceedings being initiated before the local data protection authority.
- Advising ING Bank on building and developing an innovative payment platform – Moje Usługi – for its clients, including guidance regarding privacy regulations, relevant notices and data flows.
- Advising Audi on several IT and data protection projects relating to new services offered to its customers, including an app.
Domanski Zakrzewski Palinka
Domanski Zakrzewski Palinka‘s data privacy group is led by Warsaw-based Bartosz Marcinkowski, one of the founders of the Association of Data Protection Practitioners. Marcinkowski also has an academic background in data protection law. The team’s impressive client roster includes both Polish and international corporates, which it advises on GDPR implementation and compliance. Michał Kluska has left the firm.
Practice head(s):
Testimonials
‘Constructive remedies giving a clear course of action.’
Work highlights
- Advised a global packaging manufacture on a global project involving the assessment of a personal data breach on client units in more than 30 countries around the world.
- Advising an online sales platform on a regular basis, carrying out complex legal audits but primarily developing recommendations for the business in key areas such as changing the legal basis for processing the personal data of millions of users for marketing purposes.
- Advising Mercedes Benz Polska on projects related to personal data.
Kieltyka Gladkowski KG Legal
The data privacy and data protection department at Kieltyka Gladkowski KG Legal handles international data transfer compliance and cross-border mandates within the new technology and life sciences sectors. Data security in blockchain projects, cybersecurity and AI, as well as data breaches and projects involving data firewalls, outsourced security and crypto defence are also handled by the team. Małgorzata Kiełtyka in Kraków and Kazimierz Jakub Gładkowski in Warsaw jointly lead the team.
Practice head(s):
Testimonials
‘What makes KG Legal unique is the fact that the firm is small, yet applies the highest standards to the services provided. The partners are always available and are very knowledgeable in their fields, which is something other – mostly bigger – firms often lack. With regard to technology, for example regarding communication (calling, video conferences, etcetera), they are totally up to date.’
‘We are happy to have professionals like them on our sides. Communication is prompt and professional, all necessary technologies are used, billing is very comfortable and clear.’
‘KG Legal is one of our preferred partners in Poland for data protection matters, in particular in data protection matters relating to life-science/health care sector. They are always available, super reliable and provide extremely competent but still pragmatic advice which is easy to understand for the client.’
‘Their practice is dedicated, responsive and proactive. we regularly receive newsletters with updates.’
‘Mr. Gladkowski, who combines extensive legal knowledge with an approachable attitude to clients and a positive, proactive attitude. In the context of our cooperation, he is characterised by outstanding knowledge and knowledge of cross-border legal regulations, which enabled him to solve complicated cases many times. In our opinion, Mr. Gladkowski, as an IT and new technologies enthusiast, stands out with his knowledge in mentioned areas compared to the Polish competition.’
‘The partners Malgorzata and Jakub are extremely professional, easy and pleasant to work with and provide their competent advice reliably and on time. Both are highly recommended.’
‘Małgorzata Kiełtyka has been providing legal advice which has been clear and concise.’
‘What makes the partners from KG Legal and Mr. Gładkowski and Ms. Kiełtyka, both experts in data privacy and data protection, stand out and different from the rest, is apart from the fact that the quality they provide is among the best, they are flexible, responsible and go all the way in their cases and for their clients. It is difficult not to recommend them to others.’
Work highlights
- Advised the client operating in cryptocurrency exchanges on the new protocol on processing data in compliance with Know Your Customer for monitoring client transactions and reporting suspicious activity, in accordance with the 5AMLD Directive of the cryptocurrency exchange procedures related to data protection and cybersecurity.
- Advised an international client concerning operations in renewable energy electric cars and how to prepare and create privacy policy so the client can safely accept communication and data from end customers with the use of dispersed protocol technology and smart contracts that additionally generates legal challenges in determining the applicable Polish jurisdiction in assessing the privacy policy.
- Assisted the client in respect of a sensitive data transfer from Europe to the US, based on the recommendations after Schrems II judgment, taking into consideration guidelines regarding data encryption and data anonymisation.
Lubasz i Wspólnicy - Kancelaria Radców Prawnych
Personal data protection, providing audits and the development of IT and modern technologies in this area are core parts of the data practice at Lubasz i Wspólnicy – Kancelaria Radców Prawnych. The team also represents clients before the Polish data protection supervisory authority and administrative courts. Managing partner Dominik Lubasz, Monika Namysłowska and Witold Chomiczewski lead the group from Łódź. Edyta Bielak-Jomaa, former President of the Personal Data Protection Office, joined the firm in January 2021.
Practice head(s):
Other key lawyers:
Testimonials
‘The team consists of specialists in their field. The company offers comprehensive service of the issues, but also adapts to the expectations and financial capabilities of the client.’
‘True data privacy, data protection, and GDPR experts. Data privacy is a dealbreaker subject in my company services and Lubasz i Wspólnicy – Kancelaria Radców Prawnych sp.k. delivers outstanding support in this field.’
‘A talented team, a very professional approach to clients and very good specialists.’
‘Very good reputation backed with publications and with joining of the ex-President of the Polish Data Protection Office – Mrs Edyta Bielak-Jomaa. Cost sensitive, business oriented, practical, easy to cooperate with and good response times.’
‘When I work with their lawyers I do not feel that they are from an external company. They act like team members and participate in face-to face meetings with our business to thoroughly understand the details of the case/project. At the same time, when advising, they do not focus solely on the legal aspects but as fast as possible indicate possible business consequences when we do not notice them.’
‘When we talk about new ideas, we can always count on the support of Dominik Lubasz, the partner, who analyses each issue on many levels, sometimes seemingly unrelated to the issue being analysed.’
‘Dominik Lubasz is an absolute expert in his field, and at the same time a great person, offering substantive advice at the highest level, is flexible and adapts to the needs of your business.’
‘Dominik Lubasz is practical, optimistic and a top expert in data protection. Witold Chomiczewski is an excellent fit to Dominik.’
Key clients
Fundacja Panoptykon, Mr. Wojciech Klicki
Work highlights
- Representing Mr Wojciech Klicki in a case regarding personal data protection and the assessment of the legality of processing of personal data from the PESEL register by Poczta Polska S.A. for the purposes of presidential elections which were to be conducted by correspondence but were ultimately not.
Olesinski & Wspolnicy
The team at Olesinski & Wspolnicy focuses on data privacy and data protection, including GDPR implementation and compliance projects. The group coordinates with the firm’s TMT team, led by Andrzej Boboli, to provide advice to the e-commerce industry. Another core focus of the practice includes projects involving new technologies, such as the acquisition and implementation of IT systems and the development of IT solutions and mobile applications. The practice is co-led by new technologies and e-commerce expert Magdalena Kaleta-Maniak and Ludmiła Łuczak who has a focus on data protection within HR departments.
Practice head(s):
Other key lawyers:
Justyna Korycka; Katarzyna Serwatka; Bartosz Kolarz; Lucyna Brayshaw
Testimonials
‘Very good and efficient communication, professional knowledge at the highest level, partners always available and ready to help, professional and reliable advice, all in a friendly and pleasant atmosphere of cooperation.’
‘Very thorough in analysing all aspects of the particular matter and identifying all potential risks, are capable of using modern communication strategies and invest a reasonable amount of time in communicating with the client in order to establish the understanding of a problem and discussing potential solutions’
‘At O&W, they understand business, they act agilely, using modern project management methods and are constantly cooperating with the client, thanks to which they achieve faster and better results.’
‘Quick turnaround on requests and flexible for urgent matters. They have significant experience in data/privacy, which speaks volumes when working with them on any given issue. Their responses allow for advice that is not only rooted in well-researched legal advice but also actionable advice.’
‘I appreciate the direct approach to the customer from Ludmiła łuczak, who has a very wide range of knowledge. The service is also always provided with 100% commitment, availability, quick contact, very constructive and concrete opinions’
‘As our direct contact in all data protection cases, Magdalena Kaleta-Maniak is a great partner for business. She understands the business perspective, thinks fast, looks for a most practical solutions that allows securing legal compliance while allowing maximum flexibility for business processes. She is a great communicator, asking the right questions to get to the bottom of problem, understanding status quo and business needs.’
‘Andrzej Boboli is a recognised data protection expert, as one of the very few on the market also in the gaming area. Publishing books and interesting articles, his advice is based on extensive experience and solid legal analysis.’
‘I am very satisfied with the cooperation with Mrs Katarzyna Serwatka. She is a very competent, committed person who is available to help you at any time. She explains the legal issues with patience and clearness.’
Key clients
AI Busters Sp. z o.o.
Aneks Polska Sp. z o.o. sp.k.
AALBERTS SURFACE TREATMENT Sp. z o.o.
AKS Precision Ball Polska Sp. z o.o.
ATM Grupa S.A.
Black Swan sp. z o.o. ASI SKA
Booksy International sp. z o.o.
bValue sp. z o.o. ASI sp. k.
CCC S.A.
Curaden Polska Sp. z o.o.
DEVnet High Performance Solutions Sp. z o.o.
DIP Draexlmaier Engineering Polska Sp. z o.o.
DSV International Shared Services sp. z o.o.
DWS Draexlmaier Wyposażenie Wnętrz Samochodowych Sp. z o.o.
eobuwie.pl S.A.
Exlabesa Building Systems Sp. z o. o.
“ERBUD – Wspólne wyzwania” Fundacja im. Eryka Grzeszczaka
Fidiasz EVC
Gigaset Communications Polska Sp. z o.o.
GKN Driveline Polska Sp. z o.o.
GOK Regler und Armaturen Polska Sp. z o.o.
IFIRMA S.A.
IZOBLOK S.A.
JOST Polska Sp. z o.o.
Karmar S.A.
KIK Textil Sp. z o. o.
Kolej Gondolowa Jaworzyna Krynicka S.A.
Leoni Kabel Polska sp. z o.o
Limango Polska Sp. z o.o.
Omega Meble sp. z o.o.
Patronad sp. z o.o.
Placeme.pl Sp. zo.o.
Polskie Koleje Linowe S.A.
SFC-Solutions Piotrków Sp. z o.o.
SI-Consulting Sp. z o. o.
Sika Automotive Złotoryja Sp. z o.o.
SILBA ASI S.A.
Sitech Sp. z o.o.
Swimstone Sp. z o.o.
Ten Square Games S.A.
Tidio Poland sp. z o.o.
Tiny Dragon Adventure Games Sp. z o.o.
Tristone Flowtech Poland Sp. z o. o.
Versum sp. z o.o.
Viessmann Technika Grzewcza Sp. z o.o.
VOSS Automotive Polska Sp. z o. o.
Whirlpool Company Polska Sp. z o. o.
Whirlpool Polska Appliances Sp. z o.o.
WSP Polska Sp. z o.o.
XTPL S.A.
ZREW Transformatory S.A.
Transfer Multisort Elektronik Sp. z o.o.
Work highlights
- Advised Booksy International on its integration with Versum sp. z o.o. (moment.pl).
- Advised Tidio on building and maintaining a legal compliance model in selected markets.
- Supported CCC.S.A. on processing personal data in the HR department and with a particular focus on the circumstances arising from the COVID-19 pandemic.
Konieczny, Wierzbicki Kancelaria Radców Prawnych sp.p.
Michał Czuryło heads up the data protection and compliance department at Konieczny, Wierzbicki Kancelaria Radców Prawnych sp.p., which is a Kraków-based TMT boutique. Czuryło has expertise in implementing innovative systems for clients in the finance, telecoms, hospitality and entertainment sectors. More generally, the team handles multi-jurisdictional matters and GDPR compliance, and is active in projects involving innovative mobile applications and web platforms, mobile and internet banking systems, chatbots and facial recognition and algorithms for medical diagnosis.
Practice head(s):
Other key lawyers:
Testimonials
‘The team is focused on the business needs of clients which are not always easy to deal with when it comes to privacy requirements. They are able to find balance for both sides on a contract level. Always open to help with implementing an improvement regarding personal data processes at the firm.’
‘Konieczny Wierzbicki Kancelaria Radców Prawnych provides professional legal advice. In its activities, it is guided by the agile approach, which guarantees a quick response to changing conditions.
‘The solutions proposed by the law firm are effective and always in line with expectations. The law firm follows market trends on an ongoing basis and very quickly implements those that help it provide its legal services in an even better way. A characteristic feature of the office’s operation is high flexibility and quick response to changing conditions – the agile approach.’
‘The law firm’s employees have extensive legal knowledge, especially in the field of data privacy and data protection, which they combine with technical knowledge. As a result, they offer solutions perfectly suited to each customer.’
‘The law firm’s employees have extensive and up to date legal knowledge. As a result, they inspire great trust among customers. They thoroughly analyse each case and, thanks to their competences in the field of technical knowledge, especially in the IT area, propose solutions customize to the client’s business. These solutions are effective and always prove themselves in practice.’
‘The team supported us in a big project, with a tight time schedule. The team was very flexible, both in the resources that were made available, as well as supporting the business across different time zones and in different languages. With KWKR’s support and great efforts, we managed to complete the project in time.’
‘Michał Czuryło is an exceptional specialist in data protection and data privacy. He draws attention to all the formalities that need to be fulfilled by the company to provide its employees and customers with the highest level of security. Data protection issues are not only his job but also his passion. This can be seen, for example, when he tries to make the employees aware of why the protection of personal or company data is so important. He is a lawyer we can rely on and we turn to him whenever we need an expert legal opinion on data protection.’
‘We recommend Mariusz Purgał for his excellent knowledge of foreign law – and Michał Czuryło for his above-average ability to adapt the company to foreign conditions. During their work, the gentlemen are characterized by accuracy and professionalism. With their help, formal requirements become much clearer and possible to meet.’
Key clients
Hitachi ABB Power Grids
ABB Power Grids Poland
Saventic Health Sp. z o.o.
Zurich Insurance
Superbet Zakłady Bukmacherskie Sp. z o.o.
Grape Up Sp. z o.o.
Antigro Sp. z o.o. Sp.k.
FindAir Sp. z o.o.
Diagmatic Sp. z o.o.
BIMPROQR Sp. z o.o.
Pro-Eco-Investment Sp. z o.o.
Ailleron S.A.
Iooo.pl Sp. z o.o.
Work highlights
- Advised a group of companies on the process of spinning off part of the business and transferring it to another owner.
- Assisted ABB Power Grids Poland in responding to a complaint regarding the observance of the right to process employees’ data in connection with the introduction of video surveillance.
- Advising Ailleron on a major project involving the implementation of cloud-based banking application software in Asia.
SSW Pragmatic Solutions
The data protection practice at SSW Pragmatic Solutions advises clients on regulations and outsourcing in the banking sector, as well as providing cross-border advice on processing data in a HR and employment context and GDPR implementation. The team has also represented clients in administrative proceedings before the Polish data protection authority. Practice head Katarzyna Szczudlik joined the firm in September 2020 from Deloitte Legal, Ostrowski, Gizicki i Wspólnicy sp.k.. Joanna Tomaszewska left the firm.
Practice head(s):
Other key lawyers:
Testimonials
‘We have great client experience with SSW. They are always responsive, responsible and professional.’
‘Timely response and efficient management of matters with a 100% ratio of successful assessments on privacy related issues. They are able to deliver good trainings to privacy teams on complex matters.’
‘Very professional attorneys, excellent knowledge, excellent communication. Very quick to answer questions and solve tasks. They know our business and the nature of our work which makes them unique.’
‘Very good expertise, good identification of legal risks and finding creative solutions.’
‘Good, practical and responsive advice.’
‘Katarzyna Szczudlik has exceptional expertise.’
Key clients
Jeronimo Martins Polska S.A.
Lenovo Technology B.V. Oddział w Polsce
AXPO
Sun Investment Group Polska Sp. z o.o.
iDeals Solutions Group Limited
XTPL S.A.
Work highlights
- Advised a Polish company operating in food distribution and specialised retail on privacy implications of its key business and marketing initiatives.
- Assisted a technology company on various privacy-related issues in the context of its commercial agreements, marketing initiatives and internal data protection procedures.
- Advised a newly created Polish branch of a European full service digital bank on launching its operations and offering products on the Polish market.
Wardynski & Partners
Wardynski & Partners‘ team advises on data protection laws and regulations in a HR context, in addition to new technologies and financial services. The group also provides day-to-day support on data subject’s requests, introducing new marketing activities and reviewing internal documentation. Krzysztof Wojdyło leads the group, which is composed of lawyers from employment, regulatory, pharmaceutical and new technology backgrounds.
Practice head(s):
Other key lawyers:
Testimonials
‘Wardynski is a truly local Polish law firm, yet one that maintains the standards expected of global giants. Managing its services locally gives it a unique ability to adapt to the Polish market, to respond quickly, to be supported by the most experienced lawyers with strong commitment, and to be flexible in adapting to clients’ needs.’
‘The firm’s lawyers have an unrivalled knowledge of Polish law, while being able to place it in an international or cross-country context. This skill is essential when offering services to organisations operating in many countries where the recipients of advice or other legal services may, because of different customs, legal environments, etc., find it difficult to use services provided in the Polish tradition.’
‘Wardynski’s lawyers are always knowledgeable not only about law, but also quickly learn about clients’ businesses, market conditions etc. This allows them to identify their needs even more quickly and accurately.’
‘The firm’s lawyers are very courteous and take a deeply ethical approach to performing their duties. They are extremely knowledgeable, not only about the law, but also about the environment that this law is connected to. The opinions or information presented are always formulated concisely, clearly and comprehensibly.’
‘The company’s employees are characterized by professionalism, reliability and timeliness in carrying out cases. There is always a nice and constructive atmosphere during online meetings and conferences. The quality of the services provided was satisfactory and the price was within our budget. I consider the work of the team to be complex and it requires knowledge and experience.’
Key clients
Salling Group
Work highlights
- Advised a global online marketplace on structuring processing of personal data.
- Assisted an international corporation in handling a data breach.
- Advised a fintech start-up in relation to an innovative cloud-based KYC solution dedicated to the financial sector.
WKB Wiercinski, Kwiecinski, Baehr
The data protection department at WKB Wiercinski, Kwiecinski, Baehr is part of thefirm's IP and TMT practice and is headed up by Agnieszka Wiercińska-Krużewska, who handles litigation and arbitration proceedings. The team provides the full spectrum of data protection advice and daily support as well as conducting audits of personal data processes and preparing policies. Senior associate Karolina Miksa has GDPR implementation expertise.
Practice head(s):
Other key lawyers:
Testimonials
‘Very good cooperation on various levels. In addition, very high substantive quality.’
‘Very proactive approach. Smooth execution of the project with no delays. Consistent and comprehensive services.’
‘Project delivered on time. The services were consistent and comprehensive, great knowledge in GDPR.’
‘This practice is unique in its approach to clients from extremely fast paced sectors. Their cutting edge advice is very elastic: one can always count on receiving detailed advice.’
‘Highly personal culture as well as substantive knowledge. Business approach to solving problems.’
Key clients
TVN
Innova Capital
Eins Polska
Sidly
MyBenefit
Polski Bank Komórek Macierzystych
SuperDrob
Alpha Solar
Fundacja TVN “Nie jesteś sam”
FremantleMedia Polska
Cludo
Bank Gospodarstwa Krajowego
Miejskie Wodociągi i Kanalizacja w Bydgoszczy sp. z o.o.
Miejskie Przedsiębiorstwo Wodociągów i Kanalizacji w m.st. Warszawie Spółka Akcyjna
Work highlights
- Advised TVN on several projects regarding data protection including the processing of cookies, Dynamic Ads Insertion and transfer of data to the United States after the Schrems II decision.
- Supported EINS Polska to implement internal documentation compliant with the GDPR requirements.
- Drafted external communication with participants of several programmes to ensure GDPR compliant data processing, including the processing of health data.
Allen & Overy, A. Pedzich sp. k.
IP lawyer Krystyna Szczepanowska-Kozlowska heads up the data protection practice in Warsaw at Allen & Overy, A. Pedzich sp. k.. The team’s expertise spans across the financial, life sciences, manufacturing and industrial, telecoms and retail sectors. Along with strong domestic connections allowing the group to support clients in matters with local regulators, the firm’s international network ensures the practice can support cross-border mandates too. Senior associate Justyna Ostrowska is also a key name of note, with one client praising her ‘exceptional excellence in data protection matters’ as well as ‘her ability to give complex cross sector advice'.
Practice head(s):
Other key lawyers:
Testimonials
‘The team is characterised by excellent legal skills and understanding of the client’s needs. The valuable advantages are very high quality service and agile working.’
‘Engaging, answered mostly on a fast basis questions regarding GDPR.’
‘Compared to other firms, A&O presented a service offering with high competency/seniority, continuity (2 senior lawyers) and fast turnaround with the ability to cover a wide array of topics in an independent manner, and extensive geography understanding.’
‘The A&O team works well individually and also as a team to ensure the continuity of the service in a seamless way; they stand by their principles, values & arguments to defend the best interests of the firm, without compromising them to secure a sizeable deal or extreme legal gatekeeping disregarding commercial interests.’
‘They are thoughtful, proactive & creative. The individuals are also conscious of budget/hour consumption.’
‘Krystyna Szczepanowska- Kozlowska is a leading expert in this field. You can always count on her deep understanding of legal issues and client needs.’
‘Justyna Ostrowska is appreciated for her exceptional excellence in data protection matters and for her ability to give complex cross sector advice. She is a client oriented lawyer with innovative approach. She always provides very high quality advice you can really rely on.’
‘Justyna Ostrowska has very good availability and is open to discuss different legal views of the GDPR. She provided information on the practice in the market and experiences from the relevant market.’
Key clients
OLX Group
Sumo Group
Ørsted
Sage Group
Unilabs
Work highlights
- Advised OLX Group on the data protection angle of the investment in Carsmile, a fintech start-up offering car leasing and long-term rental services.
- Advised Sumo Group on the acquisition of PixelAnt Games.
- Advised Ørsted on a joint venture with PGE Polska Grupa Energetyczna S.A. for the development, construction and operation of two offshore wind projects in the Baltic Sea.
APLaw Artur Piechocki
APLaw Artur Piechocki is a boutique law firm dedicated to IT and TMT law with both local and international projects, especially regarding e-commerce and legal audits. The group also represents clients before the President of the Personal Data Protection Office. Founder Artur Piechocki leads the team alongside Ireneusz Matusiak, who has been re-elected as president of the Internet Domain Arbitration Court at the Polish Chamber of Information Technologies and Telecommunications.
Practice head(s):
Other key lawyers:
Testimonials
‘APLAW team’s business understanding, in particular on the data protection side of business, is unique and reaches beyond skills of other law firms we have had opportunity to work with. Their data protection knowledge is combined with their understanding of technology, what makes their services extraordinary.’
‘I value their reliability, conscientiousness and the willingness to cooperate and help in dynamic situations.’
‘This practice is unique due to the individual approach to every client. Open-mindedness is one of the important assets shared with clients.’
‘The firm combines TMT legal expertise with a deep understanding of technological issues.’
‘Artur Piechowski is an expert in legal knowledge of technology law with a deep understanding of technical issues.’
‘Artur Piechocki is an expert in the data privacy field with more than 20 years of experience. There are very few lawyers with an equal length of work in data protection in Poland. Experience is added value to his knowledge.’
‘Artur Piechocki has been working with personal data protection from the early years of 2000 and he has used his experience in every case since then. Clients appreciate it and use his experience and knowledge for their benefit since it is unique in comparison with other lawyers.’
‘Working with Artur Piechocki was easy; he understands our business and it is of utmost importance for us to work with lawyers who are able to understand our decisions and check if they can be applied in relations with our clients.’
Key clients
United Entertainment Enterprises
Cloudity
Aequam
Aftermarket.pl
9Bits
JMN40
Murapol
Bridge Solutions HUB
Power21
ATS Technology
Azeta UAB
Casinos
Ediba
Magic Box International
Supermedia
Casinos Poland
Work highlights
- Advising ZPR Group on numerous GDPR audits and implementation of GDPR procedures.
- Advising Aftermarket.pl on complex personal data protection and privacy matters: drafting website privacy documents, consents, privacy notices and verifying Data Processing Agreements with Aftermarket’s clients.
- Advising Casinos Poland on conducting several GDPR audits in casinos throughout Poland and implementing GDPR policy.
Baker McKenzie Krzyzowski i Wspólnicy Sp.k.
The IP and technology department at Baker McKenzie Krzyżowski i Wspólnicy Sp.k. is led by Marcin Fijalkowski and includes the privacy and data protection practice, which has a focus on digitalisation, cybersecurity and privacy. The team also advises local and international clients on technological developments in the financial, healthcare and automotive sectors. Radoslaw Nozykowski leads the local privacy practice, and previous practice head Marek Rosiński is senior of-counsel in the IP and technology group.
Practice head(s):
Marcin Fijalkowski; Radosław Nożykowski
Testimonials
‘A very well-managed team comprising of counsels with complementary skillset, extremely agile and always there to support, able to juggle multiple time zones while maintaining top notch creativity and ability to grasp issues of top complexity on the move.’
Key clients
Schneider Electric
UEFA
Eyezon
Lingaro sp. z o. o.
Skanska
3M
Bytedance
CSL Behring Beteiligungs- und Verwaltungs GmbH & Co. KG
RTB House
Oriflame
Work highlights
- Supporting Skanska on a wide range of privacy-related matters, in particular concerning employees privacy, international data transfers and privacy implications of implementing new IT solutions.
- Advising Schneider Electric in the area of privacy and the personal data protection within EEA area, including privacy contracting and data transfers.
- Supporting CSL Behring in the area of privacy in the context of the Pharma business, including preparation of the client-facing documents.
Gawronski & Partners S.K.A.
Gawroński & Partners S.K.A.'s practice acts for clients in the banking and finance, energy & utilities, communication services, IT and professional services sectors. The team handles data protection in addition to cloud computing, cybersecurity and media-related matters. Maciej Gawroński is the practice head.
Practice head(s):
Maciej Gawroński
Testimonials
‘Gawroński & Partners team is great; they helped us creating legal collateral for our newly created brands. Very responsive and reacting ad-hoc for required changes from our side.’
‘Recognised as top experts by both business and regulators with true understanding of data protection and technology, that goes beyond just regulations. The excellence of the whole team from juniors to heads, exceptionally multi-dimensional lawyers, fluent in various fields, complementing each other as a team and understanding the global privacy legal landscape are strengths of the team.’
‘Gawroński & Partners Spk has unique approach to their clients. They posses huge expertise and experience in this field. Moreover, they are dynamic and agile in the way that can satisfy even global entities.’
‘A very approachable, client-friendly practice. Always looking to be good value for money for the client and only do what is necessary. Delivered pragmatic, no-nonsense advice.’
‘We highly value Maciej Gawroński’s professionalism, availability and responsiveness.’
‘Maciej Gawronski is client-oriented, transparent, has an ethical approach with concrete, short answers in the least complicated way possible, good time organisation even in demanding cases, quick responses, a practical approach, business-oriented and a practical approach of the owner or manager in important aspects to prevent escalation or problems.
‘Mr Maciej Gawroński is an excellent and experienced lawyer, a prominent expert and very good practitioner in the field of personal data protection, both in Poland and abroad. He is an authority dealing with the issues of personal data processing in the cloud (cloud computing), cybersecurity, IT and intellectual property, whose importance is appreciated by national and international legal rankings, listing him among the leading law specialists in these areas.’
‘We worked primarily with Maciej Gawroński, who is very approachable and responsive.’
Key clients
PGNiG OD
House Med
Polish Airports
Sensations English
Polish Bar of Attorneys-at-law
Polkomtel, Grupa Cyfrowy Polsat
Plus Pay
Usecrypt
Good Data Protection Standard
Data Protectors
RSVPify
OneTrust Data Guidance
Bank Polskiej Spoldzielczosci
Enea Centrum
Plus Bank
PKO BP
PKO Bank Hipoteczny S.A.
Cloud Ferro
Polish Advertising Board
Ringier Axel Springer
Warsaw Stock Exchange
DnB Bank
Bombardier
Track-Tec
Trustonic
Gąsior Sebastian
Med Systems Group
Medicover
Millennium Bank
Towarzystwo Ubezpieczeń Wzajemnych „TUW”
Vindix
Softnet
Work highlights
- Providing PGNiG OD with ongoing data protection advice.
- Representing a Polish internet portal owned by an international media group in administrative proceedings triggered by a complaint brought before the Polish Data Protection Office by the NOYB Foundation (Schrems) concerning allegedly illegal use of the Google Analytics service.
- Representing House Med in proceedings before the Polish Data Protection Authority after a cyberattack and complaint by one of its clients whose personal data was affected.