Privacy Policy

This policy explains how Anna Trylińska Immigration Lawyer Poland collects and uses personal data when you visit www.t-immigration.com, book a consultation or become our client. It applies the EU General Data Protection Regulation (GDPR) and Polish data protection law.

1. Who we are

The controller of your personal data is Anna Trylińska, running the business Anna Trylińska Immigration Lawyer Poland, ul. Wilcza 33/27, 00-544 Warsaw, Poland, NIP: 8961429777, REGON: 387605186 (“we”, “us”).

You can contact us about your personal data at any time:

We have not appointed a Data Protection Officer. Please send all data protection questions to the contacts above.

2. What data we collect

We collect data you give us directly and data created when you use our website.

  • Contact and booking data: name, email address, phone number, preferred language and the details you enter when you book a consultation or write to us.

  • Case data: information and documents needed to handle your immigration matter, for example passport and residence card data, PESEL, address, education and employment details, family details, information about your stay in Poland and correspondence with authorities.

  • Payment and billing data: amounts paid, dates, invoice details and the payment method. Card and bank details are processed by the payment provider; we do not see or store full card numbers.

  • Website data: IP address, browser and device type, pages visited and cookie identifiers, collected automatically by our website platform and only to the extent allowed by your cookie choices.

We may also receive your data from your employer, university, family member or another person who arranges our services for you, and from public authorities during the proceedings we handle for you.

Providing data is voluntary, but without it we cannot answer your enquiry, book a consultation or represent you.

3. Why we use your data, on what legal basis and for how long

  • Answering your enquiry and booking a consultation. Legal basis: Art. 6(1)(b) GDPR – steps taken at your request before a contract; Art. 6(1)(f) GDPR – our legitimate interest in replying to messages. Retention: until the enquiry is closed, and no longer than 12 months if no contract follows.

  • Providing legal services and representing you before authorities and courts. Legal basis: Art. 6(1)(b) GDPR – performance of the contract; Art. 9(2)(f) GDPR – establishing, exercising or defending legal claims (for sensitive data). Retention: for the duration of the contract and for 5 years after it ends.

  • Taking payments and issuing invoices. Legal basis: Art. 6(1)(b) GDPR – performance of the contract; Art. 6(1)(c) GDPR – legal obligation under tax and accounting law. Retention: 5 years from the end of the calendar year in which the tax payment deadline passed.

  • Establishing, pursuing or defending claims. Legal basis: Art. 6(1)(f) GDPR – our legitimate interest. Retention: until the limitation period for the claims expires.

  • Website statistics and non-essential cookies. Legal basis: Art. 6(1)(a) GDPR – your consent. Retention: until you withdraw consent or the cookie expires.

Where we rely on your consent, you can withdraw it at any time. This does not affect processing carried out before you withdrew it.

4. Sensitive data and professional secrecy

Some immigration cases require special categories of data, such as health information, or data about criminal convictions, for example a criminal record certificate. We process this data only when it is needed for your case and to establish, exercise or defend legal claims (Art. 9(2)(f) GDPR), or where the law requires it.

Everything you tell us in connection with your case is covered by professional secrecy. We disclose it only to the extent needed to handle your matter, or where the law requires us to.

5. Who receives your data

We do not sell your data and we do not share it with third parties, except as described in this section. We share it only with people and organisations that need it to provide our services:

  • Public authorities and courts handling your case, such as voivodeship offices, the Head of the Office for Foreigners, the Border Guard, consulates, administrative courts and the Supreme Administrative Court, when we act on your behalf.

  • Our team members (lawyers and assistants), who are bound by confidentiality.

  • Service providers who process data on our behalf under a data processing agreement:

  • Google Workspace – email, calendar and document storage

  • Asana – case and task management

  • Other office software providers – office tools used to prepare and store documents

  • WhatsApp – messages with clients who choose to contact us this way

  • Squarespace – website hosting and website statistics

  • Calendly – online booking of consultations

  • Stripe – online payments

  • Elavon – card payments

  • Mała Księgowość – online accounting, invoicing and tax settlements

  • Sworn translators and courier or postal services – translations and delivery of documents, where your case needs them

Some of these providers are based in, or use servers in, the United States. In those cases your data is transferred outside the European Economic Area on the basis of the EU–US Data Privacy Framework, where the provider is certified, or of Standard Contractual Clauses approved by the European Commission. You can ask us for a copy of these safeguards.

6. Your rights

Under the GDPR you have the right to:

  • access your data and receive a copy of it

  • have inaccurate data corrected

  • have your data erased, unless we must keep it, for example under tax law or the rules of the legal profession

  • restrict the processing of your data

  • receive your data in a portable format and have it sent to another controller

  • object to processing based on our legitimate interests

  • withdraw your consent at any time, where processing is based on consent

To use any of these rights, contact us by email or post (section 1). We reply within one month.

You also have the right to lodge a complaint with the Polish supervisory authority: President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.

7. Cookies and third-party content

Our website uses cookies, small files stored on your device.

  • Necessary cookies keep the website working and remember your cookie choices. They are always on.

  • Performance and analytics cookies help us understand how visitors use the website. We use them only with your consent.

  • Advertising cookies are not used unless you consent to them.

You can change your choice at any time with the “Cookie Preferences” link at the bottom of every page, or by deleting cookies in your browser settings.

Some pages show content from other services, such as a Google map and links to our Facebook and Instagram profiles. When you load or click this content, these providers may collect data under their own privacy policies.

8. Security, automated decisions and changes

We protect your data with technical and organisational measures appropriate to the risk, including access controls, secure connections and confidentiality obligations for everyone who works with us.

We do not make decisions about you based solely on automated processing, including profiling.

We may update this policy when the law or our services change. The current version is always published on this page, with the date of the last update.

Last updated: 24 October 2026.