INFORMATION CLAUSE

Privacy Policy and Use of Cookies

for the Website: www.mortimerblum.com

Striving continuously to ensure the highest possible level of personal data protection, we would like to assure you that we protect your personal data to the highest standard. In this document you will find all information regarding what personal data we process and for what purpose.

1. Who is the Controller of Personal Data?

The controller of the Website and your personal data is MORTIMER BLUM spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw (02-566) at ul. Puławska 2, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register, under KRS number: 0000816751, holding NIP: 9721305177 (the “Controller”).

2. How to Contact the Controller?

If you have any questions or comments regarding data processing, please contact us:

• e-mail: antoni.mielniczuk@mortimerblum.com
• by post: ul. Puławska 2, 02-566 Warsaw, Poland

Requests for rectification or erasure of personal data should be submitted to: antoni.mielniczuk@mortimerblum.com

3. What Data Do We Collect and for What Purpose?

The scope and purpose of data collection depend on how you use the Controller’s services, including the use of the Website available at https://www.mortimerblum.com/ (“Website”, “Platform”).

I. Users’ Data Automatically Collected Upon Accessing the Website

Your activity on the Website, including your personal data, is recorded in system logs. The information collected in logs is processed primarily for purposes related to the provision of services.

We also process such data for technical, administrative purposes, to ensure the security of the IT system and its management, as well as for analytical and statistical purposes – in this respect the legal basis for processing is our legitimate interest (Article 6(1)(f) GDPR).

II. Personal Data of Prospective Clients / Business Partners / Contractors

We process personal data of prospective clients/business partners/contractors, including first name and surname and contact details, for the purpose of:

• presenting our services or services of our partners, which constitutes our legitimate interest;
• taking steps at the request of the data subject prior to entering into a contract.

III. Personal Data of Individuals Who Are:

• clients,
• contractors,
• suppliers,
• our business partners;
• representatives of our clients; and
• designated contact persons.

If you belong to one of the above categories, we process your data for the purpose of:

• performance of a contract (including handling complaints), as well as taking steps aimed at establishing business cooperation, including transferring contact details to business partners in a third country belonging to the Gulf Cooperation Council (GCC) – legal basis: necessity for the performance of a contract;
• fulfilling statutory obligations incumbent upon the Controller, particularly under tax and accounting regulations – legal basis: legal obligation;
• establishing, pursuing or defending claims and ensuring proper performance of the contract – legal basis: legitimate interest consisting in protecting our rights;
• identifying persons authorised to represent a client for the purpose of preparing and properly concluding a contract – legal basis: legitimate interest;
• maintaining contact in connection with contract performance – legal basis: legitimate interest;
• verifying the identity of event participants based on passport data for security and organisational purposes – legal basis: consent.

IV. Data of Participants in Conferences and Events

The image of individuals participating in conferences and events is processed in order to inform prospective clients about the Controller’s activities, including documenting and promoting events and conferences.

Processing is necessary for the purposes of the legitimate interest pursued by the Controller pursuant to Article 6(1)(f) GDPR.

V. Intermediation in Establishing Business Relations with Foreign Partners

Information necessary to establish business relations is processed in order to enable the establishment of cooperation between a foreign partner and a recommended individual, including taking steps aimed at concluding a contract.

The legal basis for processing is consent pursuant to Article 6(1)(a) in conjunction with Article 49(1)(a) GDPR.

VI. Contact by E-mail

If you contact us by e-mail, your e-mail address and any additional personal data contained in your message will be processed in order to respond to your inquiry. The legal basis is the Controller’s legitimate interest.

VII. Social Media

We process personal data when you visit our LinkedIn profile. Such data is processed solely in connection with operating the profile and promoting our activities. The legal basis is legitimate interest pursuant to Article 6(1)(f) GDPR.

4. Data Retention Period

Personal data is processed:

1. for the duration of service provision;
2. until consent is withdrawn;
3. until an effective objection is raised;
4. until an effective request for erasure is submitted.

5. Your Rights

You have the right to:

• access your data;
• rectify data;
• erase data;
• restrict processing;
• data portability;
• object to processing;
• withdraw consent at any time;
• lodge a complaint with the President of the Personal Data Protection Office (Poland).

IF YOU WISH TO EXERCISE YOUR RIGHTS, PLEASE CONTACT US FIRST.

6. Data Recipients

Personal data may be transferred to processors acting on our behalf, including IT service providers and foreign partners, based on appropriate agreements ensuring confidentiality and security.

7. Transfers Outside the EEA

Due to the use of certain IT solutions, personal data may be transferred outside the European Economic Area (EEA), including to entities such as Google LLC or Microsoft Corporation in the USA.

8. Social Media Plugins

The Website uses LinkedIn plugins. Detailed information is available in LinkedIn’s privacy policy.

9. Cookies Policy

The Website uses cookies – small text files stored on your device – to ensure proper functioning of the Website.

10. Personal Data Security

We implement appropriate technical and organisational measures to ensure personal data security.

11. Changes to the Privacy Policy

This Policy is reviewed on an ongoing basis and updated as necessary. The current version has been effective since 03 March 2026.