Privacy Policy
Last updated: 11 September 2026
This website is deliberately simple. It sets no cookies, uses no analytics or tracking, and contains no forms. The only personal data involved are the technical logs kept by the hosting provider and whatever you choose to send me by email. This notice explains both, as required by Articles 13 and 14 of the General Data Protection Regulation (GDPR).
1. Controller
The controller of your personal data is Roger Barrett James, conducting business as Kancelaria Roger Barrett James, Witkowice 50G, 95-060 Brzeziny, Poland, NIP PL7282710152, REGON 523535963. Contact: roger@rbj.law, +48 660 161 348. No data protection officer has been appointed, as none is required.
2. Visiting the website
When you visit rbj.law, the hosting provider's server automatically records standard technical data: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system type. These logs are used to keep the site running securely and to diagnose faults. The legal basis is my legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Server logs are retained for up to 30 days and then deleted.
The website sets no cookies and loads no third-party resources: fonts, images, and scripts are served from this domain. No visitor profiles are built and nothing is shared with advertisers or analytics services.
3. Email correspondence
If you write to me, I will process the data you include — typically your name, email address, company, and the substance of your message — to respond to your inquiry, to run a conflict-of-interest check where a legal engagement is contemplated, and, if we go on to work together, to perform the engagement. The legal basis is the steps taken at your request before entering into a contract and the performance of that contract (Art. 6(1)(b) GDPR), and my legitimate interest in handling correspondence and defending against claims (Art. 6(1)(f) GDPR). Where the law requires it — for example, anti-money-laundering identification of clients — the basis is a legal obligation (Art. 6(1)(c) GDPR).
Correspondence that does not lead to an engagement is kept for 12 months and then deleted. Client files, including correspondence, are retained for the period required by the professional rules governing my practice and the applicable limitation periods, and then deleted.
Please do not send confidential or sensitive information before an engagement has been confirmed.
4. Recipients
Data may be processed on my behalf by the providers that host this website and my email service, under data processing agreements as required by Art. 28 GDPR. Data may be disclosed to public authorities where the law requires it, and to professional advisers bound by confidentiality where necessary to handle a matter.
My email and file services may involve providers established outside the European Economic Area, including in the United States. Any such transfer is made under the European Commission's adequacy decision for the EU–U.S. Data Privacy Framework or the Standard Contractual Clauses, as applicable.
5. Your rights
Under the GDPR you may ask for access to your data, its rectification or erasure, restriction of processing, and portability, and you may object to processing based on legitimate interest. Contact me at roger@rbj.law to exercise these rights. You also have the right to lodge a complaint with a supervisory authority; in Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
6. Is providing data mandatory?
No. Providing personal data is voluntary, but without your contact details I will not be able to respond to you or to provide legal services.
7. Changes
This notice may be updated as the website or the law changes. The date at the top shows the current version.