Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), we would like to inform you that:
Personal data controller and data protection officer
Łukasiewicz Research Network – Poznań Institute of Technology (hereinafter “Łukasiewicz – PIT”) is the controller of your personal data. Łukasiewicz – PIT can be contacted as follows:
- By post: ul. Ewarysta Estkowskiego 6, 61-755 Poznań
- By phone: +48 61 850 48 90
- By e-mail: office@pit.lukasiewicz.gov.pl
We have appointed the Data Protection Officer. This is the person you can contact regarding the processing of your personal data and the exercise of your rights related to such processing. You can contact the inspector by e-mail: iod@pit.lukasiewicz.gov.pl
Purpose of personal data processing
The purpose of the processing of your data is to provide marketing information on the activities undertaken by Łukasiewicz – PIT in the field of popularisation of science and knowledge of new technologies.
The legal basis for personal data processing
The legal basis for the processing of your personal data is:
Article 6(1)(f) GDPR – legitimate interest of Łukasiewicz – PIT which includes direct marketing intended to inform about the activities undertaken by Łukasiewicz – PIT in the field of popularisation of science and knowledge of new technologies.
Categories of processed data
The scope of processed personal data includes: full name and business email address.
Source of the personal data
The processed personal data was obtained in the course of business cooperation:
- directly from you;
- from your employer or from publicly available sources (the Internet, official registers, etc.).
Information on recipients of personal data
Your personal data may be transferred to other recipients in certain situations, in particular when this is required by a service used by Łukasiewicz – PIT (e.g. IT, financial, insurance, audit, courier and postal services, shredding and archiving of documentation, legal services). Any sharing of your personal data with a recipient takes place in accordance with the provisions of the GDPR.
Transfer of personal data to third countries or international organisations
As standard, we do not transfer your personal data to third countries or international organisations. However, if such a transfer does take place, it always takes place in accordance with the provisions of the GDPR.
Łukasiewicz-PIT uses Microsoft Office 365, which may result in the transfer of your personal data to a third country. The terms and conditions for the use of the MS Office 365 Online Services and the obligations with regard to the processing and safeguarding of user data and personal data by the Online Services are set out in Microsoft documentation, including in particular:
- privacy statement – https://privacy.microsoft.com/pl-pl/privacystatement;
- Microsoft Services Agreement, MSA – https://www.microsoft.com/pl-pl/servicesagreement/.
Microsoft 365 complies with international security standards, as evidenced by the ISO/IEC 27001:2005 certification. The service is also subject to regular audits. The service has certified its services for conformity with the ISO 27018 cloud data protection standard, which means that customer data stored in the cloud will not be used for marketing purposes without their knowledge.
The period during which personal data will be processed
Your personal data will be processed until the aforementioned processing purposes have been fulfilled. The duration of this period may also be affected by legal provisions, including, in particular, the provisions on archiving, i.e. the Act on National Archival Resources and Archives and internal acts in force at the Controller, regarding the creation and retention of records.
Lawful states
Persons, whose data we process, have the right to request from Łukasiewicz – PIT access to their personal data, rectification, erasure or restriction of processing of such data.
In order for you to exercise the rights mentioned above, contact Łukasiewicz – PIT, which analyse in each case as the data controller whether the prerequisites for exercising the rights mentioned above apply according to the regulations of the GDPR.
Right to object
In particular, you have the right to object to the processing of your personal data for direct marketing purposes. In order to exercise the aforementioned right, please contact Łukasiewicz – PIT.
Complaint to the President of the Personal Data Protection Office
The data subject has the right to lodge a complaint relating to the processing of his/her personal data with the President of the Personal Data Protection Office (address: ul. Stawki 2, 00-193 Warsaw).
Obligation to provide personal data
The provision of data is voluntary, but necessary in order for Łukasiewicz – PIT to be able to fulfil the aforementioned processing purposes. Failure to provide the data will prevent the purposes of the processing.
Automated decision-making, including profiling
As a data controller, Łukasiewicz – PIT does not process personal data in a manner involving automated decision-making, including profiling.
