Pursuant to Article 26 and in connection with Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (Official Journal EU L 119 of 04/05/2016, p. 1 and Official Journal of the EU L 127 of 23/05/2018, p. 2), “GDPR”, we would like to advise you of the following:
JOINT PERSONAL DATA CONTROLLERS
A joint personal data processing control agreement has been concluded for the project “Industry Contact Points for the Horizon Europe Framework Funding Program for Research and Innovation”, hereinafter the “Project”. The Joint Personal Data Controllers (JPDCs) responsible for the processing of your personal data are:
- Coordinating JPDC, Łukasiewicz Research Network – TECH Institute of Innovation and Technology with its registered office and address in Warsaw (00-879) at ul. Żelazna 87, KRS 0000098349, NIP (Tax Identification Number): 5250008293 REGON: 000040347; Data Protection Officer – email: rodo@itech.lukasiewicz.gov.pl;
- Łukasiewicz Research Network – Poznań Institute of Technology with its registered office and address in Poznań (61-755) at ul. Ewarysta Estkowskiego 6, KRS: 0000850093, NIP (Tax Identification Number): 7831822694, REGON (National Business Registry No.) 386566426; Data Protection Officer – email: iod@pit.lukasiewicz.gov.pl;
- Łukasiewicz Research Network – Industrial Research Institute for Automation and Measurements PIAP with its registered office and address in Warsaw (02-486) at Aleje Jerozolimskie 202, KRS: 0000846727, NIP (Tax Identification Number): 5223185370, REGON (National Business Registry No.) 000035257; Data Protection Officer – email: rodo@opiap.lukasiewicz.gov.pl;
- Łukasiewicz Research Network – Institute of Non-Ferrous Metals with its registered office and address in Gliwice (44-100) at ul. Józefa Sowińskiego 5, KRS: 0000853498, NIP (Tax Identification Number): 6310200771, REGON (National Business Registry No.) 000027542; Data Protection Officer – email: iod@imn.lukasiewicz.gov.pl;
- Łukasiewicz Research Network – Aviation Institute with its registered office and address in Warsaw (02-256) at Aleja Krakowska 110/114, KRS: 0000862006, NIP (Tax Identification Number): 1070046338, REGON (National Business Registry No.) 387193275; Data Protection Officer – email: iod@ilot.lukasiewicz.gov.pl;
- Łukasiewicz Research Network – Warsaw Institute of Technology with its registered office and address in Warsaw (02-673) at ul. Racjonalizacji 6/8, KRS: 0000858544, NIP (Tax Identification Number): 5250008519, REGON (National Business Registry No.) 387096477; Data Protection Officer – email: iod@wit.lukasiewicz.gov.pl;
- Łukasiewicz Research Network – PORT Polish Center for Technology Development with its registered office and address in Wrocław (54-066) at ul. Stabłowicka 147, KRS: 0000850580, NIP (Tax Identification Number): 8943140523, REGON (National Business Registry No.) 386585168; Data Protection Officer – email: iod@port.lukasiewicz.gov.pl.
PURPOSE OF PERSONAL DATA PROCESSING
Your personal data is processed for the JPDCs to carry out the tasks carried out by the Project. In particular, your personal data is processed for:
- organisation and participation in specific, thematic training courses and workshops on the Project;
- organisation and participation in national matchmaking, networking and brokering events in the scope of the Project, targeting domestic and foreign scientific and business partners;
- identification and attraction of project partners for the Project, including cooperation with research organisations, research funding bodies, public administration units and business operators;
- liaising with international organisations and represent national stakeholders in these forums;
- information and publicity operations on the European partnerships financed by the Project;
- individual consultations for researchers, scientific operators and business operators participating in the Project.
LEGAL BASIS FOR PERSONAL DATA PROCESSING
The legal basis for the processing of your personal data is:
- GDPR Article 6(1)(a), i.e. the data subject’s consent to the processing of their personal image data for the purpose of promoting the events organised as part of the implementation of the Project;
- GDPR Article 6(1)(e) in connection with Article 3(2) of the Polish Act of 21 February 2019 concerning the Łukasiewicz Research Network, i.e. the fulfilment of the public interest in the implementation of the Project.
You will be deemed to have granted your consent referred to in section 1 if you submit your request to participate in the activities under the Project.
YOUR PERSONAL DATA RECIPIENTS
We sometimes transfer your personal data to other recipients in certain situations. This may be the case when the service we use requires it (e.g. IT, financial, insurance, auditing, courier and postal services, destruction and archiving of records, legal services).
In addition, we may share your personal data with entities that cooperate with us in the course of the Project.
PERSONAL DATA TRANSFER TO NON-EU COUNTRIES OR INTERNATIONAL ORGANISATIONS
We do not transfer your personal data to any non-EU country or international organisations.
PERSONAL DATA RETENTION PERIOD
We retain your personal data until we have fulfilled the purpose for which this data processing is carried out. The length of this period may also be influenced by regulations related to the settlement of funds allocated for the implementation of the Project and by legal regulations, in particular the regulations on archiving, i.e. the Polish Act concerning the National Archive and Archive Resources and the internal acts in force at the JPDCs regarding the creation and retention of records.
YOUR RIGHTS
Our personal data subjects have the right to demand the Personal Data Controller to grant them access to their personal data, to rectify it, erase it or restrict its processing or to object to its processing, as well as the right to data transfer. You should know that the GDPR provides detailed regulations specifying when you can exercise your rights.
WITHDRAWAL OF CONSENT
The consent you have given for the processing of personal data, in the form of your image, can be withdrawn at any time. The withdrawal of consent to data processing does not affect the lawfulness of the processing carried out by the aforementioned JPDCs prior to the withdrawal of consent.
COMPLAINTS TO THE PRESIDENT OF THE PERSONAL DATA PROTECTION OFFICE (UODO)
The data subject has the right to lodge a complaint relating to the processing of his/her personal data with the President of the Personal Data Protection Office (address: ul. Stawki 2, 00-193 Warszawa, Poland).
OBLIGATORY SUBMISSION OF PERSONAL DATA
Your submission of personal data is not a statutory or contractual requirement or a prerequisite for entering into a contract. However, failure to provide personal data will prevent you from benefiting from the activities of the Project.
AUTOMATED DECISION-MAKING, INCLUDING PROFILING
The JPDCs do not process personal data by automated decision-making, including profiling.
ESSENTIAL TEXT OF ARRANGEMENTS
In accordance with the requirements of the Specific Agreement for the Joint Personal Data Control, hereinafter the “SA-JPDC”, we set out below the essential arrangements between the JPDCs.
- The SA-JPDC applicable to your personal data, dated 27 June 2022, is concluded between the units comprising the Łukasiewicz Research Network:
- Łukasiewicz Research Network – TECH Institute of Innovation and Technology as the Coordinating JPDC;
- Łukasiewicz Research Network – Poznań Institute of Technology;
- Łukasiewicz Research Network – Industrial Institute for Automation and Robotics and Measurements (PIAP);
- Łukasiewicz Research Network – Institute of Non-Ferrous Metals;
- Łukasiewicz Research Network – Aviation Institute;
- Łukasiewicz Research Network – Warsaw Institute of Technology
- Łukasiewicz Research Network – PORT Polish Center for Technology Development.
This means that each of the above mentioned JPDCs processes your personal data to the agreed extent.
Notwithstanding the responsibilities of each JPDC indicated below, each JPDC is responsible for the lawful processing of your personal data.
To enable you to exercise your rights to the processing of your data by the JPDCs, including to ask questions about issues relating to data processing, the contact address will be: rodo@itech.lukasiewicz.gov.pl. It will also be possible to contact each JPDC directly. If this JPDC considers that the application should be dealt with by another JPDC, then the application will be forwarded to the appropriate JPDC.
- Details of the assignment of responsibilities for the processing of personal data in connection with the conclusion of the SA-JPDC:
- The SA-JPDC has been concluded in order to efficiently implement the tasks and objectives of the Łukasiewicz Research Network. Pursuant to the SA-JPDC, your personal data may only be processed for purposes related to the performance of their statutory tasks and duties and the fulfilment of their statutory purposes or for purposes supporting the JPDCs’ performance of their statutory tasks and duties and the fulfilment of their statutory purposes;
- The JPDC sharing your data has an obligation to comply with its duty of information towards you by indicating e.g. that your data will be shared with other JPDCs, as well as indicating the legal basis for the processing applicable to you and the rights you may exercise against each of the JPDCs;
- Each JPDC shall keep the personal data it provides up to date. The SA-JPDC does not allow for the sharing of data by the JPDCs as specified in GDPR Article 9(1);
- Each JPDC is required to use appropriate technical and organisational measures to ensure the security of the processing of your personal data;
- Any infringement of your rights must always be reported by the JPDC who discovered the infringement to the Joint Contact Point operated by the Coordinating JPDC. The Coordinating JPDC then informs all JPDCs of the incident. The JPDC who discovers a violation of your rights and the JPDC where the violation of your rights has been discovered, in cooperation with the Coordinating JPDC, are obliged to take all legal, technical and organisational measures to remove the consequences of the violation and to minimise the negative effects of the violation of your rights. If a notification of a personal data breach to the DPA will be required, such notification will be made by the JPDC where the breach has been detected in cooperation with the Coordinating JPDC.
