Document update date: 1 January 2022 Pursuant to Article 13(1) and (2) in relation to Article 12(1) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter “GDPR”, we would like to inform you that:
PERSONAL DATA CONTROLLER AND DATA PROTECTION OFFICER
The controller of your personal data is the Łukasiewicz Research Network – Poznań Institute of Technology (hereinafter “Łukasiewicz-PIT”).
Łukasiewicz- PIT can be contacted:
- by post: 6 Estkowskiego Street, 61-755 Poznań
- by phone: +48 61 850 48 90
- by e-mail: office@pit.lukasiewicz.gov.pl
We have appointed the Data Protection Officer. This is the person you can contact regarding the processing of your personal data and the exercise of your rights related to such processing. You can contact the inspector by e-mail: iod@pit.lukasiewicz.gov.pl
PURPOSE OF PERSONAL DATA PROCESSING
The purpose of processing your data depends on the specific case.
For example:
1. if you contact us, we use your data to provide you with a response;
2. if you conclude a contract with us, your data will be used during the preparation and subsequent performance of the contract;
3. if you are a participant of our training courses, we need your data in order to carry out such courses properly;
4. if we process your data in connection with the implementation of EU projects, we do so in order to fulfil our obligations as a beneficiary of such a project;
5. if you are our employee, we are going to use your data to fulfil our obligations as an employer.
LEGAL BASIS FOR PERSONAL DATA PROCESSING
As a controller, we always process personal data on the basis of the legal grounds indicated in the GDPR. This basis can include:
1. consent of the data subject;
2. performance of a contract to which the data subject is party or taking steps at the request of the data subject prior to entering into a contract;
3. fulfilment of a legal obligation of the controller;
4. protection of the vital interests of the data subject or other natural persons;
5.performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
6. pursuing the purposes resulting from the legitimate interests pursued by the controller. If we process personal data for purposes arising from legitimate interests pursued by the controller, these interests may include the assertion and enforcement of claims, direct marketing and other forms of marketing or advertising, ensuring physical security (e.g. using monitoring), IT and network security.
INFORMATION ON RECIPIENTS OF PERSONAL DATA
We sometimes transfer your personal data to other recipients in certain situations. This may be the case when the service we use requires it (e.g. IT, financial, insurance, auditing, courier and postal services, destruction and archiving of records, legal services). Whenever your personal data is shared with a recipient, this takes place in accordance with the provisions of the GDPR.
TRANSFERRING PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS
As a standard, we do not transfer your personal data to a third country or international organisations. However, if such a transfer does take place, it always takes place in accordance with the provisions of the GDPR.
Łukasiewicz-PIT uses Microsoft Office 365, which may result in the transfer of your personal data to a third country. The terms and conditions for the use of the MS Office 365 Online Services and the obligations with regard to the processing and safeguarding of user data and personal data by the Online Services are set out in Microsoft documentation.
THE PERIOD FOR WHICH THE PERSONAL DATA WILL BE KEPT
We retain your personal data until we have fulfilled the purpose for which this data processing is carried out. Sometimes the processing period is also dictated by legislation.
YOUR RIGHTS
As we process your personal data, you have the right to request access, rectify, erase or restrict processing of your personal data, the right to object to the processing, and the right to data portability. Contact us to exercise your rights. You should know that the GDPR provides detailed regulations specifying when you can exercise your rights. As a data controller, we always analyse whether there are grounds enabling you to exercise your rights.
WITHDRAWAL OF CONSENT
If we process personal data on the basis of your consent, remember that you have the right to withdraw said consent. The withdrawal of consent will not affect the fact that we were able to use your personal data over the entire period of consent.
COMPLAINT TO THE PRESIDENT OF THE PERSONAL DATA PROTECTION OFFICE
The data subject has the right to lodge a complaint relating to the processing of his/her personal data with the President of the Personal Data Protection Office (address: 2 Stawki Street, 00-193 Warsaw).
OBLIGATION TO PROVIDE PERSONAL DATA
Where justified by the specific purpose of the processing, the provision of personal data may be a statutory or a contractual requirement or a condition for entering into a contract. Your obligation to provide this data may also arise from such requirements. In certain situations, the failure to provide personal data may constitute a breach of applicable law or may result in us being unable to fulfil the purpose for which the processing is to be carried out.
AUTOMATED DECISION-MAKING, INCLUDING PROFILING
As a data controller, we do not process personal data by automated decision-making, including profiling.
