Date of document update: 1 January 2022. Pursuant to the provisions of Article 13(1) and (2) in conjunction with Article 12(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing of the Directive 95/46/EC, hereinafter “RODO”, we inform you that:
PERSONAL DATA CONTROLLER AND DATA PROTECTION OFFICER
The administrator of your personal data is Łukasiewicz Research Network – Poznan Institute of Technology (hereinafter “Łukasiewicz-PIT”).
You can contact Łukasiewicz- PIT:
1. by post: 6 Estkowskiego Street, 61-755 Poznan
2. by phone: +48 61 850 48 90 3. by e-mail: office@pit.lukasiewicz.gov.pl
We have appointed a data protection officer. This is the person you can contact regarding the processing of your personal data and the exercise of your rights in relation to it. You can contact the DPO by email: iod@pit.lukasiewicz.gov.pl
PURPOSE OF THE PROCESSING OF PERSONAL DATA
The purpose of processing your data depends on the specific case. For example::
1. if you contact us then we use your data to respond to you;
2. if you enter into a contract with us, we use your data for the preparation and subsequent performance of the contract;
3. if you are a participant in our training courses, we need your data in order to carry out the training properly;
4. if we process your data in connection with EU projects, we do so in order to fulfil our obligations as a beneficiary of such a project;
5. if you are our employee then we will use your data to fulfil our obligations as an employer.
LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
As a controller, we always process personal data based on the legal bases indicated in the RODO. These bases may be:
1. consent of the data subject;
2. the performance of a contract to which the data subject is party, or taking steps at the request of the data subject prior to entering into a contract;
3. the fulfilment of a legal obligation incumbent on the controller;
4. the protection of the vital interests of the data subject or other natural persons;
5. the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
6. the fulfilment of purposes arising from legitimate interests pursued by the controller. If we process personal data for purposes arising from the legitimate interests pursued by the controller, these interests may be the assertion and enforcement of claims, direct marketing and other forms of marketing or advertising, ensuring physical security (e.g. using monitoring), IT and network security.
INFORMATION ON RECIPIENTS OF PERSONAL DATA
We sometimes transfer your personal data to other recipients in certain situations. This may happen when a service we use requires it (e.g. IT, financial, insurance, auditing, courier and postal services, destruction and archiving of records, legal services). Whenever we share your personal data with a recipient, this is done in accordance with the provisions of the RODO.
TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR INTERNATIONAL ORGANISATION
We do not normally transfer your personal data to a third country or international organisation. However, if such a transfer does take place it is always in accordance with the provisions of the RODO.
Łukasiewicz -PIT uses Microsoft Office 365, which may result in the transfer of your personal data to a third country. The Terms and Conditions for the use of MS Office 365 Online Services and the obligations with regard to the processing and safeguarding of your data and personal data by online services are set out in Microsoft documentation.
THE PERIOD FOR WHICH THE PERSONAL DATA WILL BE KEPT
We keep your personal data until we have fulfilled the purpose for which this processing is carried out. Sometimes the processing period is also due to the law.
YOUR RIGHTS
As we process your personal data, you have the right to request us to access, rectify, erase or restrict processing of your personal data, the right to object to processing, and the right to data portability. To exercise your rights, please contact us. You need to know that the RODO regulates in detail when you can exercise your rights. As a controller, we always analyse whether there are grounds for you to exercise your rights.
WITHDRAWAL OF CONSENT
If we process personal data on the basis of your consent, please note that you have the right to withdraw it. Withdrawal of consent will not affect the fact that we could handle your personal data for the entire period of consent.
COMPLAINT TO THE PRESIDENT OF PERSONAL DATA PROTECTION OFFICE
The person whose data is processed has the right to lodge a complaint relating to the processing of his/her personal data to the President of the Personal Data Protection Office (address: 2 Stawk Street, 00-193 Warsaw).
OBLIGATION TO PROVIDE PERSONAL DATA
Where justified by the specific purpose of the processing, the provision of personal data may be a statutory or contractual requirement or a condition for entering into a contract. Your obligation to provide this data may also result from this. In certain situations, your failure to provide personal data may be a breach of applicable law or may result in us not being able to fulfil the purpose for which the processing is to be carried out.
AUTOMATED DECISION-MAKING, INCLUDING PROFILING
As a controller, we do not process personal data by automated decision-making, including profiling.
