Document update date: 01 January 2022
- Pursuant to the provisions of Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter “GDPR”, we would like to inform you that the Łukasiewicz Research Network – Poznań Institute of Technology is the Controller of your personal data.
You can contact the Controller as follows:
- by post: ul. Ewarysta Estkowskiego 6, 61-755 Poznań;
- by phone: +48 61 850 48 90;
- by e-mail: office@pit.lukasiewicz.gov.pl
We have appointed a Data Protection Officer. This is the person you can contact regarding the processing of your personal data and the exercise of your rights related to such processing. The Officer can be contacted by e-mail: iod@pit.lukasiewicz.gov.pl
- Your personal data will be processed in order for the Controller to fulfil its tasks as an employer. Within the scope of this purpose, personal data will be processed in regards to the employment relationship, social and health insurance, tax matters, operation of the company’s social benefits fund, business trips handling (including handling of a company/private car used for business purposes), marketing activities, legal, auditing, consulting, insurance activities, debt collection, occupational health and safety matters, handling of company payment cards, handling of company accounts, conducting training, use of company equipment and e-mail, use of employee bonuses and benefit packages, raising claims and defence against such claims.
- The legal basis for the processing of your personal data is:
- Article 6(1)(a) GDPR – where the basis for processing is your consent;
- Article 6(1)(b) GDPR – where the processing is necessary for the performance of your contract of employment;
- Article 6(1)(c) GDPR – where the processing is necessary for the performance of our obligations such as, for example, the maintenance of employee files and their archiving, work time records, and for the purpose of financial accounts, including tax accounts;
- Article 6(1)(f) GDPR – where the processing is necessary for the purposes of our legitimate interests, such as the conduct of our business, marketing activities, the possible, required defence against or enforcement of claims.
- Your personal data will be stored for the period necessary to fulfil the purposes of the processing. The personal data will certainly be processed for the duration of the employment contract effective between us, as well as for the maturity period of any related claims. Your personal data will also be stored for the period required by law.
- If the basis for processing your data is your consent, you have the right to withdraw said consent. However, the withdrawal of consent will not affect the fact that we were able to use your personal data over the entire period of consent.
- Our employees, directly responsible for data processing (e.g. HR staff, health and safety staff, IT staff and accountants), will be the recipients of your personal data. We will transfer your personal data to entities assisting us in fulfilling our obligations as an employer (e.g. the provision of services that supply the Controller with technical and organisational solutions ensuring efficient management, such as ICT services, equipment deliveries, courier and postal services, the provision of legal, insurance, auditing, consulting services, the provision of document shredding and archiving services, employee bonuses and benefit packages). Your data may also be forwarded to the relevant state authorities (e.g. the Police, courts, public prosecutor’s office, Office of Internal Affairs, Central Anticorruption Bureau and other public control authorities).
- As a standard, we do not transfer your personal data to a third country or international organisations. However, if such a transfer does take place, it always takes place in accordance with the provisions of the GDPR.
- Łukasiewicz-PIT uses Microsoft Office 365, which may result in the transfer of your personal data to a third country. The terms and conditions for the use of the MS Office 365 Online Services and the obligations with regard to the processing and safeguarding of user data and personal data by the Online Services are set out in Microsoft documentation.
- Since we process your personal data, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Data Protection Authority.
- Where this conforms to the GDPR regulations, you shall have the right to request the Controller to provide access to your data, amend, erase or limit the processing of your data as well as to object against the processing and to provide data portability.
- Your provision of personal data to the extent required for the proper execution of the employment contract is mandatory. With regard to the exercise of other employee rights, the provision is voluntary; however, failure to consent to the processing will result in the exercise of these rights being waived.
- The data provided by you will not be subject to automated processing, including profiling.
- We would like to inform you that surveillance video recording has been introduced in our building and the area around the building, for the safety of employees and the protection of property. However, the monitoring does not cover all premises, e.g. the sanitary facilities and the kitchen (canteen). Surveillance video recordings will be kept for no longer than 3 months from the date of recording.
- Source of the personal data The data was provided by the persons (data subjects) or obtained by the Controller in the course of the employment relationship.
