In connection with the entry into force on May 25, 2018, of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – hereinafter “GDPR”, published in OJ L 119/1 of May 4, 2016), we inform you that:

The Administrator of your personal data is Space Technology Park – Research, Development, and Innovation Ltd. in Zielona Góra (66-002), located at Nowy Kisielin – Antoniego Wysockiego 1, which can be contacted via email at biuro@ptklubuskie.com. The Data Protection Officer is Damian Marczyński, who can be contacted via email at iodo@ptklubuskie.com for all matters related to the fulfillment of personal data protection obligations. The personal data administrator processes your personal data based on applicable laws, contracts, and your consent.

Your personal data will be processed for the following purposes:

a) To fulfill the legal rights and obligations of the Personal Data Administrator,

b) To fulfill contracts, particularly related to:

• Rental of R&D infrastructure
• Rental of premises
• Conducting training and workshops
• Conducting scientific research
• Implementing grants and research projects
• Developing strategic documents

c) Necessary to protect your vital interests or those of others,

d) Performing tasks carried out in the public interest or in the exercise of official authority vested in the Administrator,

e) In other cases – only based on granted consent, within the scope and purpose specified in the consent.

In connection with the fulfillment of the legal rights and obligations of the Personal Data Administrator, your personal data may be disclosed to other recipients or categories of recipients, which may include:

a) Public authorities and entities performing public tasks or acting on behalf of public authorities based on applicable laws,

b) Other entities authorized to receive your personal data based on applicable laws,

c) Entities processing your personal data on behalf of the Administrator based on a data processing agreement (so-called processors).

Personal data will be processed for the period necessary to achieve the above purposes, considering retention periods specified in separate regulations, including archival regulations. In connection with the processing of your personal data, you have the following rights: a) The right to access your personal data, b) The right to request the rectification of your personal data if it is incomplete or inaccurate, c) The right to request the deletion of your personal data (the so-called right to be forgotten) if:

• Personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
• The data subject withdraws consent and there is no other legal basis for processing,
• The data subject objects to the processing, and there are no overriding legitimate grounds for processing,
• Personal data has been unlawfully processed,
• Personal data must be deleted to comply with a legal obligation under Union or Member State law to which the Administrator is subject,
• Personal data has been collected in connection with the offer of information society services,

d) The right to request the restriction of processing your personal data if:

• The data subject contests the accuracy of the personal data,
• The processing is unlawful, and the data subject opposes the deletion of personal data and requests the restriction of its use instead,
• The Administrator no longer needs the personal data for processing purposes, but the data is required by the data subject for the establishment, exercise, or defense of legal claims,
• The data subject has objected to processing – pending verification of whether the legitimate grounds of the Administrator override those of the data subject,

e) The right to data portability, when the following conditions are jointly met:

• The processing is based on consent or a contract, and
• The processing is carried out by automated means,

f) The right to object to the processing of your personal data, g) The right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal,

h) The right to lodge a complaint with the supervisory authority, i.e., the President of the Data Protection Office, at:

Data Protection Office ul. Stawki 2 00-193 Warsaw Hotline: 606-950-000

Providing personal data is mandatory within the scope specified by law, which you are obliged to provide, and in other cases, it is voluntary. However, failure to provide data will result in the refusal of service provision. Your data may be subject to automated decision-making. Your data will not be subject to profiling.

Legal basis:

• Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.