Information notice on the processing of personal data

Following the entry into force on 25 May 2018 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – hereinafter ‘GDPR’, published in the Official Journal of the EU L 119/1 of 4 May 2016), we hereby inform you that:

The data controller for your personal data is Park Technologii Kosmicznych – Badań, Rozwoju i Innowacji Sp. z o.o. in Zielona Góra (66-002) at ul. Nowy Kisielin – Antoniego Wysockiego 1, which can be contacted by email at: biuro@ptklubuskie.com.

The Data Protection Officer is Sławomir Kozieł, who can be contacted by email at inspektor@4consult.com.pl regarding any matters relating to the fulfilment of data protection obligations.

The data controller processes your personal data in accordance with applicable legislation, the contracts entered into, and on the basis of the consent you have given.

Your personal data will be processed for the following purposes:

(a) the exercise of the statutory rights and obligations of the personal data controller,

(b) the performance of contracts, in particular those relating to:

the leasing of research and development infrastructure;
letting of premises;
organising training courses and workshops;
conducting scientific research;
the implementation of grants and research projects;
the drafting of strategic documents.

(c) necessary to protect your vital interests or other interests,

(d) the performance of tasks carried out in the public interest or in the exercise of official authority vested in the Controller;

(e) in all other cases – solely on the basis of the consent given, within the scope and for the purpose specified in that consent.

In connection with the exercise of the statutory rights and obligations of the Data Controller, your personal data may be disclosed by the Data Controller to other recipients or categories of recipients of personal data, which may include:

(a) public authorities and entities performing public tasks or acting on behalf of those authorities in accordance with the relevant legal provisions,

(b) other entities authorised to receive your personal data under the relevant legislation,

(c) entities that process your personal data on behalf of the Controller on the basis of a data processing agreement (so-called data processors).

Personal data will be processed for the period necessary to fulfil the aforementioned purposes, taking into account the retention periods set out in separate legislation, including archiving regulations.
In connection with the processing of your personal data, you have the following rights:

(a) the right of access to your personal data,

(b) the right to request the rectification of your personal data where such data is incomplete or inaccurate,

c) the right to request the erasure of one’s personal data (the so-called ‘right to be forgotten’) where: the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, the data subject has withdrawn their consent and there is no other legal basis for the processing; the data subject objects to the processing and there are no overriding legitimate grounds for the processing; the personal data has been processed unlawfully; the personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State to which the controller is subject; the personal data were collected in connection with the provision of information society services,

(d) the right to request the restriction of the processing of one’s personal data where: the data subject contests the accuracy of the personal data, the processing is unlawful, and the data subject objects to the erasure of the personal data, requesting instead that its use be restricted; the controller no longer requires the personal data for the purposes of processing, but the data subject needs it to establish, establish, exercise or defend legal claims, the data subject has objected to the processing – until it is determined whether the controller’s legitimate grounds override the data subject’s grounds for objection,

(e) the right to data portability, where all of the following conditions are met: the processing is based on consent or on a contract, and the processing is carried out by automated means,

(f) the right to object to the processing of your personal data,

(g) the right to withdraw consent at any time, without this affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal,

(h) the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office, at the following address: Personal Data Protection Office, ul. Stawki 2
, 00-193 Warsaw
. Helpline: 606-950-000

The provision of personal data is mandatory to the extent required by law, and you are obliged to provide such data; in all other respects, it is voluntary; however, failure to provide the data will result in the refusal to provide the services.
Your data may be subject to automated decision-making.
Your data will not be subject to profiling.

Legal basis
: – Article 13 of Regulation (EU) (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC