Privacy Policy
Privacy Policy
The Privacy Policy explains who we are, for what purposes we process your personal data, how we process them as well as to whom we can entrust your data or make them available. We will also inform you about your associated rights.
The Ministry is obliged to protect your personal data. These are processed in accordance with the laws of the Republic of Poland. The act of law governing the processing of your personal data is the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, “GDPR”).
We are committed to protect your data against any loss, destruction, disclosure, access of unauthorised persons or misuse.
Who is the Controller of your personal data
The Controller of your personal data processed in the ministry is the Minister of Economic Development and Technology.
How to contact the Controller of your personal data
You can do it in several ways: write to us, call or come in person.
- Pl. Trzech Krzyży 3/5
00-507 Warsaw
e-mail: kancelaria@mrit.gov.pl - ePUAP mail box address: /MRPiT/SkrytkaESP
- Phone: +48 222 500 123
Who to contact about processing of your personal data
If you have any questions about processing your personal data regarding the activities taken by the Ministry of Economic Development and Technology and your rights, you can contact the Data Protection Inspector in MEDT:
Dariusz Ramocki — e-mail: iod@mrit.gov.pl
What is the purpose and legal basis of processing of your personal data
Your personal data can be processed with regard to:
- compliance with a legal obligation to which the Controller is subject;
- the performance of a task carried out in the public interest by the Controller or in the exercise of official authority vested in the Controller;
- the performance of a contract to which you can be the party or in order to take steps at your request prior to entering into a contract;
- the purposes of the legitimate interests pursued by the Controller;
- your consent for personal data processing.
To whom we can transfer your personal data
The recipients of your personal data may include:
- public authorities and the entities performing public tasks or acting on request of the public authorities, in the scope and for the purposes defined by law;
- other entities processing personal data under the contracts signed with the Ministry of Economic Development and Technology. This applies to data, controller of which is the Minister of Economic Development and Technology.
How long we will process your data
Your personal data will be processed for the period necessary for the purposes for which the personal data are processed. They will be stored for no less than for the period indicated in the archiving regulations, i.e. the Act of 14 July 1983 on the national archival resources and archives (Journal of Laws of 2020, item 164).
What are your rights
You have the following rights with regard to processing of your personal data:
- right of access to your data and to obtain their copy pursuant to Article 15 of GDPR;
- right to rectification (correct) your data pursuant to Article 16 of GDPR;
- right to erasure of personal data pursuant to Article 17 of GDPR;
- right to restriction of processing of data pursuant to Article 18 of GDPR;
- right to object pursuant to Article 21 of GDPR;
- right to withdraw consent at any time, where your data are processed under the obtained consent, provided that its withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
The scope of each of these rights and the situations, where you can exercise them, derive from the provisions of law. The right you may exercise will depend on the legal basis and the purpose for which we process your personal data.
You may exercise these rights by making the request by e-mail or post. To make sure that you are the person authorised to make the request, we can ask you to provide additional data enabling us authenticating your data.
Notwithstanding the rights referred to above, if you have any information on unlawful processing of your personal data by the Ministry of Economic Development and Technology, you shall have the right to lodge a complaint with a supervisory authority competent for personal data protection i.e. the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
How we ensure security of your data
Although the Internet shall never be an entirely safe place, we make all efforts to ensure appropriate security of your personal data in our systems. We have deployed numerous solutions to ensure security of your data. Here are some examples:
- We use data encryption, firewalls or anti-virus software.
- We monitor our IT systems on an on-going basis and apply the security procedures.
- We have also deployed a dedicated procedure for personal data breach.
We will inform you about each event related to processing of your data, if we consider that it results in a high risk to your rights and freedoms.
Why do we use video surveillance system in our seat
If you decide to visit our seat, note that it has a visual surveillance system installed. The surveillance is applied under the generally applicable law in order to protect the property, ensure safety and security and keep confidentiality of information protected by law. The source of data is the records from the surveillance system cameras located inside and outside the building. The surveillance data will be processed for the period and in the scope required by the generally applicable law.
The recipients of recorded personal data will include only and exclusively the entities authorised to obtain personal data under the provisions of law.
Your right of access to the content of your data is restricted due to the risk of breach of the rights and freedoms of other persons recorded by the surveillance system cameras.
How we communicate your rights and obligations
We make all efforts to provide you with a detailed information clause in situations where you share your personal data with us. Such clauses are available in the dedicated tabs at our website. We have included them in the letters, electronic correspondence, electronic forms or in the provisions of the contracts you have entered into. Detailed information clauses specify each time:
- the appropriate legal basis and purpose for the processing of personal data;
- information, whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and of the possible consequences of failure to provide such data;
- information on automated decision-making, including profiling;
- information on the intention to transfer personal data to a third country or international organisation;
- information on data recipients;
- information on the available rights;
- information on the source of obtaining of your data, if they were not transferred by you;
- information on the period of data storage.
If your personal data are not directly obtained by us, but are made available by, for example, your employer, the employer is obliged under the provisions of the concluded contract, to present our information clause to you.