Generalna Dyrekcja Dróg Krajowych i Autostrad

The controller of your personal data is the General Director of National Roads and Motorways, ul. Wronia 53, 00-874 Warsaw,

tel. (022) 375 8888, e-mail: kancelaria@gddkia.gov.pl.

In matters related to personal data processing, you can contact the Data Protection Officer at: iod@gddkia.gov.pl.

Your personal data will be processed mainly for the purpose of fulfilment by the Data Controller of its legal obligation (Article 6(1)(c) of the GDPR) or in connection with the performance by the Data Controller of tasks
carried out in the public interest or exercising public authority vested in the Data Controller (Article 6(1)(e) of the GDPR).

Your personal data may also be processed on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of the processing
that was carried out on the basis of consent before its withdrawal.

Personal data may also be processed, if required, for the execution of a contract with the data subject or in order to take certain measures at the request of the data subject prior to entering into a contract (Article
6(1)(b) of the GDPR).

In addition, personal data may be processed for the purposes resulting from the legitimate interests pursued by the Data Controller (Article 6(1)(f) of the GDPR), e.g. to contact representatives, employees or partners of
entities and institutions with which GDDKiA cooperates.

Recipients of your personal data may include, in particular, entities to which the Data Controller has entrusted personal data processing, e.g. IT service providers

Your personal data will be stored for the period necessary to perform the task for the purpose of which it was collected, and then for the period resulting from the provisions of the Act of 14 July 1983 on the National
Archival Resources and State Archives (Journal of Laws of 2019, item 553, as amended) and regulations issued based on this Act.

Each person whose data is processed by GDDKiA has the right, under the terms specified in the GDPR, to:

1. access their personal data,
2. rectify their personal data,
3. have their personal data deleted,
4. limit the processing of their personal data,
5. object to the processing of their personal data,
6. transfer their personal data,
7. lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection.

Provision of personal data is voluntary. However, it is necessary for the conclusion of contracts and the fulfilment of legal obligations by GDDKiA.