Information Clause
In accordance with article 13 section 1 and section 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: “GDPR”), I hereby inform you of the following:
- The Data Controller is Narodowe Centrum Badań i Rozwoju (hereinafter: “NCBR”), address: Warsaw, Poland, 00-801, 69 Chmielna St.
- The Data Protection Officer can be contacted at the following e-mail address: iod@ncbr.gov.pl.
- Personal data is processed for the purpose of carrying out your affairs and for maintaining communication pursuant to the legal provisions or for the purpose of performing the executed agreement, or pursuant to the consent granted.
- Personal data is processed on the basis of:
1) consent – granted by the data subject who expressed the consent for personal data processing for one or more defined purposes (Article 6(1)(a) of the GDPR). The consent for personal data processing may be withdrawn at any time without affecting the lawfulness of the processing carried out on the basis of consent granted prior to its withdrawal,
or
2) for the NCBR's performance of tasks in public interest or within the performance of public authority entrusted in the Data Controller pursuant to the provisions of the Act of 30 April 2010 on the National Centre for Research and Development, in particular due to the provisions of Article 30 section 1(5) and (6), i.e., the NCBR’s obligation to publish information on the planned and announced competitions for projects financed by NCBR and the obligation to disseminate the effects of the activities carried out (Article 6 section 1(e) of the GDPR),
or
3) NCBR’s legally justified interest which shall be construed as the possibility of correspondence with a potential client, counterparty, applicant or beneficiary of the projects serviced by NCBR. NCBR’s legally justified interest shall be also construed as the processing of personal data for the purpose of defending against potential claims and the related protection of the data required for court proceedings (Article 6 section 1(f) of the GDPR).
- Depending on the purpose, the provision of personal data is:
1) voluntary, however required for correspondence. In the event of a refusal to provide the data, NCBR shall not be able to perform the aforementioned activity,
or
2) mandatory if it occurs pursuant to the legally justified interest or for the purpose of carrying out tasks in legal interest or within the scope of performing the legal authority entrusted with the NCBR.
- Personal data shall not be processed for a period longer than required for meeting the purposes for which they were collected. We are going to process your personal data depending on the grounds for processing – until the consent is revoked or until the submission of an effective objection. The consent may be revoked at any time.
- The Data Controller shall anonymise the personal data for the purpose of retaining the questions and the provided answers for their future use in the case of repeated questions or for the purpose of using them in educational materials.
- Recipients of personal data may include public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes that arise from the provisions of law, as well as entities providing services necessary for the implementation of tasks by NCBR. The data may also be passed on to IT partners, entities providing technical or organisational support (such entity includes, among others, NCBR+ sp. z o.o. in Warsaw, Integrated Solutions sp. z o.o. and Conpeek sp. z o.o).
- You rights towards the NCBR include: requesting access to your personal data, their rectification, removal or restriction of processing, transferring the data as well as the right to object or to revoke the granted consent. The Data Protection Officer can be contacted regarding the exercise of rights at the email address provided in item 2 above.
- You have the right to lodge a complaint with the President of the Personal Data Protection Office in the event you believe the Data Controller (NCBR) violated the regulations on personal data protection.
- Personal data is not transferred to third countries.
- Personal data shall not be subject to automated decision-making, including profiling.