INFORMATION
ON PROVESSING OF PERSONAL DATA
IN THE UPPER SILESIAN AGENCY FOR ENTREPRENEURSHIP AND DEVELOPMENT LTD.

 

In relation to the processing of your personal data, we would like to inform – in accordance with art. 13 para. 1 and para. 1 and 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Journal of Laws EU L of 04.05.2016, No. 119, p. 1), hereinafter referred to in abbreviated as “GDPR”, that:

I. Data controller

Controller of your personal data is Upper Silesian Agency for Entrepreneurship and Development Ltd. with registered office at Wincentego Pola street 16, 44-100 Gliwice,
tel. 32 339 31 10, faks 32 339 31 17,
e-mail: gapr@gapr.pl

II. Data protection officer

Data controller has appointed a Data Protection Officer, with whom you can contact in matters related to the protection of personal data, as follows:
1) at the e-mail address: iod@gapr.pl
2) in writing to the address of the Controller’s office.

III. Legal basis and purpose of personal data processing

1. Processing of your data takes place in connection with implementation of own or commissioned tasks defined by law, in order to exercise the rights or fulfillment of obligations by the Controller set out in these legal provisions or when it is necessary to perform the task carried out in the legal interest of the Controller.
2. Processing may also be necessary for the performance of a contract in which you are a party or to take action on your request prior to the conclusion of the contract.
3. There may also be cases in which you will be asked to agree to the processing of personal data for a specific purpose and scope.

IV. Personal data recipients.

Personal data will not be shared with other entities, except for
entities authorized by law.

V. Period of storage of personal data.

1. Your personal data will be kept only for a period necessary to
meet the purpose for which they were collected or for a period specified by law.
2. After fulfilling the purpose for which your data has been
collected, they can be stored only for archival purposes, for a
period that will be primarily determined on the basis of a
regulation of the Prime Minister regarding office instructions, uniform substantive lists of files and instructions on organization and scope of operation of company archives, unless specific provisions provide otherwise.

VI. Rights of data subjects, including access to personal data.

Under the rules set out in the GDPR regulations, you have the right
to request from the controller:
1) access to the content of your personal data,
2) correction of your personal data,
3) deletion of your personal data within the scope of data processed on the basis of your consent,
4) limitation of the processing of your personal data when the correctness of processing of personal data is questioned,
5) transferring of your personal data within the scope of data processed on the basis of your consent and processed in an automated manner, in addition, you have the right to object to the processing of your data.

VII. Right to withdraw consent

1. Where consent to the processing of personal data is required,
you always have the right not to give your consent, and in the event of its earlier expression, to withdraw your consent.
2. Withdrawal of consent does not affect processing of your data until it is withdrawn.

VIII. Right to lodge a complaint to the supervisory body

When you feel that processing of your personal data violates
provisions on the protection of personal data, you have the right to lodge a complaint to the supervisory body, which is the President of the Office for Personal Data Protection.

IX. Information on the requirement/voluntariness of providing data and consequences of not providing personal data

1. Providing your personal data may be a:
1) statutory requirement,
2) contractual requirement,
3) condition of concluding the contract,
which you will be obliged to provide.
2. If there is a statutory obligation and you do not provide your data, we will not be able to carry out the statutory task, which may result in the consequences provided by law.
3. If there is a contractual requirement and you do not provide your details, we will not be able to perform such a contract.
nie będziemy mogli wykonać takiej umowy.
4. In an event that the provision of data will be a condition for the conclusion of a contract, and you will not provide your data, we will not be able to conclude such a contract.

X. Automated decision making, profiling

Your personal data will not be processed in an automated manner and
will not be profiled.