The Mieroszewski Centre with its registered seat in Warsaw, 14/16A Jasna Street, 00-041 Warsaw, pursuant to the Article 13 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Journal of Laws of the EU L 119 of 04.05.2016, p. 1, as amended), hereinafter referred to as "GDPR", and Articles 3-5 of the Act of 10 May 2018 on the protection of personal data (Journal of Laws, item 1000, as amended), hereby presents the following information:
- The personal data controller is the Mieroszewski Centre with its registered seat in Warsaw, 14/16A Jasna Street, 00-041 Warsaw; phone: +48 22 295 00 30, fax: +48 22 295 00 31, e-mail: kontakt@mieroszewski.pl, mieroszewski.pl.
- The Data Protection Officer in the Mieroszewski Centre is Maciej Łuczak, phone: +48 502 348 833, e-mail: iod@mieroszewski.pl.
- Personal data is collected by automated means in the process of using the websites administered by the Mieroszewski Centre (saved in cookies) and by logging in by users visiting the websites of the Mieroszewski Centre. Personal data is also collected from the person to whom the personal data refers, based on that person's consent, including the consent expressed impliedly.
- Personal data shall mean any information about an identified or identifiable natural person. In case of using websites administered by the Mieroszewski Centre, personal data include in particular: name and surname, residential address, e-mail address, login, password, IP address or telephone number.
- Personal data will be processed for the purpose of:
1) the use of the services provided by the Mieroszewski Centre and the performance of its statutory tasks by the Mieroszewski Centre, based on consent (point (a) of Article 6(1) of the GDPR);
2) conducting educational and informational activities, including the distribution of invitations to meetings, conferences and events organised by the Mieroszewski Centre, based on consent (point (a) of Article 6(1) of the GDPR);
3) the recruitment processes conducted by the Mieroszewski Centre carried out on the grounds of announcements published on the website of the Mieroszewski Centre, based on consent (point (a) of Article 6(1) of the GDPR);
4) fulfilling the legal obligations of the Mieroszewski Centre based on the provisions of the universally binding law on the territory of the Republic of Poland, as the processing is necessary for the fulfilment of these obligations by the Mieroszewski Centre (point (c) of Article 6(1) of the GDPR);
5) archival (evidence) purposes to secure information in case of legal need to provide facts, establish, investigate or defend against claims, as the processing is necessary for the realisation of legitimate interests of Mieroszewski Centre (point (f) of Article 6(1) of the GDPR).
- The recipients of personal data may be:
1) entities having, on the grounds of provisions of universally binding law on the territory of the Republic of Poland, the right to request access to these data;
2) entities providing postal, payment, IT or telecommunication, and legal and debt collection services to the Mieroszewski Centre.
- The personal data controller does not provide for the transfer of personal data to a third country or international organisation, except for justified cases related to the implementation of obligations under international agreements or regulations arising from European Union law.
- Personal data shall be stored:
1) in the case referred to in section 5 point (1) and (2), for the period of functioning of the Mieroszewski Centre, in regard to the data, and after the lapse of this period, until the moment specified in the administrative and archival regulations to which the Mieroszewski Centre is obliged to comply;
2) in the case referred to in section 5 point (3), until the completion of the recruitment process, and then promptly deleted;
3) in the case referred to in section 5 point (4), until the fulfilment of legal obligations by the Mieroszewski Centre;
4) in the case referred to in section 5 point (5), until the facts lose their legal significance, or until the lapse of limitation period against the Mieroszewski Centre regarding the processing of personal data by the Mieroszewski Centre.
- The data subjects’ shall be entitled to:
1) demand from the personal data controller the access to the personal data, their rectification, erasure or restriction of processing and the right to object to the processing, as well as the right to data portability;
2) lodge a complaint with a supervisory authority as defined by the GDPR, i.e. the President of the Personal Data Protection Office;
3) contact the Data Protection Officer at the Mieroszewski Centre in all matters related to the processing of personal data.
- In case of personal data processing referred to in section 5 points (1-3), the data subject shall be entitled to withdraw his/her consent at any time without affecting the lawfulness of the processing which was carried out based on consent before the withdrawal.
- The condition for using the websites administered by the Mieroszewski Centre is to express a voluntary and unrestricted consent to the processing of personal data according to the provisions of the universally binding law, including the GDPR.
- Should the websites administered by the Mieroszewski Centre be used by a minor or a person without a full capacity to perform acts in law, it is necessary to express consent to the processing of personal data of this person by a parent, statutory representative other than a parent or legal guardian.
- If the consent to the processing of personal data is expressed impliedly, the data subject is referred to the information concerning the principles of personal data processing by the Mieroszewski Centre as well as the rights of the data subjects, available on the website.
- The Mieroszewski Centre does not provide for automated decision making with regard to the persons whose personal data are concerned.