GDPR Information Clause

GDPR

GDPR information clause

INFORMATION CLAUSE ON THE PROCESSING OF PERSONAL DATA

In connection with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, “GDPR”), we inform you about the rules for processing your personal data and about your related rights.

The following rules apply from 25 May 2018.

  1. The controller of your personal data is: Fundacja Mapa Pasji (Mapa Pasji Foundation), with its registered office in Kraków, ul. Stańczyka 12/4.
  2. Contact regarding personal data protection: biuro@mapapasji.pl
  3. The controller processes your personal data on the basis of applicable law, concluded contracts and the consent you have given.
  4. Your personal data are processed for the following purpose(s):
    • a) Art. 6(1)(a) – the data subject has given consent to the processing of their personal data for one or more specific purposes, e.g. if you wish to receive our newsletter
    • b) Art. 6(1)(b) – processing is necessary for the performance of a contract to which the data subject is party, e.g. if you take part in our project
    • c) Art. 6(1)(c) – processing is necessary for compliance with a legal obligation to which the controller is subject, e.g. during recruitment
  5. In connection with processing for the purposes referred to in point 4, the recipients of your personal data may be public authorities and entities performing public tasks or acting on behalf of public authorities, or other entities that process personal data in the Controller’s filing systems under relevant data processing agreements.
  6. Your personal data will be stored for the period necessary to achieve the purposes set out in point 4, and thereafter for the period and to the extent required by generally applicable law.
  7. In connection with the processing of your personal data, you have the following rights: the right of access to your personal data, the right to data portability, the right to rectification – where the data are incorrect or incomplete, the right to request erasure of your personal data (the so-called right to be forgotten), the right to request restriction of processing, and the right to object to processing.
  8. Where personal data are processed on the basis of your consent (Art. 6(1)(a) GDPR), you have the right to withdraw this consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
  9. If you become aware that your personal data are being processed unlawfully, you have the right to lodge a complaint with the supervisory authority competent for personal data protection.
  10. Where personal data are processed on the basis of the data subject’s consent, providing your personal data to the Controller is voluntary.
  11. Providing your personal data is mandatory where the legal basis for processing is a provision of law or a contract concluded between the parties.
  12. Your data may be processed in an automated manner and will not be subject to profiling.
  13. Your personal data will not be transferred to a third country or an international organisation.