Instytut Nafty i Gazu - Państwowy Instytut Badawczy

PERSONAL DATA CONTROLLER

The controller of personal data is the Instytut Nafty i Gazu – Państwowy Instytut Badawczy (INiG-PIB) in Krakow, 25A Lubicz Street, 31-503 Krakow, tel.: +48 12 421 00 33, fax: +48 12 430 38 85, e-mail: office@inig.pl.

CONTACT DETAILS OF DATA PROTECTOR OFFICER

For all the questions concerning personal data processing and on exercise of the rights connected with data processing you may contact  data protector officer via email daneosobowe@inig.pl or in writing at the address of personal data controller headquarter as above.

THE PURPOSE OF DATA PROCESSING AND LEGAL BASIS

Your data will be processed for the purpose of:

- the fulfillment of a legal obligation imposed on the INiG-PIB including: obligation related to archiving, accounting, tax settlements, complaints handling process, fraud detection and its prevention, other legal obligations imposed on the INiG - PIB (art. 6 section 1  c) GDPR*),

- the legitimate interests pursued by the controller, including the conclusion, performance and monitoring of the implementation of the contract to which the contractor of INiG-PIB is a party, determining the persons authorized to represent the entity, ongoing contact and cooperation related to the contract being implemented, establishment, exercise or defense of legal claims, ( art. 6 section 1  f) GDPR*).

categories of personal data

Your personal data is processed in the following scope: name and surname, contact details, telephone number and e-mail address, other data provided by your employer.

THE RECIPIENTS OF DATA

The recipient of your personal data might be: Polskie Centrum Akredytacji (PCA), notified bodies, supervising authorities, market surveillance, auditing bodies, entities that processes the personal data on the basis of personal data processing agreement (IT service) and other entities basing on legal rules, as well as other personal data controllers that process data in their own name for example post offices or couriers services.

THE TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION

Your personal data will not be transferred to third countries or international organizations.

DATA RETENTION PERIOD

Personal data will be kept for 5 years after certification expire, and also after closing the contract for the time period related to expiring of the claims connected with the contract or for the time period established by tax law or financial reporting. Archive materials will be kept for the period resulting from Act of 14.07.1983 on the National archival resources and archives (Polish Journal of Laws of 2020 item 164 with later amendments).

THE RIGHTS OF DATA SUBJECT

You are entitled to:

- the right to access to data (Article 15 of the GDPR),

- the right to request their rectification (Article 16 of the GDPR),

- the right to erasure, where data are not processed to ensure compliance with a legal obligation or in the exercise of public authority (Article 17 of the GDPR),

- the right to restrict of processing, whereby separate provisions may exclude the possibility of exercise this right (Article 18 (1) of the GDPR),

- the right to object to processing (Article 21 (1) of the GDPR).

RIGHT TO LODGE THE COMPLAINT WITH A SUPERVISORY AUTHORITY

You have the right to lodge the complaint to the supervisory authority that deals with protection of personal data in the Member state of your habitually residence, place of work, the place of presumed infringement. In Poland it is Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.

THE SOURCE OF DATA ORIGIN

Your personal data has been obtained from your employer, that is a party to the contract with INiG - PIB.

INFORMATION ON THE FREEDOM OR OBLIGATION TO HAND OVER THE DATA

Provision of data is voluntary, however it is necessary to participate in certification process. The consequence of not giving data is the lack of possibility to establish cooperation or to continue the cooperation with body submitted to certification.

INFORMATION ABOUT  AUTOMATED DECISION MAKING INCLUDING PROFILING

Your data is not subject to automated decision making including profiling.