Information Clause GDPR

Information clause concerning the processing of personal data in order to conduct a customer satisfaction survey

Pursuant to Article 13(1) and 13(2) of Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1) (hereinafter referred to as “GDPR”) we inform that:

1. Data Controller
The controller of personal data is Polska Agencja Inwestycji i Handlu S.A. with its seat in Warsaw at ul. Krucza 50 (00-025 Warszawa), entered into the register of entrepreneurs of the National Court Register by the Capital City of Warsaw District Court, under the number KRS 0000109815 (hereinafter referred to as “Controller”). The Controller can be reached through the contact form on www.paih.gov.pl, by sending an email to: iod@paih.gov.pl, or by traditional mail at the address of the Controller’s seat stated above.

2. Data Protection Officer
The contact person in all matters related to the protection of personal data and your rights is the Data Protection Officer. You can contact the Data Protection Officer by sending an e-mail to iod@paih.gov.pl or by traditional mail at the address of the Controller’s seat stated above with a note saying “c/o the Data Protection Officer.”

3. Purposes and grounds for processing personal data
Your personal data are processed in order to conduct a customer satisfaction survey. The legal basis for the processing is Article 6(1)(a) of the GDPR, i.e. your consent to the processing of personal data. The data subject is entitled to withdraw their consent at any time. Withdrawing consent does not affect the lawfulness of processing based on the consent prior to withdrawal.

4. Data recipients
The recipients of your personal data are entities to which the Controller entrusted activities that involve the need for data processing, especially as regards managing electronic mail, administrative services, legal services or consulting, and provision of ITC services and technical equipment. The recipients of your personal data may also be entities or authorities that have the right to receive your data, but only in justified cases and in compliance with applicable provisions of law. Your personal data will not be transferred outside the European Economic Area.

5. The time for which personal data are stored
Personal data will be stored for a period necessary to achieve the purpose for which they were collected, but not longer than 60 days, or until you demand their erasure or withdraw consent for the processing of personal data.

6. Rights of data subjects
Due to the processing of personal data, a data subject has the right to access data, right to rectify data, right to erase data, right to restrict the processing of data, right to object to the processing of data, right to transfer data, and the right to file a complaint with the Chairman of the Personal Data Protection Office. You are entitled to these rights in the scope provided for in generally applicable provisions of law, in particular provisions of the GDPR.

7. Information about required/voluntary submission of data
Your submission of personal data and granting consent for their processing is voluntary but necessary for the implementation of the above-mentioned purposes.