Information clause concerning the processing of personal data for purposes of marketing PAIH S.A. products and services - information about planned events organised by PAIH S.A.

Pursuant to Article 13(1) and 13(2) of Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1) (hereinafter referred to as “the GDPR”) we inform that:
1. Data ControllerThe controller of personal data is Polska Agencja Inwestycji i Handlu S.A. with its seat in Warsaw at ul. Krucza 50 (00-025 Warszawa), entered into the register of entrepreneurs of the National Court Register by the Capital City of Warsaw District Court, under the number KRS 0000109815 (hereinafter referred to as “
the Controller”). The Controller can be reached through the contact form on
www.paih.gov.pl, by sending an email to:
iod@paih.gov.pl, or by traditional mail at the address of the Controller’s seat stated above.
2. Data Protection Officer
The contact person in all matters related to the protection of personal data and your rights is the Data Protection Officer. You can contact the Data Protection Officer by sending an e-mail to
iod@paih.gov.pl or by traditional mail at the address of the Controller’s seat stated above with a note saying “c/o the Data Protection Officer.”
3. Purposes and grounds for processing personal data
Your personal data are processed for the purpose of marketing the Controller’s products and services, that is sending marketing information, i.e. information about planned informational and promotional events organised by PAIH S.A. and information about PAIH S.A. support for Polish exporters and investors – the legal basis for data processing is the consent of the data subject (Article 6(1)(a) of the GDPR). The data subject is entitled to withdraw their consent at any time. Withdrawing consent does not affect the lawfulness of processing based on the consent prior to withdrawal.
4. Data recipients
The recipients of your personal data are entities to which the Controller entrusted activities that involve the need for personal data processing, especially as regards managing electronic mail, hosting, IT, administrative services, legal services or consulting. The recipients of your personal data may also be entities and authorities that have the right to receive your data, but only in justified cases and in compliance with applicable provisions of law.
5. The time for which personal data are stored
Your personal data will be processed until you withdraw your consent to process personal data.
6. Rights of data subjects
Due to the processing of personal data, a data subject has the right to access data, right to rectify data, right to erase data, right to restrict the processing of data, right to object to the processing of data, right to transfer data, and the right to file a complaint with the Chairman of the Personal Data Protection Office. You are entitled to these rights in the scope provided for in generally applicable provisions of law, in particular provisions of the GDPR.
7. Information about required/voluntary submission of data
Providing personal data is voluntary, but if you refuse to do so, the Controller will be unable to send you marketing content.
8. Information about automated decision-making, including profiling
The Controller will not use personal data to make automated decisions, including decisions that are the result of profiling.