Information Clause (GDPR)

                                                                                                                                                                                                                                                                Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR, the Director of the Institute of Bioorganic Chemistry of the Polish Academy of Sciences informs that:

 

1. ADMINISTRATOR The administrator of the collected personal data is the Institute of Bioorganic Chemistry of the Polish Academy of Sciences in Poznań, with its registered office at ul. Z. Noskowskiego 12/14, 61-704 Poznań, tel. 61 852 85 03, e-mail: ibch@ibch.poznan.pl (hereinafter referred to as the Institute).
2. DATA PROTECTION OFFICER The Administrator has appointed a Data Protection Officer who can be contacted in writing by traditional mail at the Institute’s address: Data Protection Officer, Institute of Bioorganic Chemistry of the Polish Academy of Sciences in Poznań, located at ul. Z. Noskowskiego 12/14, 61-704 Poznań, or by sending an email to: dpo@ibch.poznan.pl.
3. PURPOSES AND BASIS FOR THE PROCESSING OF PERSONAL DATAPersonal data is processed for the following purposes:
   1. the performance and execution of the contract (legal basis: Article 6(1)(b) of the GDPR) – signatories,
   2. the fulfillment of the controller’s obligations under tax and accounting regulations (legal basis: Article 6(1)(c) of the GDPR) – signatories and employees,
   3. the possible establishment and pursuit of claims, including defense against them (legal basis: Article 6(1)(c) and (e) of the GDPR) – signatories and employees,
   4. designating contact persons as a legitimate interest of the controller (legal basis: Article 6(1)(f) of the GDPR), for the purpose of ensuring efficient communication and the proper performance of the contract between the parties,
   5. ensuring accountability, demonstrating compliance with obligations arising from legal provisions (legal basis: Article 6(1)(f) of the GDPR),
   6. making available and updating information in the Central Register of Contracts of Public Finance Sector Entities (hereinafter: CRU) regarding a contract concluded by or on behalf of a public finance sector entity (legal basis: Article 6(1)(c) of the GDPR) – in connection with the Act of 27 August 2009 on Public Finance, for the purpose of the controller fulfilling the obligation to enter information regarding contracts and the parties thereto into the register of contracts maintained by the Minister of Finance.
4. CATEGORIES OF PERSONAL DATA The controller processes the following personal data: name and surname, email address, phone number, degree, position, signature.
5. PERIOD OF STORAGE OF PERSONAL DATAPersonal data will be processed by the Institute:
   1. for the period necessary to achieve the objectives resulting from the implementation and settlement of the cooperation agreement,
   2. in the event of a complaint – for the duration of the complaint proceedings,
   3. for the purpose of protection against claims – for a period of 6 years following the termination of the agreement,
   4. for 5 years from the end of the calendar year in which the payment deadline expired, in accordance with the provisions of the Tax Ordinance,
   5. in the CRU for a period of five years, counting from the end of the year in which the agreement concluded with the administrator ceased to be in force. Upon the expiry of this period, the data will be deleted from the CRU.
6. RECIPIENTS OF PERSONAL DATA Personal data may be disclosed to authorized employees of the Institute, entities through which the controller pursues its objectives on the basis of a concluded agreement, and may also be made available to entities authorized under the law. The data will be made available to the Minister of Finance, who maintains the Central Register of Contracts of Public Finance Sector Entities (CRU). Personal data shared and updated in the CRU – which is a public register accessible via the Internet – will be public and widely available.
7. THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS Personal data will not be transferred to a third country or international organization.
8. RIGHTS OF DATA SUBJECTS The data subject has the right to:
   1. access personal data and receive a copy thereof,
   2. rectify personal data,
   3. restrict the processing of personal data,
   4. erase personal data,
   5. transfer personal data to another controller.
   6. The above rights may be exercised by writing to our registered office or to dpo@ibch.poznan.pl. The possibility of fulfilling the request will be considered on a case-by-case basis

9. PROVISION OF PERSONAL DATA Providing the data is necessary for the conclusion and performance of the Agreement, which entails an obligation to disclose and update information regarding the agreement in the CRU. Failure to provide the data makes it impossible to conclude the agreement.
10. SOURCE OF PERSONAL DATA Personal data has been obtained directly from a natural person or from an entity with which the Controller has signed an agreement.
11. RIGHT TO OBJECT A natural person has the right to object to the processing of their personal data by writing to our registered office or to dpo@ibch.poznan.pl. The possibility of fulfilling the request will be considered on a case-by-case basis.
12. RIGHT TO LODGE A COMPLAINT A natural person also has the right to lodge a complaint directly with the supervisory authority (President of the Personal Data Protection Office, ul. Moniuszki 1A, 00-014 Warsaw), stating the circumstances of the situation and their position on the matter.