Information Clause - for contractors and contact persons | Gdańsk University of Technology

General Data Protection Regulation (GDPR) information clause (for contractors and contact persons indicated by contractors of Gdańsk University of Technology)

1. Personal data controller

The controller of your personal data is the Gdansk University of Technology. You can contact the controller of your personal data in the following way:

• by post, to the address: ul. Narutowicza 11/12, 80-233 Gdansk
• by ePuap: politechnikagdanska/SkrytkaESP

2. Data protection officer

A data protection officer may be contacted by you on all matters concerning the processing of your personal data and the exercise of rights related to the processing of the data by email dpo@pg.edu.pl

3. The purposes of data processing and the legal basis for the processing

The legal basis for processing your personal data is Article 6(1)(b), (c), and (f) of the GDPR, namely:

• the necessity of processing personal data prior to the conclusion of the agreement (e.g., for the purpose of submitting an offer/negotiations) and throughout its execution (e.g., signature by representatives of the parties), implementation, settlement, coordination by individuals designated for operational contacts by the Parties;
• compliance with legal obligations imposed on the controller, in particular accounting and tax obligations, and archiving obligations in accordance with applicable law;
• establishing, pursuing, or defending against potential claims arising from the performance of the agreement, which constitutes the controller’s legitimate interest.

Providing personal data is necessary to take steps prior to entering into the agreement (offer submission/negotiation) and for its execution (signature by representatives), as well as to ensure its proper performance by individuals designated in the agreement for contact and coordination purposes. Failure to provide the data will make it impossible to achieve the aforementioned objectives.

4. Period of personal data storage

Your personal data will be stored for a period necessary to achieve the purposes specified in section 3:

• for their removal, withdrawal of consent to the processing of personal data, processing restrictions, objection to their processing or their transfer,
• in order to establish an investigation or defense against claims - until the claims are time-barred in accordance with generally applicable provisions of Polish law;
• until the legally justified interest of the Administrator is realized,
• until the obligation to store personal data resulting from the generally applicable provisions of Polish law expires.

5. Data Recipients

Your data may be disclosed only to entities authorized under the law (courts, police, etc.), postal or courier service providers, and other entities cooperating with us to the extent and for the purpose consistent with the execution of this agreement.

6. Rights related to processing of personal data

You have the following rights related to the processing of your personal data:

• the right to access your personal data;
• the right to demand rectification of inaccurate personal data and supplementation of incomplete personal data;
• the right to demand deletion of your personal data. data; This right does not apply, in particular, if the processing of the data is necessary to fulfill a legal obligation requiring such processing under the applicable law or to perform a public task;
• the right to request limitation of your personal data processing;
• the right to object to the processing of your personal data, due to your specific situation, in cases when we process your data due to our legitimate interest, including direct marketing or performance of a public task. NOTE: as regards processing for direct marketing purposes, you may object at any time regardless of your specific situation;
• the right to transfer your personal data, i.e. the right to receive personal data from us, in a structured, commonly used, machine-readable format. You may transfer this data to another data controller or request that we transfer your data to another data controller. However, we will only do so if such transfer is technically possible. You have the right to transfer your personal data only in respect to the data which we process automatically, i.e. in electronic form, on the basis of an agreement with you or on the basis of your consent;
• the right to lodge a complaint to the supervisory authority dealing with personal data protection, i.e. the President of the Personal Data Protection Office [Prezes Urzędu Ochrony Danych Osobowych];
•  

7. Transfer of data outside the European Economic Area (EEA)

Your personal data will not be processed outside the EEA.

8. Profiling and automated decision-making

Your data will not be subject to profiling or automated decision-making.

9. Source of data

Your data was obtained directly from you or provided to us by the entity you represent or by a person acting on your behalf.