Version of 15.03.2024.

Following the provisions of art. 13 sec. 1 and sec. 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons about the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, we implement the information obligation

We inform you that the abbreviations used in this information clause mean:

1. Personal data/data - means information about an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be directly or indirectly identified, in particular, based on an identifier such as a name and surname, an identification number, location data, an internet identifier or one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity of a natural person;
2. Recipient of data – means a natural or legal person, a public authority, an entity or another entity to whom personal data are disclosed, regardless of whether it is a third party. Public authorities that may receive personal data as part of a specific procedure by generally applicable law are not, however, considered recipients - the processing of such data by these public authorities must comply with the data protection regulations applicable to the purposes of processing; whereby the term "third party" means a natural or legal person, a public authority, an entity or an entity other than the data subject, the controller, the processor or persons who - with the authorization of the Controller or the processor - may process personal data.
3. Processing - means an operation or set of operations performed on personal data or sets of personal data in an automated or non-automated manner, such as collecting, recording, organizing, sorting, storing, adapting or modifying, downloading, browsing, using, disclosing by transmission, disseminating or otherwise making available, matching or combining, limiting, deleting or destroying;
4. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons about the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC;
5. Consent of the data subject - means a voluntary, specific, conscious and unambiguous demonstration of the will by which the data subject, in the form of a declaration or a clear confirmatory action, consents to the processing of personal data concerning him or her.

Principles of providing personal data: failure to provide certain data may result in the inability to consider and implement the application for access to public information - by the provisions of the Act of 6 September 2001 on access to public information (Journal of Laws of 2019, item 1429, of 2020, item 695).

1. Information about the Personal Data Controller and the Data Protection Inspector

The Personal Data Controller is the Institute of Geophysics of the Polish Academy of Sciences (hereinafter referred to as the "Controller") ul. Księcia Janusza 64, 01-452 Warsaw, tel. 22 6915-950, e-mail: office@igf.edu.pl.

In matters concerning the collection, processing and protection of data, you can contact the designated Data Protection Officer at the following address: Institute of Geophysics, Polish Academy of Sciences, ul. Księcia Janusza 64, 01-452 Warsaw, e-mail: iod@igf.edu.pl .

2. Information about collected/collected data:

1) Purpose of processing: consideration and implementation of the application submitted in the manner specified in the Act of 6 September 2001 on access to public information (Journal of Laws of 2019, item 1429, of 2020, item 695).

2) Categories of relevant personal data: data of persons who applied for access to public information. The data processed include name and surname, correspondence address, e-mail address and other data required by the provisions of the Act on access to public information and the Code of Administrative Procedure.

3) The basis for processing your personal data is the legitimate interest of the Personal Data Controller and the provisions of generally applicable law (Article 6, paragraph 1, letters c and f of the GDPR). Source of origin of personal data: the data was provided by the persons whose data is processed.

4) Information on whether the provision of personal data is a statutory or contractual requirement or a condition for concluding a contract and whether the data subject is obliged to provide it and what are the possible consequences of not providing the data: providing the data is voluntary, but without providing it we cannot consider and implement the application submitted to us for access to public information.

5) Information on the conclusion of a processing entrustment agreement: The Institute of Geophysics of the Polish Academy of Sciences may conclude entrustment agreements in the scope of:

1. implementation of the service of destroying and archiving documentation,
2. implementation of services providing the Controller with technical and organizational solutions ensuring efficient management (in particular, providers of ICT services, equipment suppliers, courier and postal companies);
3. implementation of legal, insurance, auditing, and consulting services.

6) Information on the recipients of personal data or categories of recipients, if any: Police, courts, prosecutor's office, ABW, CBA and other public law control bodies.

7) The period for which personal data will be stored, and when this is not possible, the criteria for determining this period: the processing period - until the purpose for which the personal data was transferred is fulfilled; the archiving period - for the time resulting from the provisions of the Act of 14 July 1983 on the national archival resources and archives (Journal of Laws of 2020, item 164) and internal regulations in force at the Controller.

 

8) Profiling information (profiling is understood as any form of automated processing of personal data, which involves the use of personal data to assess certain personal factors of a natural person, in particular, to analyse or forecast aspects concerning the effects of that natural person's work, their economic situation, health, personal preferences, interests, credibility, behaviour, location or movement): not applicable.

3. Information on the rights of the person whose data is processed:

1) You have the right to:

1. access your personal data,
2. rectify your personal data,
3. delete your personal data,
4. limit the processing of your personal data,
5. withdraw your consent to the processing of personal data by submitting/sending a letter to the following address: Institute of Geophysics of the Polish Academy of Sciences, ul. Księcia Janusza 64, 01-452 Warsaw, e-mail: iod@igf.edu.pl – if you have previously given such consent and the processing of your data is based on it,
6. transfer your personal data,
7. object to the processing of your personal data for reasons related to your special situation by Art. 21 of the GDPR.

2) The person whose data is processed has the right to file a complaint related to the processing of his/her personal data by the Personal Data Controller or the entity/organization whose personal data has been transferred to: the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, tel. 22 531 03 00, fax. 22 531 03 01, https://uodo.gov.pl/pl/p/kontakt