In order to comply with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union L. 2016. 119. 1) – hereinafter referred to as GDPR, we hereby inform you that:
1)Your data controller is the the Polish Confederation Lewiatan with its registered office at ul. Zbyszka Cybulskiego 3, 00-727 Warszawa, entered in the register of associations, other social and professional organizations, foundations and independent public healthcare institutions of the National Court Register for which the District Court for the capital city of Warsaw in Warsaw keeps registration files number KRS 0000053779, NIP 5262353400, REGON 014859361, hereinafter referred to as the “Polish Confederation Lewiatan” or “Controller”.
2)If you have any questions or concerns regarding the means and principles of data processing, and your wish to withdraw your consent to data processing, please contact us at jwiniarska@konfederacjalewiatan.pl or phone no. +48 22 55 99 878.
3)The Controller has appointed a Data Protection Officer who may be contacted by traditional mail (at the address indicated above with the note “Data Protection Officer”) or by electronic mail at dane.osobowe@konfederacjalewiatan.pl.
4)The basis for the collection and processing of your personal data by the Controller is:
1. Basis for the processing
2. Categories of personal data
3. Purpose of the processing
4. Retention period of the personal data
Categories of data specified in the registration form of the EFNI.pl Service in the part concerning the registered person.
Photos (likness) to be used for the identification of an EFNI conference attendee.
Striving to enter into and perform an agreement related to the registration for and attendance at the EFNI conference.
For the period resulting from tax regulations.
Up to 3 months after the end of the EFNI conference.
Specific categories of data indicated in the field “Remarks” in the registration form of the EFNI.pl Service in the part concerning the registering person, including data on dietary preferences and/or health status.
Ensuring the security and protection of the vital interests of the registered person in relation to his or her attendance at the EFNI conference.
Up to 1 month after the end of the EFNI conference.
Categories of data specified in the registration form of the EFNI.pl Service in the part concerning the registering person.
Registration of a registered person to attend the EFNI conference.
Until the withdrawal of consent or up to 1 month after the end of the EFNI conference.
Likeness of the registered person.
Using the likeness of an attendee to the extent specified in the consent.
Until the consent is withdrawn or the purpose of the processing ceases to exist.
Details as regards the name, surname, contact details, position and company name.
For marketing purposes related to attendance at EFNI conferences, other events organized by the Controller, and receiving Newsletter.
Until the consent is withdrawn or the purpose of the processing ceases to exist.
Details as regards the name, surname, contact details, position and company name.
Making the data available for marketing purposes to the Controller’s partners listed on the website www.efni.pl.
Until the consent is withdrawn or the purpose of the processing ceases to exist.
Details as regards the name, surname, contact details, position and company name.
Making available to services that perform epidemiological supervision
For the period of 2 weeks
Article 6(1)(a) and (b) of GDPR
Details as regards the name, first letter of surname, day and month of birth included in the QR code of the Covid-19 vaccination certificate.
For EFNI conference registration and attendance control purposes.
Until the consent is withdrawn or the purpose of the processing ceases to exist.
5)Where the registering person is not also the registered person, the registering person will be the source of the personal data of the registered person.
6)The Controller will make your personal data available to other recipients only on the basis of the provisions of law within the scope of the right vested in the Controller or in connection with the need to fulfil a legal obligation or exercise a right vested in the Controller on the basis of the provisions of law subject to the provisions of section 7 below.
7) The Controller may share your personal data with entities acting on behalf of the Controller supporting the organization of the EFNI conference and marketing activities (e.g. event companies, companies operating the registration system, mailing system, security companies, travel agencies, carriers and hotels) based on making available or the outsourcing of data processing. The Controller may share your personal data with the Conference Partners listed on the EFNI website subject to your consent.
8)The Controller is obliged to make your personal data available to the State District Sanitary Inspector who performs epidemiological supervision in the given area at his/her request.
9) Your personal data will not be transferred to third countries or international organizations.
10)Your personal data will be processed during the periods indicated in section 2 in the table under “Retention period of the personal data”.
11) You have the right:
- to have access to your personal data and receive copies of personal data processed under Article 15 of the GDPR;
- to rectify inaccurate data under Article 16 of the GDPR;
- to request erasure of data (right to be forgotten) in the event of circumstances as provided for in Article 17 of the GDPR;
- to demand limitation on data processing in the cases indicated in Article 18 of the GDPR;
- to the portability of the provided data, processed automatically (Article 20 of the GDPR);
- to object to the processing of data in cases indicated in Article 21 of the GDPR.
12) Your personal data will not be subject to profiling or automated decision-making.
13) You have the right to file a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa if you consider that the processing of your personal data is in breach of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).