GDPR

Information on the Processing of Personal Data (GDPR)

As of May 25, 2018, new regulations on personal data protection (commonly referred to as GDPR) came into force. We would like to explain what this means for you in practice. The purpose of this information is to inform you of your full rights under the new data protection regulations, as well as the obligations we, as a data controller, are required to fulfill under, among others, Article 13 of the GDPR (the so-called Information Obligation).

What is GDPR?

GDPR stands for the General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC. Whenever we use the term “GDPR”, we are referring to this regulation. You may also see it referred to as the “General Data Protection Regulation”.

Who is the Data Controller?

The Data Controller – the entity that determines the purposes and means of processing your personal data – is:

Jerzy Haber Institute of Catalysis and Surface Chemistry Polish Academy of Sciences
ul. Niezapominajek 8, 30-239 Kraków, Poland

Who is the Data Protection Officer (DPO)?

The Data Protection Officer (DPO) is the person you may contact with any questions or concerns regarding the processing of your personal data. Our DPO is:

Rafał Andrzejewski
You can contact the DPO in the following ways:

Email (preferred): iod.r.andrzejewski@szkoleniaprawnicze.com.pl – This method ensures a clear and structured response to your query.
Phone (if email is inconvenient): +48 504 976 690

Purposes of Personal Data Processing

Your personal data may be processed for the following purposes:

conducting research in catalysis, physicochemistry of interfaces, colloid chemistry, and related disciplines;
b) development work and implementation of research results in the economy;
c) support for early-stage researchers;
d) doctoral programs and academic training, including internships, theses, and scientific placements;
e) cooperation with universities, research institutes, and scientific societies, especially in R&D and infrastructure use;
f) cooperation with socio-economic entities for research implementation;
g) development of international and national scientific collaboration through consortia and joint projects;
h) dissemination of knowledge related to the Institute’s activities;
i) fulfillment of tasks imposed by law or the Polish Academy of Sciences;
j) conducting scientific research;
k) publishing research results;
l) conferring academic degrees and titles;
m) educational activities for students, PhD candidates, and professionals (courses, lectures, seminars, workshops, training);
n) protection of original scientific and technical solutions;
o) cooperation with Academy Centers and national/international research institutions;
p) preparation of expert opinions in areas related to the Institute’s scientific scope;
r) organization of scientific events (conferences, symposia, etc.);
s) cooperation with knowledge dissemination institutions;
t) provision of library and documentation services;
u) administrative matters of daily life;
w) recruitment and employment purposes.

Legal Basis for Processing

Article 6(1)(a) and Article 9(2)(a) of GDPR – where you have given your consent;
Article 6(1)(c) and Article 9(2)(j) of GDPR in conjunction with the Act on the Polish Academy of Sciences (April 30, 2010, Journal of Laws No. 96, item 619);
Article 6(1)(c), Article 7(1) and 7(3), and Article 9(2)(j) of GDPR – for legal compliance or archiving purposes;
Article 6(1)(b) of GDPR – for contract execution, if applicable.

Data Recipients

Your data may be shared with third parties under data processing agreements pursuant to Article 28 of the GDPR, such as:

IT service providers,
logistics and transport service companies,
security service providers.

For detailed information on specific data processors, you can contact the DPO or Institute staff.

Data Transfers Outside the EEA

Your personal data will not be transferred to third countries (outside the European Economic Area).

Data Retention Period

We will retain your personal data only as long as necessary:

Based on consent – until the consent is withdrawn (Art. 6(1)(a) and 9(2)(a) GDPR);
Based on legal obligation – for the period required by law (e.g., 5 years for tax/accounting records);
For archiving – after the original purpose has been fulfilled, in accordance with our archiving policies;
For claims – for the duration of applicable limitation periods if data are needed for legal proceedings.

Your Rights

You have the right to:

Access your data and receive a copy;
Rectify inaccurate or incomplete data;
Delete your data if there’s no legal reason for us to retain it;
Restrict processing in specific circumstances (e.g., while a complaint is being resolved);
Object to processing of your data;
Data portability – receive your data in a machine-readable format and transmit it to another controller;
Lodge a complaint with a supervisory authority (e.g., the President of the Personal Data Protection Office in Poland);
Withdraw consent – at any time, without affecting the lawfulness of prior processing.

To exercise any of your rights, please contact us via email at:
iod.r.andrzejewski@szkoleniaprawnicze.com.pl

Please note: before fulfilling your request, we may need to verify your identity.

Additional Information

If your data is processed based on your consent, providing your personal data is voluntary, but necessary for participation in certain projects or studies.
If your data is processed based on a legal obligation (Art. 6(1)(c) GDPR), providing your data is mandatory.

Your data may be processed both in paper and electronic form, but will not be subject to automated decision-making, including profiling.