Information clause concerning the processing of personal data for persons contacting PAIH S.A.

Pursuant to Article 13(1) and 13(2) of Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1) (hereinafter referred to as “GDPR”) we inform that:

1. Data Controller
The controller of personal data is Polska Agencja Inwestycji i Handlu S.A. with its seat in Warsaw at ul. Krucza 50 (00-025 Warszawa), entered into the register of entrepreneurs of the National Court Register by the Capital City of Warsaw District Court, under the number KRS 0000109815 (hereinafter referred to as “Controller”). The Controller can be reached through the contact form on www.paih.gov.pl, by sending an email to: iod@paih.gov.pl, or by traditional mail at the address of the Controller’s seat stated above.

2. Data Protection Officer

The contact person in all matters related to the protection of personal data and your rights is the Data Protection Officer. You can contact the Data Protection Officer by sending an e-mail to iod@paih.gov.pl or by traditional mail at the address of the Controller’s seat stated above with a note saying “c/o the Data Protection Officer.”

3. Purposes and ground for processing personal data
Your personal data in the form of name, surname, email address and phone number are processed to:

1) perform tasks related to promoting Polish economy, according to the Act on performing tasks related to promoting Polish economy by the Polska Agencja Inwestycji i Handlu Spółka Akcyjna of 7 July 2017 (Journal of Laws of 2017, item 1941, as amended), processing is necessary to perform a task carried out in the public interest (Article 6(1)(e) of the GDPR),

2) communicate with you and answer your questions – the legal basis for data processing is the necessity of processing to achieve the legitimate interest of the Controller. The legitimate interest of the Controller in this case is the ability to answer your questions and communicate with you (Article 6(1)(f) of the GDPR),

3) potentially establish, exercise or defend legal claims – the legal basis for data processing is the necessity of processing to achieve the legitimate interest of the Controller. The legitimate interest of the Controller in this case is the establishment, exercise or defence of legal claims (Article 6(1)(f) of the GDPR),

4) implementation of statutory archiving obligations imposed on PAIH - pursuant to art. 6 sec. 1 lit. c) GDPR in connection with with the provisions of the Act of 14 July 1983 on the National Archival Resources and Archives.

In the case of consent your personal data will be processed to:

1) marketing the Controller’s products and services, that is sending the PAIH monthly e-newsletter – the legal basis for processing is art. 6(1)f GDPR in connection with the Act of 18 July 2002 on the provision of electronic services.

2) marketing the Controller’s products and services, that is sending marketing information, i.e. information about planned informational and promotional events organised by PAIH S.A. and information about PAIH S.A. support for Polish exporters and investors – the legal basis for data processing is Article 6(1)f of the GDPR in connection with the Act of 18 July 2002 on the provision of electronic services.

4. Data recipients

The recipients of your personal data are entities to which the Controller entrusted activities that involve the need for data processing, especially as regards managing electronic mail, administrative services, legal services or consulting, and provision of ITC services and technical equipment. The recipients of your personal data may also be entities or authorities that have the right to receive your data, but only in justified cases and in compliance with applicable provisions of law.

5. The time for which personal data are stored
Your personal data will be stored and processed until you submit a request: their deletion, restriction of processing, objection to their processing or transfer, or as long as PAIH S.A. will perform its tasks in the field of promotion of the Polish economy.
Where the basis for processing is consent until it is withdrawn. The data subject has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of the processing that was made on the basis of consent before its withdrawal.
In the case of processing for the purpose of pursuing or defending against claims - the data will be processed until the claims expire in accordance with the generally applicable provisions of Polish law.
If the basis for processing is a legitimate interest - the data will be processed until an objection is submitted.
Until the expiry of the obligation to store personal data resulting from the generally applicable provisions of Polish law, in particular in connection with the Act of July 14, 1983 on national archival resources and archives.

6. Rights of data subjects
Due to the processing of personal data, a data subject has the right to access data, right to rectify data, right to erase data, right to restrict the processing of data, right to object to the processing of data, right to transfer data, and the right to file a complaint with the Chairman of the Personal Data Protection Office. You are entitled to these rights in the scope provided for in generally applicable provisions of law, in particular provisions of the GDPR.
In addition, pursuant to Article 21 of the GDPR, with respect to processing which takes place pursuant to Article 6(1)(f), data subjects are also entitled to object to processing performed by the Controller in this respect.

7. Information about required/voluntary submission of data

Providing personal data and granting consent for their processing is voluntary, but required to answer your inquiry.