Pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, we hereby inform you that:

  1. The controller of your personal data is the Scientific and Research Centre for Fire Protection – National Research Institute (CNBOP-PIB) with its registered office at ul. Nadwiślańska 213, 05-420 Józefów.
  2. For any queries related to your personal data please contact Data Protection Officer, e-mail address: iod@cnbop.pl., phone no.: +48 22 769 33 63.
  3. The submitted personal data will be processed for the following purposes:
    • art. 6, paragraph 1, point b) of GDPR – necessary for concluding and performing a contract;
    • art. 6, paragraph 1, point c) of GDPR – necessary for compliance with a legal obligation to which the Controller is subject;
    • art. 6, paragraph 1, point f) of GDPR – keeping in archives, analysis and possible determination, investigation or defence of claims, constituting legitimate interests pursued by the Controller; 
    • art. 6, paragraph 1, point a) of GDPR – under the freely given consent in case the provided data exceeds the obligatory scope required for above mentioned purposes.
  4. Your personal data will be processed in regard to: basic data allowing for the identification and contact data allowing for the contact via postal service, e-mail or/and by telephone.
  5. The recipients of your personal data can be as follows:
    • CNBOP-PIB employees and co-workers;
    • institutions defined by the law provisions e.g. Tax Office, Social Insurance Fund etc.;
    • entities realising tasks for the benefit of the Controller under personal data processing agreements.
  6. Your personal data will not be transferred to the third countries and international organisations.
  7. Your personal data is not to be a subject to automated decision-making, including profiling.
  8. The data will be processed for the period necessary to keep in contact in relation to the conclusion and performance of the contract and for the accounting purposes during 5-year period. If the consent for personal data processing was expressed – until its withdrawal. Withdrawal shall not influence data procession conducted before the withdrawal.
  9. You have the right to:
    • demand access to your personal data, its correction, removal or limiting its processing;
    • object to the processing of your personal data;
    • make a complaint to the President of the Personal Data Protection Office if you consider that processing of personal data infringes the provisions of the Regulation.
  10. Providing data for the purposes of contract conclusion is voluntary, however, it is necessary for its conclusion and performance. Providing data processed by CNBOP-PIB under a consent is voluntary and not necessary.