Pursuant to Article 13 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free flow of such data, and repealing Directive 95/46/EC (RODO), we inform you that:

1. the Administrator of your personal data is the Creative Center for Education and Economic Cooperation, postal code: 22-500 Hrubieszów, 15-17 Rynek Sutki Street.

2. the Administrator has appointed a Data Protection Inspector, who can be contacted in all matters related to the Administrator’s processing of your personal data. Contact to the Data Protection Supervisor: e-mail: inspektor@kceiwg.pl or by mail to the mailing address indicated above in Section 1 with the note “for DPO”.

3. Your personal data will be processed:

– in order to implement activities within the framework of the project “Local Development of Hrubieszów – from participation to implementation”, for which the City received more than PLN 16 million in funding from the “Local Development” program, financed by the Norwegian Financial Mechanism and the Financial Mechanism of the European Economic Area (EEA) on the basis of Article 6(1)(a) of the RODO,

– in order to fulfill legal obligations incumbent on the controller under generally applicable laws (art.6.1.c RODO),

– in order to fulfill the legitimate interests of the data controller arising, for example, from the assertion of possible claims arising from an application submitted or an agreement concluded, the need for analysis or statistics (art.6.1.f RODO).

– in order to provide services: organized workshops/meetings within the framework of the aforementioned project implemented by the Creative Center for Education and Economic Cooperation (art.6(1)(a, c, f RODO).

4. Providing personal data is related to keeping records of the project and its settlement “Local Development of Hrubieszow – from participation to implementation”, for which the City received more than 16 million zlotys of funding from the program “Local Development”, financed from the Norwegian Financial Mechanism and the Financial Mechanism of the European Economic Area (EEA)

5. your personal data are secured in accordance with applicable regulations, and their recipients may be entities authorized to disclose data to them under overriding provisions of law, as well as entities that process personal data as part of services provided on behalf of and for the Administrator (e.g., IT support), with whom it has entered into data processing entrustment agreements in accordance with Article 28 RODO.

6. Your personal data will not be transferred to countries outside the European Economic Area or international institutions, nor will they be processed for a purpose other than the purpose for which the personal data were collected.

7. Decisions regarding your personal data will not be made by automated means and will not be profiled.

8. Your personal data will be kept until you revoke your consent for the purpose of contacting the Administrator and/or Data Protection Officer, and for a period of 5 years from the date of revocation of consent for archival purposes or to secure possible claims.

9. In connection with the processing of personal data, you have the following rights:

a) the right to access personal data, including the right to obtain a copy of such data;

b) the right to request rectification (correction) of personal data – in case the data is incorrect or incomplete;

c) the right to request erasure of personal data (the so-called right to be forgotten), in case: the data are no longer necessary for the purposes for which they were collected or otherwise processed, the data subject has objected to the processing of personal data, the data subject has withdrawn consent to the processing of personal data, which is the basis for the processing of the data and there is no other legal basis for the processing of the data, the personal data are processed unlawfully, the personal data must be erased in order to comply with an obligation under the law;

d) the right to request restriction of processing of personal data – in case: the data subject questions the accuracy of the personal data, the processing of the data is unlawful and the data subject objects to the erasure of the data, requesting instead the restriction of the data, the Administrator no longer needs the data for its purposes, but the data subject needs the data for the establishment, defense or assertion of claims, the data subject has objected to the processing of the data, until it is determined whether the legitimate grounds on the part of the Administrator override the grounds for the objection;

e) the right to data portability – where the following conditions are jointly met:

the processing of data takes place on the basis of a contract concluded with the data subject or on the basis of consent expressed by the data subject,
processing is carried out by automated means;

f) the right to object to the processing, where the following prerequisites are jointly met:

there are reasons related to a particular situation, in the case of data processing on the basis of a task carried out in the public interest or in the exercise of public authority by the Controller.

10. Where the processing of personal data is carried out on the basis of a person’s consent to the processing of personal data (Article 6(1)(a) of the RODO), the person concerned shall have the right to revoke such consent at any time. Such revocation shall not affect the compliance of the processing carried out on the basis of the consent before its revocation with the applicable law.

11. Information on the obligation to provide data and the consequences of not providing them: Provision of data is voluntary, but is nevertheless necessary in order to process the contact and respond and/or exercise the rights you would like to exercise. Failure to provide data will result in the inability to fulfill the purpose indicated above.