GDPR

General Data Protection Regulation

General information clause

We inform you that we process your personal data – detailed information can be found below:

I. The Administrator of personal data

The Administrator of your personal data is the Institute of Organic Chemistry of the Polish Academy of Sciences with its registered seat in Warsaw at 44/52 Kasprzaka Street, 01-224 Warsaw, NIP (Tax Identification Number): 5250008933, REGON (National Business Registry Number): 000325848 (“Data Administrator”).

II. The Data Administrator contact details

You can contact the Data Administrator:
1. by phone: +48 22 3432320;
2. at the email address: icho-s@icho.edu.pl;
3. in a written form, by sending correspondence to the following address: Institute of Organic Chemistry of the Polish Academy of Sciences, 44/54 Kasprzaka Street, 01-224 Warsaw.

III. Data Protection Officer contact details

The Data Administrator has designated a Data Protection Officer with whom you can contact in all matters relating to your personal data processing and the exercise of your rights. You can contact the Data Protection Officer:
1. at the email address: iodo@icho.edu.pl;
2. in a written form, by sending correspondence to the following address: Izabela Stasiewicz, Institute of Organic Chemistry of the Polish Academy of Sciences, 44/54 Kasprzaka Street, 01-224 Warsaw.

IV. Purpose and legal grounds of data processing

We process your personal data for the purpose of:
1. to conclude and perform a contract for the use of the Institute’s services – because processing is necessary for the performance of the contract (Art. 6 Section 1, letter b of the GDPR);
2. the performance of scientific and research activities – because processing is necessary for the performance of the contract (Art. 6 Section 1, letter b of the GDPR);
3. direct marketing of products or services – because processing is necessary to implement a legitimate interest (Art. 6 Section 1, letter f of the GDPR), which is the possibility of direct marketing;
4. to establish, investigate or defend against claims related to the concluded contract or the processing of your personal data – because processing is necessary for the implementation of a legitimate interest (Art. 6 Section 1, letter f of the GDPR), which is the possibility of establishing, investigating or defense against claims;
5. compliance with the legal obligations imposed on us under the applicable law – because in this case processing is necessary to meet the legal requirements to which we are subject (Art. 6 Section 1, letter c of the GDPR).

V. Categories of data recipients

Your personal data may be made available to the following categories of entities:
1. entities authorized under the provisions of law (courts, state authorities);
2. entities providing accounting, IT, marketing, communication and analytical, legal and debt collection services, scientific and research units;
3. our subcontractors and other entities with whom we cooperate.

VI. Transfering data outside the European Economic Area

1. As part of its tasks and services, in particular regarding patents, cooperation with contractors and correspondence, the Institute will transfer your personal data to countries outside the European Economic Area, i.e. to third countries to which the transfer of personal data takes place on the basis of appropriate legal mechanisms such as standard contractual clauses or other similar legal instruments provided for in the GDPR.

VII. You have the right to request further information and to receive a copy of the relevant safeguards at any time.

VIII. Data storage period

We will process your data:
1. in order to perform the contract – until the claims are time-barred;
2. for the purpose of marketing products and services – until the contract is terminated or expires or an objection is raised;
3. in order to fulfill our legal obligations – until the data storage obligations resulting from legal provisions expire;
4. to establish, investigate or defend against claims – until the claims are time-barred.

IX. Rights of the data subject

According to the GDPR, you are entitled to:
1. access your data and receive copies of them;
2. rectify (correct) your data;
3. delete your data or restrict the processing of your data
4. the right to withdraw your consent to the processing your personal data at any time. The withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal;
5. the right to data portability; in order to exercise your rights, please contact the Institute via email address or by phone
6. lodge a complaint to the supervisory authority

X. The right to object

You have the right to object to the processing of your personal data at any time: by email or by phone.

XI. Information on the requirement or voluntary submission of data and the consequences of not providing it

Providing your personal data is voluntary, but necessary to conclude and perform contracts, including the use of the Institute’s services and the Institute’s scientific and research activities.