Privacy Policy
Privacy Policy of the website www.polskiklaster.pl
Respecting the privacy of our Clients (Users), we would like to inform you about the principles of processing your personal data by the Polish Advisory and Consulting Association based in Białystok and about your rights.
Within this privacy policy, the administrator presents the most important information regarding the processing of personal data under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the "GDPR").
At the same time, we would like to inform you that the policy is of an informative and general nature, which means that any details of the policy may be additionally included in the regulations and information clauses provided to the Client (User) at the time of data collection.
- Administrator of personal data
The controller of personal data (hereinafter also referred to as the controller), i.e. the entity deciding on the purposes and means of processing personal data on the Website, is the Polish Advisory and Consulting Association with its registered office in Białystok, ul. Pułkowa 11, 15-143 Białystok.
- Contact the administrator
The administrator can be contacted via e-mail: biuro@polskiestowarzyszenie.pl or in writing to the administrator's address indicated above.
- Personal data protection inspector
The Controller has appointed a Personal Data Protection Officer who can be contacted via e-mail: iod@adwokat-boltryk.pl or by mail to the following address: Andrzej Bołtryk, ul. Mickiewicza 83/16, 15-275 Białystok.
- Purposes, basis for personal data processing and the period of personal data processing
The Administrator, while carrying out its business functions, processes personal data within the Website for various purposes and to various extents:
| The purpose and basis of processing of users of the Website | Data storage period |
| In order to perform the contract with the Client (including those concerning the implementation of Projects, Trainings, Events, joining the Cluster) or to take action before concluding the contract, at the Client’s request, expressed in any way, e.g. by filling out the contact form on the website (Article 6, paragraph 1, letter b of the GDPR). | Your personal data will be stored until the limitation periods for claims expire. arising from the contract concluded with you. |
| In order to consider complaints/requests pursuant to Article 6 paragraph 1 b) and c) of the GDPR. | Your personal data will be stored until the limitation periods for claims expire. arising from the contract concluded with you. |
| For the purpose of settlement, accounting and financial reporting (Article 6(1)(c) and (f) of the GDPR). | Your personal data will be stored until the controller fulfills its obligations and for the period in which the controller is obliged to retain the data or documents containing them in order to document the fulfillment of legal requirements and enable public authorities to control their fulfillment. |
| In order to fulfil legal obligations arising from legal provisions (Article 6, paragraph 1, letter c of the GDPR), including the need to document the performance of the contract/service. | |
| In order to enable direct communication with the controller, including correspondence, receiving and handling inquiries addressed to the controller via the contact form on the Website, e-mail, telephone or other means of distance communication, which constitutes the legitimate interest of the controller (Article 6, paragraph 1, letter f of the GDPR). | As a rule, data will be processed for the periods specified in the regulations law, and in a situation where, as to certain documents they are not recommended, for the period of time when their storage is within the scope of a legitimate purpose the administrator, regulated by the time of possible redress. The period of storage of data constituting the content of correspondence, however, depends on the purpose of data processing to which a given correspondence relates (in a situation where there are other deadlines for deletion of data, information on this subject is provided in the remaining part of the privacy policy or in clauses informational). |
| In the case of contact and cooperation persons, personal data will be processed for contact purposes, including those related to the performance of the contract concluded between the controller and the entity on behalf of which you act (Article 6, paragraph 1, f of the GDPR). | |
| For the purposes indicated in the consents to the processing of personal data – if such consents were given (Article 6, paragraph 1, letter a of the GDPR). The consent request is presented in a clear manner, with the controller specifying the purpose for which consent is sought. Consent is voluntary. Consent may be withdrawn at any time by contacting the controller. | For the time necessary to achieve this purpose, but no longer than until consent is withdrawn. |
| In order to conduct marketing activities promoting own products and services (including using electronic means of communication) and displaying content tailored to the Website User (Article 6, paragraph 1, f of the GDPR). | Your personal data will be stored for the period necessary to fulfill the purpose in which for the purposes for which they were collected, i.e., marketing, analytical, and statistical activities, but no longer than until an objection is raised, unless there are legitimate grounds for further processing by the controller. After an objection is raised, personal data may be retained for the purposes of demonstrating compliance with the controller's legal obligations and related claims. |
| In connection with the implementation of other legitimate interests of the controller (Article 6 paragraph 1 letter f of the GDPR), which should be understood as: • establishing, investigating and defending against claims, • ensuring the functionality of the Website and facilitating its use Website - details on the use of cookies can be found in the cookies policy. | Your personal data will be stored for the period necessary to fulfill the purpose in which for which they were collected, but no longer than until the expiry of the limitation periods for mutual claims, or until an objection is filed, unless there are legitimate grounds for further processing by the controller. After an objection is filed, personal data may be stored for the purpose of demonstrating compliance with the controller's legal obligations and related claims. |
| For the purpose of administering and managing accounts on social media platforms, e.g., Facebook, Instagram, Tik Tok, Twitter, Linkedin, and YouTube, involving interaction with and communication with Users of these platforms (Article 6, Section 1, f, GDPR). Dear User, please remember that the rules for using social media platforms on which the administrator's account is located are established by the entity managing these portals. | Your personal data will be stored for the period necessary to fulfill the purpose in which for the purposes for which they were collected, i.e., marketing, analytical, and statistical activities, but no longer than until an objection is raised, unless there are legitimate grounds for further processing by the controller. After an objection is raised, personal data may be retained for the purposes of demonstrating compliance with the controller's legal obligations and related claims. |
- Disclosure of third-party data by Customers/Users
If the Customer/User provides us with personal data of a third party or when it is necessary for the controller to receive them in connection with the implementation of the above-mentioned purposes, this means that the Customer/User has informed the above-mentioned person about the purposes and method of processing his/her data.
- Voluntary provision of data
Providing data is voluntary, but necessary to conclude and perform the contract, to take action at your request before entering into the contract, and to enable you to communicate directly with the controller. Providing data for marketing purposes is voluntary.
- Automated data processing
No automated decisions resulting from profiling will be made based on your personal data.
- Data recipients and data transfer outside the EEA
Personal data may be shared:
- state authorities or other entities authorized under the regulations – if it is necessary to fulfill legal obligations,
- entities supporting the controller in its business activities, in particular: IT and telecommunication service providers, marketing service providers, postal/courier service providers, accounting service providers, electronic payment service providers, banking service providers, legal, advisory, and auditing service providers. Personal data is transferred only when it is necessary to achieve the given purpose of personal data processing and only to the extent necessary to achieve it.
Some personal data processing operations may involve transferring them to countries outside the European Economic Area due to the Controller's use of IT infrastructure tool providers. These providers guarantee an adequate level of personal data protection through appropriate compliance mechanisms provided for by the GDPR, in particular by joining the Privacy Shield program or using standard contractual clauses. Personal data is stored on servers located in third countries as part of Google services (provided by Google Ireland Limited).
- State of law
In connection with the processing of your personal data by the controller, you have the right to access, rectify, erase, restrict, and transfer your data. You can withdraw your consent at any time (this will not affect the lawfulness of the use of your data prior to withdrawal). Where processing is based on the controller's legitimate interest, you have the right to object to processing. In the case of cookies, you can only object by clicking the "manage consent" option and changing your preferences. The scope of each of these rights, the situations in which they can be exercised, and the manner of exercising the right are governed by law. The right you can exercise will depend, among other things, on the purpose and legal basis for the controller's processing of your personal data. You also have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your data violates the law.
If you have any questions regarding any aspect of our privacy policy, the administrator is at your disposal. You can contact the administrator using the contact details provided in this Policy.
