INFORMATION CLAUSE ON THE PROCESSING OF PERSONAL DATA

In connection with the implementation of the requirements of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (general Data Protection Regulation "GDPR"), we would like to inform you about the rules for the processing of your personal data and about your related rights.

1. The data administrator, i.e. the entity deciding for what purpose and how your data will be processed, is: Institute of Human Genetics, Polish Academy of Sciences, Strzeszyńska 32, 60-479 Poznań, contact: tomasz.wozniak <at> igcz.poznan.pl
2. You may contact the Data Protection Officer at the following e-mail address: iod.r.andrzejewski <at> szkoleniaprawnicze.com.pl.
3. We process your data for the following purposes and on the basis of the following legal grounds: a) conducting research in the field of human genetics and medical biology; conducting development works and implementing the results of these studies into the economy (pursuant to art. 6 sec.1 lit. c and e of the GDPR, art. 9 sec.2 lit. j of the GDPR in conjunction with the Act of 30 April 2010 on the Polish Academy Of Sciences and Resolution No. 17/02 of the Presidium of the Polish Academy of Sciences of 17 December 2002 on the establishment of the Institute of Human Genetics, Polish Academy of Sciences; b) for contact purposes, in particular informing you about examination results via e-mail pursuant to art. 6 sec.1 lit. a of the GDPR), i.e. your consent; c) for archival (or evidence) purposes (pursuant art. 6 sec.1 lit.c of the GDPR in conjunction with art. 7 sec.1 and 3 of the GDPR, art. 9 sec.2 lit. j of the GDPR); d) to assert or defend against claims, which is our legitimate interest pursuant to art. 6 sec. 1 lit. f of the GDPR.
4. Information about the recipients of personal data: We will also be able to disclose your data to entities with whom we have concluded an entrustment agreement pursuant to art. 28 of the GDPR. In particular, data may be entrusted to providers of technological solutions (providers of ICT services, hosting - e-mail hosting).
5. Your personal data will not be transferred to a third country.
6. Retention period, i.e. how long will we process your personal data? We will process your data no longer than necessary. 1) In terms of data processed on the basis of your consent - until the purpose for which it was collected is achieved or until it is revoked (whichever occurs first); 2) After the completion of the primary purpose for which your data was collected (e.g. implementation of a scientific project), your data will be processed for archival purposes for a period consistent with the archival regulations in force, as well as for the period necessary to protect against claims, pursue claims (i.e. for the period of their statute of limitations).
7. You have the following rights related to the processing of personal data: a) pursuant to art. 15 of the GDPR, the right to access your personal data, including the right to obtain a copy of the data; b) pursuant to art. 16 of the GDPR, the right to request rectification (correction) of personal data; c) the right to delete data - within evidence and based on conditions specified in art. 17 of the GDPR, d) the right to restrict the processing - within evidence and based on conditions specified in art. 18 of the GDPR, e) the right to transfer personal data - within evidence and based on conditions specified in art. 20 of the GDPR, f) the right to object the processing - within evidence and based on conditions specified in art. 21 of the GDPR, g) the right to lodge a complaint with the supervisory body (the President of the Office for Personal Data Protection), h) withdraw consent to the processing of personal data (but only in relation to personal data that is processed on the basis of your consent - you have the right to withdraw consent to the processing of personal data at any time. Withdrawal of the consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal. Withdrawal of the consent may be made in the same form in which consent was given.
8. The obligation to provide data 1) With regard to personal data processed by the Administrator on the basis of your consent - providing your personal data is voluntary, but often necessary to enable us to contact, for example, by e-mail. 2) With regard to data processed by the Administrator pursuant to art. 6 sec. 1 lit. c and e of the GDPR - providing your personal data is obligatory. Failure to provide the data may prevent the achievement of the Institute's goals, e.g. the implementation of a research project.
9. Your data will not be profiled, and there will also be no automatic decision-making.