The data administrator is Agencja Rozwoju Pomorza S.A. (ARP) with its registered office in Gdańsk at al. Grunwaldzka 472D, entered into the Register of Entrepreneurs kept by the District Court Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register under KRS number 0000004441, NIP 583-000-20-02. Contact with the Personal Data Protection Inspector is possible via e-mail rodo@arp.gda.pl or by post at the following address: al. Grunwaldzka 472D, 80-309 Gdańsk.
How do we obtain data?
We receive personal data from our clients during the first business contact and later in connection with business contacts during the established cooperation.
What is the purpose and legal basis for the processing of personal data by ARP?
Personal data is processed only to the extent covered by consent based on concluded contracts or statements for the purpose of their implementation. ARP provides management services for projects financed from European Union funds, running projects of regional significance, promotion, training (closed and open), general consulting, information, investor information, capital fund, and pro-innovation services.
We process personal data because it is necessary to perform contracts; including to:
- enabling the provision of services offered by ARP
- establishing and maintaining cooperation with local government units or entities similar to ARP
- ARP complaint handling
- handling notifications and letters addressed to ARP
- tax and accounting purposes
- contacting customers and stakeholders
Personal data, as a rule, are processed on the basis of consent and in order to perform contracts (Article 6(1)(a) and (b) of the GDPR), in any other case, we inform the client individually about the processing of personal data.
Personal data will be processed until the consent is revoked or the obligations arising from the performance of contracts expire. Consent to the processing of personal data can be withdrawn at any time.
Do we transfer personal data to other entities?
Personal data collected for the purposes of the implementation of the above purposes will not be shared with other entities. Personal data may be disclosed to competent authorities authorized under applicable law or joint venture partners under relevant agreements.
What are the rights regarding the processed data?
In connection with the transfer of personal data for the purpose of their processing, each data subject has the following rights:
- withdrawal of consent to the processing of personal data,
- object to the processing of personal data for marketing purposes,
- object to the processing of personal data due to a special situation,
- access to personal data,
- request rectification of personal data,
- request deletion of personal data,
- requests to limit the processing of personal data.
The above rights can be exercised when:
In relation to the request to rectify the data, it was found that the data is incorrect or incomplete regarding the request to delete data: the data will no longer be necessary for the purposes for which ARP collected them; consent to data processing is withdrawn; an objection to data processing is raised; the data will be processed unlawfully; the data should be deleted in order to fulfil the obligation resulting from the law regarding the request to limit data processing: it was found that the data is incorrect; object to data processing – until it is determined whether the legitimate grounds on the part of ARP override the grounds for objection In addition, there is the right to lodge a complaint in connection with the processing of personal data to the supervisory body, which is the Inspector General for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw).
In what situations is it possible to object to data processing?
You can object to the processing of personal data when:
The processing of personal data is based on legitimate interest or for statistical purposes, and the objection is justified by a particular situation where personal data is processed for the purposes of direct marketing, including profiling for this purpose.
Is personal data transferred?
We do not transfer personal data outside the European Economic Area. An exception to this rule is participation in some economic missions, the nature of which forces such action.
How long do we store personal data?
We store personal data for the duration of the contract, as well as after its completion, for the purposes of:
- pursuing claims in connection with the performance of the contract,
- performance of obligations arising from legal provisions, in particular tax and accounting,
- preventing abuse and fraud,
- statistical and archiving,
- for a maximum period of 12 years from the contract’s completion date.