GDPR of the Institute of Bioorganic Chemistry, Polish Academy of Sciences
INFORMATION on processing your personal data
Pursuant to Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter referred to as GDPR), the Institute of Bioorganic Chemistry, Polish Academy of Sciences hereby informs that:
1. The collected personal data is administered by the Institute of Bioorganic Chemistry, Polish Academy of Sciences, seated at ul. Z. Noskowskiego 12/14, 61-704 Poznań; phone: +48 61 852 85 03, e-mail: ibch@ibch.poznan.pl (hereinafter referred to as the Institute).
2. The Data Protection Officer appointed by the controller may be contacted via traditional mail sent to the address of the Institute: Inspektor Ochrony Danych, Instytut Chemii Bioorganicznej Polskiej Akademii Nauk w Poznaniu, ul. Z. Noskowskiego 12/14, 61-704 Poznań or e-mail at dpo@ichb.poznan.pl
3. Your personal data is processed for the following purposes:
• Organization and participation in the IFIPSEC2023 conference (legal basis: Art. 6 (1)(b) of GDPR – conclusion and performance of a contract for rendering services);
• Organization, administration and IT services (legal basis: Art. 6 (1)(f) of GDPR – legitimate interest pursued by the controller, i.e. organization of the Conference);
• Promoting the Conference and marketing of the controller, organizer or their business partners as well as publishing recordings of the Conference (legal basis: Art. 6 (1)(f) of GDPR – legitimate interest pursued by the controller);
• Possible definition and enforcement of claims in order to protect against such claims (legal basis: legitimate interest pursued by the controller – Art. 6 (1)(f) of GDPR – enforcement of claims and protection against claims).
• Ensuring accountability (legal basis: Art. 6 (1)(f) of GDPR – demonstrating that obligations arising from legal regulations have been fulfilled).
4. The controller processes the following categories of personal data: first name (names) and surname, e-mail address and, optionally, a confirming document (student ID).
5. After serving the initial purpose for which the said personal data was collected, the data shall be processed for archival purposes for the period of compliance with the binding archival regulations.
6. In some cases we shall be entitled to transfer your data if that is necessary for us to render our services. We may transfer your data in particular to the following recipients: our employees who must have access to the data in order to perform their duties and authorized entities pursuant to separate legal regulations.
7. The personal data shall not be transferred to a third country or international organization.
8. You have the right to claim access to your personal data in order to make appropriate corrections, remove or restrict their processing. You have the right to object to the processing and withdraw your consent at any time with no effect on compliance with the right to process that was given on the basis of the consent before it was withdrawn;
9. You have the right to submit a complaint to the Inspector General for the Protection of Personal Data concerning the processing of your personal data or the personal data of your child/charge.
Any of the said claims shall be considered pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (general regulation on data protection).
10. Disclosure of your personal data is voluntary, but is at the same time a contractual condition, as failing to disclose your personal data will make it impossible to participate in the IFIPSEC2023 conference.
11. Your data is not processed for the purposes of automated decision making including profiling stipulated in Art. 4 (4) of GDPR, which denotes a form of automated personal data processing, i.e. the use of personal data to evaluate certain personal aspects relating to a natural person.