Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: “GDPR”), the following information is provided.
The controller of personal data is the Institute of Animal Reproduction and Food Research of the Polish Academy of Sciences in Olsztyn, with its registered office at ul. Trylińskiego 18, 10-683 Olsztyn, Poland, Tax Identification Number (NIP): 739-05-04-515, REGON: 001289340, telephone: +48 89 500 32 00, e-mail: instytut@pan.olsztyn.pl.
The controller has appointed a Data Protection Officer, Tomasz Trzciałkowski, who may be contacted by e-mail at: iodo@pan.olsztyn.pl.
Personal data of data subjects, including in particular name and surname, e-mail address, place of employment, image and other data provided in the registration form, are processed for the purpose of registration and participation in the event organised by the controller, namely the scientific conference “Nutrigenomics for Lifelong Health”.
The legal basis for the processing of personal data is Article 6(1)(b) of the GDPR, i.e. processing is necessary for the performance of a contract concluded through acceptance of the terms and conditions of participation in the event. Special categories of personal data provided voluntarily by the data subject are processed on the basis of the data subject’s explicit consent, in accordance with Article 9(2)(a) of the GDPR.
Personal data may also be processed for the purpose of establishing, pursuing or defending against claims related to participation in the event, which constitutes the legitimate interest of the controller within the meaning of Article 6(1)(f) of the GDPR.
Recipients of personal data may include entities processing personal data on behalf of the controller under data processing agreements, as well as other participants of the event, to the extent resulting from the form of participation, including in particular through attendance lists.
Personal data are not transferred to third countries or international organisations.
Personal data are stored for a period of five years from the date of the event.
The data subject has the right to access their personal data, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object to the processing of personal data, in accordance with Articles 15–21 of the GDPR.
Where the processing of personal data is based on consent, the data subject has the right to withdraw such consent at any time, without affecting the lawfulness of processing carried out prior to the withdrawal of consent.
The data subject has the right to lodge a complaint with the supervisory authority competent for personal data protection, namely the President of the Personal Data Protection Office (PUODO).
Provision of personal data is voluntary; however, it is necessary in order to participate in the event. Failure to provide the required personal data will result in the inability to register for and participate in the event.
Personal data are not subject to automated decision-making, including profiling.