Platforma Sygnalizacji Agrofagów - Online Pest Warning System

Personal data processing at the Institute of Plant Protection – the National Research Institute

Please be advised that:

The Act of May 10, 2018 on the protection of personal data (Official Journal No. 2018, item 1000) entered into force on May 25, 2018. The Act lays down the rules for the protection of your personal data in conformity with the Regulation of the European Parliament and of the Council (EU) of 27 April 2016 No. 2016/679 (GDPR).

What does GDPR do?

• It ensures better protection of your personal data.
• It affords greater control over the type of data that may be processed.

Who is the controller of my personal data?

Your personal data is supervised by the Institute of Plant Protection – the National Research Institute (hereinafter called the Controller), headquartered at ul. Władysława Węgorka 20, 60-318 Poznań, KRS 0000080209.

How can I contact you to learn about my personal data?

You may contact the Controller by regular mail at INSTYTUT OCHRONY ROŚLIN - PIB, ul. Władysława Węgorka 20, 60-318 Poznań, Poland or by e-mail at sekretariat@iorpib.poznan.pl

How do you ensure the security of my personal data?

We make every effort to apply any and all available physical, technical and organizational means of protection against accidental or deliberate destruction, accidental loss, alteration, unauthorized disclosure, use or access to personal data, in accordance with applicable laws.

For that purpose, we have appointed a Data Protection Inspector who may be contacted by e-mail at iod@iorpib.poznan.pl

What are my rights regarding the data of which I am subject and that you process?

You have the right to:

• have the Controller provide you with access to your personal data and to receive a copy thereof,
• have the Controller rectify (correct) your personal data,
• have the Controller erase your personal data where the data is processed for reasons other than to fulfill a legal obligation,
• have the Controller restrict the processing of your personal data,
• object to the processing of your personal data,
• transfer your personal data,
• withdraw any consent granted at any time without compromising the lawfulness of the processing carried out on the basis of such consent prior to its withdrawal,
• lodge a complaint with Head of the Polish Data Protection Authority (whose contact details are available on the PDA website at www.uodo.gov.pl), if you believe that the processing of personal data violates the GDPR.

What is the legal basis for the processing of my personal data?

Your personal data is processed because at least one of the following applies (Art. 6.1 GDPR):

• you have given consent to the processing of your personal data for one or more specific purposes,
• processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract,
• processing is necessary for compliance with a legal obligation to which the controller is subject,
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

What is the purpose of processing my personal data?

We process your personal data for the purposes of:

• user registration in the Online Pest Warning System,
• the operation of the Online Pest Warning System,
• contacting the users of the Online Pest Warning System in connection with the aims of this System,
• asserting possible claims.

Who may receive my personal data?

Your personal data will only be disclosed to such parties as need it to enable us to ensure a high quality of services, in particular those of the website provider. Such data is processed under a contract with us and solely on our instruction. We do not share your data with any third parties for their own use and limit such sharing to the above-mentioned purposes. All partners who process your personal data ensure data security and abide by all obligations pertaining to personal data protection.

What rules apply to transferring my data outside the EEA?

Your personal data will not be transferred to parties in third countries, i.e. outside the European Economic Area (EEA) or to international organizations.

How long do you keep my personal data?

We do not keep your personal data longer than necessary to achieve the purposes for which such data was collected or longer than is required by law. In the case of a contract, data will not be kept longer than the time limit on tax or civil-law claims. In the case of consent: we do not keep data until it is withdrawn, restricted or until other consent-restricting actions are taken.

Video monitoring

Your image may be recorded and stored on the Controller’s premises by a video surveillance system installed thereby. The use of surveillance cameras will be indicated by visibly placed signs that cite the relevant GDPR information clause and signs bearing a camera symbol at the location at which the image is taken. The relevant information clause is also available on our website at www.ior.poznan.pl. The video surveillance system processes data to ensure security and order and allow the recording to be played back to give evidence, provide information, and enable prevention, and/or to document undesirable events or unlawful behavior in the publicly accessible areas of the Institute, pursuant to art. 6 (1) (e) of GDPR. Your personal data may be transferred to parties rendering to the controller services that involve the protection of persons and property and to parties authorized by law to receive it. Video recordings will be kept for no longer than 4 weeks. The processing time may be extended by the time limit on the filing of claims, if your personal data has to be processed to allow the Controller to assert or pursue any claims or mount defense against them.