Controller of personal data.
The data controller is Hevelianum, with its registered office in Gdańsk,
ul. Gradowa 6, postal code: 80-802.
Controller’s contact details
The Controller can be contacted via sekretariat@hevelianum.pl or in writing to the address of the Controller’s registered office.
Contact details of the Data Protection Officer
The Controller has appointed a Data Protection Officer (Krzysztof Gliński), who can be contacted by e-mail at iod@hevelianum.pl. The Data Protection Officer can be contacted in all matters concerning the processing of personal data and the exercise of rights related to the processing of the data.
Purposes and basics of processing
The Controller processes personal data in connection with the performance of a legal obligation encumbered on the controller (Article 6(1)(c) of the General Data Protection Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016, hereinafter referred to as the GDPR), in the performance of our statutory tasks related to the performance by the controller of tasks carried out in the public interest (Article 6(1)(e) of the GDPR), the performance of contracts (Article 6(1)(b) of the GDPR), as well as on the basis of the consent given to us (Article 6(1)(a) of the GDPR).
Recipients of personal data
The recipients to whom personal data may be transferred shall be the Gdańsk City Office, which supervises the work of Hevelianum, as well as the Gdańsk Shared Services Centre, which provides accounting services for Hevelianum. In addition, a separate category of recipients to whom data may be disclosed are entities providing services to Hevelianum, including those authorised to handle deliveries, entities with which Hevelianum has concluded an agreement for the provision of security services, including video surveillance, handling payments or providing IT services.
Data storage period
Personal data shall be stored until the matter in which they have been collected has been settled, and then – in cases where the provisions of the Acts, including the Act of 14 July 1983 on National Archive Resources and Archives (Journal of Laws 2018, item 217 as amended) require it – for a period specified in those provisions.
Video surveillance data is processed for a maximum period of 3 months.
Rights of data subjects
According to the GDPR, you are entitled to:
a) access and receive a copy of your provided data;
b) rectify (correct) your data when they are inaccurate or out of date, as well as the right to erase them when the processing is not carried out for the purpose of complying with a legal obligation or in the exercise of a public authority;
c) restrict or object to the processing of the provided data;
d) lodge a complaint with the President of the Personal Data Protection Office (to the address of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa);
e) withdraw the consent if the processing is based on the consent given (including sending the Newsletter).
