Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the “GDPR”), we hereby inform you that:
The Controller of your personal data is the Institute of Archaeology and Ethnology of the Polish Academy of Sciences, with its registered office in Warsaw, Al. Solidarności 105, NIP: 5250008844, REGON: 000325788; telephone: (+48 22) 620 28 81 and (+48 22) 620 28 86, e-mail address: director@iaepan.edu.pl.
In all matters related to the processing of your personal data, you may contact the Data Protection Officer (DPO): Weronika Krakówka (e-mail address: iod@iaepan.edu.pl).
Your personal data will be processed for the following purposes:
a. your participation in the Event, including the recording of online or hybrid meetings during which your image will be processed, in accordance with the consent granted, pursuant to Article 6(1)(a) of the GDPR and Article 81(1) of the Act on Copyright and Related Rights. Recordings of the Event may be sent to other participants of the Event, or excerpts from such recordings may be published on the Controller’s social media channels and websites for the purpose of promoting its activities. In the case of participation in the Event remotely, turning on your camera shall be tantamount to granting consent to the recording of your image;
b. compliance with legal obligations incumbent upon the Controller, for example in the field of accounting settlements, pursuant to Article 6(1)(c) of the GDPR;
c. the proper organisation of the Event, as well as the pursuit or defence of claims related to participation in the Event, pursuant to Article 6(1)(f) of the GDPR, which constitutes the Controller’s legitimate interest;
d. sending information, marketing and commercial content to the indicated e-mail address, if you have given your consent, pursuant to Article 6(1)(a) of the GDPR.
The recipients of your personal data will be persons authorised by the Controller to process personal data as part of the performance of their official duties, as well as entities entrusted by the Controller with the performance of activities involving the necessity to process such data. In particular, these will include entities providing the Controller with accounting services, IT system administration services, and suppliers of electronic tools used for data storage.
Your personal data will be stored for the period indicated in the applicable provisions of law or until you withdraw your consent, if consent constitutes the basis for the processing of your personal data.
You have the right to request from the Controller access to your personal data, the right to rectify, erase or restrict the processing thereof, the right to object to processing, the right to data portability, and the right to withdraw your consent at any time.
If you consider that the processing of your personal data infringes the provisions of the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office.
The provision of your personal data is voluntary. Failure to provide personal data will result in the impossibility of participating in the Event.
The processing of your personal data will not be subject to automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR.
The Controller does not transfer personal data outside the European Economic Area (EEA). However, if such transfer takes place, the Controller shall comply with the requirements set out in the provisions of the GDPR, in particular those specified in Articles 44–47 of the GDPR.