PRIVACY POLICY

‍

INFORMATION CLAUSE
‍

The administrator of personal data is iMindInstitute, ul. Stanisława Lentza 10A; 02-956 Warsaw, Poland, e-mail: info@imindinstitute.com

We process personal data in accordance with binding legal provisions: as part of the Institute's legitimate activity, in order to achieve its purposes with consent pursuant to Art. 6 (1) (a), Art. 9 sec. 2 lit. a GDPR (consent can be withdrawn at any time in the same way as it was expressed).

You can also send an email to withdraw your consent.

The withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal. Personal data may be transferred to authorized entities.

For the purposes related to the conclusion and performance of contracts, the implementation of projects pursuant to Art. 6 sec. 1 lit. b GDPR, for purposes related to recruitment, establishment and conduct of the employment/cooperation process pursuant to Art. 6 sec. 1 lit. a, b, c and Art. 9 sec. 2 lit. a, b and h GDPR, in order to comply with legal obligations pursuant to Art. 6 sec. 1c i Art. 9 para. 2 lit. b GDPR; for purposes arising from legitimate interests pursued by the Controller pursuant to Art. 6 sec. 1 f GDPR.

Personal data will not be transferred to third countries or to an international organization. The controller stores personal data for the period specified by law, including on the basis of the legitimate interest of the data controller. The Administrator guarantees the fulfillment of all rights arising from the GDPR.

The administrator does not use automated decision-making, including profiling. The Administrator informs about his right to lodge a complaint with the PUODO supervisory authority in connection with the processing of personal data. More about personal information at www.imindinstitute.com

‍

‍

Attachment 1 Policy at iMIND INSTITUTE

INFORMATION CLAUSE

In accordance with Article 13 sec. 1 and paragraph 2 and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter also GDPR), we inform you that:

The administrator of your personal data is iMIND INSTITUTE.

Regarding your personal data, you can contact:

a) by mail to the address: ul. Stanisława Lentza 10A, 02-956 Warsaw

b) by email: info@imindinstitute.com

We process your personal data:

a) within the authorized activities of the Institute

b) for the implementation of statutory purposes with your consent pursuant to Article 6 (1) (a) of the GDPR,

c) for the purposes related to the conclusion and performance of contracts, the implementation of projects pursuant to Art. 6 sec. 1 lit. b GDPR

d) for purposes related to recruitment, initiation and course of employment/cooperation/participation in the project pursuant to Art. 6 sec. 1 lit. a, b, c and Art. 9 sec. 2 lit. a, b and h GDPR,

e) in order to fulfill legal obligations incumbent on the Administrator, e.g. in the field of tax law, accounting regulations, labor law and other regulations applicable to the Administrator (legal basis: Article 6 (1c) and Article 9 (2) (b) of the GDPR);

f) for purposes arising from the rights of unjustified interests pursued by the Controller (legal basis: Article 6 (1) (f) of the GDPR).

Your personal data may be processed for the wrong purposes, with your consent (legal basis: Article 6 (1) (a), Article 9 (2) (a)), when the Controller asks you to give such consent.

Such consent may be withdrawn at any time in the same manner in which it was given.

To withdraw your consent, you can also send an email to info@imindinstitute.com. The withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.

Depending on the situation, there may be other grounds mentioned in Articles 6 and 9 of the GDPR legalizing the processing of personal data by the Administrator.

In connection with the organization of the Administrator's activities, your personal data may be transferred to the following categories of recipients:

(a) entities authorised by law;

b) entities entrusted with data processing on behalf of the Controller, e.g.

c) entities cooperating with the Administrator, service providers providing the Administrator with technical and organizational solutions, enabling the conduct of business activities and the provision of services, to the minimum extent necessary and justified performance of these services (including, for example, accounting, issuing service invoices)

Personal data in accordance with the provisions of the GDPR will not be transferred to third countries or an international organization (i.e. outside the European Union and to countries outside the European Economic Area).

The administrator stores your personal data:

a) However, regardless of the above, it is possible to store personal data on the basis of legal provisions for the period specified in these provisions in order for the Administrator to comply with legal obligations, including obligations specified in tax law, ZUS.

b) Also in the case of processing of personal data on the basis of the legitimate interest of the data controller, the storage period lasts until the aforementioned interest ceases (e.g. limitation of civil claims in accordance with the provisions of the Code) or until the data subject objects to further such processing

(c) in situations where the objection is justified in accordance with the law,

d) for archiving purposes in the field of data necessary, for example, to demonstrate accountability, i.e. to demonstrate compliance with the provisions on the processing of personal data, the Administrator stores data for the period during which he is obliged to store data or documents containing them to document compliance with legal requirements and to enable control of their compliance by public authorities.

The Administrator guarantees the fulfillment of all rights arising from the GDPR and to the extent indicated therein, i.e. the right to access, rectify, limit the processing of personal data, the right to transfer them, not to be subject to automated decision-making, including profiling and the right to object to the processing of personal data.

However, the right to erasure, i.e. the right to be forgotten, is not an absolute right and is limited to the extent indicated in Art. 17 sec. 3 GDPR.

The administrator does not currently use automated decision-making, including profiling.

In accordance with the requirements of the GDPR, the Administrator informs about your right to lodge a complaint with the supervisory authority PUODO (President of the Office for Personal Data Protection) in connection with the processing of personal data.

In the case of processing and personal data on the basis of a contract, the processing period lasts until the end of this contract.

In a situation where the Controller processes personal data on the basis of consent, the processing period lasts until the consent is withdrawn.