Privacy Policy

(VERSION 1.0, EFFECTIVE FROM APRIL 30, 2026)

PERSONAL DATA PROTECTION

In accordance with Article 13(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the so-called General Data Protection Regulation) (“GDPR“), we hereby inform you  that:

PERSONAL DATA CONTROLLER

The controller of your personal data is (contact details): Łukasiewicz Research Network – PORT Polish Center for Technology Development with its registered office in Wrocław, 147 Stabłowicka Street, 54-066 Wrocław, KRS: 0000850580; NIP: 8943140523; e-mail: sekretariat@port.lukasiewicz.gov.pl (“Controller“).

DATA PROTECTION OFFICER

The Controller has appointed a Data Protection Officer (“DPO”). Contact with the DPO via e-mail: iod@port.lukasiewicz.gov.pl or in writing to the Controller’s address indicated above. We invite you to contact us in all matters related to the processing of your data.

LEGAL BASIS AND PURPOSE OF PROCESSING

Your personal data are processed on the basis of your consent – Article 6(1)(a) GDPR in order to receive a newsletter issued by the Controller as part  of P4Health Pulse, which contains information content on the development of the P4Health Center, its key stages and strategic activities.

The basis for the processing of personal data is also the legitimate interest of the Data Controller or a third party pursuant to Article 6(1)(f) of the GDPR as part of conducting marketing activities other than receiving newsletters or responding to messages sent by you or conducting correspondence on your initiative, as well as asserting rights and defending against claims.

RETENION PERIOD

Your personal data will be stored respectively for the period of conducting communication and marketing activities for the purposes of the newsletter or until the consent is withdrawn or the claims are time-barred and the rights of the Controller are protected, depending on which of these events occurs later.

The Controller may store personal data for a longer period than indicated in the previous sentence only when it results from the obligation imposed on the Controller by the provisions of generally applicable law and throughout the project P4Health implementation period and its durability period.

DATA RECIPIENTS

Subject to all data security guarantees, we may transfer your data to other entities, including entities authorized to receive them on the basis of applicable law, entities processing them on our behalf (e.g. providers of technical or IT services, entities providing hosting services, providers of analytical services, entities providing consulting services to us) and other administrators (e.g. notary or law firms). Your personal data may also potentially be disclosed in the mode of access to public information at the request of any interested party. The recipients of the data may be financing institutions for the purposes of project settlement.

TRANSFER OUTSIDE THE EUROPEAN ECONOMIC AREA

Your personal data will not be transferred to third countries or international organizations. If necessary to fulfil the purposes set out above, we may transfer your personal data to our recognised subcontractors or contractors in countries outside the EEA. Bearing in mind that the level of personal data protection in these countries may differ from that provided by the GDPR in the European Union, the transfer of data is carried out with an adequate level of protection, primarily through the verification of decisions of the European Commission.

The Controller is using Microsoft 365. Personal data may be transferred to a third country (USA) on the basis of the decision of the European Commission of 10 July 2023, stating the adequacy of the level of protection provided by the “EU-US Data Privacy Framework”, in connection with the use of solutions provided by Microsoft by the Controller. A list of entities that have joined the EU-US Data Protection Framework is available at: Participant Search (dataprivacyframework.gov).

In the absence of an appropriate decision by the European Commission: personal data may be transferred on the basis of standard contractual clauses used in contracts with such companies, or binding corporate rules approved by the competent supervisory authority, or on the basis of the conditions set out in Article 49 of the GDPR.

PROFILING

Decisions will not be made in an automated manner with regard to your personal data. There will also be no profiling based on them.

DATA PROVISION REQUIREMENT

Providing your personal data is voluntary. Failure to give consent must not be the basis for unfavourable treatment of you, nor must it cause any negative consequences for you. Providing Personal Data is voluntary, but it may be necessary, for example, to respond to a sent inquiry or for the purpose of conducting correspondence.

RIGHTS AND ENTITLEMENTS

To exercise your rights, please contact the Controller by e-mail at the above-mentioned contact details of the Data Protection Officer. You have the right to:

  1. access to the personal data provided;
  2. as a rule – rectification or completion of the personal data provided;
  3. as a rule – request restriction of the processing of personal data in the situations specified in Article 18 of the GDPR;
  4. as a rule – deletion of data (right to be forgotten). However, we would like to inform you that you do not have the right to erasure of your data (right to be forgotten), to the extent determined by Article 17(3)(b), (d) or (e) of the GDPR, as long as the basis for the processing of your data is Article 6(1)(c) of the GDPR (limited due to the fact that it is processing for the purposes resulting from the provisions of law – the Ordering Party must process this data in accordance with the law) or Article 6(1)(e) of the GDPR (to establishment, exercise or defence of claims);
  5. as a rule – transfer of personal data when the basis for processing is Article 6(1)(b) of the GDPR or on the basis of consent. However, we would like to inform you that: this right does not apply to processing that is necessary for the performance of a task carried out in the public interest and is limited in this procedure (Article 20(3) of the GDPR);
  6. object to the processing of personal data for direct marketing purposes and purposes based on Article 6(1)(f) of the GDPR; If you object to processing for direct marketing purposes, your personal data may no longer be processed for such purposes;

Right to withdraw consent

In the case of processing personal data on the basis of your consent, you may withdraw your consent at any time without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. The withdrawal of this consent does not affect the processing on this basis before its withdrawal.

Right to complain

You also have the right to lodge a complaint with the President of the Office for Personal Data Protection if you believe that the processing of your personal data by Controller violates the provisions of the GDPR.

If you have any doubts, please contact the Controller’s Data Protection Officer.

COOKIES

In accordance with the standard practice of most websites, Łukasiewicz – PORT (P4Health) stores HTTP requests sent to our server. The resources viewed are identified through their URLs.

The most important cookies used by our website include the following:

  1. session cookies for logged-in users,
  2. a cookie storing language information,
  3. cookies originating from the external Google Analytics tool,
  4. a cookie that stores information about closing the cookie information window (installed plugin),
  5. cookies storing information related to the ability to print articles (web pages) via the PrintFriendly plugin.

We do not use the cookie mechanism to collect any information about website users or to track their navigation. Cookies used on Łukasiewicz – PORT websites do not store any personal data or other information collected from users.

We do not associate these data with specific individuals browsing the Łukasiewicz – PORT pages. To ensure the highest quality of service, we analyze log files to determine which pages are visited most frequently, which web browsers are used, whether the website structure contains errors, etc.

We store collected logs for an indefinite period as supporting material for website administration. The information contained in them is not disclosed to anyone other than persons authorized to administer the server and the Łukasiewicz – PORT network. We may generate statistics from log files to support administration. Aggregate summaries in the form of such statistics do not contain any features that could identify visitors to the website.

Each user may disable the “cookies” mechanism in their device’s web browser. The operator notes that disabling cookies may, however, cause difficulties or prevent the use of the system.

Łukasiewicz – PORT is not responsible for the privacy policies or cookie collection policies of websites linked from this site.