Poland in Cyprus

This information is provided in fulfilment of the obligation set out in Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).

1. Data Controller

The data controller, within the meaning of Article 4(7) of the GDPR, is the Minister of Foreign Affairs of the Republic of Poland, with its registered office at Al. J. Ch. Szucha 23, 00-580 Warsaw, Poland.

The entity carrying out the controller's obligations in connection with the organisation of the event is the Embassy of the Republic of Poland in Nicosia, located at:

Kennedy Avenue 12-14, Office 601, 1087 Nicosia, Cyprus.

2. Data Protection Officer

A Data Protection Officer (DPO) has been appointed at the Ministry of Foreign Affairs and its foreign missions.

DPO contact details:

Address: Al. J. Ch. Szucha 23, 00-580 Warsaw, Poland
E-mail: iod@msz.gov.pl

3. Purpose and legal basis for processing

Your personal data are processed on the basis of Article 6(1)(a) of the GDPR, i.e. your consent, for the purpose of organising and facilitating your participation in events organised or co-organised by the Embassy of the Republic of Poland in Nicosia.

4. Voluntary provision of personal data

Providing your personal data is voluntary; however, it is necessary in order to participate in the event.

5. Data retention period and withdrawal of consent

Your personal data will be processed until the purpose of processing referred to in point 3 has been fulfilled or until you withdraw your consent to the processing of your personal data.

Consent may be withdrawn at any time by sending a notification to:

nikozja.amb.sekretariat@msz.gov.pl

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

6. Access to personal data

Access to your personal data is restricted to authorised employees of the Ministry of Foreign Affairs of the Republic of Poland and the Embassy of the Republic of Poland in Nicosia, to the extent necessary for the performance of their official duties.

7. Recipients of personal data

Personal data may be disclosed to third parties or entities authorised to access such data under applicable laws.

Another category of recipients consists of entities processing personal data on behalf of the Data Controller, in particular under relevant agreements, such as IT service providers.

8. Transfer of personal data to third countries

Your personal data will not be transferred to third countries or international organisations.

9. Rights of data subjects

You have the right to exercise control over the processing of your personal data, as provided for in Articles 15–19 of the GDPR, in particular:

• the right to access your personal data;

• the right to rectify inaccurate or incomplete personal data;

• the right to erasure of your personal data;

• the right to restrict the processing of your personal data, where applicable.

10. Automated decision-making and profiling

Your personal data will not be subject to automated decision-making, including profiling, which would produce legal effects concerning you or similarly significantly affect you.

11. Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority:

President of the Personal Data Protection Office (UODO)
ul. Moniuszki 1A
00-014 Warsaw
Poland