Poland in Qatar

This information notice fulfils the obligation laid down in Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as the “GDPR” (OJ L 119, 4.5.2016, p. 1, and OJ L 127, 23.5.2018, p. 2).

1. Within the meaning of Article 4(7) of the GDPR, the controller of your personal data is the Minister of Foreign Affairs, with its registered office at Al. J. Ch. Szucha 23, 00-580 Warsaw, Poland. The Head of Mission of the Republic of Poland to the State of Qatar performs the duties of the controller in relation to personal data processed by the Embassy of the Republic of Poland in Doha, located at West Bay, Al-Qutaifiya, Zone 66, Street 913, Building 152, Doha, State of Qatar.

2. A Data Protection Officer (DPO) has been appointed for the Ministry of Foreign Affairs and its diplomatic missions abroad.

DPO contact details:

Address: Al. J. Ch. Szucha 23, 00-580 Warsaw, Poland

Email: iod@msz.gov.pl

3. Personal data are processed on the basis of the data subject’s consent, pursuant to Article 6(1)(a) of the GDPR, for the purpose of organising and administering participation in events and ceremonies organised or co-organised by the Embassy of the Republic of Poland in Doha, including registering participants, issuing and sending invitations, making access and security arrangements, and conducting organisational communication relating to such events and ceremonies.

4. Providing personal data is voluntary but necessary to participate in events and ceremonies organised or co-organised by the Embassy. Failure to provide the required data will make it impossible to register the participant, issue or send an invitation, make the necessary organisational, access or security arrangements, or otherwise enable participation in the relevant event or ceremony.

5. Personal data will be processed until the purpose referred to in point 3 has been fulfilled or until consent is withdrawn. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Thereafter, where applicable, the data will be retained for archival purposes in accordance with the Act of 14 July 1983 on National Archival Resources and Archives and the internal regulations of the Ministry of Foreign Affairs.

6. Access to the data is limited exclusively to only authorised employees of the Ministry of Foreign Affairs and the Embassy of the Republic of Poland in Doha.

7. Personal data may be disclosed to third parties and individuals authorised to access them under applicable law. Where necessary for the organisation of an event or ceremony, the data may also be disclosed to co-organisers and entities providing organisational, technical, security or access-control services. A separate category of recipients consists of entities processing personal data on behalf of the Controller under appropriate agreements, including IT service providers.

8. Personal data will not be transferred to third countries or international organisations.

9. Subject to the conditions laid down in the GDPR, the data subject has the right to request access to and rectification or erasure of their personal data, restriction of their processing and, where applicable, data portability. The data subject may withdraw their consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

10. Personal data will not be processed by automated means in a manner producing legal effects concerning the data subject or similarly significantly affecting them. Personal data will not be subject to profiling.

11. The data subject has the right to lodge a complaint with the supervisory authority at the following address:

President of the Personal Data Protection Office

ul. Stanisława Moniuszki 1A

00-014 Warsaw