INFORMATION ON PROCESSING OF PERSONAL DATA BY LUBLIN REGIONAL TOURIST ORGANIZATION
Pursuant to the Regulation 2016/679 of the European Parliament and of the Council (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the GDPR, OJ. L 2016, No. 119, p. 1), the Lublin Regional Tourist Organisation would like to inform you about the principles of processing of personal data required by the Regulation.
- Personal data controller
The Lublin Regional Tourist Organisation (hereinafter referred to as LROT) is the controller of your personal data. In matters relating to the processing of personal data, please contact us in writing at 1/3 Jezuicka Street, 20 – 113 Lublin, by e-mail: do@lrot.pl, or by phone at 81-532 14 48.
- Supervisory authority regarding personal data.
The supervisory authority regarding personal data in Poland is the President of the Office of Personal Data Protection, 2 Stawki Street, 00-193 Warsaw. You have the right to lodge a complaint to the supervisory authority if you think that the processing of your personal data violates the law.
III. Purpose and basis of personal data processing.
We process your personal data for the following purposes:
- in order to implement statutory rights and obligations related to the membership in LROT (legal basis: Art. 6 par. 1b and 1c of the GDPR) – if you are our member;
- in order to perform contractual obligations resulting from agreements concluded by LROT with contractors (suppliers of goods and services) (legal basis: Article 6 par. 1b of the GDPR);
- to send information on events organized or co-organized by LROT, its members and entities cooperating with LROT (legal basis: Art. 6 par. 1a and 1f of the GDPR);
- in order for LROT to send requests for proposals (legal basis: Art. 6 par. 1f of the GDPR);
- for archival purposes (evidence) to secure information in the event of a legal need to prove facts, which is our legitimate interest (legal basis: Art. 6 par. 1f of the GDPR);
- for possible investigation or protection against claims, which is our legitimate interest (legal basis: Art. 6 par. 1f of the GDPR).
- Categories of personal data processed by LROT.
We will process the following categories of your personal data:
Basic identification data: name, surname, name of the company (organisation), tax identification number, address of the head office, e-mail address, telephone number.
- Recipients of data.
We may share your personal data with the following categories of entities: subcontractors, namely entities whose services we use for the purpose of data processing, such as: IT service providers and accounting offices.
- Transfers of personal data to third countries or international organisations.
We do not transfer your personal data outside of the EU and the European Economic Area.
VII. Period of data storage.
Pursuant to Art. 13 par. 2a and Art. 14 par. 2a of the GDPR, we inform that:
- Your personal data obtained in order to conclude and execute the contract for the sale of our goods or services is stored and processed for the duration of the contract until the end of the period of limitation of potential claims under contracts concluded;
- We store your basic contact details for the purpose of direct marketing of our goods and services until: you object to their processing for this purpose; you withdraw your consent if we processed your data on the basis of marketing consent; or we determine that your personal data have become obsolete.
VIII. Your rights.
Pursuant to the provisions of the GDPR, you are have:
- a) the right to access your personal data and receive a copy thereof;
- b) the right to rectify (amend) your personal data;
- c) the right to erasure of your personal data;
If you think that your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, you can request that we erase them without undue delay.
- d) the right to restriction of processing;
You can request that we restrict the processing of your personal data only to storage or to performance of actions agreed upon with you, if you think that we have incorrect data about you or we process them unlawfully; or if you do not want us to erase them because they are needed to establish, investigate or defend claims; or for the time of your objection to the processing of data.
- e) the right to object to data processing (objection to direct marketing);
You have the right to object to the processing of your personal data for direct marketing purposes.
- f) the right to data transfer;
- g) the right to lodge a complaint with the supervisory authority;
- h) the right to withdraw consent to the processing of personal data.
You have the right to withdraw your consent to the processing of personal data, which we process based on your consent, at any time. Withdrawal of consent will not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
In order to exercise your rights, lodge a written request directly to the head office of the Lublin Regional Tourist Organization, 1/3 Jezuicka Street, 20 – 113 Lublin, by e-mail to the email address: do@lrot.pl or call us at 81 532 14 48. Remember, before executing your rights, we will have to confirm your identity.