Version 1.2. Publication date: 15 October 2024.

I. Personal Data Administrator

In the light of applicable legal provisions, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing the Directive 95/46/EC (General Data Protection Regulation), commonly referred to as GDPR, the administrator of your personal data (hereinafter: Personal Data Administrator) is the BRITISH-POLISH CHAMBER OF COMMERCE with its registered office in Warsaw, Zielna 37, 00-108 Warsaw, entered in the register of entrepreneurs, as well as in the register of associations, other social and professional organisations, foundations and independent public health care facilities of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register under TIN number (NIP): 5252800783, represented by Marcin Cichy – General Director.

Contact with the Personal Data Administrator is possible as follows:

by phone at: 668820899

via e-mail: rodo@bpcc.org.pl,

The contact person for GDPR matters from the Administrator is Jakub Piegat.

The Administrator has not appointed a Data Protection Inspector.

The Personal Data Administrator is responsible for using personal data in a safe manner and in accordance with applicable law.

II. Purpose and legal basis for the processing of personal data

Your personal data is processed for the purpose of:

  1. performance of current business and statutory activities by the Personal Data Administrator related to, among others, with supporting the matching of business partners, supporting the development of economic, trade and cultural relations between Poland and Great Britain, implementing national and international economic and cultural initiatives; cooperation with state and local government authorities in Poland and Great Britain in the field of economic, financial and cultural projects; cooperation with the British Embassy in Poland and the Embassy of the Republic of Poland in London; maintaining and developing a network of contacts with organisations in Great Britain and with other British Chambers abroad; active promotion of events in the Polish and British economy and culture; conducting research, especially on economic, trade and cultural relations between Great Britain and Poland; organising regular business meetings in selected cities in Poland and Great Britain; supporting the presence of British business entities in Poland; action for the development of entrepreneurship; participation in creating and promoting best market practices; submitting proposals and opinions to bodies with legislative initiative within the scope of the Chamber’s tasks,
  2. establishing and maintaining commercial relationships with suppliers, customers and service providers,
  3. conclusion and performance of other commercial contracts in connection with business activity,
  4. fulfillment of the Administrator’s legal obligations (e.g. to issue a VAT invoice),
  5. establishing, defending and pursuing claims,
  6. marketing of own services.

The legal basis for the processed personal data is primarily Art. 6 section 1 letter f GDPR, i.e. processing is necessary for the purposes of the legitimate interests of the Personal Data Administrator. The legitimate interest of the Personal Data Administrator results from the necessity of processing personal data to implement the Administrator’s economic activities and intentions.

In addition, the basis for the processing of personal data may also be Art. 6 section 1 letter b GDPR, in a situation where data is processed in connection with the conclusion or performance of a contract.

The administrator may potentially transfer personal data to a recipient in a third country or international organisation, in particular in connection with the use of IT tools whose suppliers are based outside the European Union.

III. Categories of personal data processed

The Personal Data Administrator processes the following categories of data: name and surname, job position, company name, business correspondence address, business e-mail address and business telephone number, bank account number.

If the Administrator requests personal data, providing it is not obligatory, but necessary for the purposes of establishing and conducting business cooperation between the Administrator and the contractor.

Personal data is not processed for the purpose of automated decision-making, including profiling.

Personal data comes directly from the data subject. If personal data do not come from the data subject, they are obtained from sources commonly available on the Internet (e.g. CEIDG, KRS, company website, etc.).

IV. Entities entrusted with personal data

Personal data is transferred:

  1. entities providing audit, consulting, financial, legal and tax advisory services to the Administrator,
  2. entities operating external servers,
  3. entities providing IT services.
V. Time of personal data processing

Personal data of contractors’ representatives will be stored for the period of economic cooperation between the Administrator and the contractor, as well as after its completion, when there are reasonable grounds for resuming this cooperation. Personal data of contractors’ representatives will be stored for a maximum period of 3 years from the date of the last contact between the parties, and longer only until the claims arising from the parties’ contract expire.

VI. Rights related to the processing of personal data by the Administrator

You have the right to:

  1. access to processed personal data – the person whose data is being processed has the right to request access to his or her personal data at any time, including the right to request information on whether his or her personal data is being processed and a copy of his or her personal data,
  2. rectification and supplementation of personal data being processed – the person whose data is being processed has the right at any time to request the immediate rectification of his or her personal data, as well as supplementing it, provided, however, that the Administrator will not have a legal basis that will enable him to refuse to rectify it or additions,
  3. deletion of processed personal data (the so-called right to be forgotten) – the person whose personal data is processed has the right to request the deletion of personal data concerning him/her. However, the administrator may refuse to exercise this right. This situation will occur primarily when, pursuant to applicable legal provisions, the Administrator is entitled or obliged to store personal data,
  4. restrictions on the processing of personal data,
  5. object to the processing of personal data.

The above rights can be exercised by submitting an appropriate application to the Administrator using the data indicated in point I. The Administrator has the right to verify the identity of the person exercising the rights indicated above.

Moreover, the person whose data is processed is entitled to request that personal data be transferred to another administrator, but only on the condition that the processing will be carried out in an automated manner, and it will be technically possible.

The processing of your personal data will not be based on your consent for processing.

VII. The right to lodge a complaint with the supervisory authority

If the processing of personal data violates the law, you have the right to submit a complaint to the supervisory authority regarding the processing of personal data by the Personal Data Administrator. A complaint may be submitted to the President of the Personal Data Protection Office (Office of the President of the Personal Data Protection Office, Stawki 2, 00-193 Warsaw).