INFORMATION CLAUSE IN THE PROCESSING OF PERSONAL DATA OF PARTICIPANTS OF PROJECTS /
EVENTS CARRIED OUT BY EDUCATION AGENCY FOR DEVELOPMENT AND INNOVATION IDEA NOT-
FOR-PROFIT SP. Z O. O. AND VISITORS TO ITS WEBSITE

Information on personal data protection
In view of the application as of 25 May 2018 of. Regulation (EU) 2016/679 of the European
Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to
the processing of personal data and on the free movement of such data and repealing Directive
95/46/EC (General Data Protection Regulation) (hereinafter: "RODO"), we provide you with the
following information on how we process subscribers' personal data, as well as on your rights in
relation to the processing of such data.
Your provision of personal data is voluntary but necessary to participate in an event / project /
debate organised by the IDEA. If you do not provide this data, it will be impossible for the IDEA to
provide you with information about activities, events and projects undertaken. For the rest, your
personal data may be processed on the basis of the other grounds for permissible processing
indicated in Article 6 of the RODO.

1. PERSONAL DATA CONTROLLER
The controller of your personal data is EDUCATION AGENCY FOR DEVELOPMENT AND INNOVATION
IDEA NOT-FOR-PROFIT SP. Z O. O. with its seat in Lomza (18-400), Ksiecia Janusza I 32 Street,
(hereinafter referred to as: "Administrator" or " IDEA ").
You can contact the Administrator as follows:
e-mail address: info@education-agency.eu;
correspondence address: Ksiecia Janusza I 32, 18-400 Lomza;
contact phone: +48 530-056-952;
The administrator processes your personal data for the following purposes: responding to enquiries,
presenting an offer, direct marketing of own projects and activities, realization of statutory
objectives, sending commercial information by e-mail and telephone, concluding and performing a
contract, realization of legal and tax obligations, defense against claims and vindication of possible
claims.

The legal basis for the processing of your personal data is Article 6(1)(b) and (f) RODO and other legal
acts, in particular the Act of 23 April 1964. – Civil Code (Journal of Laws of 2018, item 1025 as
amended).
The legitimate interest of the Administrator is the processing of data within the framework of a
relationship with a contractor or collaborator in the fulfilment of statutory objectives and the
processing of personal data for the purposes of direct marketing of its own projects and activities.

2. RECIPIENTS OF PERSONAL DATA
In connection with the processing of data for the above purposes, your personal data may be made
available to other entities processing data on behalf of the Controller, in particular in the field of IT,
legal, human resources, accounting, protection of persons and property or protection of personal
data, as well as by entities to whom the Controller makes personal data available on the basis of the
law, in particular to law enforcement agencies, control bodies and tax authorities.

3. PERIOD OF DATA RETENTION
Your personal data will be processed for the period necessary for the performance of the contract
and for the period required by the applicable law after the expiry of the contract, for archiving
purposes or for protection against and investigation of claims.

4. RIGHTS IN RELATION TO DATA PROCESSING
In relation to the processing of your personal data by the Controller, you have:
1. the right of access to the content of the data (Article 15 RODO).
This is the right to obtain confirmation from the Controller as to whether it is processing your
personal data and the right to obtain access to that data (including obtaining a copy of it), and in
particular to the following information: (i) about the purposes of the processing of your personal
data, (ii) about the categories of personal data processed, (iii) information about the recipients or
categories of recipients to whom the Controller has disclosed or intends to disclose your personal
data, (iv) about the possibility of exercising your data protection rights and how to exercise those
rights, (v) about the right to lodge a complaint with a supervisory authority, (vi) about profiling, as
well as about the consequences of such processing for you.
2. the right to rectification of data (Article 16 RODO)
This is the right to request from the Controller the immediate rectification of your personal data that
is inaccurate and to request the completion of incomplete personal data.
3. the right to erasure (Article 17 RODO)
This is the right to request from the Controller the immediate erasure of personal data concerning
you (also known as the "right to be forgotten"). The Controller is then obliged to delete your personal
data provided that one of the following conditions is met: (i) the personal data are no longer
necessary for the purposes for which they were collected, (ii) the consent on which the processing is
based has been withdrawn and the Administrator has no other legal basis for the processing, (iii) the
personal data have been unlawfully processed, (iv) the personal data must be erased in order to
comply with a legal obligation.
It is not possible to exercise the right to erasure of personal data where the Administrator is obliged
by law to continue processing personal data to the extent specified by the relevant law or for the
purposes necessary to establish, assert or defend claims.
4. the right to restrict data processing (Article 18 of the RODO)

This is the right to request the Controller to restrict the processing of your personal data in the
following cases where: (i) you dispute the accuracy of your personal data processed by the
Controller, (ii) the processing of your personal data is unlawful and you have objected to the erasure
of your personal data, (iii) the Controller no longer needs your personal data, but you need them to
establish, assert or defend your claims.
Where the right to restrict the processing of personal data is exercised, the Controller may process
your personal data, with the exception of storage, only with your consent or for the purpose of
establishing, pursuing or defending claims or for the protection of the rights of another natural or
legal person or for compelling reasons of public interest.
5. The right to object to the processing of your data (Article 21 RODO)
You have the right to object at any time to processing based on the legitimate interests of the
Controller (i.e. on the basis of Article 6(1)(f) RODO). In such a situation, the Controller will no longer
be able to process the data for these purposes, unless there are valid legitimate grounds or the data
are needed by the Controller to pursue a claim.
The right to object to the processing does not apply if: (i) the processing of personal data is carried
out on the basis of consent – in such a situation you may instead withdraw your consent, (ii) the
processing of data is necessary for the performance of a contract to which you are a party, (iii) the
processing is necessary for the Administrator to comply with a legal obligation.
6. right to data portability (Article 20 RODO)
This is the right to receive in a structured, commonly used format the personal data provided to the
Controller by you and to request that this personal data be sent to another controller, if technically
possible. You have this right if the data is processed in connection with a contract.

5. HOW TO EXERCISE YOUR RIGHTS
You are entitled to report the exercise of your rights referred to in section 5 as follows:
e-mail address: info@education-agency.eu;
correspondence address: Ksiecia Janusza I 32, 18-400 Lomza;
contact phone: +48 530-056-952.

6. COMPLAINT TO THE SUPERVISORY AUTHORITY
In cases where you consider that the Administrator's processing of your personal data violates the
provisions of the RODO, you have the right to lodge a complaint to the supervisory authority, i.e. the
President of the Office for Personal Data Protection at the address of the authority. i.e. Stawki 2
Street, 00 – 193 Warsaw.

7. AUTOMATED DATA PROCESSING
The Administrator shall not make decisions towards you in a solely automated manner, in particular
on the basis of profiling.