Information on the processing of the Payer's personal data

Based on the so-called GDPR , i.e. Regulation of the European Parliament and of the Council (EU) 2016/679 of 27/04/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (General Data Protection Regulation), we would like to inform you that:

1. The administrator of the Payer's personal data indicated in the application form is the Gdańsk Foundation for Management Development with its registered office in Gdańsk (80-309) at al. Grunwaldzka 472;
2. Personal data will be processed by us for the purpose of:
   1. conclusion of a training contract between us (this contract will be hereinafter referred to as " Agreement ") and the correct implementation of the Agreement;
   2. fulfillment of our obligations under applicable law, in particular accounting regulations and tax regulations, including archiving obligations;
   3. possible pursuit of civil law claims or defense against such claims;
3. The basis for the processing of personal data is:
   1. in the case of processing for the conclusion and proper performance of the Agreement - art. 6 sec. 1 lit. b GDPR, i.e. processing is necessary to perform the contract to which you are a party, or to take action at your request before concluding the contract;
   2. in the case of processing in order to fulfill the obligations arising from the provisions of applicable law - art. 6 sec. 1 lit. c GDPR, i.e. processing is necessary to fulfill our legal obligation;
   3. in the case of processing for the purpose of possible pursuit of civil law claims or defense against such claims - art. 6 sec. 1 lit. f GDPR, i.e. processing is necessary for the purposes of the legitimate interests pursued by GFKM (we will hereinafter refer to this ground as " our legitimate interest "); our legitimate interest is to ensure the possibility of taking effective action in order to possibly pursue our claims against you, as well as possible defense against claims that you may refer to us.
4. You have the right to request access to your personal data, rectification and deletion, and also to request processing restriction and data transfer.
5. If the processing is based on our legitimate interest, you also have the right to object to the processing at any time - for reasons related to your particular situation.
6. Recipients of your personal data may be entities to which we are obliged to provide data on the basis of applicable law, trainers conducting training or entities employing such trainers, entities providing us with accounting services, IT services , courier and postal services as well as advisory services.
7. Personal data will be stored by us for a period of 6 years from the end of the training.
8. If you decide that the processing of your personal data is inconsistent with the provisions of the GDPR, you may lodge a complaint with the President of the Personal Data Protection Office.
9. Providing data is voluntary, but it is a condition for the conclusion and performance of the Agreement.
10. In the course of processing your personal data, there will be no automated decision-making, including profiling.
11. Your personal data will not be transferred to third countries (i.e. outside the European Economic Area) or to international organizations.
12. We have appointed a Data Protection Officer, whom you can contact by e-mail at odo@dev.itsorce.com/ gfkm . The data protection officer is not an inspector of personal data protection within the meaning of the GDPR.