Information on the processing of personal data of contractors and bidders

Information on the Processing of Personal Data of Contractors and Tenderers

concerning the project:

“Establishment and Support for the Operation of a Sectoral Skills Centre Implementing the Concept of Centres of Vocational Excellence (CoVEs) in the Field of Underground Mining, Processing of Metal Ores and Mineral Raw Materials”

This information applies to:

contractors/tenderers who are natural persons;
contractors/tenderers who are natural persons conducting sole proprietorship business activity;
representatives of contractors/tenderers who are natural persons, to the extent of personal data included in the power of attorney;
members of the management or supervisory bodies of a contractor/tenderer, partners in a registered partnership or professional partnership, general partners in a limited partnership or limited joint-stock partnership, or commercial proxies who are natural persons, to the extent of personal data included in information from the National Criminal Register;
specialist staff, to the extent of personal data included in documents confirming qualifications and experience.

Pursuant to Article 13(1) and 13(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, on the free movement of such data, and repealing Directive 95/46/EC, the General Data Protection Regulation, hereinafter referred to as GDPR, we hereby inform you that:

Personal Data Controller

The controller of your personal data is:

Górnicza Izba Przemysłowo-Handlowa
Mining Chamber of Industry and Commerce, hereinafter referred to as GIPH or the Chamber
ul. Kościuszki 30, 40-048 Katowice
Tel.: 32 757 32 52
E-mail: biuro@giph.com.pl
NIP: 634-10-12-786
REGON: 271505490

entered under KRS number 0000095169 in the Register of Entrepreneurs and also entered in the Register of Associations, Other Social and Professional Organisations, Foundations and Independent Public Healthcare Institutions, maintained by the District Court Katowice-Wschód in Katowice, 8th Commercial Division of the National Court Register.

Categories of Personal Data Processed

The Controller collects the following personal data of contractors and tenderers:

first name and surname, PESEL identification number, NIP tax identification number, place of employment, series and number of identity card, name of the contractor, address, contractor’s REGON number, e-mail address, and telephone number.

The data are obtained directly from the data subjects, or have been provided on their behalf, from publicly available sources, or from institutions and entities involved in the implementation of the project:

Purposes of Processing

Your personal data will be processed for the following purposes:

to conduct a market research procedure for the purposes of organising workshops under the project “Establishment and Support for the Operation of a Sectoral Skills Centre Implementing the Concept of Centres of Vocational Excellence (CoVEs) in the Field of Underground Mining, Processing of Metal Ores and Mineral Raw Materials”, including the collection of offers and selection of contractors for:
- room rental;
- catering organisation for participants;
- development and preparation of information and promotional materials for participants;
- conducting workshops;
- preparing and delivering presentations;
to confirm the eligibility of expenditure;
for reporting and information-promotional activities;
for monitoring, evaluation, inspection and audit;
for archiving purposes;
for the establishment, defence and pursuit of claims.

Legal Basis for the Processing of Personal Data

Your personal data will be processed on the following legal bases:

in the scope referred to in point 1 above — Article 6(1)(c) GDPR, for the purpose related to a contract award procedure conducted under the market research principle specified in the Guidelines on the Eligibility of Expenditure for 2021–2027;
in the scope referred to in points 2, 3 and 4 above — Article 6(1)(c) GDPR and Article 9(2)(g) GDPR — where personal data are necessary for the proper implementation of the project:

“Establishment and Support for the Operation of a Sectoral Skills Centre Implementing the Concept of Centres of Vocational Excellence (CoVEs)”
Agreement No.: KPO/22/1/BCU/U/44

implemented under the National Recovery and Resilience Plan, Investment A3.1.1. Support for the Development of Modern Vocational Education, Higher Education and Lifelong Learning.

Specific objective of the investment:
to provide space for effective cooperation between schools, including vocational schools, universities, employers, research and development centres and other business environment institutions, and to promote vocational education.

Scope of the investment:
establishment and support for the operation of 120 Sectoral Skills Centres implementing the concept of Centres of Vocational Excellence (CoVEs).

The data will be processed in connection with the performance of this contract.

Recipients of Personal Data

In connection with the processing of data for the purposes indicated above, your personal data may be disclosed to the following recipients:

employees and associates of the Controller;
entities providing IT, legal and accounting services to the Controller;
the Leader of the project “Establishment and Support for the Operation of a Sectoral Skills Centre Implementing the Concept of Centres of Vocational Excellence (CoVEs) in the Field of Underground Mining, Processing of Metal Ores and Mineral Raw Materials”;
the Coordinating Institution, i.e. the Ministry of Development Funds and Regional Policy, ul. Wspólna 2/4, 00-926 Warsaw, tel.: 22 250 01 30, e-mail: IOD@mfipr.gov.pl;
the Responsible Institution, i.e. the Ministry of National Education, Al. J.Ch. Szucha 25, 00-918 Warsaw, tel.: +48 222 500 120, e-mail: kancelaria@men.gov.pl;
the Supporting Unit, i.e. the Foundation for the Development of the Education System, with its registered office in Warsaw, Al. Jerozolimskie 142A, 02-305 Warsaw, entered in the Register of Associations, Other Social and Professional Organisations, Foundations and Independent Public Healthcare Institutions of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number 0000024777, NIP: 526-10-00-645, REGON: 010393032, tel.: +48 22 463 11 01, e-mail: iod@frse.org.pl;
entities exercising control and supervision over the implementation of the Controller’s tasks under the project;
other entities processing personal data on the basis of authorisation or in order to perform, on behalf of the Controller, activities related to the purposes of processing;
institutions and authorities authorised by law.

Period of Personal Data Processing

Your personal data will be stored for a period of 10 years if the support received under the contract constitutes state aid, and in other cases for a period of 5 years from the final balance payment.

In the event of a change in the mandatory documentation retention period, the Contracting Authority will notify the Contractor of the change, unless the change results from generally applicable provisions of law.

The data retention period may each time be extended by the limitation period for claims if the processing of data is necessary for the pursuit of claims or defence against such claims by the Organiser.

Transfer of Personal Data to Third Countries or International Organisations

Your personal data will not be transferred to countries or international organisations outside the European Economic Area.

Automated Processing of Personal Data

Your personal data will not be processed by automated means, including profiling.

This means that no decisions producing legal effects concerning you, or similarly significantly affecting you, will be based solely on automated processing of personal data, and your data will not be subject to such automatically made decisions.

Rights of Data Subjects

In connection with the processing of your personal data, you have the following rights:

the right of access to your data, pursuant to Article 15 GDPR;
the right to rectification of your data, pursuant to Article 16 GDPR;
the right to restriction of processing, pursuant to Article 18 GDPR.

Where the processing of personal data is based on your consent, pursuant to Article 6(1)(a) GDPR, you also have the right to:

object to the processing of personal data;
withdraw your consent at any time, to the extent that consent is the basis for the processing of your personal data.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

A statement withdrawing consent to the processing of personal data must be submitted in written, documentary or e-mail form to: biuro@giph.com.pl.

You do not have:

the right to erasure of personal data, in connection with Article 17(3)(b), (d) or (e) GDPR;
the right to data portability referred to in Article 20 GDPR;
the right to object to the processing of personal data under Article 21 GDPR, since the legal basis for processing your personal data is Article 6(1)(c) GDPR.

You have the right to lodge a complaint with the President of the Personal Data Protection Office if you consider that the processing of your personal data violates GDPR.

You may contact the Controller by sending an e-mail to: biuro@giph.com.pl.

Information on the Requirement or Voluntary Nature of Providing Personal Data

Providing data as part of the submitted offer is voluntary, but necessary to the extent that such data are processed for the purpose of conducting market research.

Refusal to provide the data will make it impossible for your offer to participate in the procedure.

Information on the Processing of Personal Data of Participants in Events Organised under the Project

Pursuant to Article 13(1) and 13(2) GDPR, we hereby inform you that:

Personal Data Controller

The controller of your personal data is:

Categories of Personal Data Processed

The Controller collects the following personal data of participants:

Participants of Virtual Job Fairs

first name and surname, telephone number, e-mail address, place of employment, position, NIP, and registered office address.

Participants of Study Visits

first name and surname, telephone number, e-mail address, residential address, date of birth, place of employment, position, name of educational institution or university, and special needs.

Participants of Conferences

first name and surname, telephone number, e-mail address, place of employment, position, name of educational institution or university, and special needs.

Purposes and Legal Bases of Processing

Your personal data will be processed for the following purposes:

conclusion and performance of an agreement consisting in ensuring your participation in events organised under the project and providing you with appropriate support — Article 6(1)(b) GDPR;
confirmation of the eligibility of expenditure — Article 6(1)(c) GDPR;
reporting and information-promotional activities — Article 6(1)(c) GDPR;
monitoring, evaluation, inspection and audit — Article 6(1)(c) GDPR;
archiving — Article 6(1)(c) GDPR;
establishment, defence and pursuit of claims — Article 6(1)(f) GDPR.

Recipients of Personal Data

Your personal data may be disclosed to:

employees and associates of the Controller;
entities providing IT, legal and accounting services to the Controller;
the Leader of the project;
the Coordinating Institution, i.e. the Ministry of Development Funds and Regional Policy;
the Responsible Institution, i.e. the Ministry of National Education;
the Supporting Unit, i.e. the Foundation for the Development of the Education System;
entities exercising control and supervision over the implementation of the Controller’s tasks under the project;
other entities processing personal data on the basis of authorisation or on behalf of the Controller;
institutions and authorities authorised by law.

Period of Personal Data Processing

Your personal data will be stored for a period of 10 years if the support received under the contract constitutes state aid, and in other cases for 5 years from the final balance payment.

The retention period may be extended by the limitation period for claims if the processing of data is necessary for pursuing claims or defending against such claims.

Transfer of Data Outside the European Economic Area

Your personal data will not be transferred to countries or international organisations outside the European Economic Area.

Automated Processing

Your personal data will not be processed by automated means, including profiling.

No decisions producing legal effects concerning you, or similarly significantly affecting you, will be based solely on automated processing of personal data.

Rights of Data Subjects

You have the right to:

access your personal data;
rectify your personal data;
request restriction of processing.

Where processing is based on consent, you also have the right to object to processing and to withdraw consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

You do not have the right to erasure of data, data portability, or objection where the processing is based on Article 6(1)(c) GDPR.

You have the right to lodge a complaint with the President of the Personal Data Protection Office.

Contact with the Controller: biuro@giph.com.pl

Information on the Requirement or Voluntary Nature of Providing Personal Data

Providing data is voluntary, but necessary to the extent required for participation in events organised under the project.

Refusal to provide the data may prevent participation in the relevant event or procedure.

Information on the Processing of Personal Data of Candidates for Experts and Experts of the Expert Team

for the preparation of a description of qualifications in the field of programming machinery and equipment used in the metal ore mining industry, under the project:

Pursuant to Article 13(1) and 13(2) GDPR, we hereby inform you that:

Personal Data Controller

The controller of your personal data is:

Categories of Personal Data Processed

The Controller collects the following personal data of participants:

first name and surname, telephone number, e-mail address, place of employment, position, NIP, residential address or registered office address, special needs, and bank account number.

Purposes and Legal Bases of Processing

Your personal data will be processed for the following purposes:

conducting market research and preparing a list of candidates for experts to participate in the work of the Expert Team for the preparation of a description of qualifications in the field of programming machinery and equipment used in the metal ore mining industry — Article 6(1)(b) GDPR;
confirmation of the eligibility of expenditure — Article 6(1)(c) GDPR;
reporting and information-promotional activities — Article 6(1)(c) GDPR;
monitoring, evaluation, inspection and audit — Article 6(1)(c) GDPR;
archiving — Article 6(1)(c) GDPR;
establishment, defence and pursuit of claims — Article 6(1)(f) GDPR.

Recipients of Personal Data

Your personal data may be disclosed to:

employees and associates of the Controller;
entities providing IT, legal and accounting services to the Controller;
the Leader of the project;
the Coordinating Institution, i.e. the Ministry of Development Funds and Regional Policy;
the Responsible Institution, i.e. the Ministry of National Education;
the Supporting Unit, i.e. the Foundation for the Development of the Education System;
entities exercising control and supervision over the implementation of the Controller’s tasks under the project;
other entities processing personal data on the basis of authorisation or on behalf of the Controller;
institutions and authorities authorised by law.

Period of Personal Data Processing

Your personal data will be stored for 10 years if the support received under the contract constitutes state aid, and in other cases for 5 years from the final balance payment.

The retention period may be extended by the limitation period for claims if the processing of data is necessary for pursuing claims or defending against such claims.

Transfer of Personal Data Outside the European Economic Area

Your personal data will not be transferred to countries or international organisations outside the European Economic Area.

Automated Processing

Your personal data will not be processed by automated means, including profiling.

No decisions producing legal effects concerning you, or similarly significantly affecting you, will be based solely on automated processing of personal data.

Rights of Data Subjects

In connection with the processing of your personal data, you have the right to:

access your data, pursuant to Article 15 GDPR;
rectify your data, pursuant to Article 16 GDPR;
request restriction of processing, pursuant to Article 18 GDPR.

Where processing is based on your consent, pursuant to Article 6(1)(a) GDPR, you have the right to:

object to the processing of personal data;
withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

A statement withdrawing consent must be submitted in written, documentary or e-mail form to: biuro@giph.com.pl.

You do not have:

the right to erasure of personal data, in connection with Article 17(3)(b), (d) or (e) GDPR;
the right to data portability referred to in Article 20 GDPR;
the right to object under Article 21 GDPR where the legal basis for processing is Article 6(1)(c) GDPR.

You have the right to lodge a complaint with the President of the Personal Data Protection Office if you consider that the processing of your personal data violates GDPR.

You may contact the Controller by e-mail at: biuro@giph.com.pl.

Information on the Requirement or Voluntary Nature of Providing Personal Data

Providing data as part of the submitted offer is voluntary, but necessary to the extent that such data are processed for the purpose of conducting market research.

Refusal to provide the data will make it impossible for your offer to participate in the procedure.

Branżowe Centrum Umiejętności – Górnictwa Rud 4.0. Projekt: „Utworzenie i wsparcie funkcjonowania Branżowego Centrum Umiejętności realizującego koncepcję centrum doskonałości zawodowej (CoVEs) dla dziedziny górnictwo podziemne, przeróbka rud metali i surowców mineralnych”. Projekt dofinansowany z Unii Europejskiej: 10 998 415,54 zł