Personal Data Processing
Based on the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of
27 April 2016 on the protection of natural persons with regard to the processing of personal data and
on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as
“GDPR”), the User declares that they have been informed that:
The Data Controller is Poznan University of Technology, with its registered office at 5 M. Sklodowska-
Curie Square, Poznan, Poland, email: [email protected], phone: +48 61 665 3639. The
Controller has appointed a Data Protection Officer – Mr Piotr Otomański, who supervises the
compliance of personal data processing at Poznan University of Technology. The DPO can be contacted
via email at: [email protected].
Personal data will be processed on the basis of Article 6(1)(b), (c), (e), and (f) of the GDPR for the
purposes of: a) processing personal data during the period preceding the conclusion of the contract for
the purpose of submitting an offer or negotiation, and during the term of the contract, its
implementation, settlement, and coordination by individuals indicated for working contact, b) fulfilling
legal obligations incumbent upon the Controller, in particular those arising from accounting and tax
regulations, and archiving obligations according to applicable law, c) performing a task carried out in
the public interest, especially conducting scientific activities, providing research services, and
transferring knowledge and technology to the economy, d) establishing, pursuing, or defending
against any claims arising from the performance of the contract, which constitutes a legitimate
interest of the Controller.
The source of the personal data may be the data subject or the contracting party. The following
categories of data will be processed: personal data of representatives, employees/students/associates
– as indicated in the contract or other contact details necessary for its implementation, coordination,
and settlement, in particular: name and surname, business email, telephone number, academic
degree/title, function/position, and place of work.
The recipients of the data may include: a) public authorities and state offices or other entities
authorised by law or performing tasks carried out in the public interest or under public authority, b)
other entities which, under appropriate agreements signed with Poznan University of Technology,
process personal data for which the university is the Controller – in particular, IT service providers.
The Controller will store personal data for the period necessary to document activities involving the
data subjects, related to actions taken before the contract and its implementation, for the duration
required by accounting and tax regulations. In case of the need to establish, pursue or defend against
claims arising from this contract, data will be stored until such claims are time-barred. Documentation
will be archived in accordance with applicable laws.
In connection with the processing of personal data, the data subjects have (under the principles set out
in the GDPR) the following rights: the right of access to their personal data, the right to object, rectify,
delete, transfer and restrict the processing, as well as the right to lodge a complaint with the President
of the Personal Data Protection Office.
The transfer of personal data of SSPL participants and employees of Poznan University of Technology
(PUT) to the European Space Agency (ESA) will be conducted in accordance with applicable data
protection regulations, including the General Data Protection Regulation (GDPR). The data will be
shared strictly for the purpose of implementing the activities under the SSPL programme, such as
coordination of supporting research activities, participation in research tasks, and fulfilment of ESA's
internal procedures. All data transfers will be limited to the minimum necessary scope and will be
carried out under appropriate safeguards to ensure data confidentiality, integrity, and secure
processing. Prior to any transfer, data subjects are informed of the processing, and ESA is treated as a
trusted institutional partner with whom PUT has established clear roles and responsibilities in line with
data protection requirements.
Providing personal data is voluntary, but necessary for the conclusion and performance of the contract.
Personal data will not be processed in an automated manner, including profiling.