Information Clause on the Processing of Personal Data for Participants of the Event EU Innovation Journey' 25

In compliance with the information obligation under Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR) (OJ EU L 119, 04.05.2016, p. 1, as amended), hereinafter referred to as GDPR, we inform you that:

1. The controller of your personal data is the National Centre for Research and Development (hereinafter: "NCBR").
2. You may contact the data controller in the following ways:
   
   1. By mail at the controller's registered address: National Centre for Research and Development, ul. Chmielna 69, 00-801 Warsaw, Poland
   2. By phone: +48 22 390 74 01
   3. By email: kancelaria@ncbr.gov.pl
   4. Via the electronic submission box (ePUAP) at: /NCBiR/SkrytkaESP
3. The controller has appointed a Data Protection Officer (DPO), whom you can contact:
   
   1. By email: iod@ncbr.gov.pl
   2. By mail at the controller’s registered address: National Centre for Research and Development, ul. Chmielna 69, 00-801 Warsaw, Poland
   You may contact the Data Protection Officer for all matters related to the processing of personal data at NCBR and to exercise your rights under the GDPR.
4. Your personal data in the form of:
   
   1. Name, surname, institution/company name, email address, phone number, and information regarding accessibility needs will be processed for the purpose of organizing and conducting the EU Innovation Journey' 25, which will take place on May 12-13, 2025, in Warsaw. The legal basis for processing is Article 6(1)(e) and Article 9(2)(g) GDPR, in connection with the Act of April 30, 2010, on the National Centre for Research and Development and the Act of July 19, 2019, on ensuring accessibility for persons with special needs.
   2. Information regarding your dietary preferences will be processed for event organization purposes, based on Article 6(1)(a) GDPR (consent).
   3. Your voice and image will be processed for promotional and informational purposes, based on Article 6(1)(a) GDPR, in connection with Article 81(1) of the Act of February 4, 1994, on Copyright and Related Rights.
5. Recipients of your personal data may include entities authorized to process them under legal provisions or agreements with the Controller, in particular, entities supporting the Controller in fulfilling its rights and obligations and providing services, including:
   
   • Entities providing technical assistance for IT systems used by NCBR, as well as public relations, promotion, and stakeholder collaboration support: NCBR+ Sp. z o.o., ul. Chmielna 69, 00-801 Warsaw, Poland
   • The company organizing the event on behalf of NCBR: Silver Plate Sp. z o.o., ul. Belgradzka nr 8 lok. 60, 02-793 Warsaw, Poland
   • Additionally, your voice and image may be published on the NCBR website, social media, newsletter, and YouTube channel.
6. Your personal data, as specified in point 4(a), will be processed for the duration of the event's organization and execution. The data will then be stored permanently for archival purposes in accordance with the Uniform File Classification System of the National Centre for Research and Development. Personal data processed based on prior consent will be processed until consent is withdrawn.
<>Under GDPR, you have the right to request from the Controller:

1. Access to your personal data;
2. Rectification (correction) of your personal data;
3. Object to the processing of your personal data;
4. Erasure of your personal data or restriction of processing.
Where data processing requires consent, you have the right to refuse consent and, if consent has already been given, to withdraw it at any time. The withdrawal of consent does not affect the legality of processing conducted before the withdrawal.
7. If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with the supervisory authority:
   President of the Personal Data Protection Office
   ul. Stawki 2, 00-193 Warsaw, Poland
   Phone: +48 22 531 03 00
8. Providing personal data (name, surname, institution/company name, email address, and phone number) is mandatory to participate in the 8ra General Assembly 2025. Providing other data is voluntary.