GDPR

Data Protection Officer

Ms Justyna Brejwo
email: daneosobowe@zzw.waw.pl

Deputy Data Protection Officer: Mirosław Brzeziński-Grondalczyk

GDPR Information Notice

In accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation “GDPR”), we hereby inform you of the rules governing the processing of your personal data and of your rights in this regard.

The following rules apply from 25 May 2018.

1. The controller of your personal data is: Zarząd Zieleni m.st. Warszawy, with its registered office at ul. Hoża 13a, 00-528 Warsaw (hereinafter referred to as “ZZW”).
2. If you have any questions regarding the manner and scope of the processing of your personal data within the scope of the activities of the Warsaw City Greenery Authority, as well as your rights, you may contact the Data Protection Officer at ZZW via the email address daneosobowe@zzw.waw.pl.
3. The data controller – the Warsaw City Greenery Authority – processes your personal data on the basis of applicable legal provisions, concluded contracts and the consent you have given.
4. Your personal data is processed for the following purpose(s):
   1. to fulfil the legal obligations incumbent on the Warsaw City Greenery Authority;
   2. to perform contracts concluded with ZZW’s contractors;
   3. in other cases, your personal data is processed solely on the basis of consent previously given, within the scope and for the purpose specified in the consent.
5. In connection with the processing of data for the purposes referred to in point 4, the recipients of your personal data may be:
   1. public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes arising from generally applicable law;
   2. other entities which, on the basis of relevant agreements signed with ZZW, process personal data for which the Controller is the Warsaw City Greenery Authority.
6. Your personal data will be stored for the period necessary to achieve the purposes set out in point 4, and thereafter for the period and to the extent required by generally applicable law.
7. In connection with the processing of your personal data, you have the following rights:
   1. the right of access to personal data, including the right to obtain a copy of such data;
   2. the right to request the rectification (correction) of personal data – where the data is inaccurate or incomplete;
   3. the right to request the erasure of personal data (the so-called ‘right to be forgotten’), where:
      • the data is no longer necessary for the purposes for which it was collected or otherwise processed,
      • the data subject has objected to the processing of personal data,
      • the data subject has withdrawn their consent to the processing of personal data, which forms the basis for the processing, and there is no other legal basis for the processing,
      • the personal data is being processed unlawfully,
      • the personal data must be erased in order to comply with a legal obligation;
   4. the right to request restriction of the processing of personal data – where:
      • the data subject disputes the accuracy of the personal data,
      • the processing is unlawful and the data subject objects to the erasure of the data, requesting restriction instead,
      • the controller no longer needs the data for its own purposes, but the data subject needs it to establish, exercise or defend legal claims,
      • the data subject has objected to the processing of the data, pending verification of whether the controller’s legitimate grounds override the grounds for the objection;
   5. the right to data portability – where all of the following conditions are met:
      • the processing is based on a contract with the data subject or on the data subject’s consent,
      • the processing is carried out by automated means;
   6. the right to object to data processing – where all of the following conditions are met:
      • there are grounds relating to your particular situation, where data is processed on the basis of a task carried out in the public interest or in the performance of tasks on behalf of the Capital City of Warsaw by the Controller,
      • processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
8. Where the processing of personal data is based on the data subject’s consent to the processing of personal data (Article 6(1)(a) of the GDPR), you have the right to withdraw that consent at any time. Such withdrawal does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
9. Should you become aware of any unlawful processing of your personal data by the Warsaw City Greenery Authority, you have the right to lodge a complaint with the supervisory authority responsible for data protection matters.
10. Where the processing of personal data is based on the consent of the data subject, the provision of your personal data to the Controller is voluntary.
11. The provision of your personal data is mandatory where the basis for processing personal data is a legal provision or a contract concluded between the parties.
12. Your data is not processed by automated means and will not be profiled.