Privacy policy

Fulfilling the information obligation resulting from art. 13 sec. 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119 of 04.05.2016), hereinafter referred to as “GDPR”, the Ordering Party informs that:

  1. Your personal data are processed by the Polish Tourist Organisation with its registered office in Warsaw, ul. Młynarska 42 (01-171), which acts as the data controller;
  2. A data protection officer has been appointed in the Polish Tourism Organisation, who can be contacted at: dpo@pot.gov.pl;
  3. Your personal data are processed on the basis of art. 6 sec. 1 f) of the GDPR for purposes related to registration for the conference and your participation in meetings aimed at integrating the organisational structures of tourism during the conference.
  4. Your personal data will be processed for the duration of the conference and then for the purpose of mandatory archiving of documentation for the period specified in the provisions of the Act of 14 July 1983 on the national archival resources and archives;
  5. in relation to your personal data, decisions will not be made in an automated manner, pursuant to art. 22 GDPR;
  6. you have:
    1. under Article 15 GDPR, the right to access your personal data;
    2. under Article 16 GDPR, the right to rectify your personal data;
    3. under Article 18 GDPR, the right to request that the controller restrict the processing of personal data, subject to the cases referred to in Article 18 paragraph 2 GDPR;
    4. under Article 21 GDPR, the right to object to the processing of personal data, as the legal basis for the processing of your personal data is Article 6 paragraph 1 letter f of the GDPR.
    5. the right to lodge a complaint with the President of the Personal Data Protection Office if you consider that the processing of your personal data violates the provisions of the GDPR;
  7. you are not entitled to:
    1. in connection with art. 17 sec. 3 letters b, d or e of the GDPR, the right to have your personal data deleted;
    2. the right to transfer your personal data, as referred to in art. 20 of the GDPR.