Privacy notice for contractors concerning the processing of personal data in the Central Register of Contracts of Public Finance Sector Entities
Under Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ EU L of 2016, No. 119, p. 1, as amended), hereinafter referred to as the “GDPR”, please be informed that:
- The controller of your personal data is the Regional Centre for Cultural Animation in Zielona Góra, 65-431 Zielona Góra, ul. Henryka Sienkiewicza 11, telephone 501 577 329, email: sekretariat@rcak.pl.
- The controller has appointed a Data Protection Officer whom you may contact on all matters concerning the processing of personal data by email at inspektor@cbi24.pl or by writing to the controller’s postal address.
- Your personal data will be processed for the purpose of disclosing and updating, in the Central Register of Contracts of Public Finance Sector Entities (hereinafter “CRU JSFP”), contracts concluded by or on behalf of a public finance sector entity, because processing is necessary for compliance with a legal obligation to which the controller is subject (Article 6(1)(c) of the GDPR), in connection with Article 34a(1) of the Act of 27 August 2009 on public finance (consolidated text: Journal of Laws of 2025, item 1483, as amended).
- Your personal data will be retained in CRU JSFP for five years, counted from the end of the year in which the contract concluded with the controller ceased to be in force. After that period, the data will be deleted from that system.
- Your personal data will not be used for automated decision-making or profiling.
- Your personal data will not be transferred outside the European Economic Area, which comprises the European Union, Norway, Liechtenstein and Iceland.
- In connection with the processing of your personal data, you have the following rights:
a) the right to access your data and receive a copy of it;
b) the right to rectify (correct) your personal data;
c) the right to restrict the processing of personal data;
d) the right to erasure in the circumstances specified in the GDPR;
e) the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of personal data infringes the General Data Protection Regulation (GDPR). - Providing your personal data as a natural person who is a party to the contract is necessary to conclude and perform the contract, which entails an obligation to disclose and update information about the contract in CRU JSFP. If you do not provide the data, the contract cannot be concluded.
- Your personal data will be disclosed to entities authorised by law to process it. Data will be disclosed to the Minister of Finance, who maintains CRU JSFP. Personal data disclosed and updated in CRU is public and freely accessible to any Internet user.