The following privacy policy describes the scope and the purposes of the processing of the personal data of members and candidates for  members of Stowarzyszenie Prawa Zamówień Publicznych (hereinafter referred to as: „Stowarzyszenie PZP”), and the persons visiting the website of Stowarzyszenie PZP and using the contact form and consists of the all information required by law. The privacy policy also contains the information to what extent and for what purposes will be processed the data of the persons participating in the events organized by Stowarzyszenie PZP, recipients of the information on the events organized by Stowarzyszenie PZP and subscribers of the newsletter of Stowarzyszenie PZP.

The personal data is processed according to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as: „GDPR”) and regulation of Polish law implementing GDPR, in particular the Act of 10 May 2018 on the protection of the personal data (Journal of Laws of 2018, item 1000).

1. Data controller

The controller of the personal data of the members and candidates for members and the persons visiting the website and the persons participating in the events organized by Stowarzyszenie PZP, recipients of the information on the events organized by Stowarzyszenie PZP and subscribers of the newsletter of Stowarzyszenie PZP, as well as the persons using the contact form, is Stowarzyszenie Prawa Zamówień Publicznych with its registered seat in Warsaw, Zajęcza 4, 5th floor (Dentons), 00-351 Warszawa.

1. The categories of the data processed by Stowarzyszenie PZP

Stowarzyszenie PZP processes the personal data of the members and candidates for members of Stowarzyszenie PZP, including in particular:

• name and surname
• degree/professional title
• place of profession
• e-mail address (applies only to the members of Stowarzyszenie PZP)
• phone number (applies only to the members of Stowarzyszenie PZP)
• image (applies only to the members of Stowarzyszenie PZP)

Stowarzyszenie PZP processes also the personal data of the persons participating in the events organized by Stowarzyszenie PZP to the extent of:

• name and surname
• e-mail address
• name of the employing entity

Stowarzyszenie PZP processes also the personal data of the recipients of the information on the events organized by Stowarzyszenie PZP and subscribers of the newsletter of Stowarzyszenie PZP to the extent of:

• name and surname
• e-mail address

1. The purposes of the processing of the personal data and legal basis for the processing
   
   The personal data of the members and candidates for members of Stowarzyszenie PZP are processed for the following purposes:
   
   
2. The accession to the Stowarzyszenie PZP and realization of the statutory goals of  Stowarzyszenie PZP – on the basis of the Act of 7 April 1989 Law on associations (Journal of Laws of 2017, item 210, consolidated text) and on the basis of the legitimate interest pursued by Stowarzenie PZP which is the right to process personal data to the extent necessary to determine whether the candidate for  member meets the requirements set out in the Statute of Stowarzyszenie PZP, accept the candidates as members of Stowarzyszenie PZP and to realize the statutory goals of Stowarzyszenie PZP (legal basis: Article 6 (1)(c) of GDPR); provision of this data is voluntary, but necessary to access and participating in Stowarzyszenie PZP;
   
   
3. Information – the data of members are published on the website of Stowarzyszenie PZP (www.stowarzyszeniepzp.pl)  (hereinafter referred to as: „Association’s website”) to provide the information about its members, promote the image and activities of Stowarzyszenie PZP – on the basis of the legitimate interest pursued by Stowarzenie PZP (legal basis: Article 6 (1)(f) of GDPR); provision of this data is voluntary, but necessary to access and participating in Stowarzyszenie PZP;
   
   
4. Publication of the image – to promote the image of the members and the activity of Stowarzyszenie PZP by publishing the photos of the members on the Association’s website – on the basis of the consent of the members of Stowarzyszenie PZP (legal basis: Article 6 (1)(a) of GDPR); provision of this data is voluntary but necessary to the publishing of the image.

The personal data of the persons participating in the events organized by Stowarzyszenie PZP, recipients of the information on the events of Stowarzyszenie PZP and subscribers of newsletter of Stowarzyszenie PZP, are processed by Stowarzyszenie PZP for the following purposes:

1. registration and participation in the events organized by Stowarzyszenie PZP (legal basis: Article 6 (1)(b) of GDPR); provision of this data is voluntary, but necessary in order to participate in the events organized by Stowarzyszenie PZP
2. publishing of the image (Article 6 (1)(a) and Article 6 (1)(f) of GDPR); provision of this data is voluntary, but necessary for the publishing of  the image;
3. sending information about the events organized or co – organized by Stowarzyszenie PZP (legal basis: Article 6 (1)(f) of GDPR and Article 10 of the Act on rendering electronic services and Article 172 of the Act – Telecommunications law (if applies)); provision of this data is voluntary, but necessary to receiving from Stowarzyszenie PZP information on the events or newsletter.

The personal data of the persons visiting the website of the Stowarzyszenie PZP and using contact form will be processed by Stowarzyszenie PZP for the purpose of answering the questions asked via form (Article 6 (1)(b) and Article 6 (1)(f) of GDPR).

1. Information on the data recipients

The data recipients are entities providing services to Stowarzyszenie PZP, who in order to fulfil their obligations have an access to personal data processed by Stowarzyszenie PZP. Personal data of members and candidates for members of Stowarzyszenie PZP, and other persons whose personal data are processed, are not transferred to a third country.

1. Rights of persons whose data is processed by Stowarzyszenie PZP.

Each and every person whose personal data, referred in this Policy, are processed, is entitled to:

1. Access personal data – which means the right to obtain from Stowarzyszenie PZP information whether or not personal data concerning him or her are being processed, and to access to this data and to the information referred to in Article 15 (1) and Article 15 (2) GDPR;
2. Rectification of personal data – which means a right to request immediate rectification of data and to have incomplete personal data completed, including by means of providing a supplementary statement;
3. Erasure of data – which means right to request immediate erasure of personal data, if any condition, referred to in Article 17 (1) of GDPR, applies;
4. Restriction of data processing - which means right to request immediate restriction of personal data processing if any condition, referred to in Article 18 (1) of GDPR, applies;
5. Data portability – which means right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller if any condition, referred to in Article 20 (1) GDPR, applies;
6. Object to data processing - which means right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on a legitimate interest of Stowarzyszenie PZP or other controller of data, unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims
7. Lodge a complaint with a supervisory authority – every data subject have the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes GDPR;
8. Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Stowarzyszenie PZP is obliged to inform data subjects of any rectification or erasure of personal data or restriction of processing carried out.

1. Period for which the personal data will be stored
   
   Personal data of candidates for members of Stowarzyszenie PZP are kept in term necessary to determine whether the conditions of membership in Stowarzyszenie PZP as set out in the Statute have been met.
   
   Personal data of the members of Stowarzyszenie PZP are kept until the membership in Stowarzyszenie PZP ends or until the consent to data processing is withdrawn, if such processing takes place on the basis of the expressed consent.
   
   After the expiry of the above terms, Stowarzyszenie PZP destroys personal data, except when the storage of the abovementioned data is required by applicable law. Stowarzyszenie PZP may store this data also for exercise or defence of possible legal claims.
   
   The personal data of persons participating in the events organized by Stowarzyszenie PZP are processed for the time necessary to handle and settle the event, and may be stored during the period of limitation of claims. The personal data of the recipients of information on events organized by  the Stowarzyszenie PZP and subscribers of the newsletter of Stowarzyszenie PZP are processed for the period necessary to achieve the purposes of Stowarzyszenie PZP or until the consent is withdrawn or until object to processing of personal data. Regardless this, Stowarzyszenie PZP may process personal data of these persons during the period of limitation of claims.
2. Cookies

The portal uses cookie files to provide its users with access to specific functions, and to obtain information about visits to the website. The method of use and the types of cookies used to collect data are set out in the cookie policy: http://stowarzyszeniepzp.pl/en/cookie-policy