General information clause on the processing of personal data

Pursuant to Art. 13 Section 1 and 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union, L 119/1, 2016) (hereinafter referred to as “GDPR”), we kindly inform you about the methods and purpose for processing your personal data, as well as about the rights you are vested in which result from the General Data Protection Regulation:

1. The Mayor of Lublin, with the registered office at Plac Króla Władysława Łokietka 1, 20-209 Lublin, is the Controller of data we collect through your use of invest-in-lublin.com website.
2. At the Lublin Municipality Office we have appointed Mr Witold Przeszlakowski for the position of Inspector for the Protection of Personal Data and you can contact him for all matters related to the processing of personal data and exerting your rights related thereto by:
   • sending an email to iod@lublin.eu;
   • writing to Plac Króla Władysława Łokietka 1, 20–109 Lublin.
3. Your personal data is processed to:
   • comply with a legal obligation to which the Controller is subject (Art. 6 Section 1(c) of GDPR);
   • perform a task carried out in the public interest or in the exercise of official authority vested in the Controller (Art. 6 Section 1(e) of GDPR);
   • perform contracts (Art. 6 Section 1(b) of GDPR);
   • in other cases your personal data is processed only if you have given consent to the processing of your personal data to the extent and for the purpose specified in this consent (Art. 6 Section 1(a) of GDPR).
4. Current provisions of law, concluded contracts or your consent may provide a legal basis for the processing of your personal data.
5. We shall use your personal data until the achievement of the purposes set out in Section 3, and after this time for a period and to the extent required by current provisions of law.
6. Your personal data may be transferred to:
   • public authorities and bodies acting in the exercise of their public powers or commissioned by public authorities to the extent and for the purposes required by current provisions of law;
   • other entities which under applicable contracts signed with the Lublin Municipality process personal data controlled the Mayor of Lublin.
7. Your personal data may be processed automatically and shall not be subject to profiling.
8. Your personal data shall not be transferred outside of the European Economic Area (including the European Union, Norway, Liechtenstein and Iceland).
9. With regard to the processing of your personal data, you are vested with the right to:
   • access your personal data;
   • request to rectify / correct your personal data;
   • request to erase your personal data processed unlawfully; we inform you that where we are relying on consent to process your personal data, you have the right to repeal your consent at any time;
   • request restriction of the processing of your personal data;
   • object to the processing of your personal data on grounds relating to your particular situation – in cases where we process your data based on our legitimate interest;
   • portability of your personal data, i.e. the right to obtain your personal data from us. The right to data portability applies only to data we process based on your consent;
   • lodge a complaint with a supervisory authority if you consider the processing of your personal data infringes the provisions of the General Data Processing Regulation.
10. Where processing of your personal data is based on consent (Art. 6 Section 1(a) of GDPR), you have the right to repeal this consent at any time. Such repeal shall not affect compliance of the processing based on your consent prior to its repeal with current provisions of law.
11. Where processing of your personal data is based on consent, submission of your personal data to the Controller is voluntary.
12. Where processing of your personal data is based on a legal ground, submission of your personal data is mandatory.