Privacy Policy – BaltSec.pl

1.      Data Controller

The data controller is Fundacja Instytut Nordycki, with its registered office at ul. Prof. Siedleckiego 7, 84-120 Władysławowo, Poland.
For all data protection inquiries, please contact: kontakt@instytutnordycki.com.

2.      Scope of Data Processing

Through registration forms (Google Forms), we process the following personal data:

• full name,
• email address,
• company / organization and position,
• abstract (in case of speaker applications).

3.      Purpose and Legal Basis of Processing

Personal data is processed for the purposes of:

• collecting applications for the BaltSec event,
• selecting participants and speakers,
• maintaining organizational contact with applicants.

The legal bases for data processing are:

• Article 6(1)(b) GDPR (processing necessary for the consideration of the application and participation in the event),
• Article 6(1)(f) GDPR (legitimate interest of the controller related to event organization).

4.      Data Recipients

Data may be shared with service providers we use to organize the event, in particular:

• Google Ireland Limited (provider of Google Forms),
• IT and hosting service providers,
• event partners (e.g., sponsors, co-organizers) – only to the extent necessary.

5.      Data Transfer Outside the EEA

By using Google services (Google Forms), data may be transferred outside the European Economic Area. Google applies Standard Contractual Clauses in accordance with GDPR.

6.      Data Retention Period

Data will be stored until the end of recruitment and organization of the event, and thereafter for a maximum of 24 months for archival and evidential purposes.

7.      Rights of Data Subjects

Each individual whose data is processed has the right to:

• access their data,
• rectify their data,
• erase their data,
• restrict processing,
• object to processing,
• data portability,
• lodge a complaint with the supervisory authority (President of the Personal Data Protection Office in Poland).

8.      Voluntary Provision of Data

Providing personal data is voluntary; however, failure to provide such data will make participation in the registration process impossible.

9.      Contact

For any matters related to the processing of personal data, please contact: kontakt@instytutnordycki.com.