University of Silesia in Katowice

Pursuant to Article 13(1) and (2) or Article 14(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the “GDPR”), we hereby inform you about the manner and purpose for which your personal data are processed, as well as your rights related to data protection, indicating that:

1. Data Controller
   1. The University of Silesia in Katowice, represented by the Rector;
   2. The Rector, as the managing body and the person responsible for the University’s finances, in the case of agreements subject to mandatory registration in the Central Register of Agreements of Public Finance Sector Entities.

The Data Controller may be contacted:

1. 1. By post at: ul. Bankowa 12, 40-007 Katowice, Poland;
   2. By e-mail: administrator.danych@us.edu.pl;

2. Data Protection Officer

You may contact the Data Protection Officer regarding all matters related to the processing of personal data and the exercise of rights connected with such processing:

1. 1. By post at: ul. Bankowa 12, 40-007 Katowice, Poland;
   2. By e-mail: iod@us.edu.pl;

3. Purposes and Legal Basis for Processing

The legal basis for the processing of your personal data is Article 6(1)(b), (c), (e), and (f) GDPR, namely:

a) The necessity to process personal data during the period preceding the conclusion of the Agreement (for the purposes of submitting an offer/negotiations) and during the performance of the Agreement (including signatures by representatives of the Consortium Members), its implementation, project settlement, and coordination by the natural persons designated by the Consortium Members as operational contacts;

b) Compliance with legal obligations incumbent upon the Controller, in particular obligations arising from accounting and tax regulations, as well as archival obligations under applicable law;

c) Compliance with legal obligations related to the statutory duty of the Controller to disclose and update information on agreements concluded by the University, as a public finance sector entity, in the Central Register of Agreements of Public Finance Sector Entities maintained by the Minister of Finance pursuant to Articles 34a and 34b of the Act of 27 August 2009 on Public Finance and the Regulation of the Minister of Finance and Economy of 30 March 2026 on the Central Register of Agreements of Public Finance Sector Entities;*

d) Performance of a task carried out in the public interest, in particular conducting scientific research, providing research services, and transferring knowledge and technology to the economy (Article 11(1)(3) of the Act of 20 July 2018 – Law on Higher Education and Science);

e) Establishment, pursuit, or defence of potential claims arising from the performance of the Agreement, constituting the legitimate interest of the Controller.

Providing personal data is necessary for taking steps prior to the conclusion of the Agreement (submission of an offer/negotiations) and for its performance (signing by the parties’ representatives), as well as for ensuring proper implementation by the natural persons designated in the Agreement as operational contacts for coordination and settlement of the Project. Failure to provide personal data will make it impossible to achieve the above purposes.

Personal data may also be obtained directly from the data subject if you voluntarily provide your personal data to the University of Silesia in Katowice within the framework of cooperation based on an agreement.

* This legal basis applies only where the concluded agreement must be mandatorily disclosed in the Central Register of Agreements.

4. Categories of Personal Data and Sources of Data Collection (applies where personal data are obtained from sources other than the data subject)

The Consortium Members have provided the University of Silesia in Katowice with personal data of their representatives, employees/cooperators specified in the Agreement or other contact details necessary for the implementation, coordination, and settlement of the Project, in particular: first name and surname, business e-mail address, business telephone number, academic degree/title, function/position, and place of employment.

5. Personal Data Retention Period

The Controller will retain personal data for the period necessary to document activities involving your participation related to actions taken prior to the conclusion of the Agreement and its performance, and for periods required by accounting and tax regulations and the project funding agreement. Where necessary for the establishment, pursuit, or defence of claims arising from the performance of the Agreement, data will be retained until the expiry of the relevant limitation periods. Documentation will be archived in accordance with applicable legal regulations.

With regard to the purpose referred to in Section 3(c), your personal data will be retained for a period of 5 years from the end of the year in which the Agreement ceased to be in force, pursuant to Article 34b(6) of the Act of 27 August 2009 on Public Finance.

6. Data Recipients

Your personal data may be disclosed to postal and courier service providers; public authorities or entities authorised to obtain data under applicable law; and other entities cooperating with us to the extent necessary and for purposes consistent with the implementation of the Agreement.

For the purpose described in Section 3(c), recipients of your personal data will include the Minister of Finance (as the authority maintaining the register) and any interested person due to the public and generally accessible nature of the Central Register of Agreements of Public Finance Sector Entities available on the official website of the Minister of Finance.

7. Rights Related to the Processing of Personal Data

You have the following rights regarding the processing of your personal data:

1. The right of access to your personal data;
2. The right to request rectification of inaccurate personal data and completion of incomplete personal data;
3. The right to request erasure of your personal data. This right shall not apply, in particular, where processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest;
4. The right to request restriction of processing of your personal data;
5. The right to object to the processing of your personal data, based on your particular situation, where processing is carried out on the basis of our legitimate interests, including direct marketing, or for the performance of a task carried out in the public interest. Note: In the case of direct marketing, you may object at any time regardless of your particular situation;
6. The right to data portability, i.e., the right to receive your personal data from us in a structured, commonly used, machine-readable format. You may transmit these data to another controller or request that we do so, provided that such transmission is technically feasible. This right applies only to personal data processed by automated means (electronically) on the basis of an agreement with you or your consent;
7. The right to lodge a complaint with the supervisory authority responsible for personal data protection, namely the President of the Personal Data Protection Office (UODO);
8. Your personal data will not be subject to automated decision-making, including profiling.