Privacy Policy

Information clause regarding the processing of personal data

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation “GDPR”), we inform you about the principles of processing your personal data and about your rights related to it.

1) The administrator of your personal data is the State Water Holding Polish Waters with its registered office in Warsaw 00-848, 59a Żelazna Street.

2) Contact with the Data Protection Inspector is possible at the following address – iod@wody.gov.pl

3) Your personal data may be processed for the purpose of:

  • fulfilling legal obligations arising from the Act of 20 July 2017 – Water Law (consolidated text: Journal of Laws of 2018, item 2268, as amended) (legal basis: art. 6 sec. 1 letter c of the Regulation);
  • implementing contracts (legal basis: art. 6 sec. 1 letter b of the Regulation);
  • in other cases, your personal data will be processed only on the basis of previously granted consent to the extent and for the purpose specified in the content of the consent (legal basis: art. 6 sec. 1 letter a of the Regulation).

4) The recipients of your personal data may be public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes resulting from the provisions of generally applicable law.

5) Your personal data will be processed for the period necessary for implementation of goals indicated in point 3), and after that time for the period and to the extent required by the provisions of generally applicable law.

6) In connection with the processing of your personal data, you have the following rights:

  1. the right to access your personal data, including the right to obtain a copy of this data;

  2. the right to request the rectification (correction) of personal data – in the event that the data is incorrect or incomplete;

  3. the right to request the deletion of personal data (the so-called right to be forgotten), in the event that:
  • the data is no longer necessary for the purposes for which it was collected or otherwise processed,
  • the data subject has objected to the processing of personal data,
  • the data subject has withdrawn consent to the processing of personal data, which is the basis for data processing and there is no other legal basis for data processing,
  • the personal data is processed unlawfully,
  • the personal data must be deleted in order to fulfill the obligation resulting from the provisions of the law;
  1. the right to request the restriction of the processing of personal data – in the event that:
  • the data subject questions the accuracy of the personal data,
  • the processing of the data is unlawful and the data subject opposes the deletion of the data, requesting instead the restriction of the data,
  • the Administrator no longer needs the data for its purposes, but the data subject needs them to establish, defend or pursue claims,
  • the data subject has filed an objection to the processing of the data, until it is determined whether the legitimate grounds on the part of the Administrator override the grounds for the objection;
  1. the right to transfer the data – in the event that the following conditions are met:
  • the data is processed on the basis of an agreement concluded with the data subject or on the basis of the consent expressed by that person,
  • the processing is carried out in an automated manner;
  1. the right to object to data processing – if the following conditions are met:
  • there are reasons related to your special situation, in the case of data processing on the basis of a task carried out in the public interest or in the exercise of public authority by the Administrator,
  • processing is necessary for the purposes resulting from legitimate interests pursued by the Administrator or by a third party, except for situations in which the interests or fundamental rights and freedoms of the data subject, requiring the protection of personal data, override these interests, in particular when the data subject is a child.
  1. In the event that the processing of personal data takes place on the basis of the person’s consent to the processing of personal data (Article 6 paragraph 1 letter a of the GDPR), you have the right to withdraw this consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of your consent before its withdrawal.

  2. If you believe that the processing of your personal data by the Administrator violates the provisions of the law, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

  3. Providing your personal data is mandatory when the premise for processing personal data is a legal provision or an agreement concluded between the parties, in the case where the processing is based on consent, providing personal data to the Administrator is voluntary.

  4. Your data may be processed in an automated manner and will not be profiled.