Privacy Policy
GENERAL INFORMATION ON THE PROCESSING OF PERSONAL DATA BY THE ROAD AND BRIDGE RESEARCH INSTITUTE
PERSONAL DATA CONTROLLER
The controller of your personal data is the Road and Bridge Research Institute with its registered office in Warsaw, at ul. Instytutowa 1, 03-302 Warsaw, represented by the Director of the Institute.
You can contact the controller:
– by phone, at: + 48 (22) 39 00 139
– by e-mail, at: [**ibdim@ibdim.edu.pl**](mailto:ibdim@ibdim.edu.pl)
– in person or by post at the address of the registered office of the controller.
CONTACT IN MATTERS RELATED TO THE PROCESSING OF PERSONAL DATA
The controller has appointed a Data Protection Officer (hereinafter: DPO), whom you can contact in matters related to the processing of personal data; the DPO is Tomasz Jaguś. The DPO can be contacted:
– by e-mail at the DPO’s address: [iod@ibdim.edu.pl](mailto:iod@ibdim.edu.pl),
– by phone, at: +48 793 705 103,
– by post to the controller’s registered office address,
– in person at the controller’s registered office – in this case, we encourage you to contact us by e-mail in advance to arrange a convenient meeting date.
SECURITY OF YOUR DATA
Whenever we process your personal data, we do so in accordance with the requirements of the GDPR. We apply technical and organisational measures ensuring the security of the processing of your personal data, as required by law and by the changing security environment.
Regardless of how your personal data were obtained and for what purpose we process them, you will not be subject to decisions based solely on automated processing (without human involvement), including profiling.
DETAILED INFORMATION ON THE PROCESSING OF YOUR PERSONAL DATA
Detailed information on the purposes of processing your personal data, the corresponding legal bases and the resulting periods for which we process your personal data (Information clauses) can be found in the tabs below – each tab describes a separate category of persons whose data are processed by IBDiM; please select the appropriate category depending on your relationship with IBDiM.
PRIVACY POLICY OF THE WEBSITE:
This document contains information on the processing of your personal data by the Road and Bridge Research Institute in connection with the use of the content available on the website of the [Road and Bridge Research Institute](https://ibdim.edu.pl/) (hereinafter: the “Website”).
PURPOSES AND LEGAL BASES FOR THE PROCESSING OF PERSONAL DATA
We process your personal data for the following purposes:
| Purpose of data processing | Legal basis for data processing |
|---|---|
| Registration for courses, training sessions, seminars, conferences and other events organised by IBDiM | Art. 6(1)(b) GDPR – conclusion of the contract (including taking steps prior to its conclusion – registration for the event) and performance of the contract (organisation of the event, preparation of the certificate of participation) |
| Art. 6(1)(f) GDPR – legitimate interest: communication with contact persons regarding the performance of the contract (registered event participants) | |
| Art. 6(1)(f) GDPR – the legitimate interest of the controller, namely the promotion of the scientific activities of IBDiM – applies to the image captured in group photographs as part of photo coverage of events organised by IBDiM | |
| Art. 6(1)(a) GDPR – consent to the processing of personal data: applies to the image captured in individual (portrait) photographs – where it is published in publicly available services, i.e. on the IBDiM website, on IBDiM social media profiles or in promotional materials concerning events organised by IBDiM. Consent may be withdrawn at any time; its withdrawal does not affect the lawfulness of processing based on consent before its withdrawal | |
| Receiving enquiries and providing responses (via the form available on the Website or by e-mail, telephone or post) | Art. 6(1)(f) GDPR (legitimate interest – ensuring contact with the controller, receiving enquiries concerning the services it offers and providing responses) |
| Conducting promotional and marketing activities, including via electronic communication tools (e.g. e-mail) – sending a newsletter concerning IBDiM’s activities | Art. 6(1)(f) GDPR (legitimate interest – direct marketing of own services) |
| Art. 6(1)(a) GDPR (consent) – if you consent to receiving the newsletter, consent may be withdrawn at any time; its withdrawal does not affect the lawfulness of processing based on consent before its withdrawal | |
| Conducting analytical and statistical activities concerning user activity on the Website by means of cookies or other similar technologies. | Art. 6(1)(f) GDPR (legitimate interest – conducting analytical and statistical activities concerning the Website in order to develop and improve services) |
| Data archiving | Art. 6(1)(c) GDPR (compliance with a legal obligation to which the controller is subject) in connection with the performance of tasks set out in the Act of 14 July 1983 on the National Archival Resource and Archives (Journal of Laws of 2020, item 164, as amended) |
| Pursuing or defending against possible claims | Art. 6(1)(f) GDPR (legitimate interest) |
PERSONAL DATA RETENTION PERIOD
We will process personal data for the period necessary to achieve the purposes described above. Depending on the legal basis, this will be in particular:
– the period of the course, training session, seminar, conference or other IBDiM event for which you have registered;
– the period of correspondence or maintaining contact;
– until an objection to the processing of data is raised – applies to cases in which data are processed on the basis of legitimate interest (described in the table above);
– until consent is withdrawn – applies to cases in which data are processed on the basis of consent – e.g. sending the newsletter.
After the above period, personal data will be archived for the period during which the law requires us to store your data or for the period necessary to establish, pursue and defend claims – where applicable, and will then be deleted.
RECIPIENTS OF PERSONAL DATA
The recipients of your personal data are entities providing services to us such as IT services (provision or maintenance of IT systems, technical support services, hosting, website maintenance); legal, advisory, accounting, postal and courier services, as well as entities and authorities authorised to receive data under the law.
RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA
In connection with the processing of personal data, you have the following rights:
– the right of access to your data, the right to rectification of data, the right to erasure of data in cases provided for by law, the right to restriction of processing, the right to object – in cases where your data are processed on the basis of legitimate interest;
– if you believe that we process your data in a manner inconsistent with applicable law, you may also exercise the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) – however, before exercising this right, we suggest contacting our DPO to clarify any doubts.
Where we process data on the basis of your consent, you may withdraw it at any time.
If you wish to exercise your rights related to the processing of personal data or learn more about them, please contact our DPO.
OBLIGATION TO PROVIDE DATA
Providing data is voluntary, but may be necessary to achieve the purposes for which they are processed, i.e. registration for an event, responding to an enquiry or using the Website.
COOKIE POLICY
When you visit the Website (hereinafter also referred to as the “Service”), we may collect information from the user such as cookie identifiers and information collected through cookies or other similar technologies.
Cookies are IT data, in particular text files, which are stored on the user’s end device and are intended for use of the Website. Cookies usually contain the name of the website they originate from, the time they are stored on the end device and a unique number.
Identifiers of cookies, as well as information collected through cookies or other similar technologies, may in some situations constitute personal data.
The entity placing cookies on the end device of the Website user and obtaining access to them is the Website Operator, i.e. the Road and Bridge Research Institute.
Cookies are used for the purpose of:
– enabling the user to use the Website and ensuring the correct operation of its functionalities (necessary cookies);
– creating statistics that help understand how users of the Website use its web pages, which makes it possible to improve their structure and content (analytical cookies).
The Website uses two basic types of cookies: “session” cookies and “persistent” cookies. “Session” cookies are temporary files which are stored on the user’s end device until the user leaves the website or closes the software (web browser). “Persistent” cookies are stored on the user’s end device for the time specified in the cookie parameters or until they are deleted by the user.
The following types of cookies are used on the Website:
| \ | |||
|---|---|---|---|
| Cookie name | Retention period | Cookie type | Purpose\ |
| CookieScriptConsent | 1 year | Functional | Necessary. Stores information about the user’s choices regarding cookies (acceptance/rejection/consent categories).\ |
| CookieScriptConsent_expiry | 1 year | Functional | Necessary. Stores the expiry date of the consent given for cookies.\ |
| \_ga | 2 years | Analytical | Analytical. Used by Google Analytics to distinguish users. Stores and updates a unique, anonymous visit identifier.\ |
| \_ga_KVT4BYBR7L | 2 years | Analytical | Analytical. Used by Google Analytics 4 to store the session state associated with the GA4 property.\ |
| \_gid | 24 hours | Analytical | Analytical. Used by Google Analytics to distinguish users within a single day.\ |
When the user visits the Website for the first time, a banner will be displayed informing them about the use of cookies and enabling them to manage them. The user can manage the cookies installed on their device, i.e. consent to all categories of cookies or only some of them. The user may also withdraw the consents given at any time by clicking the “*Reject*” button. If the user accepts the installation of all categories of cookies, they should click the *“Accept”* button. To manage the cookie settings for a given cookie category, click the *“Cookie settings”* button, move the relevant switch on the cookies banner, and then click the *“Save and close”* button. The “*Cookie settings*” button is located in the bottom left corner of the Website. The option to manage cookies does not apply to necessary cookies, which cannot be disabled or rejected.
The user may also change the cookie settings at any time in the settings of the software used to browse websites (web browser). By default, the web browser allows cookies to be stored on the user’s end device. These settings may be changed in particular so as to block the automatic handling of cookies in the web browser settings or to notify the user each time they are placed on the Website user’s device. Detailed information on the options and methods of handling cookies is available in the web browser settings.
ANALYTICAL AND MARKETING TOOLS USED BY THE WEBSITE
Third parties may use cookies and similar technologies to collect or receive information from the Website or elsewhere on the Internet and use it to provide measurement services. By managing your cookie settings, you can decide whether you consent to the collection and use of information.
GOOGLE ANALYTICS
The Website uses Google Analytics, an online tool for analysing website statistics and web analytics that provides insight into the Website’s data traffic, supplied by Google. We use this tool to create statistics in order to adapt the content of our websites to Users’ preferences and to optimise them continuously.
You can prevent the installation of cookies by adjusting your web browser settings accordingly. You can also prevent Google from collecting data generated by cookies and relating to your use of the Website by installing a browser add-on that blocks Google Analytics scripts, available [here](https://tools.google.com/dlpage/gaoptout?hl=pl). More information about Google Analytics can be found [here](https://support.google.com/analytics/answer/6004245).
Due to the use of Google Analytics, personal data obtained in connection with the use of the Website may be transferred outside the European Economic Area. In such a case, the transfer of personal data takes place on the basis of standard contractual clauses concluded by the Controller with the tool provider. We encourage you to read the [data processing agreement](https://business.safety.google/adsprocessorterms/), including the [standard contractual clauses](https://business.safety.google/adsprocessorterms/sccs/) forming part of it.
Information on how Google uses data collected when using its partners’ sites and apps is available [here](https://policies.google.com/technologies/partner-sites).