Information on the processing of personal data - contracts/agreements/cooperation | US Bydgoszcz | GUS - Portal Informacyjny

Information regarding the processing of personal data in connection with the conclusion and implementation 
of contracts/cooperation/agreements

Below, we provide information about the principles and rights you have in connection with the processing of your personal data. ^[1]

1. Controller

The controller of your personal data is the Statistical Office in Bydgoszcz, with its registered office in Bydgoszcz (85-066) at ul. Ks. Stanisława Konarskiego 1-3, hereinafter referred to as the ‘Controller’.

1. Data Protection Officer

You can contact the Data Protection Officer (DPO):

1. by post; address: IOD Urząd Statystyczny Bydgoszczy, ul. Ks. Stanisława Konarskiego 1-3, 85-066 Bydgoszcz;
2. by email; email address: iod_usbdg@stat.gov.pl .
3. Purposes and legal basis for personal data processing

The purpose of processing your personal data is:

1. conclusion and proper implementation of contracts/agreements/cooperation,
2. fulfillment of legal obligations incumbent on the controller, which result from legal provisions (including tax regulations, access to public information, archiving).

The legal basis for processing your personal data is:

1. the legitimate interest of the Controller or a third party consisting in the proper and efficient implementation of concluded contracts/agreements/ongoing cooperation,
2. fulfilling obligations specified in legal provisions (including tax, access to public information, archiving) ^[2] .
3. Data categories

We will process your personal data to the extent necessary to conclude and/or implement the contract/agreement/cooperation, including ensuring contact (in particular, we will process personal data such as: forename and surname, name and address of the entity you represent, job position, telephone number, email address).

1. Recipients of personal data

We may make your personal data available to entities and persons who are entitled to access data under generally applicable law [3]

A separate category of recipients to whom we may share your personal data are entities authorised to handle deliveries and entities with which the Controller has concluded an agreement entrusting the processing of personal data in the scope of technical support of systems, including the email system and the financial and accounting system.

1. Period of storage of personal data

Your personal data will be processed for the period necessary to implement contracts/agreements/cooperation, and then for the periods resulting from: office and archiving regulations [4] and the Uniform Subject File Plan for statistical offices [5] .

1. Rights of the data subject

You have the right to:

1. access to personal data, including the right to obtain a copy thereof;
2. request rectification (correction) of personal data;
3. request the erasure of personal data if they are not erased by the Controller within the above-mentioned period;
4. request to limit the processing of personal data;
5. lodge a complaint with the President of the Personal Data Protection Office if, in your opinion, the processing of your personal data violates the provisions of the GDPR.

Furthermore, since the basis for the processing of your personal data is Article 6(1)(f) of the GDPR, you have the right to object to the processing for reasons relating to your particular situation.

1. Voluntary provision of/obligation to provide personal data

Providing personal data is voluntary, however, failure to provide certain data may make it difficult or impossible to implement the contract/agreement/cooperation.

1. Data source

If we did not obtain your personal data directly from you, it was made available to us by the entity with which we cooperate (for the purpose of implementing a contract or agreement or ongoing cooperation).

1. Automated decision-making, including profiling

Your personal data will not be:

1. profiled;
2. subject to automated decision-making.

[1]  Based on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as: GDPR) (OJ EU L 119, 04.05.2016, p. 1, as amended).

[2]  Article 6(1)(f) of the GDPR and Article 6(1)(c) in conjunction with the Act of 23 April 1964 – the Civil Code (Journal of Laws of 2025, item 1071, as amended), the Act of 14 July 1983 on the National Archival Resources and Archives (Journal of Laws of 2020, item 164, as amended), the Act on Goods and Services Tax (Journal of Laws of 2025, item 775, as amended), and the Act on Access to Public Information (Journal of Laws of 2022, item 902).

[3] including, amongst others, tax authorities, courts, supervisory bodies, and persons requesting access to public information (to a limited extent).

[4] The Act of 14 July 1983 on the National Archival Resources and Archives (consolidated text: Journal of Laws of 2020, item 164, as amended) and the Regulation of the Minister of Culture and National Heritage of 20 October 2015 on the classification and categorisation of records, the transfer of archival materials to state archives and the disposal of non-archival records (Journal of Laws of 2019, item 246, as amended).

[5]  Annex to Order No. 17 of the President of Statistics Poland of 19 December 2019 on the introduction of the Records Management Instruction for organisational units of the official statistics services and the Uniform Subject File Plan for Statistics Poland and statistical offices.