Public procurement procedures conducted outside the Public Procurement Law
INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA IN CONNECTION WITH PUBLIC PROCUREMENTS THE VALUE OF WHICH DOES NOT EXCEED PLN 170 000 NET
Below, we provide information about the principles and rights you have in connection with the processing of your personal data. [1]
- Controller
The personal data controller (hereinafter referred to as the ‘Controller’) is the Statistical Office in Bydgoszcz, with its registered office in Bydgoszcz at ul. Ks. Stanisława Konarskiego 1-3, 85-066 Bydgoszcz.
- Data Protection Officer
You can contact the Data Protection Officer (DPO):
- by post to the following address: Urząd Statystyczny w Bydgoszczy, ul. Ks. Stanisława Konarskiego 1-3, 85-066 Bydgoszcz, with the note IOD
- by email to the email address: iod_usbdg@stat.gov.pl
- Purposes and legal basis for personal data processing
Your data will be processed for the purpose of awarding a public contract and archiving documents, and in the event of concluding a contract, for the purpose of implementing the subject of the contract.
Legal basis: legal obligation of the controller and performance of tasks in the public interest. [2]
- Recipients of personal data
Your data obtained in connection with the public procurement procedure may be transferred to interested entities and persons, as, as a rule, the public procurement procedure is public.
Your personal data will be made available to entities and persons who are entitled to access data under generally applicable law and to entities with which the Controller has concluded an agreement entrusting the processing of personal data (including technical support for systems, including financial and accounting systems and email).
- Period of storage of personal data
Your personal data collected as part of a public procurement process will be retained for the period designated by the archival category specified in the Uniform Subject File Plan for Statistics Poland and other statistical offices. For documents generated as part of public procurement, this period is 5 years. Civil law contracts, along with documentation related to their implementation, are retained for 10 years. The retention period is calculated from 1 January of the year following the date of completion of the case. After the retention period expires, non-archived documentation is subject to disposal, subject to approval by the director of the relevant state archive.
- Data sources
If your personal data were not collected directly from you, they were provided to us by the Contractor in connection with the fulfillment of the conditions for participation in the procedure or for communication as part of the procedure.
- Rights of the data subject
You have the right to:
- access to personal data, including the right to obtain a copy of such data;
- rectification (correction) of personal data;
- erasure of personal data where processing is not carried out for the purpose of fulfilling an obligation arising from a legal provision or in the exercise of official authority;
- restrictions on the processing of personal data, although separate provisions may exclude the possibility of exercising this right.
If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office.
- Voluntary provision of/obligation to provide personal data
Providing personal data is a necessary requirement for conducting the procedure. Failure to provide the required personal data may result in the Ordering Party having to reject the offer.
- Automated decision-making, including profiling
Your personal data will not be profiled and will not be subject to automated decision-making.
[1] Based on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as: GDPR) (OJ EU L 119, 04.05.2016, p. 1, as amended).
[2] Article 6(1)(c) and (e) of the GDPR, in particular in conjunction with Article 2(1)(1) of the Act of 11 September 2019 – Public Procurement Law (Journal of Laws of 2024, item 1320, as amended), the Regulation of the Minister of Development, Labour and Technology of 23 December 2020 on qualitative means of proof and other documents or statements that might be requested by contracting authority from the contractor (Journal of Laws of 2020, item 2415, as amended), the Act of 23 April 1964 – Civil Code (Journal of Laws of 2025, item 1071, as amended), the Act of 11 March 2004 on Value Added Tax (Journal of Laws of 2025, item 775, as amended), the Act of 14 July 1983 on the National Archival Resources and Archives (Journal of Laws of 2020, item 164, as amended), the Act of 6 September 2001 on Access to Public Information (Journal of Laws of 2022, item 902, as amended).