Privacy notice (suppliers)

Pursuant to the Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: GDPR), we inform that:

  1. Zachodniopomorski Uniwersytet Technologiczny w Szczecinie (hereinafter: ZUT) located in Szczecin, Poland (Piastów Avenue 17, 70310) is the controller of your personal data.
  2. Mr Artur Kurek is ZUT's data protection officer. He ensures that personal data is processed in compliance with the applicable data protection rules and can be contacted at IOD.kurek@zut.edu.pl.
  3. ZUT collects and processes personal data given to it, including to Regionalne Centrum Innowacji i Transferu Technologii (hereinafter: RCIiTT ZUT), by data subjects through e-mails, offers, order forms, delivery certificate forms, contracts and agreements (including civil law contracts, their attachments and bills), invoices or other similar documents submitted to the controller, as well as personal data publicly available in official databases (e.g. CEIDG, KRS, REGON), on websites etc. The data is processed in order to purchase products/services for RCIiTT ZUT or its clients, based on the legitimate interests of the controller  (art. 6(1)(f) of the GDPR). Categories of personal data made available to ZUT are defined in the templates of the order forms, delivery certificate forms, of contracts and agreements (including civil law contracts, their attachments and bills) or in e-mails, offers, invoices or other similar documents submitted to the controller.
  4. The legitimate interest of the controller is to follow the requirements of public procurement procedures (public tenders of up to 30 thous. Euro), to fulfil the statistical and archiving obligations of ZUT, to document activities of RCIiTT ZUT as well as to carry out contracts, be able to claim compensation, be prepared and maintain documents relevant for procurement audits (public tenders of up to 30 thous. Euro) and to provide high-quality services to its clients.
  5. Personal data is disclosed to the controller at your discretion, though ZUT may not be able to purchase products/services for RCIiTT ZUT or its clients without them.
  6. The controller may make your personal data available to a third party, namely to the administrator of RCIiTT ZUT's webpage (innowacje.zut.edu.pl), in case of publishing information on the webpage.
  7. Personal data is not disclosed to any other entity, except where it is required by law, including to auditors of RCIiTT ZUT's activities.
  8. Personal data is retained for a period necessary to achieve the goal for which you disclosed them, to fulfil the statistical and archiving obligations of the controller, to document activities of RCIiTT ZUT and to allow the controller to claim compensation, or until you object further data processing, without affecting the lawfulness of the data processing which took place before lodging the objection.
  9. You have the following rights concerning your personal data: to access them, to rectify inaccuracies, to be forgotten (data erasure), to data portability, to limit or object further data processing, without affecting the lawfulness of the data processing which took place before lodging the objection.
  10. You have the right to lodge a complaint with the Polish Data Protection Authority if you consider that the processing of your personal data by ZUT infringes the GDPR.

Szczecin 23/04/2020