Your personal data will be processed for the following purposes:

1. to maintain a register of individuals entering the controller’s facilities and to ensure security on the premises – based on the controller’s legitimate interest in safeguarding its facilities (Article 6(1)(f) GDPR).

Your personal data may be shared with entities processing data on behalf of the controller to support its day-to-day business operations (subcontractors, suppliers, including providers of external systems). Such entities act on the basis of a contract with the controller and only under the controller’s instructions.

Your personal data will not be transferred outside the EEA.

We carry out annual reviews, after which the data are deleted.

In relation to the processing of your personal data, you have the right to:

1. access your personal data and request rectification;
2. request the erasure of your data, under the conditions provided in Article 17 GDPR;
3. request restriction of processing, under the conditions provided in Article 18 GDPR;
4. object to processing under the conditions set out in Article 21 GDPR.

If you believe that the processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

Providing your personal data is mandatory under the internal regulations adopted by the controller.

We do not make any decisions that significantly affect you through automated means, including profiling.