INFORMATION CLAUSE

Below you will find the necessary information regarding the processing of your personal data in accordance with the Regulation of the European Parliament
and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, - hereinafter referred to as RODO - in connection with your informed consent to participate in a medical experiment conducted at the Pomeranian Medical University in Szczecin ("PUM")

1. Identity of the data controller
The administrator of your personal data is the Pomeranian Medical University in Szczecin, ul. Rybacka 1, 70-204 Szczecin.

2. Contact details of the Data Protection Officer
For all matters relating to our processing of your personal data, you can contact the Data Protection Officer by email at iod@pum.edu.pl or by telephone at 914800790.

3. Processing purposes and legal basis

a. Purpose of processing

i. Achievement of the intended purpose of the medical experiment or development work in relation to normal data

ii. Fulfilment of the intended purpose of the medical experiment or development work in relation to the sensitive data referred to in Article 9(1) of the RODO, in particular health data and genetic data

iii. Exercise or defence of rights

iv. Internal administrative, analytical and statistical purposes

v. Further processing for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes

b. Legal basis

i. Article 6(1)(a) RODO

ii. Article 9(2)(j) RODO in conjunction with Article 469b of the

Higher Education and Science Act of 20 July 2018.

iii. Article 6(1)(f) RODO within the framework of the legitimate interest of the controller

iv. Article 6(1)(f) RODO within the framework of the legitimate interest of the controller

v. Article 6(1)(f) RODO within the framework of the legitimate interest of the controller

4. Recipients of data
Your personal data may be shared with the following categories of recipients:

a. entities to whom they must be made available under the law;

b. entities with whom we cooperate in order to achieve the intended purpose of the medical experiment, including other scientific entities, entities providing IT services and hosting, transport, courier, postal or document shredding services,

c. European Commission, the European Health and Digital Executive Agency in connection with the implementation and monitoring of the project

d. Other beneficiaries involved in project implementation

5. Data retention period
Your personal data, in terms of ordinary data, will be processed until you revoke your consent, but no longer than until the intended purpose of the medical experiment has been achieved. The special categories of data referred to in Article 9(1) of the RODO will be processed until the purpose of the medical experiment has been achieved or you have successfully lodged an objection. The period of processing of personal data may be extended until the statute of limitations for claims.
After the last of these periods, your personal data will be deleted or anonymised.

6. Rights of data subjects
In connection with our processing of your personal data, you can exercise the following rights of access to your data, rectification (amendment) of your data. You also have the right to lodge a complaint with the authority supervising compliance with data protection regulations, i.e. the President of the Office for Personal Data Protection.
Notwithstanding the above rights, you may object to processing carried out under the legitimate interests of the controller. Your personal data will then cease to be processed unless it is demonstrated that there are compelling legitimate grounds in relation to your data which override your interests, rights and freedoms, or your data are necessary for the possible establishment, assertion or defence of claims.
The lodging of an objection on the grounds of your particular situation is effective unless the processing proves to be necessary for the performance of a task carried out in the public interest.
To the extent that your data is processed on the basis of consent, you have the right to withdraw your consent to the processing of ordinary data at any time, but withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of that consent before its withdrawal.
However, insofar as any of the following rights - the right of access, the right of rectification, the right to restrict processing or the right to object - are likely to prevent or seriously impede the achievement of the intended purposes of the medical experiment, and if necessary for that purpose, the exercise of these rights will be excluded.
In order to ensure that you are entitled to exercise your rights we may ask you to provide additional information to enable us to identify you.

7. Information on freedom or obligation to provide data
The provision of data is voluntary, but necessary to ensure that the intended purpose of the medical experiment is achieved.

8. Additional information
Your personal data will be transferred outside the EEA as part of the Administrator's cooperation with other project beneficiaries based outside the EEA. The transfer of your personal data outside the EEA will be on the basis of a decision of the European Commission finding an adequate level of protection for personal data under third country legislation. To the extent necessary for the conduct of a medical experiment, it is permissible to process personal data as referred to in Article 9(1) of the RODO, provided that the publication of the results of such research and work is done in such a way that you cannot be identified. We do not make decisions by automated means, i.e. on the basis of automated data analysis.