NOTICE ON THE PROCESSING OF PERSONAL DATA
under the Norwegian Financial Mechanism 2014-2021 and the EEA Financial Mechanism 2014-2021
The processing of personal data under the Norwegian Financial Mechanism 2014-2021 and the EEA Financial Mechanism 2014-2021, hereinafter referred to as the NMF and the EEA Financial Mechanism, involves a number of entities that act as controllers within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) of 27 April 2016. (Official Journal of the EU. L No. 119, p. 1) (RODO) The controller of the personal data produced at the Foundation for the Development of the Education System, as well as the data provided to the Foundation for the Development of the Education System by other entities involved in the implementation of the NMF and the MF EEA - is the Foundation for the Development of the Education System , Aleje Jerozolimskie 142A, 02-305 Warsaw
I. Purpose of personal data processing
The purpose of data processing by the Foundation for the Development of the Education System is to carry out the tasks of the Education Programme Operator, resulting from the agreements indicated under the point: "Legal basis for personal data processing".
II. Legal basis of personal data processing
The legal basis for data processing is the implementation of the agreement on the implementation of the Education Programme under the European Economic Area Financial Mechanism 2014-2021 and on the Bilateral Cooperation Fund under the European Economic Area Financial Mechanism 2014-2021 and the Norwegian Financial Mechanism 2014-2021 concluded on 02.04.2019. between the Minister of Investment and Development and the Foundation for the Development of the Education System, i.e. Article 6(1)(f) RODO (i.e. necessity for the purposes of the legitimate legal interests pursued by the controller) and, in the case of a contract to which the natural person is a party, also on the basis of Article 6(1)(b) RODO (i.e. processing is necessary for the performance of a contract to which the data subject is a party), in relation to:
1) the Agreement between the Kingdom of Norway and the European Union on the Norwegian Financial Mechanism 2014-2021 (Official Journal of the EU. L No. 141, p. 11) and the Memorandum of Understanding on the Implementation of the Norwegian Financial Mechanism 2014-2021 concluded on 20 December 2017 in Warsaw and the Regulations on the Implementation of the Norwegian Financial Mechanism 2014-2021, hereinafter referred to as the "Regulations";
2) the Agreement between the European Union, Iceland, the Principality of Liechtenstein and the Kingdom of Norway on the EEA Financial Mechanism 2014-2021 (Official Journal of the EU. L No. 141, p. 3) and the Memorandum of Understanding on the Implementation of the EEA Financial Mechanism 2014-2021, concluded on 20 December 2017 in Warsaw and the Regulations on the Implementation of the European Economic Area Financial Mechanism 2014-2021, hereinafter referred to as the "Regulations":
3) the Programme Agreement of 08.03.2019 between the Minister of Investment and Development and the Financial Mechanism Committee on the co-financing of the Education Programme, and the Bilateral Cooperation Fund Agreement of 4 September 2018 between the Minister of Investment and Development and the FMC and the Norwegian Ministry of Foreign Affairs;
III. Types of data processed
In order to fulfil its tasks, the Foundation for the Development of the Education System processes data on:
1) persons involved in the preparation, handling and implementation of projects (name, surname, official position, name of the entity, address of the entity's registered office, telephone number, e-mail address);
2) participants of trainings, information and promotion events, conferences, committees, meetings and direct recipients of the projects (name, surname, official position, name of the entity, address of the registered office of the entity telephone number, e-mail address, image);
3) external consultants involved in the preparation of the application (name, surname, entity name).
IV. Source of data
1) The source of data is the applicants, beneficiaries and partners and entities involved in the implementation and execution of NMF and MF EEA.
Data is collected directly from data subjects or from entities involved in the implementation and delivery of NMF and MF EEA.
2) The provision of personal data is voluntary, but necessary to apply for project funding, to implement projects, and to carry out tasks under the Regulations/Programme Agreement/Project Implementation Agreement.
V. Data retention period
The personal data will be processed for a period of at least five years from the adoption of the final report for the programme by the institutions representing your Donors and, in the case of claims for non-performance or improper performance of the contract, for the period necessary to pursue possible claims.
After the expiry of the periods resulting from the Regulations, the personal data will be subject to archiving in accordance with the provisions of the Act of 14 July 1983 on National Archive Resources and Archives.
VI. Recipients of data
Data will be transferred to:
1) Donor States and entities performing tasks on the side of these States and the Minister of Investment and Development, acting as the National Focal Point - to the extent necessary to make decisions on the awarding of grants, payments, reporting, irregularities, audits, controls, monitoring visits and evaluations;
2) entities providing the Foundation for the Development of the Education System with services related to the operation and development of ICT systems and ensuring communication, in particular IT solutions providers and telecommunications operators, as well as entities providing consultancy services - to the extent necessary to take decisions on awarding grants, reporting, irregularities, audits, controls, monitoring visits and evaluation.
VII. Rights of the data subject
1) Data subjects whose data is processed in connection with the implementation of the NMF and MF EEA have the following rights:
1. to request the Data Controller to access their personal data or to rectify, erase or restrict their processing;
2. to lodge a complaint with the President of the Data Protection Authority.
2. Please send your request for the exercise of the above-mentioned rights to the addresses indicated in the section entitled: "Contact with the Data Protection Officer". In your correspondence, please add the note: "NMF and MF EEA Data Protection".
VIII. Information on automated decision-making, including profiling
Personal data will not be subject to automated decision-making, including profiling.
IX. Contact with the Data Protection Officer
The Foundation for the Development of the Education System has its registered office at: Aleje Jerozolimskie 142A, 02-305 Warsaw. If you have any questions, the FRSE Data Protection Officer can be contacted at:
- Aleje Jerozolimskie 142A, 02-305 Warsaw ,
- e-mail: iod@frse.org.pl
