Information regarding the processing of personal data

According to art. 13 par. 1 and par. 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter referred to as "GDPR", we inform that:

  1. The controller of your personal data is Fundacja Ośrodek Badań Medycznych with a business address in Kraków (30-611), 37/7 Beskidzka Str., email: This email address is being protected from spambots. You need JavaScript enabled to view it..
  2. The controller attaches particular importance to respecting the privacy of users visiting the website www.nfic.pl (hereinafter the Website).
  3. Your personal data will be processed in order to enable the use of the Website functionality, such as, in particular: service requests, receiving applications, arranging appointments and other information provided via Contact Form.
  4. The legal basis for the processing of personal data obtained is art. 6 sec. 1 lit. a) GDPR. The data will be processed until withdrawal of consent or objection. The person whose data is processed has the right to withdraw his consent at any time. It does not affect the legality of the processing carried out before the withdrawal of consent.
  5. You have the right to access your personal data and the right to rectification, delete, restriction of data processing, the right to object to processing as well as the right to data portability. Requests in this regard should be directed to the controller.
  6. The controller does not intend to transfer your personal data to third countries or international organizations.
  7. You have the right to lodge a complaint with the supervisory authority when you feel that the processing of your personal data concerning you violates the provisions of the GDPR. The supervisory authority from 25 May 2018 is the President of the Office for Personal Data Protection.
  8. The transfer of your personal data to the controller is voluntary. However, failing to provide your personal data or providing incomplete personal data may significantly hinder or make it impossible for the controller to pursue to achieve the objectives set out in point 3.
  9. Due to the need to provide the Fundacja Ośrodek Badań Medycznych an appropriate organization, e.g. in the area of accounting, technical, IT infrastructure or current matters concerning the Company operations as an entrepreneur, personal data may be transferred to the following categories of recipients:
    a) service providers supplying the Company with technical and organizational solutions enabling implementation of the objectives referred to in point. 3, (in particular to ICT service providers);
    b) providers of legal, accounting, control and advisory services and supporting the Company in pursuing due claims (in particular law offices, financial institutions); c) other public bodies, institutions or entities authorized by law.
  10. Based on the personal data provided by you, the controller will not take automated decision-making against you, including profiling.