Personal data processing at the Office of Competition and Consumer Protection

The Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), came into effect on 25 May 2018.

Consequently, we would like to provide you with information on the processing of personal data at the Office of Competition and Consumer Protection (UOKiK).

Data controller

The data controller is the President of the Office of Competition and Consumer Protection, pl. Powstańców Warszawy 1, 00-950 Warsaw. Contact details of the Data Protection Officer: [SCODE]aW9kQHVva2lrLmdvdi5wbA==[ECODE].

Purposes of personal data processing

The President of the Office of Competition and Consumer Protection will process your personal data in order to protect competition and consumers, monitor public aid, prevent payment backlogs, verify product safety, fuel quality, to exercise market supervision, including CE compliance, to provide protection against contractual advantage in agriculture, to coordinate control measures implemented by the Trade Inspection Authority with regard to businesses involved in manufacturing, trade and services.

Grounds for processing

The legal ground for the processing of your personal data is the legal duty of the President of the Office for Competition and Consumer Protection resulting from the statutes imposing the obligation to perform a specific task (Article 6(1)(c) of the GDPR), such as the Act of 16 February 2007 on competition and consumer protection, and many other legislative acts regulating the powers of the President of the Office for Competition and Consumer Protection. A detailed list of the legislative acts can be found at www.uokik.gov.pl in the Law section.

The legal grounds for data processing also include the performance of a task carried out in the public interest or in the exercise of official authority vested in the Office of Competition and Consumer Protection (Article 6(1)(e) of the GDPR).

The data may be processed if this is necessary for the performance of a contract or in order to take steps prior to entering into a contract (Article 6(1)(b) of the GDPR), and if consent has been given (Article 6(1)(a) of the GDPR).

If your data are processed under your consent, you have the right to withdraw your consent at any time, while the withdrawal of consent will not affect the lawfulness of prior processing.

Recipients of personal data

Your personal data may be transferred to public administration bodies, justice administration entities (courts), law enforcement agencies (police and public prosecution service) and other entities authorised by law or performing tasks in the public interest or in the exercise of public authority.

Data processing period

The storage period of your personal data is compliant with the archive documentation storage periods set out in the office instruction of the Office of Competition and Consumer Protection adopted pursuant to the Act of 14 July 1983 on national archival resources and archives. In other cases, your personal data will be stored for no longer than necessary for achieving the purpose of the processing or for the establishment, exercise or defence of legal claims.

Data sources

The processed personal data may be acquired from a data subject and from other sources, such as publicly available ones (public registers), from public administration bodies, other entities or individuals obliged to transfer their personal data.

Categories of processed data

As a rule, the categories of processed personal data include first name and surname, residential address, e-mail address. In special cases, they include other categories of personal data necessary for the performance of tasks.

Rights of the data subject

You have the right to access the content of your data, the right to rectify them and, in a justified case, the right to erase them or to restrict their processing, the right to object to the processing.

Right to lodge a complaint

You have the right to lodge a complaint with the President of the Personal Data Protection Office, if you think that the processing of your personal data infringes the provisions of the General Data Processing Regulation of 27 April 2016.

Profiling

Your data will not be subject to automated decision-making, including profiling.