What matters does the  Data Protection Officer deal with?

The Data Protection Officer was appointed at SAT on the basis of Article 37 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the Regulation or GDPR. The Data Protection Officer verifies the correctness of the processing of personal data in the organisation which appointed them. As part of their activities, the Data Protection Officer is also the contact person for any reports related to possible irregularities in the processing of personal data. You may contact the DPO e.g. if you wish to exercise any of your rights under GDPR. 

These rights, with the limitations specified in GDPR, include in particular:

1) the right of access to personal data;
2) the right to rectification of personal data;
3) the right to erasure of personal data ("the right to be forgotten");
4) the right to restrict the processing;
5) the right to data portability;
6) the right to object to further processing;
7) the right to object to automated decision-making, including profiling;
8) the right to notify the personal data breach to the supervisory authoritywww.uodo.gov.plUl. Stawki 2, Warsaw).

What is the procedure for the processing of your request?  

You may submit your request to the Employees and Associates of SAT or directly to the Data Protection Officer. We will start processing it immediately and we will respond within one month. If the verification of the possibility to fulfil your request takes longer than one month, you will be informed in a separate letter about the extension of the deadline for responding. Such extension may happen due to the complexity of the request or the number of submitted requests. If the request does not allow you to be clearly identified or it is unclear, the Data Protection Officer will ask you to complete the request within one month after its submission. If the request is submitted online, further correspondence will also take this form, if possible. In other cases, you will be informed of the processing of your request in writing, by registered letter with acknowledgement of receipt. Requests are processed free of charge. However, if the request is clearly unreasonable or frequently repeated, the Personal Data Controller may:

• impose a reasonable fee, taking into account the reasonable administrative costs of request processing, communication or carrying out the requested operations; or
• refuse to process the request.

How to contact the Data Protection Officer?      

By e-mail: iod@sat.poznan.pl or in writing: Inspektor Ochrony Danych, ul. Grochowska 27, 60-277 Poznań.

What are the rules of the processing of personal data at SAT?

For the sake of security and respect for your rights, at SAT your personal data are:

• processed lawfully, fairly and in a transparent manner;
• collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes;
• adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed ("data minimisation");
• accurate and, where necessary, kept up to date;
• kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
• processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

At SAT, based on the risk assessment process, we have also implemented safeguards that minimise the likelihood of a personal data breach. The safeguards we have implemented cover both the area of personal security (e.g. we organise training in personal data protection), physical security (e.g. we store documentation in monitored rooms in locked cabinets) and IT security (e.g. we encrypt the hard drives of our computers).

Will we transfer your data?       

In the course of the processing activities, your personal data may be transferred to our trusted partners. Recipients of your personal data may include:

• providers of IT systems and services with whom the Controller cooperates;
• companies providing security services for our facilities;
• consulting companies;
• delivery service providers;
• other authorised entities upon documented request.

Data transfer outside the European Economic Area and profiling

In principle, your personal data will not be transferred outside the European Economic Area and no profiling will take place on the basis of those data.

If you have not found an answer to your questions here, contact us by e-mail: iod@sat.poznan.pl