Dear Sirs,

Central Sports Center acting in the field of legal compliance and recognizing the importance of personal data protection has appointed the function of Data Protection Officer. In all matters related to the protection and processing of personal data by the Central Sports Center you can contact:

• via email to: iod@cos.pl,
• in writing to the following address Central Sports Centre 6a Łazienkowska Street 00-449 Warsaw,
• The function of Data Protection Inspector of COS is performed by Mr. Marcin Kowalczyk, e-mail contact: iod@cos.pl.

WHAT MATTERS DOES THE DATA PROTECTION OFFICER DEAL WITH?

Within the framework of his/her tasks, a Data Protection Officer ensures protection of rights and freedoms of persons whose personal data are processed by the Central Sports Center.  The Data Protection Officer verifies the correctness of personal data processing in the Central Sports Center. Within the scope of his/her activities he/she is also a contact point for any notifications related to possible irregularities in the processing of personal data. You can therefore contact the Data Protection Officer if you believe that your personal data has been compromised. The Data Protection Officer is also the entity to whom requests for the exercise of your rights should be addressed.

These rights concern in particular:

• Rights of access to personal information,
• Rights to rectify them,
• Rights to erasure of personal information ("right to be forgotten"),
• Rights to restrict processing,
• Rights to Portability of Personal Data,
• Rights to object to further processing,
• The right to object to automated decision-making, including profiling,
• Data breach notification rights.

WHAT IS THE PROCEDURE FOR YOUR PROPOSAL?

Your request may be submitted via email or by mail. We will process your request promptly. Therefore, it is necessary to provide the contact details to which you would like to receive a reply. If your request takes more than one month to process, you will be informed of the extension by a separate letter/message. Such extension is possible due to the complexity of the request or the number of requests submitted.

If the request does not clearly identify you or is unclear, the Data Protection Officer will ask you to complete it within one month of receipt of the request.

If the application is submitted in electronic form, further correspondence will be conducted also in this form, if it proves possible and no other form is indicated. We would like to point out that this form also minimizes the negative impact on the environment.

The processing of the request is free of charge. However, if the request is unreasonable or frequently repeated, the Administrator may impose a reasonable fee, taking into account the reasonable administrative costs of processing the request, communicating or carrying out the requested operations, or refuse to process the request.

WHO IS THE PERSONAL DATA CONTROLLER?

Pursuant to Article 13 and Article 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the Regulation or RODO, we inform you that the Administrator of your personal data is the Central Sports Centre with its registered office at 6a Łazienkowska Street 00-449 Warsaw.

The Central Sports Center (hereinafter referred to as COS), before starting to process personal data, shall each time identify the purpose, the legal basis for the processing and shall determine the data retention period.

Your personal data is processed:

• due to the performance of the contract that binds you to COS, or the actions necessary to conclude it (Art. 6(1)(b)). In this case we will process the data for 6 years due to the requirements of the Accounting Act.
• due to legal requirements that the Administrator is obliged to comply with (Art. 6(1)(c)). In this case, the duration of storage of your data is dictated by specific legal requirements.
• in order to ensure the safety of you and the facilities at the disposal of COS (Act on the Principles of State Property Management, Art. 5a.). We process data for a maximum of 30 days from the time it is collected.
• on the basis of your consent (Art. 6(1)(a)). In this situation, we process your data until you withdraw your consent to processing.