Privacy Policy of the website of the Technology Incubator of the Podkarpackie Science and Technology Park.

  1. General information

This Privacy Policy applies to the website https://inkubator.rarr.rzeszow.pl/ and regulates the protection of personal data and other information provided by users of the website, in particular through cookies. This Privacy Policy defines, among other things, the rules and scope of processing your personal data by us, your rights, and our obligations as the Data Controller.

  1. Information clause regarding personal data processing
  1. The controller of your personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (OJ EU L 2016.119.1) – hereinafter referred to as “GDPR”, as well as the Act on Personal Data Protection of 10 May 2018 (Journal of Laws 2019, item 1781), is the Rzeszów Regional Development Agency S.A. with its registered office in Rzeszów at ul. Szopena 51, 35-959 Rzeszów, Tax ID (NIP) 813-00-10-538, REGON 690260330, KRS no. 0000008207, share capital PLN 27,582,000.00.
  2. You can contact the Data Controller by sending an email to: sekretariat@rarr.rzeszow.pl or via the phone numbers and email addresses indicated on the website.
  3. For matters related to the processing of your personal data, please contact the Data Protection Officer by sending an email to: iod@rarr.rzeszow.pl.
  4. Your personal data is processed by us:
    1. based on Article 6(1)(f) GDPR in conjunction with Article 399(3) of the Act of 12 July 2024 on Electronic Communications Law (Journal of Laws 2024.1221), i.e. for the purposes of the legitimate interest of the Controller, namely storing information or accessing information already stored on a telecommunications terminal device (with regard to IT data in the form of cookies) – for the proper functioning or display of the website, maintaining sessions and other necessary functionalities;
    1. based on Article 6(1)(b) GDPR, for the purpose of taking necessary actions prior to entering into and performing a contract;
    2. based on Article 6(1)(c) GDPR – for compliance with legal obligations imposed on the controller, including invoices and other documents related to tax obligations and archiving duties;
    3. based on Article 6(1)(f) GDPR for the purpose of establishing, pursuing, or defending potential claims of the Controller.
  1. Recipients of your personal data may include, in particular: entities providing services to the Controller, such as legal or accounting services, consulting services, IT services, hosting services, entities maintaining IT infrastructure, postal or courier services, the KSeF operator, as well as entities authorized under applicable law, including supervisory authorities and institutions, and entities with which the Controller concludes data processing agreements.
  2. In view of the above, you have the right to:
    1. request information whether your personal data is processed by the Controller, and if so, access to it;
    2. request the Controller to promptly rectify inaccurate personal data, and taking into account the purposes of processing, you also have the right to request completion of incomplete personal data;
    3. request the Controller to promptly erase personal data;
    4. request restriction of the processing of personal data concerning the data subject;
    5. request data portability;
    6. object where your personal data is processed based on Article 6(1)(f) GDPR, which may be exercised at any time by sending an email to the addresses indicated in points 2 and 3;
    7. the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates legal provisions.
  3. Your data will be processed:
    1. in the case referred to in point 4(a) – until you object;
    2. in the case referred to in point 4(b) – until the contract is concluded and performed;
    3. in the case referred to in point 4(c) – until the Controller fulfills its legal obligations, including those related to invoices and other documents connected with tax obligations, as well as archiving obligations resulting from the Controller’s office instruction including the Uniform Material File Classification System;
    4. in the case referred to in point 4(d) – until the statute of limitations for claims or completion of related proceedings.
  4. Providing your personal data is voluntary, but necessary to achieve the purposes indicated in point 4(a)–(d).
  5. With regard to your personal data, decisions will not be made in an automated manner, pursuant to Article 22 GDPR.
  6. The Controller does not intend to transfer your personal data to third countries or international organizations.
  1. Cookie usage policy on the website.

For your convenience, the website https://inkubator.rarr.rzeszow.pl/ uses session cookies to adapt the website to the needs of our Users.

  1. What are session cookies?

Cookies (so-called “ciasteczka”) are IT data, in particular text files, which are stored on the User’s end device and are intended for use of the website. Cookies usually contain the name of the website they come from, the storage time on the end device, and a unique number.

  1. What do we use cookies for?

The data obtained through session cookies is used primarily to ensure the proper functioning of the website and to maintain the User’s session on https://inkubator.rarr.rzeszow.pl/. The collected information allows us to continuously improve our website so that it best meets the needs of our Users. The cookies we use do not cause configuration changes in the User’s end device or installed software.

  1. How long are cookies stored?

Within the website, session cookies are used, which are temporary files stored on the user’s device until logout, leaving the website, or closing the browser.

  1. How to block cookies?

Web browsers usually allow cookies by default. Users may change these settings. Browsers allow deletion or automatic blocking of cookies. Detailed information can be found in browser help or documentation. Below are instructions for changing cookie settings in browsers:

Mobile devices:

  1. Protection of data used by the Controller.

Login and data transmission areas are protected by SSL encryption. This ensures that personal data and login data entered on the website are encrypted on the user’s computer and can only be read on the target server.

  1. Changes to the Privacy Policy.

In order to ensure the highest level of personal data protection, adapted to changing realities and legal regulations, we reserve the right to amend this Privacy Policy.