You have the right to be informed about the processing of your personal data by those who collect and store it (controllers) and for:
- the identity and/or contact details of their authorized representative/personal data protection officer;
- the purposes of the processing/legal basis for the processing of personal data, and especially for the legitimate interests pursued;
- users of personal data;
- the intention to transfer personal data to third countries/organizations;
- storage periods;
- your rights;
- the right to withdraw consent if you have given it;
- the right to submit a request to the Agency for the Protection of Personal Data (AZLP); and
- the existence of automated decision-making processes, including profiling.
In the event that they receive personal data from other sources, the controllers are obliged to provide you with information about the sources and categories of personal data.
These obligations do not apply where you have already received such information.
Information they provide to you must be concise, transparent, understandable, easily accessible, and provided in clear and understandable language.
Example:
You have registered to use e-mail services and after registration you receive all the information prescribed in Article 17 of the Law on Personal Data Protection.
A few months later, you activate the instant messaging feature and are asked to provide additional data, ie. phone number.
In this case, the service provider will provide you with all information required by law regarding the processing of telephone numbers (eg, purposes, retention periods), but is under no obligation to provide you with the information that you received several months earlier. .
