Wersja językowa

Privacy policy



  1.  The Controller of your personal data obtained in connection with your registration for the congress: Railway Direction Days 2023 (hereinafter referred to as: the Congress) is Centralny Port Komunikacyjny sp. z o. o. with its registered office in Warsaw – at Al. Jerozolimskie 142B, 02-305 Warsaw (hereinafter referred to as: the Controller).

In matters related to the processing of personal data, the Controller may be contacted by e-mail adress: [email protected], by phone: +48 22 24 34 200 or at the registered office address mentioned in the previous sentence.

  1.  The Controller has appointed a Data Protection Officer, who can be contacted at e-mail adress: [email protected]


Purpose and basis of data processing 

3.   The Controller processes your personal data for purposes:

  1. arising from its legitimate interests (legal basis for processing – Article 6(1)(f) GDPR), understood as:
    • ensuring the proper organisation and conduct of the Congress, including registration and participation in the Congress;
    • defending, establishing or pursuing claims, related to the organisation and course of the Congress.
  2. sending of the Controller’s newsletter, in case you have given your consent to the processing of your personal data for this purpose by ticking the checkbox in the congress registration form (legal basis for processing – Article 6(1)(a) GDPR);
  3. to comply with legal obligations set out by law (legal basis for processing – Article 6(1)(c) GDPR).


Data retention period 

4.   Your personal data will be stored for the period necessary to fulfil the purpose for which they are processed, in particular:

  1. the organisation of the congress and thereafter for the period of limitation of claims relating to the organisation and conduct of the congress;
  2. for the period of the statute of limitations for claims, if such processing is necessary for the Administrator to defend, establish or assert claims;
  3. until you have withdrawn your consent to the processing of personal data, if the consent was the basis for the processing of personal data;
  4. for the time required for the fulfilment of legal obligations.


In the cases mentioned under point a) and b) above, the termination of the processing of your personal data may also occur after you have sent the Controller a reasoned objection to the processing of your personal data and the Controller has taken it into account.


Recipients of personal data and transfer of personal data outside the EEA

5.   Personal data may be disclosed to entities providing services to the Controller in support of its activities, including in particular: IT solution providers, those providing marketing services and those supporting the Controller in the organisation of the Congress. In addition, data may be disclosed to entities authorised to access personal data under the provisions of law.

6.   The personal data collected by the Controller will not be transferred to countries outside the European Economic Area or to international organisations.


Rights of data subjects

7.   Subject to the conditions set out in Articles 12-23 of the GDPR, you have the right to request access to your personal data (and to receive a copy of your personal data), rectification of your personal data, erasure of your personal data, restriction of the processing of your personal data, portability of your personal data and the right to object to the processing of your personal data.

8.   You have the right to withdraw your consent to the processing of your personal data if it is the legal basis for the processing of your personal data. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

9.   You have the right to lodge a complaint with the President of the Personal Data Protection Office if your personal data is processed in violation of the law.


Principles of providing personal data and other information on processing

10. The provision of personal data is necessary to participate in the Congress and to enable the Controller to organise it properly, and also to receive the Controller’s newsletter.

11. The Controller will not use your personal data for automated decision-making (including profiling), in a manner that produces legal effects or otherwise materially affects you.