Privacy policy - Institute of Finance

The Policy is addressed to users of the Institute of Finance website [Website].

The Policy describes the collection and use of website users’ data, which is collected directly from them or through cookies and similar technologies.

Data administrator and contact to him/her.

The administrator of the data collected in connection with the use of the Website is

The Institute of Finance with its registered office in Warsaw at 12 Świętokrzyska Street tel: +48 22 694 345, e-mail: instytut.finansow@mf.gov.pl.

In matters related to the processing of your data by the Administrator, you can contact using the above address details or the Administrator’s designated Data Protection Officer at e-mail address: iod.infin@mf.gov.pl.

Scope of data collection.

The website allows you to contact the Administrator and provide him with your identification and contact details, as well as those related to the content of the message.
The Administrator collects data related to your activity, such as time spent on the site, search terms, number of pages viewed, date and source of visit.

Source of data.

If you have contacted the Administrator, your data has been provided to us directly from you.
If your data have been provided in connection with a matter handled by the person who referred the matter to the Administrator, the source of the data is that person. In this case, the Administrator receives identification, address and case-related data, such as a description of the

Purpose and legal basis of the processing of personal data.

Your data may be processed for:

analysing web traffic, ensuring security on the Website and adapting content to users’ needs on the basis of the Administrator’s legitimate interest (Article 6(1)(f) RODO);
responding to your enquiries, forwarding the requested offer and conducting correspondence in order to settle the matter, based on your consent and the Administrator’s legitimate interest in fulfilling users’ requests (Article 6(1)(a) and (f) RODO).

Right to withdraw consent.

You may withdraw your consent to the processing of your contact data at any time by contacting the Administrator. The withdrawal of consent may make it difficult or impossible to contact you.

Obligation or voluntariness of data provision

The provision of data by you for the purposes of handling your case is voluntary but necessary. Failure to do so may make it difficult or impossible to handle the case.
The provision of data necessary for the static analysis of the users of the Website is voluntary. You may use the incognito mode to browse the Site without providing the Administrator with information about your visit to the Site. Using the incognito mode, and therefore not providing data, does not affect your ability to use the Website.

Your rights under the RODO with regard to the data processed

You have the right to:

request the Administrator to inspect your data, as well as to receive a copy of it (Article 15 RODO);
request the Controller to rectify or amend your data (Article 16 RODO) – with regard to the request for rectification of data, when you notice that the data is inaccurate or incomplete;
request the erasure of your data from the Controller (Article 17 RODO);
request the Controller to restrict processing (18 RODO) – e.g. when you notice that your data is incorrect – you may request the restriction of the processing of your data for a period allowing us to check the accuracy of the data);
lodge a complaint regarding the Administrator’s processing of your personal data to the President of the Data Protection Authority.

Recipients of your personal data

Recipients of your personal data may only be entities which are entitled to receive them under the provisions of law. In addition, your data may be made available to couriers, postal operators, hosting providers, mail server and entities providing legal or advisory services on the basis of signed contracts.

Duration of data storage

Your personal data will be stored until your consent is withdrawn or until the case is settled, and then until the expiry of the limitation period for claims by the parties related to its execution.

Data related to web traffic analysis collected through cookies and similar technologies may be stored until the cookie expires. Some cookies never expire, therefore the duration of data storage will be equivalent to the time necessary for the controller to fulfil the purposes of data collection, such as ensuring security and analysing historical data related to website traffic.

Transfer of data to a third country or international organisation

Your data may be transferred to third countries or international organisations outside the EU. Only to entities authorised under the relevant legislation.

Use of cookies and similar technologies

The Website allows the collection of information about you by means of cookies and similar technologies, the use of which usually involves the installation of this tool on your device (computer, smartphone, etc.). This information is used to remember the user’s decisions (choice of font, contrast, acceptance of policies), maintain the user’s session (e.g. after logging in), remember the password (with consent), collect information about the user’s device and his/her visit for security purposes, but also to analyse visits and adapt content.

Information obtained through cookies and similar technologies is not combined with other data of the Service users, nor is it used to identify them by the Administrator.

You have the ability to set your browser to block certain types of cookies and other technologies, by specifying, for example, that only those necessary for the correct display of the page will be allowed. By default, most browsers allow all cookies, but the user can change these settings at any time and can also delete any cookies already installed. Each browser allows this through one of the options available in the settings or preferences.

The user also has the possibility to use the website in the so-called incognito mode, which blocks the collection of data about his/her visit.

Using the website without changing the browser settings, i.e. with default acceptance of cookies and similar technologies, means consent to their use for the purposes specified above. The administrator does not use the information obtained for marketing purposes. Only for the purpose of fulfilling its statutory objectives.

We use the Google Analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We carry out activities in this respect based on our legitimate interest in creating statistics and analysing them in order to optimise our website.

Google Analytics automatically collects information about your use of our website. The information collected in this way is mostly transmitted to a Google server in the United States and stored there. Due to the IP address anonymisation activated by us, your IP address is truncated before being passed on. Only in exceptional cases is the full IP address transferred to a Google server in the United States and only shortened there. The anonymised IP address transmitted by your browser within the scope of Google Analytics is generally not combined with other Google data.

As Google LLC is based in the USA and uses a technical infrastructure located in the USA, it has joined the EU-US-Privacy Shield programme to ensure an adequate level of data protection as required by European legislation. As part of an agreement between the US and the European Commission, the latter has stated an adequate level of data protection for Privacy Shield-certified companies.

You can prevent the data collected by cookies concerning your use of our website from being recorded by Google, as well as the processing of this data
by Google by installing the browser plug-in located at the following address: https://tools.google.com/dlpage/gaoptout.

As part of Google Analytics, we also collect demographic and interest data. You can deactivate Google Analytics cookies as part of your cookie settings directly from our website.

If you are interested in the details related to data processing within Google Analytics, I encourage you to read the explanations prepared by Google: https://support.google.com/analytics/answer/6004245.