Bulletin of Public Information

In regard to the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR”, the Administrator informs you about the principles and your rights related to the processing of your personal data.

1. Administrator

The Administrator of the personal data provided by you, hereinafter referred to as “personal data”, is the Central Statistical Office (GUS) with its registered office: 208 Niepodległości Avenue, 00-925 Warsaw.

2. Data Protection Officer

You may contact the Data Protection Officer (DPO):

1. by regular mail to the address: IOD GUS, 208 Niepodległości Avenue, 00-925 Warsaw;
2. by e-mail to: .

Only matters concerning the processing of your data by the controller, including the exercise of your rights under GDPR, should be addressed to the DPO.

3. Objectives and legal basis for the processing of your personal data

In order to ensure the security and protection of persons and property (including life, health and personal integrity), to prevent crimes and offenses against property, and to ensure the security and confidentiality of information, as well as to prevent unauthorized persons from entering selected premises of the CSO, the administrator processes personal data on the basis of Article 6(1)(c) of the GDPR, i.e. the processing is necessary for the fulfilment of a legal obligation incumbent on the administrator in connection with:

• Article 5a of the Act of December 16, 2016 on the principles of state property management (i.e., Journal of Laws of 2021, item 1933, as amended);
• Article 22 (2) of the Labor Code Act of June 26, 1974 (i.e., Journal of Laws of 2022, item 1510) - with respect to employees of public statistical service units;
• Article 18 (1), Article 46 of the Law of August 5, 2021 on the Protection of Classified Information (i.e., Journal of Laws of 2019, item 742, as amended) and § 3 (3) of the Regulation of the Council of Ministers of May 29, 2012 on physical security measures used to secure classified information for organizational units with rooms for processing classified documents (Journal of Laws of 2012, item 683, as amended);
• the provisions of the Act of August 22, 1997 on the protection of persons and property (i.e., Journal of Laws of 2021, item 1995) and the provisions of the Decree of the Council of Ministers of December 19, 2013 on the detailed procedure for the activities of security personnel (Journal of Laws of 2013, item 1681);
• the provisions of the Act of July 14, 1983 on the national archival resource and archives (i.e., Journal of Laws of 2020, item 164, as amended) and the provisions of the Ordinance of the Minister of Culture and National Heritage of October 20, 2015 on classification and qualification of documentation, transfer of archival materials to state archives and lack of non-archival documentation (Journal of Laws of 2019, item 246).

Your personal data will be processed as part of:

1. the use of video surveillance in the CSO building and in the area adjacent to the CSO building;
2. issuance of personal badges authorizing entry to the GUS building;
3. issuance of parking badges authorizing entry to the GUS parking lot;
4. issuing parking remotes, keys, and credentials.

4. Recipients of personal data

• Your personal data may be made available only to authorized bodies and institutions authorized under the provisions of generally applicable law within the scope of their activities and proceedings.

5. Data storage period

• Your personal data will be stored within the framework of:
• the use of video surveillance in the CSO building and in the area adjacent to the CSO building, for a period of:
• up to 3 months from the date of recording using the digital system;
• up to 30 days from the date of recording using the analog signal system;
• issuance of personal badges authorizing entry to the GUS building, for the period of use of the
• of the personal ID, and thereafter for a period of 2 years;
• issuance of parking badges authorizing entry to the GUS parking lot, for the period of use of the parking badge, and for a period of 2 years thereafter;
• issuance of parking remotes, keys, and credentials, for the period of use, and thereafter for a period of 2 years.
• issuance of parking remotes, keys and credentials, for the period of their use, and after that for a period of 2 years.
• In cases where the data may constitute evidence in proceedings - the aforementioned data retention periods are extended until the legal conclusion of the proceedings.

6. Rights of the data subject

1. You are entitled to:
2. access to personal data, including the right to obtain a copy of such data;
3. rectification (amendment) of personal data;
4. restriction of processing;
5. lodge a complaint to the President of the Office for Personal Data Protection (to the address of the Office for Personal Data Protection, 2 Stawki St, 00-193 Warsaw) if, in your opinion, the processing of your personal data violates the provisions of GDPR.

7. Automated decision-making, including profiling

• Your personal data will not be profiled or subject to automated decision-making.

8. Transfer of data to a third country/international organization

• Your personal data will not be transferred to a third country or international organization within the meaning of the GDPR.