Logotyp PANA w wersji angielskiej
Ikona Portalu Linked In Ikona Portalu Youtube, Link Prowadzi Do Kanału PANA
Ikona Portalu Facebook, Link Prowadzi Do Fanpage PANA Ikona Portalu Linked In Ikona Portalu Youtube, Link Prowadzi Do Kanału PANA
Ikonka Bip

expand menu

Privacy Notice

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union L 119, 4 May 2016), hereinafter referred to as the “GDPR”, we hereby inform you as follows:

  1. The controller of your personal data is the Polish Agency for Audit Oversight (PANA), with its registered office in Warsaw, 73 Sienna Street, 00-833 Warsaw, Poland.
  2. In matters concerning the processing of your personal data, you may contact the Data Protection Officer by e-mail at: iod@pana.gov.pl.
  3. Your personal data are processed pursuant to Article 6(1)(c) of the GDPR, in particular in connection with the provisions of the Act of 11 May 2017 on Statutory Auditors, Audit Firms and Public Oversight (Journal of Laws of 2025, item 1891, as amended) and the Act of 14 June 1960 – Code of Administrative Procedure (Journal of Laws of 2025, item 1691, as amended), for the purpose of carrying out PANA’s statutory tasks.
  4. In connection with the processing of personal data for the purposes specified in point 3, your personal data may be disclosed to other recipients or categories of recipients authorised under applicable law. Data may be transferred to a third country only where such transfer is provided for by law or by an international agreement concluded by Poland with that country.
  5. Your personal data will be retained for the period necessary to fulfil the purposes of the processing and will subsequently be archived in accordance with the provisions of the Act of 14 July 1983 on the National Archival Collection and Archives.
  6. In connection with the processing of your personal data by the Controller, you are entitled to:
    • access your personal data pursuant to Article 15 of the GDPR;
    • request the rectification of your personal data pursuant to Article 16 of the GDPR;
    • request the restriction of processing pursuant to Article 18 of the GDPR.
  7. The provision of personal data is a statutory requirement.
  8. Your personal data will not be processed by automated means and will not be subject to profiling.
  9. If you believe that the processing of your personal data by the Controller violates applicable data protection laws, you have the right to lodge a complaint with the President of the Personal Data Protection Office.