Data Protection Policy (RODO/GDPR)
- DATA PROTECTION POLICY (RODO/GDPR)
Data Controller
Data Controller Information
Company Name: The World Justice Project
Registered Address: 1156 15th St NW, Suite 400, Washington, DC 20005
Email: wjp@worldjusticeproject.org
Phone: (202) 407-9330
Data Processing
Purpose of Data Processing
The personal data collected during the registration process will be processed for the purpose of:
– Registering participants for World Justice Forum.
– Managing event logistics, communication, and notifications.
– Ensuring compliance with legal and security requirements.
– Sending relevant updates and post-event information.
Legal Basis for Processing
The processing of personal data is based on:
– The necessity for contract execution (Art. 6(1)(b) GDPR) – for event participation.
– Legitimate interests (Art. 6(1)(f) GDPR) – for event security and communication.
– Explicit consent (Art. 6(1)(a) GDPR) – for marketing and promotional activities, if applicable.
Data Retention Period
Personal data will be stored for:
– The duration of the event and up to 1 year after its conclusion for follow-ups.
– Legal or compliance purposes as required by applicable laws.
Data Sharing and Third Parties
Personal data may be shared with:
– Event partners, service providers, and IT systems necessary for event management.
– Authorities if legally required.
All third-party recipients adhere to GDPR compliance.
Rights & Security
Data Subject Rights
As a data subject, you have the right to:
– Access, correct, or delete your personal data.
– Restrict or object to processing.
– Withdraw consent at any time without affecting the lawfulness of prior processing.
– File a complaint with the data protection authority ([Local Authority Name]).
Security Measures
We implement technical and organizational measures to ensure data security, including encryption, access controls, and secure storage.
Agreement
Data Processing Agreement (Polish Data Protection Rules)
- The data controller entrusts the processor with processing personal data solely to the extent necessary for the proper execution of the event registration.
- For the purpose of fulfilling contractual obligations, the processor may process the following personal data:
– First and last name, company name, job position, email address, phone number, company NIP (tax identification number), and address.
– Data will be provided in the form of an Excel or CSV file or collected via a registration form. - The processor is authorized to perform the following actions concerning the entrusted data:
– Collecting and verifying data.
– Updating or correcting incorrect or outdated data.
– Supplementing missing but necessary data.
– Processing data to generate reports for the data controller. - The processor is not allowed to entrust data processing to a third party without prior written consent from the data controller.
- If a subcontractor is used, the processor must ensure that:
– The subcontractor processes personal data solely for the agreed purpose and within the specified scope.
– The subcontractor complies with all data protection requirements outlined in this policy and applicable laws.
Agreement
By submitting the registration form, you confirm that you have read and understood this Data Protection Policy.
The World Justice Project reserves the right to update this policy as needed.
Compliance
- The processor commits to adhering to the Polish Personal Data Protection Act of May 10, 2018, and the EU GDPR (Regulation 2016/679).
- Compliance with the Regulation of the Minister of Internal Affairs and Administration of April 29, 2004, regarding the technical and organizational security of IT systems processing personal data is mandatory.
- The processor declares that:
– Personal data may be processed for contact purposes related to future service orders.
– The data controller retains the right to access, amend, or request deletion of their data.
– Before data processing begins, appropriate technical and organizational security measures will be implemented. - The processor guarantees that:
– Personal data is protected against unauthorized access, loss, or modification.
– Remote access to data is only allowed if secure transmission methods are in place. - Only authorized personnel, as per Article 37 of the Polish Personal Data Protection Act, may process personal data.
- All personnel processing personal data are bound by confidentiality agreements.
- Upon request, the processor will provide a record of authorized personnel processing entrusted data.
- Continuous monitoring of staff compliance with security requirements is ensured.
Contact for Data Protection Matters
For any inquiries or requests regarding your personal data, please contact our Data Protection Officer at:
Amy Gryskiewicz
Email: agryskiewicz@worldjusticeproject.org