Project participants – European Funds 2021–2027 financial perspective

Information about personal data processing for participants in projects funded from European funds under the 2021–2027 financial framework

Version 0.18.2
Release date 21.01.2026

Fulfilling the information obligation pursuant to Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) [Official Journal of the EU L.2016.119.1 of 4 May 2016], hereinafter referred to as GDPR, we inform you that:

  1. The Controller of your personal data is the AGH University of Krakow, al. A. Mickiewicza 30, 30-059 Krakow, hereinafter referred to as AGH University.
  2. The contact details of the Data Protection Officer are as follows: e-mail: iodo(at)agh.edu.pl, phone: 12 617 53 25.
  3. Personal data will be processed by the Controller for the purpose of fulfilling obligations under EU fund regulations, including in particular for monitoring, reporting, communication, publication, evaluation, financial management, verification, and audits, as well as for determining the eligibility of project participants.
  4. Your personal data will be processed according to Article 6(1)(c) based on the following regulations: 
    a) Article 4 of the Regulation (EU) 2021/1060 of the European Parliament and of the Council of 24 June 2021 laying down common provisions on the European Regional Development Fund, the European Social Fund Plus, the Cohesion Fund, the Just Transition Fund and the European Maritime, Fisheries and Aquaculture Fund and financial rules for those and for the Asylum, Migration and Integration Fund, the Internal Security Fund and the Instrument for Financial Support for Border Management and Visa Policy; 
    b) Regulation (EU) 2021/1057 of the European Parliament and of the Council of 24 June 2021 establishing the European Social Fund Plus (ESF+) and repealing Regulation (EU) No 1296/2013 (OJ L 231, 30.6.2021, p. 21); 
    c) Articles 87-93 of the Act of 28 April 2022 on the principles of implementing tasks financed from European funds in the 2021-2027 financial perspective (Journal of Laws of 2022 item 1079).
  5. Your personal data can be also processed according to Article 9(2)(g) GDPR – processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.
  6. Recipients of your personal data will be authorized AGH University employees. Recipients of your personal data may also be entities authorized to obtain the data under applicable laws, entities providing IT and administrative services as well as entities enumerated in Article 89 of the Act of 28 April 2022 on the principles of implementing tasks financed from European funds in the 2021–2027 financial perspective.
  7. Your personal data may be transferred to state authorities, legal protection authorities (Police, Prosecutor's Office, Court), or local authorities in connection with legal proceedings.
  8. Your personal data shall be processed only for the time necessary to carry out the purposes of personal data processing stated in section 3.
  9. You have the right to request from the Controller access to your data, as well as the right to rectify your data, the right to erase your data, the right to restrict the processing of your data, the right to object to the processing thereof in the cases and under the conditions specified in the GDPR.
  10. You have the right to submit a complaint with a supervisory authority – the President of the Office for Personal Data Protection pursuant to Article 77 of the GDPR (...every data subject shall have the right to lodge a complaint with a supervisory authority, (…) if the data subject considers that the processing of personal data relating to them infringes this Regulation).
  11. Your personal data shall not be subject to automated decision-making processes, including profiling.
  12. Your personal data shall not be transferred to third countries or international organizations.
  13. The provision of your personal data is voluntary; however, it is necessary to carry out the purposes of personal data processing stated in section 3. The refusal to provide your personal data shall prevent you from participating in the project.