Pursuant to Article 13 para. 1 and para. 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC (General Data Protection Regulation) (Official Journal of the European Union L. 2016.119.1), hereinafter referred to as ‘GDPR’, I hereby inform you about the manner and purpose for which we process your personal data, as well as about your rights under the regulations on personal data protection:

1. Your Personal Data Controller is Mayor of the City of Lublin; with an address at Plac Króla Władysława Łokietka 1, 20-109 Lublin.
2. We have appointed a Data Protection Officer – you may contact him in all matters relating to the processing of your personal data and to exerting your rights related thereto by:
   • email to iod@lublin.eu;
   • or in writing to Plac Króla Władysława Łokietka 1, 20–109 Lublin.
3. Your personal data is processed to register and participate in Transport Cross-Border Cooperation Forum 2025, to follow up with evaluation questionnaires after the event and for archival purposes.
4. The legal basis for the processing of your personal data is:
   • your consent referred to in Article 6(1)(a) of the GDPR to register and participate in Transport Cross-Border Cooperation Forum 2025, to send post-forum evaluation questionnaires,
   • where it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (Article 6 (1) (e) GDPR),
   • where it is necessary for the performance of a contract (Article 6 (1) (b) GDPR),
   • and where it is necessary for compliance with a legal obligation to which the Controller is subject (Article 6 (1) (c) GDPR) resulting from the provisions of generally applicable law, i.e.: Act on National Archival Records and Archives of 14 July 1983; Ordinance of the Prime Minister of 18 January 2011 on the Registry Instruction, Uniform Substantive Records and Instruction on the Organisation and Scope of Operation of Company Archives.
5. We will use the personal data until purposes stipulated in point 3 have been completed or until withdrawal of your consent have been effected, and subsequently, for the period and to the extent required by the provisions of generally applicable law, in particular with regard to archival purposes in the public interest, scientific or historical research or statistical purposes – for 1 year, after which they shall be deleted.
6. Your personal data may be transferred only to entities which are entitled to receive it under the provisions of law, in particular, i.e.: public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes which result from the provisions of generally applicable law.
7. Your data shall not be subject to automatic data processing based on automated decision making, and shall not be subject to profiling.
8. Your data will not be transferred outside the European Economic Area (comprising the European Union, the United Kingdom, Norway, Liechtenstein and Iceland).
9. You have the following rights in relation to the processing of your personal data:
   • the right to request access to your personal data from the Controller and to receive a copy in the cases referred to in Article 15 of the GDPR;
   • the right to request the rectification (correction) of personal data in the cases referred to in Article 16 of the GDPR;
   • the right to request the deletion of personal data in the cases referred to in Article 17 of the GDPR;
   • the right to request a restriction of the processing of personal data in the cases referred to in Article 18 of the GDPR;
   • the right to lodge a complaint with the President of the Personal Data Protection Office if you consider that the processing of personal data violates the provisions of the General Data Protection Regulation (GDPR);
   • If the processing of personal data is based on a person’s consent to the processing of personal data, you have the right to withdraw this consent at any time by sending an e-mail to kongres@lublin.eu with the following content: I withdraw my consent. This withdrawal does not affect the lawfulness of the data processing that was carried out on the basis of your consent before it had been revoked.
10. You provide your personal data voluntary. If you fail to provide same, you will not be able to take part in the registration process for Transport Cross-Border Cooperation Forum 2025 and this participate in the forum.