General information
This policy sets out the rules for processing the personal data of users of the National Access Point website (the “Website”) and the rules for using cookies and similar technologies on the Website.
The National Access Point Website is a platform for collecting, sharing and exchanging road data in a standardised form that meets the requirements for intelligent transport systems.
Data controller
The controller of personal data processed in connection with the operation of the National Access Point website (the “Website”) is the General Director for National Roads and Motorways (Generalny Dyrektor Dróg Krajowych i Autostrad), acting with the assistance of the General Directorate for National Roads and Motorways, ul. Wronia 53, 00-874 Warsaw, Poland.
Contact with the Data Protection Officer: iod@gddkia.gov.pl.
Scope, purposes and legal bases of processing
When you use the Website, technical information may be processed, in particular your IP address, the date and time of the connection, information about your browser and device, session data, and information recorded in system logs and security logs.
If you use an account or a form, or contact the controller, data you provide may also be processed, in particular contact details and the content of your request or correspondence.
Data is processed in order to:
- ensure the correct and secure operation of the Website;
- handle user accounts, forms, requests and correspondence;
- remember your cookie choices;
- carry out the controller’s public tasks;
- fulfil obligations arising from the law.
Depending on the purpose, the legal basis for processing is Article 6(1)(a), (c) or (e) GDPR.
Cookies
Cookies are pieces of information stored on, or read from, your device when you use the Website.
Strictly necessary cookies
The Website uses cookies that are necessary to:
- ensure the correct and secure operation of the Website;
- maintain your session;
- protect forms;
- remember your decision regarding cookie settings.
Such cookies do not require consent where they are necessary to transmit a communication or to provide a service you have requested, in accordance with Article 399(3) of the Polish Electronic Communications Law of 12 July 2024 (Prawo komunikacji elektronicznej).
Optional cookies
If cookies other than strictly necessary ones are introduced on the Website, they will be stored only after you give your consent (Article 398(1) of the Polish Electronic Communications Law, Article 6(1)(a) GDPR). You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.
A current list of the cookies in use, with their purpose, provider and storage period, is available in the consent settings on this website – via the “Change privacy settings” link in the Website footer.
Managing consent
You can:
- accept all cookies;
- reject all optional cookies;
- choose individual settings;
- change your settings or withdraw consent at any time.
You can do so via the “Change privacy settings” link in the Website footer.
Withdrawing consent does not affect the lawfulness of actions taken before it was withdrawn.
You can also define the conditions for storing and reading cookies in your web browser settings. Blocking strictly necessary cookies may limit some Website features.
List of cookies and their lifetime
A current list of the cookies in use, including their name, purpose, category and provider, is available in the “Change privacy settings” panel.
The cookie that remembers your choice expires after 365 days. After that, the Website may ask you to make your choice again.
Other data is kept for as long as necessary to achieve the purpose of processing, to fulfil legal obligations, and to establish, pursue or defend against claims.
Recipients of data
Data may be processed by entities providing hosting, Website maintenance, technical support, cybersecurity and consent management, under appropriate agreements and only to the extent necessary.
Data may also be disclosed to entities entitled to receive it under the law.
Data is not transferred outside the European Economic Area.
Your rights
To the extent provided for in the GDPR, you have the right to:
- access your data and obtain a copy of it;
- rectification and erasure of your data;
- restriction of processing;
- object to processing;
- withdraw consent where processing is based on consent;
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
Users’ data is not used for automated decision-making or profiling.
Changes to this Policy
This Policy may be updated if the law, the way the Website operates or the technologies it uses change.
Accessibility
Information about the digital accessibility of the website is available in the Accessibility Statement.