Source: http://www.policja.pl/pol/sirene/prawo-osob-do-informac/76188,The-right-of-data-subjects-to-information.html
Timestamp: 2019-04-18 12:46:11+00:00

Document:
CTA NITS – Central Technical Authority of the National IT System (CTA NITS) – The Commander in Chief of the Police as the administrator of the data, in accordance with art. 10 of the Act of 24 August 2007 on the Participation of the Republic of Poland in the Schengen Information System (Journal of Laws in 2018, item 2162 as amended) – Act SIS and VIS. CTA NITS examines the applications of persons regarding processing of their personal data in the Schengen Information System (SIS) and Visa Information System (VIS).
Generally, the purpose of SIS II is to ensure, using information provided through this system, a high level of security within the area of freedom, security and justice of the European Union, including maintenance of public security and public policy and the safeguarding of security in the territories of the Member States.
Personal data contained in SIS alerts may be processed for purposes other than those in which those entries were made if it is related to a specific case and justified by the need to prevent an immediate serious public order or public security threat or where it is justified by serious reasons of national security or the need to prevent serious crimes.
facilitate checks at external border crossing points and within the territory of the Member States.
Decisions taken by the competent authorities with a view to examining the application for a visa, checking any unauthorised visa or fulfilling the conditions for entry or stay into the territory of the Republic of Poland or a Member State may be based solely on automated processing of personal data (Article 11 paragraph 2 Act SIS and VIS).
The data may be used without the knowledge and consent of the persons whom this data concerns and there is no obligation to disclose the goal for which the data is being collected.
2. Art. 26 of the Act of 14 December 2018 on the protection of personal data processed in connection with the prevention and combating of crime (Journal of Laws, item 125) - Act d.p.c.c.
6) a material breach of other persons’ personal rights.
The controller may communicate the information referred to in paragraph to the data subject where disclosure would be necessary for the protection of human life or health.
3. Art. 3 - 5 of the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws of 2018 item 1000 and 1669) - UODO in connection with art. 23 par. 1 lit. a, c, d and lit. and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 381, 28.12.2006, p. 4–23, as amended) - RODO and taking into account art. 11 Act SIS and VIS.
The above rights to request from the administrator access to their personal data, rectification, deletion, restricting their processing or objecting to their processing resulting from the RODO shall be subject to restrictions on access to the requested information and personal data and subject to limitations related to data processing personal data resulting from the above regulations.
2. A person may be represented by a proxy, unless the nature of the act requires his / her personal action, in accordance with art. 32 of the Act of 14 June 1960, the Polish Administrative Code (Journal of Laws of 2018, item 2096, as amended).
the proxy attaches to the file an original or officially certified copy of the proxy.
signature of the person making the application.
In order to perform precise data identification, an applicant may attach a copy of their ID with personal data.
In case of doubts as to the identity of the person who submitted the application, the administrator may request additional information necessary to confirm the person's identity (Article 28 Act d.p.c.c. and Article 12 paragraph 6 RODO).
g. signature of the person making the application.
In case of doubts as to the identity of the person who submitted the application, the administrator may request additional information necessary to confirm the person's identity (Article 28 Act d.p.c.c.and Article 12 paragraph 6 RODO).
in case of completing, correcting, updating of data entered into the VIS - which data in the VIS should be completed/corrected / updated with indication of the reconciliation of the reconciliation which will confirm the legitimacy of the application.
in case of deletion of data entered into the VIS - which data in the VIS should be deleted,with indication of the reconciliation of the reconciliation which will confirm the legitimacy of the application.
In case of doubts as to the identity of the person who submitted the application, the administrator (or a person acting on behalf of the administrator and authorized) may request additional information necessary to confirm the person's identity (Article 28 Act d.p.c.c. and Article 12 paragraph 6 RODO).

References: art. 10
 Art. 26
 Art. 3
 art. 23
 art. 11
 art. 32