Student's Service Office

WHO IS THE DATA CONTROLLER FOR YOUR PERSONAL INFORMATION AND HOW YOU CAN CONTACT US
The Data Controller for your personal information is the WSB Merito University in Torun.
If you have any questions concerning how your personal information is processed and what you are entitled to regarding this information, please contact our Data Protection Officer: [email protected].

THE PURPOSE AND THE LEGAL BASIS FOR DATA PROCESSING AS WELL AS THE RETENTION PERIODS
Marketing purposes
By your consent, your data will be processed for marketing purposes for five years counted from September 1 of the year following the date of your consent. Thanks to this consent, we will be able to send you information about our offer, the events organized by us and the campaigns that we have prepared for you.
The implementation of educational services and data storage after the completion of the service
In order to provide educational service during the course of your studies by taking necessary actions before the conclusion of the contract, as well as to guarantee storing the data after performing the service, your data will be processed on the basis of the contract or the Act of July 20, 2018, Law on Higher Education and Science, for the period of:
1) 50 years, under paragraph 15, item 4, of the Ordinance of the Minister of Science and Higher Education of September 27, 2018, regarding studies;
2) 50 years, if the documentation concerns the postgraduate and the MBA studies;
3) resulting from applicable legal provisions for other educational services (e.g. training);
4) 6 months from the end of the enrolment process if you do not take up studies with us.

WITH WHOM DO WE SHARE YOUR DATA?
As a university, on a daily basis we use the services of companies, thanks to which we provide you with the highest standard of service.
Your data may be forwarded to them for processing on our behalf. It happens most often in the case of cooperation with a specific service provider (e.g. a provider of data storage services, a provider of postal, courier, payment, legal, insurance, IT as well as audit services) or a subcontractor (e.g. marketing agency). We may also transfer your data to entities affiliated with us by shares or by a person. In this situation, the transfer of data does not entitle other entities to any processing, but only to use them for the purposes explicitly indicated by us. In no case does the transfer of data release us as the Administrator from the responsibility for their processing.

WHAT ARE YOUR RIGHTS IN CONNECTION WITH YOUR DATA PROCESSING?
You have the right to:
1. request access to your data;
2. correct of your data;
3. request the obliteration of your data if:
- you will withdraw your consent to their processing;
- your data cease to be necessary for the purpose for which it was collected or otherwise processed;
- you object to the use of your data for marketing purposes;
- you object to the use of your data to adapt our services to your preferences;
- your personal details are processed unlawfully;
4. request the restrictions on the processing of your data;
5. object to their processing;
6. request the transfer of your data;
7. withdraw your consent for data processing at any time, as long as it is based on your consent. The withdrawal of your consent does not affect the processing of your data carried out by us before its withdrawal.
You also have the right to lodge a complaint with the President of the Office for Personal Data Protection when you feel that the processing of your data violates the provisions of applicable law.
The provision of personal data for marketing purposes is voluntary.
The provision of data for the purposes of providing educational services and archiving data after the service has been provided is required by law or is necessary for the conclusion of the contract. If you refuse to provide your data or provide incorrect data, we will not be able to provide the service for you.