Personal data protection

WHO IS THE CONTROLLER OF YOUR PERSONAL DATA AND HOW CAN YOU CONTACT US?
The controller of your personal data is WSB Merito University in Wrocław, ul. Fabryczna 29-31, 53-609 Wrocław. If you have any questions regarding the processing of your personal data and the rights you are entitled to, please contact our Data Protection Officer: Mateusz Potocki, email address: [email protected].

FOR WHAT PURPOSES, ON WHAT LEGAL BASIS AND FOR HOW LONG DO WE PROCESS YOUR PERSONAL DATA?

Marketing purposes
For marketing purposes, your data will be processed on the basis of the consent you have given for 5 years, counted from 1 January of the year following the date on which the consent was granted. If you are a minor, consent to the processing of data may be given by your parent or legal guardian. In such a case, we will also process the data of the parent/legal guardian until you reach the age of majority. On the basis of this consent, we will be able to send you information about our offer, events organised by us and promotions prepared for you.

Newsletter
For the purpose of providing the Newsletter service, your data is processed to the extent necessary for the proper provision of this service. The legal basis for the processing of your data is Article 6(1)(b) of the GDPR. Providing personal data is voluntary, but necessary to subscribe to and use the Newsletter service; the consequence of not providing data will be the inability to use the service. Your data in connection with the provision of the service will be processed until you unsubscribe from the subscription, in accordance with the terms and conditions of the Newsletter service.

Social media
In the scope of our activities on social media, we will process your data for the following purposes:

running our profile/channel on social media under the terms and conditions specified by them and informing you via these channels about our activities, events organised by us and the products and services we offer;
contacting you;
analysing the functioning, popularity and use of our profile/channel;
sending you commercial information, including invitations to events organised by us, via the functionalities of the profile/channel.

The legal basis for the processing of your data for the purposes indicated above is our legitimate interest, which consists in promoting our activities and expanding the group of our supporters, as well as responding to your questions. We process personal data for the period of your activity related to the profile/channel, and then for no longer than until your account is deleted or you are removed from the profile/channel.

Graduate career tracking
For the purposes of tracking graduates’ careers, your data will be processed on the basis of the consent you have given for 5 years, counted from 1 January of the year following the date of completion of your studies. This consent allows us to find out whether you are satisfied with our studies and how completing them has affected your career. On the basis of these data, we can develop our offer and modernise our curricula.

Provision of educational services and archiving of data after the service has been provided
For the purpose of providing educational services, taking the necessary steps prior to the conclusion of a contract, its performance and archiving of data after the service has been provided, your data will be processed on the basis of the concluded contract or the Act of 20 July 2018 – Law on Higher Education and Science, for the period:

50 years, in accordance with § 15(12)(4) of the Regulation of the Minister of Science and Higher Education of 27 September 2018 on studies,
25 years if the documentation concerns postgraduate studies and MBA and Executive MBA programmes,
the period resulting from applicable legal provisions in the case of other educational services (e.g. training),
6 months from the end of the recruitment process if you do not take up studies with us.

Distance learning, diploma examinations, credits, verification of learning outcomes carried out remotely
As a university, we may conduct classes using distance learning methods and techniques; the legal basis for the processing of your data is Article 12(1) of the Regulation of the Minister of Science and Higher Education of 27 September 2018 on studies. We may also organise verification of the learning outcomes specified in the study programme, in particular conduct course credits and examinations outside the university’s seat or branch using electronic means of communication. In the case of diploma examinations conducted outside the university’s seat or branch using electronic means of communication, these means must ensure, in particular, real-time transmission of the diploma examination between its participants and real-time multilateral communication. The legal basis for the processing of your data is Article 76a(1) of the Act of 20 July 2018 – Law on Higher Education and Science. Personal data processed during the transmission will be processed only for the duration of the task.

Defence of doctoral dissertations in remote mode
When conducting the defence of a doctoral dissertation, it may be carried out outside the seat of the awarding institution using electronic means of communication; these means must ensure, in particular, real-time transmission of the diploma examination between its participants and real-time multilateral communication. The legal basis for the processing of your data is Article 191(1a) of the Act of 20 July 2018 – Law on Higher Education and Science. Personal data processed during the transmission will be processed only for the duration of the task.

Library
When you use the library resources and the reading room, your personal data will be processed in order to enable you to use its collections, to use the library IT system operating at the university and to enable us to fulfil our obligations under the Act of 27 June 1997 on libraries and the Act of 20 July 2018 – Law on Higher Education and Science. The legal basis for the processing of your personal data is Article 6(1)(b) and (c) of the GDPR, and Article 6(1)(a) of the GDPR where applicable.

Support for persons with disabilities
In connection with the implementation of processes aimed at providing support by the Plenipotentiary for Persons with Disabilities and creating conditions for persons with disabilities to fully participate in the admission process to the university for the purpose of education, education itself and conducting scientific activities. The documentation you provide will be the basis for using all forms of support offered by the Plenipotentiary for Persons with Disabilities to candidates, students and employees of the university with disabilities and health difficulties.

If you use the university’s support, the processing of your personal data is necessary for the fulfilment of legal obligations (Article 6(1)(c) of the GDPR) imposed on us in connection with the performance of tasks set out, among others, in the Act of 20 July 2018 – Law on Higher Education and Science and the implementing acts issued on its basis.
Any other personal data of yours that are not required for the above purposes may be processed on the basis of your separately expressed consent (Article 6(1)(a) of the GDPR).

The legal basis for the processing of special categories of personal data (data concerning health) is Article 9(2)(a) of the GDPR – consent to the processing of special categories of personal data.

Processing of personal data in the video monitoring system
As part of tasks related to ensuring the safety of persons on the university premises and securing property, as well as determining, pursuing or defending claims in court, administrative or other out-of-court proceedings, we use video monitoring. The legal basis for the processing of data recorded by the monitoring system is our legitimate interest (Article 6(1)(f) of the GDPR). Video recordings are stored for no longer than three months from the date of recording, unless the recording is necessary to determine or document events for the purposes for which the monitoring is used, in which case the processing period will be extended until the completion of these tasks.

Claims and defence against them
In addition, your data will be processed for the purpose of establishing claims, defending against them and pursuing them, which constitutes our legitimate interest. These data are processed until the limitation period for potential claims as specified by law.

WHAT ARE YOUR RIGHTS IN RELATION TO OUR PROCESSING OF YOUR PERSONAL DATA?
You have the right:

to access your data,
to rectify your data,
to have your data erased if:
- you withdraw your consent to the processing of personal data,
- your personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
- you object to the use of your data for marketing purposes,
- you object to the use of your data in order to adapt our services to your preferences,
- your personal data is processed unlawfully,
to restrict the processing of your data,
to object to the processing of data,
to data portability,
to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

You also have the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office) if you consider that the processing of your personal data violates applicable law.

Providing personal data for marketing purposes and for the purpose of tracking graduates’ careers is voluntary.
Providing data for the purposes of providing educational services and archiving data after the service has been provided is required by law or is necessary for the conclusion of a contract. If you refuse to provide your data or provide incorrect data, we will not be able to provide the service for you.

HOW DO WE TAILOR SERVICES TO YOUR INTERESTS AND PREFERENCES?
Personal data collected for marketing purposes will be processed in an automated manner in the form of profiling. This means that, thanks to the analysis of the data you have provided, we will present an offer tailored to your needs.
On the basis of the data received from you, we also tailor online advertising content to your preferences. Here, too, we act on the basis of our legitimate interest, which consists in promoting our activities and selecting the best possible offer for you. You can change your browser settings to disable, among other things, ad personalisation. In this respect, please refer to the relevant terms and conditions of your browser.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?
As a university, we use the services of companies on a daily basis to provide you with the highest standard of service. Your personal data may be transferred to them for processing on our behalf. This usually happens when cooperating with a specific service provider (e.g. a provider of data storage services, a provider of tools used in distance learning) or a subcontractor (e.g. a marketing agency). In such a situation, the transfer of data does not entitle other entities to process them freely, but only to use them for the purposes explicitly indicated by us. In no case does the transfer of data release us, as the Data Controller, from responsibility for their processing. Your data may also be transferred to public authorities, but only where authorised by applicable law.

Your data such as your first name and university email address will be transferred for processing to data recipients, in particular entities cooperating with the Data Controller which provide the University with electronic communication tools, including MS Office 365 tools. By entities cooperating with the Data Controller, we mean entities directly or indirectly linked to the Data Controller.

In addition, your data, such as your first name and university email address, will be visible to other students, including those from entities linked to the Data Controller, via the address book. The purpose of making the data available is to ensure proper communication with students as part of educational tasks, participation in groups, participation in student research clubs, as well as activities carried out by Student Governments.

In connection with our use of social media, your personal data may be transferred to the owners of platforms such as Facebook, LinkedIn, YouTube, Instagram, as well as to marketing agencies providing services to us.

The Controller’s providers are mainly based in Poland and in other countries of the European Economic Area (EEA). Some providers are based outside the EEA. In connection with the transfer of the User’s data outside the EEA, including to the USA, the Controller ensures that such providers offer a high level of protection of personal data.

concluding a contract with you and performing it. The legal basis for their processing is the contract (Article 6(1)(b) of the GDPR). These data are processed until the contract has been performed and then additionally for the limitation period of any claims as specified by law,
email, postal or telephone correspondence. The legal basis for their processing is our legitimate interest (Article 6(1)(f) of the GDPR). This consists in the possibility of ongoing contact with you and providing answers to your questions. These data are processed for the duration of the correspondence and then additionally for the limitation period of any claims as specified by law,
fulfilling our accounting and tax obligations. The legal basis for their processing is the applicable provisions of law (Article 6(1)(c) of the GDPR). These data are processed until the time indicated in those provisions.

Marketing purposes
For marketing purposes, your data will be processed on the basis of the consent you have given for 5 years, counted from 1 January of the year following the date on which the consent was granted. On the basis of this consent, we will be able to send you information about our offer, events organised by us and promotions prepared for you.

Newsletter
For the purpose of providing the Newsletter service, your data are processed to the extent necessary for the proper provision of this service. The legal basis for the processing of your data is Article 6(1)(b) of the GDPR. Providing personal data is voluntary, but necessary to subscribe to and use the Newsletter service; the consequence of not providing data will be the inability to use the service. Your data in connection with the provision of the service will be processed until you unsubscribe from the subscription, in accordance with the terms and conditions of the Newsletter service.

Social media
In the scope of our activities on social media, we will process your data for the following purposes:

running our profile/channel on social media under the terms and conditions specified by them and informing you via these channels about our activities, events organised by us and the products and services we offer;
contacting you;
analysing the functioning, popularity and use of our profile/channel;
sending you commercial information, including invitations to events organised by us, via the functionalities of the profile/channel.

Processing of personal data in the video monitoring system
As part of tasks related to ensuring the safety of persons on the university premises and securing property, as well as determining, pursuing or defending claims in court, administrative or other out-of-court proceedings, we use video monitoring. The legal basis for the processing of data recorded by the monitoring system is our legitimate interest (Article 6(1)(f) of the GDPR). Video recordings are stored for no longer than three months from the date of recording, unless the recording is necessary to determine or document events for the purposes for which the monitoring is used, in which case the processing period will be extended until the completion of these tasks.

Claims and defence against them
In addition, your data will be processed for the purpose of establishing claims, defending against them and pursuing them, which constitutes our legitimate interest. These data are processed until the limitation period for potential claims as specified by law.

WHAT ARE YOUR RIGHTS IN RELATION TO OUR PROCESSING OF YOUR PERSONAL DATA?
You have the right:

to access your data,
to rectify your data,
to have your data erased if:
- you withdraw your consent to the processing of personal data,
- your personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
- you object to the use of your data for marketing purposes,
- you object to the use of your data in order to adapt our services to your preferences,
- your personal data are processed unlawfully,
to restrict the processing of your data,
to object to the processing of data,
to data portability,
to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

You also have the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office) if you consider that the processing of your personal data violates applicable law.

Providing personal data for marketing purposes is voluntary.

HOW DO WE TAILOR SERVICES TO YOUR INTERESTS AND PREFERENCES?
Personal data collected for marketing purposes will be processed in an automated manner in the form of profiling. This means that, thanks to the analysis of the data you have provided, we will present an offer tailored to your needs.
On the basis of the data received from you, we also tailor online advertising content to your preferences. Here, too, we act on the basis of our legitimate interest, which consists in promoting our activities and selecting the best possible offer for you. You can change your browser settings to disable, among other things, ad personalisation. In this respect, please refer to the relevant terms and conditions of your browser.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?
As a university, we use the services of companies on a daily basis to provide you with the highest standard of service. Your personal data may be transferred to them for processing on our behalf. This usually happens when cooperating with a specific service provider (e.g. a provider of data storage services, a provider of tools used in distance learning) or a subcontractor (e.g. a marketing agency). In such a situation, the transfer of data does not entitle other entities to process them freely, but only to use them for the purposes explicitly indicated by us. In no case does the transfer of data release us, as the Data Controller, from responsibility for their processing. Your data may also be transferred to public authorities, but only where authorised by applicable law.

In connection with our use of social media, your personal data may be transferred to the owners of platforms such as Facebook, LinkedIn, YouTube, Instagram, as well as to marketing agencies providing services to us.

Your data, such as your first name, surname and business email address, will be transferred for processing to data recipients, in particular entities cooperating with the Data Controller. By entities cooperating with the Data Controller, we mean entities indirectly or directly linked to the Data Controller, in particular by capital ties.

In addition, your data, such as your first name, surname and business email address, will be visible to students from entities cooperating with the Data Controller via the address book used in MS Office 365 tools.

The Controller’s providers are mainly based in Poland and in other countries of the European Economic Area (EEA). Some providers are based outside the EEA. In connection with the transfer of the User’s data outside the EEA, the Controller ensures that such providers offer a high level of protection of personal data.
In connection with our use of Microsoft Office 365 tools, your personal data may be transferred outside the EEA, including to the USA.

As part of the processes related to staff recruitment, the legal bases for the processing of your data are:

the Labour Code – with regard to first name(s), surname, parents’ first names, date of birth, place of residence (correspondence address), education and employment history (Article 6(1)(c) of the GDPR),
your consent, if the application documents contain personal data other than those listed above (Article 6(1)(a) of the GDPR),
our legitimate interest in selecting a suitable candidate for a given position, with regard to the personal data provided to us during the interview (Article 6(1)(f) of the GDPR),
your consent given for the purposes of future recruitment processes (Article 6(1)(a) of the GDPR).

These data are processed until the end of the given recruitment process, and if you have given your consent for subsequent ones – additionally for a maximum period of two years.

running our profile/channel on social media under the terms and conditions specified by them and informing you via these channels about our activities, events organised by us and the products and services we offer;
contacting you;
analysing the functioning, popularity and use of our profile/channel;
sending you commercial information, including invitations to events organised by us, via the functionalities of the profile/channel.

The legal basis for the processing of your data for the purposes indicated above is our legitimate interest, which consists in promoting our activities and expanding the group of our supporters, as well as responding to your questions. We process personal data for the period of your activity related to the profile/channel, and then for no longer than until your account is deleted or you are removed from the profile/channel.

Processing of personal data in the video monitoring system
As part of tasks related to ensuring the safety of persons on the university premises and securing property, as well as determining, pursuing or defending claims in court, administrative or other out-of-court proceedings, we use video monitoring. The legal basis for the processing of data recorded by the monitoring system is our legitimate interest (Article 6(1)(f) of the GDPR). Video recordings are stored for no longer than three months from the date of recording, unless the recording is necessary to determine or document events for the purposes for which the monitoring is used, in which case the processing period will be extended until the completion of these tasks.

Claims and defence against them
In addition, your data will be processed for the purpose of establishing claims, defending against them and pursuing them, which constitutes our legitimate interest. These data are processed until the limitation period for potential claims as specified by law.

WHAT ARE YOUR RIGHTS IN RELATION TO OUR PROCESSING OF YOUR PERSONAL DATA?
You have the right:

to access your data,
to rectify your data,
to have your data erased if:
- you withdraw your consent to the processing of personal data,
- your personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
- you object to the use of your data for marketing purposes,
- you object to the use of your data in order to adapt our services to your preferences,
- your personal data are processed unlawfully,
to restrict the processing of your data,
to object to the processing of data,
to data portability,
to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

You also have the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office) if you consider that the processing of your personal data violates applicable law.

Providing personal data for marketing purposes is voluntary.

HOW DO WE TAILOR SERVICES TO YOUR INTERESTS AND PREFERENCES?
Personal data collected for marketing purposes will be processed in an automated manner in the form of profiling. This means that, thanks to the analysis of the data you have provided, we will present an offer tailored to your needs.
On the basis of the data received from you, we also tailor online advertising content to your preferences. Here, too, we act on the basis of our legitimate interest, which consists in promoting our activities and selecting the best possible offer for you. You can change your browser settings to disable, among other things, ad personalisation. In this respect, please refer to the relevant terms and conditions of your browser.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?
As a university, we use the services of companies on a daily basis to provide you with the highest standard of service. Your personal data may be transferred to them for processing on our behalf. This usually happens when cooperating with a specific service provider (e.g. a provider of data storage services, a provider of tools used in distance learning) or a subcontractor (e.g. a marketing agency). In such a situation, the transfer of data does not entitle other entities to process them freely, but only to use them for the purposes explicitly indicated by us. In no case does the transfer of data release us, as the Data Controller, from responsibility for their processing. Your data may also be transferred to public authorities, but only where authorised by applicable law.

In connection with our use of social media, your personal data may be transferred to the owners of platforms such as Facebook, LinkedIn, YouTube, Instagram, as well as to marketing agencies providing services to us.

The Controller’s providers are mainly based in Poland and in other countries of the European Economic Area (EEA). Some providers are based outside the EEA. In connection with the transfer of the User’s data outside the EEA, the Controller ensures that such providers offer a high level of protection of personal data.

fulfilling our accounting and tax obligations; the data will be processed for 5 years, counted from the beginning of the year following the financial year in which economic events arising from the cooperation occurred, in accordance with the accounting regulations,
proper performance of the contract; we will process the data until the contractor changes the representative indicated as responsible for the performance of tasks arising from the contract or agreement, or indicated for the conclusion of a contract or agreement,
email, postal or telephone correspondence. The legal basis for their processing is our legitimate interest (Article 6(1)(f) of the GDPR). This consists in the possibility of ongoing contact with you and providing answers to your questions. We process these data for the duration of the correspondence and then additionally for the limitation period of any claims as specified by law, submitted by you, where, as a result of the communication maintained, no other actions changing the purpose of processing, such as the conclusion of a contract, have been taken.

running our profile/channel on social media under the terms and conditions specified by them and informing you via these channels about our activities, events organised by us and the products and services we offer;
contacting you;
analysing the functioning, popularity and use of our profile/channel;
sending you commercial information, including invitations to events organised by us, via the functionalities of the profile/channel.

The legal basis for the processing of your data for the purposes indicated above is our legitimate interest, which consists in promoting our activities and expanding the group of our supporters, as well as responding to your questions. We process personal data for the period of your activity related to the profile/channel, and then for no longer than until your account is deleted or you are removed from the profile/channel.

Processing of personal data in the video monitoring system
As part of tasks related to ensuring the safety of persons on the university premises and securing property, as well as determining, pursuing or defending claims in court, administrative or other out-of-court proceedings, we use video monitoring. The legal basis for the processing of data recorded by the monitoring system is our legitimate interest (Article 6(1)(f) of the GDPR). Video recordings are stored for no longer than three months from the date of recording, unless the recording is necessary to determine or document events for the purposes for which the monitoring is used, in which case the processing period will be extended until the completion of these tasks.

Claims and defence against them
In addition, your data will be processed for the purpose of establishing claims, defending against them and pursuing them, which constitutes our legitimate interest. These data are processed until the limitation period for potential claims as specified by law.

WHAT ARE YOUR RIGHTS IN RELATION TO OUR PROCESSING OF YOUR PERSONAL DATA?
You have the right:

to access your data,
to rectify your data,
to have your data erased if:
- you withdraw your consent to the processing of personal data,
- your personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
- you object to the use of your data for marketing purposes,
- you object to the use of your data in order to adapt our services to your preferences,
- your personal data are processed unlawfully,
to restrict the processing of your data,
to object to the processing of data,
to data portability,
to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

You also have the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office) if you consider that the processing of your personal data violates applicable law.

Providing personal data for marketing purposes is voluntary.

HOW DO WE TAILOR SERVICES TO YOUR INTERESTS AND PREFERENCES?
Personal data collected for marketing purposes will be processed in an automated manner in the form of profiling. This means that, thanks to the analysis of the data you have provided, we will present an offer tailored to your needs.
On the basis of the data received from you, we also tailor online advertising content to your preferences. Here, too, we act on the basis of our legitimate interest, which consists in promoting our activities and selecting the best possible offer for you. You can change your browser settings to disable, among other things, ad personalisation. In this respect, please refer to the relevant terms and conditions of your browser.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?
As a university, we use the services of companies on a daily basis to provide you with the highest standard of service. Your personal data may be transferred to them for processing on our behalf. This usually happens when cooperating with a specific service provider (e.g. a provider of data storage services, a provider of tools used in distance learning) or a subcontractor (e.g. a marketing agency). In such a situation, the transfer of data does not entitle other entities to process them freely, but only to use them for the purposes explicitly indicated by us. In no case does the transfer of data release us, as the Data Controller, from responsibility for their processing. Your data may also be transferred to public authorities, but only where authorised by applicable law.

In connection with our use of social media, your personal data may be transferred to the owners of platforms such as Facebook, LinkedIn, YouTube, Instagram, as well as to marketing agencies providing services to us.

The Controller’s providers are mainly based in Poland and in other countries of the European Economic Area (EEA). Some providers are based outside the EEA. In connection with the transfer of the User’s data outside the EEA, the Controller ensures that such providers offer a high level of protection of personal data.

WHO IS THE CONTROLLER OF YOUR PERSONAL DATA AND HOW CAN YOU CONTACT US?

The controller of your personal data is WSB Merito University in Wrocław, ul. Fabryczna 29-31, 53-609 Wrocław. If you have any questions regarding the processing of your personal data and the rights you are entitled to, please contact our Data Protection Officer: Mateusz Potocki, email address: [email protected].

FOR WHAT PURPOSES, ON WHAT LEGAL BASIS AND FOR HOW LONG DO WE PROCESS YOUR PERSONAL DATA?

Marketing purposes
For marketing purposes, your data will be processed on the basis of the consent you have given for 5 years, counted from 1 January of the year following the date on which the consent was granted. On the basis of this consent, we will be able to send you information about our offer, events organised by us and promotions prepared for you.

Registration and processing of participants’ data in connection with the organisation of an event
In order to enable registration for events and their organisation, we will process your data to the extent necessary to achieve this purpose. If the organised event is paid or, as a result of participating in the event, you win a prize, your data will be processed in connection with our legal obligations arising from tax law provisions. These data will be processed for a period of 5 years, counted from 1 January of the year following the date of issuing the invoice or winning the prize.

Processing of image
For the purposes of creating coverage of events organised by the Controller, we will publish photos taken during the events on the Controller’s websites and social media. The legal basis for such processing is our legitimate interest (Article 6(1)(f) of the GDPR).

Claims and defence against them
Your data will also be processed for the purpose of establishing claims, defending against them and pursuing them, which constitutes our legitimate interest. These data are processed until the limitation period for potential claims as specified by law.

WHAT ARE YOUR RIGHTS IN RELATION TO OUR PROCESSING OF YOUR PERSONAL DATA?

You have the right:

to access your data,
to rectify your data,
to have your data erased if:

- you withdraw your consent to the processing of personal data,
- your personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
- you object to the use of your data for marketing purposes and the dissemination of your image,
- you object to the use of your data in order to adapt our services to your preferences,
- your personal data are processed unlawfully,

to restrict the processing of your data,
to object to the processing of data,
to data portability,
to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

Providing personal data for marketing purposes is voluntary.

Providing data for the purpose of registering for and participating in an event is voluntary; however, if you refuse to provide your data or provide incorrect data, we will not be able to register you for the event.

HOW DO WE TAILOR SERVICES TO YOUR INTERESTS AND PREFERENCES?

Personal data collected for marketing purposes will be processed in an automated manner in the form of profiling. This means that, thanks to the analysis of the data you have provided, we will present an offer tailored to your needs.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?

As a university, we use the services of companies on a daily basis to provide you with the highest standard of service. Your personal data may be transferred to them for processing on our behalf. This usually happens when cooperating with a specific service provider (e.g. a provider of data storage services) or a subcontractor (e.g. a marketing agency). In such a situation, the transfer of data does not entitle other entities to process them freely, but only to use them for the purposes explicitly indicated by us. In no case does the transfer of data release us, as the Data Controller, from responsibility for their processing. Your data may also be transferred to public authorities, but only where authorised by applicable law.

Your data such as your first name and email address will be transferred for processing to data recipients, in particular entities cooperating with the Data Controller which provide the Controller with electronic communication tools, including MS Office 365 tools. By entities cooperating with the Data Controller, we mean entities directly or indirectly linked to the Data Controller.

In connection with our use of social media, your personal data may be transferred to the owners of platforms such as Facebook, LinkedIn, YouTube and Instagram.

The Controller’s providers are mainly based in Poland and in other countries of the European Economic Area (EEA). Some providers are based outside the EEA. In connection with the transfer of your data outside the EEA, including to the USA, the Controller ensures that such providers offer a high level of protection of personal data.

Personal data protection

Information duty under the GDPR

Still have doubts?

Have you already chosen your field of study?