Personal data processing information

INFORMATION CLAUSE

 

Cardinal Stefan Wyszyński University in Warsaw ensures that the personal data provided by you shall be processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Journal of Laws of the EU L 119/1 of 4 May 2016), hereinafter referred to as the "GDPR", and the Act of 10 May 2018 on data protection (Journal of Laws 2018 item 1000).

 

  1. The Controller of your personal data is Cardinal Stefan Wyszyński University in Warsaw, Dewajtis 5, 01-815 Warsaw, which can be contacted regarding the recruitment for degree studies at the address: rekrutacja@uksw.edu.pl or for short-term studies at the address: bwm@uksw.edu.pl.
  2. The Controller has appointed Data Protection Officer at Cardinal Stefan Wyszyński University in Warsaw (DPO), who can be contacted in matters concerning the processing of personal data, as well as the exercise of rights related to the processing of personal data by phone: 22/5619034, e-mail: iod@uksw.edu.pl. It is not the DPO's task to handle matters related to recruitment, including providing advice and accepting recruitment documents.
  3. Your personal data will be processed in accordance with the provisions of Article 5 of the GDPR, pursuant to Article 6(1) (c) of the GDPR for the purpose of recruitment and submission of documents for studies required by the above mentioned proceedings and the fulfilment of legal obligations by the University.
  4. The provision of personal data is voluntary, but necessary in order to participate in the process of recruitment for studies at UKSW and submit documents.
  5. Your personal data will not be disclosed to other entities, except for entities authorized by law and on the basis of concluded agreements.
  6. Access to your personal data within the organizational structure of the University will only be provided to employees of UKSW authorized by the Administrator, to the extent necessary, including members of the Recruitment Committee in particular.
  7. The organizational units processing personal data within the scope of processing requests for information on the processing of your personal data in connection with the recruitment process is the Recruitment Office (for degree studies) and the International Relations Office (for short-term studies) of UKSW.
  8. Your personal data will be kept for the period necessary to achieve the objective indicated in paragraph 3, resulting from the relevant legal regulations, i.e.: for 12 months from the date of the final conclusion of the appeal procedure concerning the recruitment process, and in the case of admission, in accordance with the course of study, and will then be archived and kept for maximum 50 years, allowing the Controller to pursue legitimate interests or to raise effective objections to the processing of personal data. The processing period may be extended within the limits of the law if the processing of personal data is necessary to assert or clarify claims. After the end of the processing period, personal data will be anonymized and permanently deleted.
  9. The Controller shall not transfer your personal data outside the European Economic Area.
  10. Your personal data is not processed automatically and is not subject to profiling.
  11. You have the right to access your data and make a request regarding the following:
    • correction of your data (pursuant to Article 16 of the GDPR);
    • deletion of data ( pursuant to Article 17(1)(b) of the GDPR);
    • restriction of data processing (pursuant to Article 18 of the GDPR);
    • transfer of personal data (pursuant to Article 20(1)(a) of the GDPR);
    • raising objections to the processing of personal data (pursuant to Article 21 of the GDPR);
    • withdrawal of consent to the processing of personal data at any time, when it is based on Article 6(1)(a) of the GDPR and when there is no other legal basis for the processing.
  12. In case of doubt as to the identity of the individual requesting access to personal data, the entity processing personal data may require additional information necessary to confirm the identity of the data subject (Article 12(6) GDPR).
  13. You have the right to lodge a complaint with the President of the Personal Data Protection Office, when it is proven that your personal data is being processed by the controller contrary to the GDPR 4.