Information about the processing of personal data

Administrator

The administrator of the personal data processed is the University of Warsaw (UW), ul. Krakowskie Przedmieście 26/28, PL-00-927 Warszawa.

You can contact with the administrator by:

mail: University of Warsaw, ul. Krakowskie Przedmieście 26/28, PL-00-927 Warszawa;
phone: +48 22 55 20 000.

Data Protection Officer (DPO)

Controller has designated Data Protection Officer whom you may contact via email at iod@adm.uw.edu.pl. You may contact the DPO in all matters relating to your personal data processing by the University of Warsaw and the exercise of rights in relation to the processing of personal data.

The DPO, however, does not proceed other matters, like answering messages left in the contact form.

Purpose and legal grounds of data processing

The administrator processes the contact information about the senders and recipients of electronic correspondence contained in this correspondence, for the purposes of:

based on art. 6 section 1 letter c with regard to art. 6 section 1 letter e of the GDPR¹:
- enable contact with the administrator (including providing an answer, case execution),
- receive letters, applications and requests in electronic form,
- documenting the arrangements made with the message sender,
- evidence, to secure information that can be used to demonstrate facts;
based on art. 6 section 1 letter f of the GDPR:
- protection against claims and the assertion of possible claims.

Correspondence is stored for one year, except if the messages contain content relevant for further correspondence or for claims or defences, then selected messages will be stored for up to 3 years, i.e. until the expiration of the statute of limitations for claims under the Civil Code.

If the correspondence sent contains data of special categories referred to in art. 9 section 1 of the GDPR the basis for the processing of personal data will be art. 9 section 2 letter a of the GDPR (permission for processing of personal data of a particular category). Jeżeli nadawca nie zawarł zgody w swojej korespondencji zostanie poproszony o jej odrębne udzielenie, gdyż jest to warunek konieczny do zgodnego z przepisami ogólnego rozporządzenia o ochronie danych przetwarzania przez administratora danych osobowych szczególnej kategorii.

All other your data will be processed in special cases after you have given your separate consent to the processing of your data (art. 6 section 1 letter a of the GDPR), which you have the right to withdraw at any time. We also remind you that your withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of your consent before it was withdrawn. You can withdraw your consent by sending a message via the contact form through which electronic correspondence is conducted.

Recipients of personal data

Your personal data may be made available to entities authorized by law. Access to your personal data will also be provided to authorized employees of the administrator, who must process your personal data as part of their duties and tasks.

Recipients of the data may also be other entities to whom the administrator will order the performance of certain activities that involve the processing of personal data, such as entities providing services for the protection of property and persons, postal and courier services, transport services, etc.

Your business data may also be transferred to the parties to the contracts concluded by the Administrator, if it is necessary for the execution of these contracts and will result from the concluded contract.

Transfer of data outside the European Economic Area (EEA)

Your data may also be processed by our G-Suit service provider for education Google in its data centers.²

Rights of the data subject

Under the GDPR data subjects have the following rights:

to access data and to receive copies of the actual data;
to correct (rectify) your personal data;
to restrict processing of personal data;
to erase personal data, subject to provisions of Art. 17 section 3 of the GDPR;
to file a claim with the President of the Personal Data Protection Office, if you believe data processing violates law.

Information on the requirement to provide data

Providing your personal data in the scope resulting from law is necessary to participate in the recruitment process. Providing other personal data is voluntary.

¹ Regulation of the European Parliament and the Council (EU) 2016/679 of April 27, 2016 on protection of individual persons with regard to the personal data processing and on the free flow of such data, and also repealing Directive 95/46/EC (general regulation on data protection) (Official Journal EU L 119 of 04.05.2016, page 1, with subsequent changes) — hereinafter as the GDPR.

² https://www.google.com/about/datacenters/locations/index.html