I
[Data controller and contact details]
The data administrator is the Warsaw University of Life Sciences with its seat in Warsaw at 166 Nowoursynowska Street (hereinafter: SGGW or the Administrator)
You can contact the data administrator:
- correspondence address: Warsaw University of Life Sciences, ul. Nowoursynowska 166 02-787 Warsaw
- telephone: 22 593 59 06, for people calling from outside Poland: +48 22 593 59 06
II
[Data protection officer]
The Data Protection Officer should be directed to matters relating to the processing of your data by the Data Administrator, including matters relating to the exercise of rights regarding access to your data, rectification, deletion, restriction of processing or objection to their processing.
- Data Protection Officer: Przemysław Siarka
- e-mail address of the Personal Data Protection Inspector: e-mail: iod@sggw.pl
- correspondence address of the Data Administrator with a note Data protection officer.
III
[Purposes and legal grounds for the processing of personal data]
Please be advised that your personal data will be processed on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95 / 46 / EC (General Data Protection Regulation / GDPR) for the following purposes:
In terms of contact by phone or email
- answering the questions asked by e-mail or via the contact form and maintaining contact with you, which is the legitimate interest of the administrator (Article 6 (1) (f) of the GDPR). Personal data will be processed until the claims expire. Providing data is voluntary but necessary to make contact.
- in order to defend against claims or pursue claims based on the legitimate interest pursued by the data controller (Article 6 (1) (f) of the GDPR).
For newsletter subscribers
- based on Article. 6 section 1 lit. a GDPR (consent of the data subject) for the purpose of sending marketing information by electronic means. Providing data is voluntary, but necessary to subscribe to the newsletter. Personal data will be processed until the consent is withdrawn.
In the field of contractors
- in order to verify the correctness of the authorization to act on behalf of the Contractor, including verification of the above data in public registers, contacting in matters related to the performance of the Agreement and as legitimate interests pursued by the Administrator pursuant to art. 6 section 1 letter b and f of GDPR. Personal data will be processed for the duration of the contract until the claims are time-barred;
- in order to defend against claims or pursue claims based on the legitimate interest pursued by the data controller (Article 6 (1) (f) of the GDPR).
IV
[Recipients of personal data]
The recipients of the data are:
- authorized employees and associates of WULS-SGGW,
- entities processing data on behalf of and on behalf of the Data Administrator, on the basis of a contract for entrusting the processing of personal data, in order to provide services specified in the contract, e.g. ICT services, e.g. hosting, delivery or maintenance of IT systems; legal services; advisory services, including as part of outsourcing of the Data Protection Officer; accounting services, traditional mail service, and in the case of electronic – Microsoft, along with other tools provided by Microsoft.
V
[Rights of persons whose personal data concern]
You have the following rights:
- the right to access your personal data (Article 15 of the GDPR), including obtaining a copy of the data (Article 15 (3) of the GDPR),
- the right to rectify (correct) or supplement incomplete personal data
(Article 16 GDPR), - the right to request the deletion of your personal data in cases provided for by law (Article 17 of the GDPR),
- the right to submit a request to limit the processing of your personal data
(Article 18 of the GDPR), - the right to receive your data in a structured, commonly used format and their transfer when the processing is based on your consent or a concluded contract, and also when the processing is carried out in an automated manner
(Article 20 of the GDPR), - the right to object to the processing of your personal data in the event of their processing in order to implement the legitimate interest of the Administrator, for reasons related to its particular situation, including profiling (Article 21 of the GDPR),
VI
[President of the Office for Personal Data Protection]
If you believe that the processing of your personal data violates the provisions of the Regulation, you have the right to lodge a complaint with the supervisory authority, i.e. to the President of the Personal Data Protection Office with headquarters in Warsaw, ul. Stawki 2, which can be contacted in the following way:
- by letter: ul. Stawki 2, 00-193 Warsaw
- via the electronic inbox available on the website https://www.uodo.gov.pl/pl/p/kontakt
- by phone: (22) 531 03 00
VI
[Automated decision making]
With regard to data subjects, the Administrator does not make decisions based solely on the automated processing of personal data, including profiling.
VII
[Data transfer outside the European Economic Area (EEA)]
Due to the use of Microsoft services, data may be transferred outside the European Economic Area (EEA), e.g. Others. to USA. Microsoft provides guarantees resulting from compliance with Chapter 5 of the GDPR and has been obliged to comply with the protection of personal data on the basis of standard contractual clauses concluded with SGGW. More information can be found at:
https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=46 and https://privacy.microsoft.com/pl-pl/privacystatement .