I

[Data Administrator and contact details]

The administrator of data is Warsaw University of Life Sciences – SGGW, with its registered office at ul. Nowoursynowska 166, Warsaw (hereinafter SGGW or Administrator)

The data administrator can be contacted:

1. In writing: Szkoła Główna Gospodarstwa Wiejskiego w Warszawie ul. Nowoursynowska 166 02-787 Warszawa (SGGW, 02-787 Warsaw, Nowoursynowska 166)
2. By phone: (22) 593 59 06, for outside callers: +48 (22) 593 59 06

II

[The Inspector of Data Protection]

In matters concerning personal data processing, including those related to the data access, rectification, erasure, restriction, or objection to processing, please contact the Inspector of Data Protection.

1. via e-mail address: iod@sggw.edu.pl
2. in writing with a note: The Inspector of Data Protection

III

[Legal Base for Processing Personal Data ]

All personal data will be processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) to ensure:

1. the safety of persons employed by the Administrator,
2. the safety of other persons on the Administrator’s premises,
3. the safety of the Administrator’s property.

The legal basis for processing is  the legitimate interests of the administrator of personal data (art. 6 para. 1 letter b GDPR). The personal data will be stored for the period not exceeding 3 months from the recording date (it applies to the situations when an image from a given area is recorded). It does not apply to image recordings constituting evidence in legal proceedings or they may constitute evidence in proceedings.

IV

[The Recipients of the Personal Data]

The Data Recipients are:

1. authorized SGGW employees and associates,
2. entities processing data on behalf of the Data Administrator on the basis of the entrustment agreement of personal data processing.

V

[Persons’ rights with regard to the personal data ]

 Each person has a right to submit an application in the following events:

1. the right to access personal data (Article 15, GDPR), including the right to obtain a copy of the data (Article 15 (3), GDPR),
2. the right to request correction (revision) of personal data – if the data is incorrect or incomplete (Article 16, GDPR),
3. the right to request the deletion of personal data (Article 17, GDPR),
4. the right to request a restriction to the processing of personal data (Article 18, GDPR),
5. the right to receive the personal data in a structured, commonly used format and to transmit those data if the processing is based on consent or concluded agreement, or the processing is carried out by automated means. (Article 20, GDPR).
6. the right to object to processing of personal data for the performance of a task carried out for reasons of Administrator’s interest, on grounds relating to the particular situation, including profiling based on those provisions (Article 21, GDPR).

VI

[President of the Personal Data Protection Office]

In case of opinion that the processing of personal data violates the provisions of the Regulation, one has the right to lodge a complaint with the supervisory authority, i.e. to the President of the Personal Data Protection Office with its  headquarters in Warsaw, ul. Stawki 2, who can be contacted in the following ways:

1. in writing: 00-193 Warsaw, ul. Stawki 2
2. via the electronic inbox available on: https://www.uodo.gov.pl/pl/p/kontakt
3. by phone: (22) 531 03 00

VI

[Automated decision making]

With regard to data subjects, the Administrator does not make decisions based solely on the automated processing of personal data, including profiling.

VII

[Data transfer outside the European Economic Area (EEA)]

Administrator does not transfer data outside the European Economic Area (EEA).