Information on the processing of personal data

Information on the processing of personal data

Notification obligation under Regulation 2016/679 of the European Parliament and of the Council (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the so-called General Data Protection Regulation) (“GDPR”)

• 1. The Controller of your personal data is Kozminski University with its registered office at ul. Jagiellońska 59, 03-301 Warsaw. You can contact the Controller in writing by sending a letter to our registered office, or by sending an e-mail to: [email protected]. 
  2. The Data Protection Officer (DPO) appointed by the Controller supervises the correctness of personal data processing. You can contact the Data Protection Officer in writing by sending a letter to: ul. Jagiellońska 59, 03-301 Warsaw or by sending an e-mail to: [email protected].
  3. Your personal data will be processed for the purposes of: 
     1. ensuring the safety of persons present on KU’s premises;
     2. protecting persons and property – including KU property;
     3. keeping legally protected secrets – including business secrets – confidential;
     4. keeping the processed personal data safe and secure.
  4. The legal basis for the processing of your personal data is Article 6(1)(f) of the GDPR, i.e. the controller's legitimate interest in being able to achieve the purposes referred to in section 3.
  5. The recipients of your personal data are entities who are ordered by the Controller to perform activities involving a necessity for data processing (processors): operators of IT systems, security agency.
  6. Your personal data are transferred neither to Third Countries, i.e. outside the European Economic Area (EEA), nor to international organisations.
  7. The video surveillance system operates 24/7, and the recorded content is stored on an electronic storage device for a period not longer than 21 days. After 21 days, new recorded content overwrites the existing content unless there is a justified need to store video records for evidential purposes to support preparatory proceedings conducted by relevant authorities.
  8. You have the right to access the recordings in legitimate cases, the right to have your data erased, and the right to restrict the processing of your data. 
  9. Given the fact that your personal data are processed on the basis of the Controller’s legitimate interest, the Controller will cease the processing of it for the said purpose if you file an objection against such processing. You have the right to file an objection against the processing of your personal data anytime and free of charge when your personal data are processed on the basis of a legitimate interest and your objection is justified by special circumstances you are in.
  10. You have the right to file a complaint to the President of the Personal Data Protection Office (PL: Prezes Urzędu Ochrony Danych Osobowych).
  11. While on KU premises, you voluntarily provide KU with your personal information. If you do not want your image to be captured and recorded in the video surveillance system, you need to refrain from entering KU premises that are under video surveillance.
  12. Your personal data will not be processed in an automated manner - including based on profiling - without your express separate consent thereto.
  13. You can learn more about the way your rights specified above may be exercised by contacting the Controller or the Data Protection Officer as described in section 1 and 2.
  14. The Controller makes every effort to provide all possible means of physical, technical, and organisational protection of personal data against their accidental or wilful destruction, loss, modification, unauthorised disclosure, use, or access, according to all applicable regulations.