INFORMATION
about the processing of personal data of candidates for studies/students by the Pedagogical University named after the Commission of National Education in Cracow.
Pursuant to Article 13 (or/and) 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ. EU L.2016.119.1 dated 04.05.2016. – hereinafter referred to as the "Regulation" or "RODO"), we inform you that:
1. the Administrator of the Personal Data is the Pedagogical University named after the Commission of National Education in Cracow (address: 2 Podchorążych St., 30-084 Cracow, website: up. krakow.pl). The Personal Data Administrator can be contacted via e-mail address: info@up.krakow.pl or in writing to the mailing address indicated in the first sentence;
2. Data subjects may contact the Data Protection Officer designated by the Administrator on matters concerning: the processing of personal data, the exercise of rights concerning the processing of personal data, by writing to the e-mail address: iod@up.krakow.pl, or the address of the Data Controller indicated in the first sentence;
3. In connection with its purpose the University shall process personal data in order to perform a task carried out in the public interest or in the exercise of public authority entrusted to the Controller, and to comply with the legal obligations incumbent on the Data Controller under the Law of July 20, 2018. Law on Higher Education and Science (Journal of Laws of 2022, item 574, i.e.) and implementing acts, as well as regulations on archiving on the basis of Article 6(1)(c) and (e) of the RODO.
4. The University shall also process personal data by storing, securing and providing access to archival collections collected at the Archives of the University of Pedagogy on the basis of Article 6(1)(c) and (e) of the RODO in connection with Article 49(3) of the Act of July 20, 2018. Law on Higher Education and Science (Journal of Laws of 2022, item 574, i.e.) and the Act of July 14, 1983 on the national archival resource and archives (Journal of Laws of 2020, item 164, i.e.).
5. The collected personal data may be made available to entities and public authorities authorized to process personal data on the basis of generally applicable laws, as well as to entities processing personal data on behalf of the controller in connection with the performance of the task entrusted to them. The University will process the collected personal data for the period necessary to carry out the statutory and statute tasks of the University, including the duration of the recruitment process (the data of those who were not enrolled in the Doctoral School will be stored for a period of 10 months after the end of the recruitment process).
6. The data subject shall have the right, depending on the legal basis for the processing, to exercise his/her rights under the law, including:
- to access his or her personal data, i.e. to obtain confirmation from the Data Controller as to whether his or her personal data are being processed. If the data are being processed, the controller is entitled to access them and obtain the following information: the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the data have been or will be disclosed, the period of data retention or the criteria for determining it, the user's right to request rectification, erasure or restriction of the processing of personal data (Article 15 of the RODO, and to object to such processing (Article 21 of the RODO);
- Receive a copy of the data being processed, with the first copy being free of charge, and the controller may charge a reasonable fee for subsequent copies based on administrative costs (Article 15(3) RODO);
- Correction of personal data that is incorrect or completion of incomplete data (Article 16 RODO);
- Deletion of data if the Data Controller no longer has a legal basis for processing the data or the data are no longer necessary for the purposes of processing (Art.17 RODO);
- Limitations of processing when: the data subject questions the accuracy of the personal data - for a period of time that allows the Administrator to verify the accuracy of the data; the processing is unlawful and the data subject objects to the erasure of the data by requesting a restriction of its use; the Administrator no longer needs the data, but it is needed by the data subject to establish, assert or defend claims; the data subject has objected to the processing until it is determined whether or not the legitimate grounds on the part of the Administrator override the grounds of the data subject's objection;
- To data portability, i.e. to receive in a structured, commonly used machine-readable format the personal data concerning him or her that he or she has provided to the Controller, and to request that the data be sent to another controller, if the data is processed on the basis of the data subject's consent or a contract with him or her, and if the data is processed by automated means (Article 20 RODO);
- Object to the processing of his or her personal data for legitimate purposes of the Controller, on grounds related to his or her particular situation, including profiling. In such case, the Data Controller shall assess the existence of legitimate grounds for the processing, overriding the interests, rights and freedoms of the data subject, or grounds for establishing, asserting or defending claims. If, according to the assessment, the interests of the data subject outweigh the interests of the controller, the controller will be obliged to cease processing for these purposes (Article 21 of the DPA);
7. to file a complaint with the President of the Office for Personal Data Protection, in case the processing of personal data is deemed to violate the provisions of the RODO.
8. Providing personal data during the recruitment process, as well as during the commencement of education at the Doctoral School is voluntary but necessary for the fulfilment of the Administrator's obligations. Applying to the Doctoral School is tantamount to consenting to the processing of personal data contained in the form and other documents on the basis of Article 6(1)(a) RODO. The scope of the data requested in the forms and documents is limited to the necessary minimum, the limits of which are set by the legislator in legal acts in particular in the field of higher education and science. The collected data will not be used for purposes other than the implementation of statutory and regulatory tasks of the University. A doctoral student may be required to provide additional data, including sensitive data in accordance with Article 9(2) of the RODO, due to legal requirements related to undertaking training at the Doctoral School or the need for the University to fulfil its mandates. The University's processing of personal data for purposes other than those specified in paragraphs 3 and 5 is lawful if the data subject gives his/her consent.
9. The premises of the University have been covered by video surveillance due to the need to maintain order and security and protect property. The legal basis for the use of monitoring is 6(1)(c) of the RODO in conjunction with Article 50 of the Act of July 20, 2018, Law on Higher Education and Science (Journal of Laws of 2022, item 574, i.e.) and Article 5a(1) of the Act of December 16, 2016 on the Principles of State Property Management (Journal of Laws of 2021, item 1933, i.e.). Collected personal data in the form of an image will be processed for the period of realization of the purpose, but no longer than 3 months. The period of personal data storage may be extended each time until the final conclusion of the proceedings, in cases where the recordings constitute evidence or the University has become aware that they may constitute evidence in the case.
10. Personal data processed for the purposes specified in this Information shall not be transferred without the consent of the data subjects to third countries or international organizations.
11. submission of application documents to the Doctoral School conducted by the Pedagogical University named after the National Education Commission in Cracow implies acceptance of the Regulations of the Doctoral School and familiarization with this Information on personal data processing.
