Fulfilling the information obligation pursuant to Article 13 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) [Official Journal of the EU . L. 2016.119.1 of May 4, 2016], hereinafter referred to as: GDPR, we inform that:
The Controller of personal data is the AGH University of Science and Technology in Krakow, 30 A. Mickiewicza Avenue, 30-059 Krakow, hereinafter referred to as the AGH UST;
The contact details of the Data Protection Officer are as follows: e-mail: iodo@agh.edu.pl, phone: 12 617 53 25;
The processing of personal data at AGH UST is carried out for the purpose of carrying out legal and statutory tasks. Each time AGH UST obtains personal data, acting in compliance with the provisions of GDPR, it complies with the obligation to provide detailed information to the data subject, adjusting the information to the purposes for which the data are obtained, including the legal basis, recipients of the data, the period of data storage, the rights to which the data are collected, and, in the case of data processing on the basis of consent, the consequences of withdrawal of consent to the processing of personal data.
Any data subject has the right to submit a complaint with a supervisory authority – the President of the Office for Personal Data Protection pursuant to Article 77 of the GDPR (...every data subject shall have the right to lodge a complaint with a supervisory authority, (…) if the data subject considers that the processing of personal data relating to him or her infringes this Regulation);AGH shall make personal data available to entities entitled to receive them under the provisions of applicable law and to entities cooperating and providing services to AGH on the basis of concluded entrustment agreements.
Personal data shall be processed for the period specified in the provisions of applicable law or for the period of performance of the agreement (including the performance of mutual settlements and the period necessary to establish and assert one's own claims or defend against claims made and for the period of archiving of documentation) or, in the case of data processing based on consent - until the withdrawal of consent to process personal data.
Personal data processed by AGH UST shall not be subject to automated decision-making processes, including profiling;
The data subject has the right to request from the Controller access to their data, as well as the right to rectify their data, the right to erase their data, the right to restrict the processing of their data, the right to object to the processing thereof in the cases and under the conditions specified in the GDPR.