information obligation for Candidates of the Warsaw University of Life Sciences (SGGW)
DATA CONTROLLER
In accordance with the general data protection regulation (hereinafter: GDPR), the controller of your personal data is Warsaw University of Life Sciences, with its registered office at 166 Nowoursynowska Street, 02-787 Warsaw (hereinafter: SGGW or the Data Controller).
The Data Controller can be contacted:
- In writing: Szkoła Główna Gospodarstwa Wiejskiego w Warszawie ul. Nowoursynowska 166, 02-787 Warszawa (SGGW, 02-787 Warsaw, Nowoursynowska 166);
- By phone: +48 (22) 59 310 00.
PURPOSES AND LEGAL BASES FOR DATA PROCESSING
Your personal data will be used for the following purposes:
1. Personal data processing is necessary to fulfil the legal obligations of the Warsaw University of Life Sciences in connection with the performance of tasks specified in the Act of 20 July 2018: Law on Higher Education and Science (Journal of Laws of 2020, item 85, as amended), executive acts issued on its basis and internal executive acts in force at the Warsaw University of Life Sciences (Art. 6 .1(c) of the GDPR) in conjunction with Art. 6.1(e) of the GDPR (processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller),
2. Documenting the recordings of exams and interviews - if it is required in the admission process by a given field of study and are held with the use of IT technologies ensuring control and recording of their course. These data will be recorded on the basis of a separate consent (Art. 6 .1 (a) of the GDPR),
3. Conclusion of an agreement or undertaking actions on request before conclusion of an agreement, a contracting party of which is a student /PhD student/ postgraduate studies participant (Art. 6.1 (b) of the GDPR),
4. Pursuing or defending any potential claims in connection with admission process or performance of an agreement or in connection with the need to demonstrate certain facts of significant importance to the Controller (Art. 6.1 (f) of the GDPR - legitimate interests); the deadlines for pursuing claims under the contract are specified in detail in the Civil Code.
DATA STORAGE PERIOD
The data will be used for the period necessary to achieve purposes described above. Depending on the legal basis, it will be respectively:
- the duration of the recruitment process, and after its termination for a period of 6 months,
- until the consent to the processing of personal data is withdrawn. You have the right to withdraw your consent to data processing at any time. If you choose to exercise that right, we will cease to process such data and the data will be erased. The withdrawal of consent does not affect the lawfulness of data processing for the period of validity of the consent,
- when applicable, your personal data will be processed for the period necessary to establish, pursue and defend claims,
- in case of interrupting the process of setting up an account in the Internet Recruitment of Candidates (IRK) system, any data will not be stored or processed.
RIGHTS RELATED TO DATA PROCESSING
You may submit a request to us for:
- an access to personal data (information on personal data being processed and a copy of the data),
- data rectification (if they are incorrect),
- data transmission (in the cases specified in the GDPR),
- restriction of personal data processing,
- erasure of the personal data processing (in accordance with the principles set out in the GDPR),
Notwithstanding the rights listed above, you may file an objection against processing of your data at any time, if the legal basis for the use of data is a legitimate interest (Article 6 (1) (f) of the GDPR).
Moreover, you have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the law.
OBLIGATION TO PROVIDE DATA AND CONSEQUENCES OF NOT DOING SO
Providing data is voluntary but necessary to take part in the recruitment process for first cycle studies, second cycle studies, uniform master’s studies, Doctoral School, postgraduate studies, exchange studies and other forms of education at Warsaw University of Life Sciences. Providing other unnecessary data is voluntary.
The data shall have the right not be subject to decision based solely on automated processing, including profiling as set out in Article 22 of the GDPR.
DATA RECIPIENTS
The recipients of your personal data are:
1. authorised employees or associates of the Warsaw University of Life Sciences,
2. entities processing personal data at the request and on behalf of Data Controller on the basis of a on concluded agreement for personal data processing in order to provide specified services, e.g. ICT services, e.g. hosting, delivery or maintenance of IT systems; legal services; advisory services, including as part of the Data Protection Officer outsourcing services; accounting services, traditional mail service, and in the case of electronic mail – Microsoft, along with other tools provided by Microsoft.
HOW TO CONTACT US ON PERSONAL DATA PROTECTION
The Controller has appointed a Data Protection Officer (hereinafter: DPO), who can be contacted in matters related to the processing of personal data and the exercise of rights of users in accordance with the provisions on the protection of personal data via:
- in writing: Szkoła Główna Gospodarstwa Wiejskiego w Warszawie, ul. Nowoursynowska 166, 02-787 Warszawa, Poland; or
- by email: iod@sggw.edu.pl
The Controller is responsible for the security of the personal data provided and for processing them in accordance with the law.
