Information on processing of personal data
SGH Warsaw School of Economics provides essential information about the principles of personal data processing and data subject’s rights. According to Art. 13 of GDPR , detailed information relating to the processing of personal data is provided at the time of collection from the data subject.
The controller of personal data is SGH Warsaw School of Economics with its seat in Warsaw, al. Niepodległości 162, hereinafter referred to as Controller or SGH.
II. Data Protection Officer
You may contact the Data Protection Officer designated by SGH - Dr Joanna Łukaszyk - via e-mail email@example.com.
III. The purposes and legal basis of processing of personal data
For over 110 years SGH's mission has been focused on education, scientific activity, promotion of active citizenship, participation in social development and creation of innovation-based economy.
SGH processes personal data in connection with a legal obligation to which the controller is subject based on point (c) of Art. 6 (1) GDPR (necessity for compliance with a legal obligation, point (e) of Art. 6 (1) GDPR (necessity for the performance of a task carried out in the public interest). The legal basis for processing special categories of personal data (‘sensitive data’) is point (b) of Art. 9 (2) GDPR. SGH carries out the tasks and performs the duties assigned in accordance with the Law on Higher Education and Science , Labor Law and Public Procurement Law .
Contact with SGH
Personal data of persons contacting SGH via e-mail is processed in order to reply to an inquiry. The legal basis for processing is point (a) of Art. 6 (1) GDPR – consent for processing by sending contact details e.g. name, e-mail address.
Providing data is voluntary, however necessary if you want to receive information from SGH.
SGH aims to protect your data from unauthorized access. Thus, if there is a suspicion that someone has assumed your identity, you may be asked to provide additional information.
You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
IV. The recipients of personal data
In general, SGH does not disclose personal data to other entities, except entities authorized by law. However, in certain situations, personal data may be disclosed. In such cases, SGH will inform you about such possibility in the information clause.
V. The period for which the personal data will be processed
SGH will store your personal data until the completion of the task for which the personal data has been collected, and then, as regards archive materials, for the period resulting from the provisions of the Act on national archival resources and archives .
Further information, including the criteria used to determine the period for which the personal data will be stored, is provided in a separate information clause concerning relevant purposes.
Personal data will be processed during the time necessary to respond to queries, and then for the limitation period for claims.
VI. The rights of data subject
SGH respects the privacy and the right to protect personal data of every person whose data it processes.
Under GDPR, you have certain rights in connection with the processing of your personal data depending on the legal basis concerned. You have the right to access and rectify or erase your data, to restrict the processing thereof, the right to object to processing of personal data or to transmit your data to another controller. For example, ‘the right to be forgotten’ is not absolute if the legal basis is compliance with a legal obligation to which the controller is subject and it only applies in certain circumstances, as SGH is required to keep data for a certain retention period for legal purposes.
Further information, including the rights applicable to individuals in respect of data processing in particular cases, is provided in a separate information clause concerning relevant purposes.
SGH is noted for the highest standards, including personal data protection, but if you consider that the processing of your personal data infringes upon GDPR, you have the right to lodge a complaint with a supervisory authority.
1.Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union, L 119, 4 May 2016, p. 1 as amended).
2. The Act of 20 July 2018 – Law on Higher Education and Science (Journal of Laws [Dz.U.] of 2018 item 1668 as amended).
3.The Act of 26 June 1974 – Labor Law (Journal of Laws [Dz.U.] of 2018 item 917 as amended).
4.The Act of 29 January 2004 – Public Procurement Law (Journal of Laws [Dz.U.] of 2018 item 1986 as amended).
5.The Act of 14 July 1983 on national archival resources and archives (Journal of Laws [Dz.U.] of 2018 item 217 as amended).