Information Clause

General Data Protection Regulation (GDPR) information clause

Personal data controller

The controller of your personal data is the Gdansk University of Technology. You can contact the controller of your personal data in the following way:

• by post, to the address: ul. Narutowicza 11/12, 80-233 Gdansk
• by ePuap: politechnikagdanska/SkrytkaESP

Data protection officer

A data protection officer may be contacted by you on all matters concerning the processing of your personal data and the exercise of rights related to the processing of the data by email dpo@pg.edu.pl

The purposes of data processing and the legal basis for the processing

Your personal data will be processed for the purposes of:

• fulfillment of legal obligations incumbent on the Data Administrator in relation to the concluded contract - art. 6 par. 1 lit. c  GDPR;
• implementation of the justified interest of the Administrator by the way of seeking possible claims or defending against claims related to the contract - Art. 6 par. 1 lit. e GDPR.

Data Recipients

We may share your data with entities rendering postal or courier services, public authorities or entities that are entitled to obtain personal data on the basis of applicable law as well as other entities cooperating with us, to the extent necessary and for the purpose compliant with the performance of the contract.

Period of personal data storage

Personal data will be stored until the task for which the data was collected or until you submit your request:

• for their removal, withdrawal of consent to the processing of personal data, processing restrictions, objection to their processing or their transfer,
• in order to establish an investigation or defense against claims - until the claims are time-barred in accordance with generally applicable provisions of Polish law;
• until the legally justified interest of the Administrator is realized,
• until the obligation to store personal data resulting from the generally applicable provisions of Polish law expires.

Rights related to processing of personal data

You have the following rights related to the processing of your personal data:

• the right to access your personal data;
• the right to demand rectification of inaccurate personal data and supplementation of incomplete personal data;
• the right to demand deletion of your personal data. data; This right does not apply, in particular, if the processing of the data is necessary to fulfill a legal obligation requiring such processing under the applicable law or to perform a public task;
• the right to request limitation of your personal data processing;
• the right to object to the processing of your personal data, due to your specific situation, in cases when we process your data due to our legitimate interest, including direct marketing or performance of a public task. NOTE: as regards processing for direct marketing purposes, you may object at any time regardless of your specific situation;
• the right to transfer your personal data, i.e. the right to receive personal data from us, in a structured, commonly used, machine-readable format. You may transfer this data to another data controller or request that we transfer your data to another data controller. However, we will only do so if such transfer is technically possible. You have the right to transfer your personal data only in respect to the data which we process automatically, i.e. in electronic form, on the basis of an agreement with you or on the basis of your consent;
• the right to lodge a complaint to the supervisory authority dealing with personal data protection, i.e. the President of the Personal Data Protection Office [Prezes Urzędu Ochrony Danych Osobowych];

Submitting your personal data is a statutory requirement and is necessary to provide a response or register on the PBC portal.

Your personal data shall not be processed automated subject to art.22 GDPR.

The Data Controller will not transfer any personal data to a recipient in a third country or an international organization.