Personal data processing information

In order to fulfil the information obligation referred to in Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: ‘GDPR’), the Wroclaw University of Economics and Business hereby provides information on the rules governing the processing of personal data:

  1. The data controller is the Wroclaw University of Economics and Business, ul. Komandorska 118/120, 53-345 Wrocław, Tax Identification Number (NIP): 896-000-69-97, tel. +48 71 36 80 100, email: kontakt@ue.wroc.pl.
  2. The Controller has appointed a Data Protection Officer, who can be contacted at the following email address: iod@ue.wroc.pl.
  3. Your personal data will be processed in connection with the university admissions process, in particular:

-         for the purpose of conducting the recruitment process as a task carried out in the public interest, in accordance with the provisions of the Act of 20 July 2018 The Law on Higher Education and Science – the legal basis for processing is Article 6(1)(e) of the GDPR,

-         for the purpose of fulfilling the legal obligations incumbent on the Controller arising in particular from the Act of 20 July 2018 The Law on Higher Education and Science and the implementing acts issued on the basis thereof, as well as other legal obligations, including archiving and financial and accounting obligations – the basis for processing is Article 6(1)(c) of the GDPR.

Your personal data may also be processed for the purpose of establishing, pursuing or defending any claims, which constitutes a legitimate interest of the Controller – the basis for processing is Article 6(1)(f) of the GDPR.

Personal data not required by law will be processed on the basis of your consent (pursuant to Article 6(1)(a) of the GDPR, and in the case of special categories of data, Article 9(2)(a) of the GDPR). This applies in particular to data concerning health, including disability, provided for the purpose of applying for additional admission points or other entitlements.

4.       The provision of personal data required by law is mandatory and necessary for participation in the university admissions process. Failure to provide the required data will prevent participation in the admissions process. The provision of personal data not required by law, including special categories of data (e.g. concerning health, including disability), is voluntary.

  1. Access to your personal data will be granted to authorised employees or associates of the Wroclaw University of Economics and Business, including members of the admissions committees, who will process your data in connection with the university admissions process.

The recipients of your personal data will be entities authorised to obtain personal data under the law, as well as entities to which the Controller will entrust the performance of specific tasks involving the processing of personal data (processors with whom a data processing agreement will be concluded).

  1. Your data will be stored for the period necessary to conduct the admissions process, and subsequently for the period of retention of financial and accounting records and archival records, in accordance with applicable regulations. In the event of admission to the course, personal data will be processed for the duration of the course and will then be archived.

Where applicable, your personal data will be processed for the period necessary to establish, pursue and defend claims.

  1. Under the provisions of the GDPR, you have the right to access your data and receive a copy of it, to have your personal data rectified (corrected), to have your data erased (subject to Article 17(3) of the GDPR), restrict its processing, and the right to object to the processing of data (in cases where processing is carried out on the basis of Article 6(1)(e) or (f) of the GDPR).

Where the basis for processing is consent, this may be withdrawn at any time; however, this does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.

  1. If you consider that the processing of your personal data infringes data protection legislation, you have the right to lodge a complaint with the President of the Personal Data Protection Office.
  2. Your personal data will not be transferred outside the European Economic Area.
  3. Your personal data will not be subiect to automated decision-making, including profiling.