INFORMATION CLAUSE CONCERNING THE PROCESSING OF PERSONAL DATA
OF CANDIDATES FOR STUDIES AT THE WROCLAW MEDICAL UNIVERSITY

Pursuant to Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC - General Data Protection Regulation, hereinafter referred to as the GDPR (EU OJ L 119, 2016, p. 1, as amended), we hereby inform that:

PERSONAL DATA CONTROLLER

The Controller of your personal data is Wroclaw Medical University (Uniwersytet Medyczny im. Piastów Śląskich we Wrocławiu), with its registered office at: Wybrzeże Pasteura 1, 50-367 Wrocław, represented by the Rector.

DATA PROTECTION OFFICER

The Controller has appointed the Data Protection Officer whom you can contact at the following email address: iod@umw.edu.pl in relation to all issues related to the processing of personal data.

PURPOSES AND LEGAL BASIS OF PROCESSING

1. Your personal data will be processed for the following purposes:
   1. to carry out the admission procedure and, in the case of admission, to conclude and perform the contract and for the purposes arising from the educational process,
   2. to fulfil accounting, reporting and archiving obligations of the Controller.
2. The legal basis for the processing of your personal data is:
   1. Art. 6(1)(c) of the GDPR, i.e. carrying out the legal obligations of the Controller with regard to the provisions of the Act of 20 July 2018 - Law on Higher Education and Science along with secondary legislation and other provisions to which the Controller is subject, including reporting, accounting, and archiving obligations,
   2. in the case of admission to the university - Art. 6(1)(b) of the GDPR, i.e. indispensability of the processing for the conclusion of the contract between you and the University.

PERSONAL DATA RECIPIENTS

1. The Controller does not make your personal data available to any recipients, except for cases where such obligation results from generally applicable laws. Pursuant to Article 72 (5) of the Act - Law on Higher Education and Science, the results of the admission procedure shall be public.
2. The Controller may entrust the processing of your personal data on behalf of the Controller to another entity under a written agreement, in particular to entities providing and maintaining software used for data processing.

PERSONAL DATA STORAGE PERIOD

The Controller will store your personal data for the period necessary for processing purposes, i.e. for the duration of the admission procedure and for the period of storing financial and accounting records. In the case of admission to studies, personal data will be processed in accordance with the course of study and then archived and stored for a period of 50 years.

INFORMATION ON YOUR RIGHTS

In the cases, under the terms and in the manner specified in the applicable regulations, you have the right to: access your data and rectify them (Art. 15 and 16 of the GDPR), erase your data (Art. 17 of the GDPR), limit the processing of your data (Art. 18 of the GDPR), object to the processing of your personal data (Art. 21 of the GDPR), transfer your data (Art. 20 of the GDPR).

You have the right to file a complaint with the Supervisory Authority: the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, if you suspect that the personal data are processed by the Controller in violation of the law.

INFORMATION CONCERNING THE OBLIGATION TO PROVIDE DATA AND POSSIBLE CONSEQUENCES OF REFUSAL

The obligation to provide your personal data results from applicable regulations. Failure to provide personal data will result in the refusal to qualify a candidate for the admission process or refusal to conclude a contract.

INFORMATION ON AUTOMATED DECISION-MAKING, INCLUDING PROFILING

Your personal data are not subject to automated decision-making, including profiling, referred to in Art. 4(4) of the GDPR, which is a form of automated processing of personal data consisting in using personal data to evaluate certain personal aspects of a natural person.