Information regarding the processing of personal data
By fulfilling the obligation imposed on entities processing personal data, resulting from the provisions of Article 13 section 1 and 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal EU L 119/1 of 04.05.2016, as amended), hereinafter GDPR, we provide you with the following information.
How do we process personal data?
University of Lomza, represented by the Rector, is, in the light of applicable regulations, the Controller of your personal data processed for admission purposes. This means that we are responsible for processing the data in a reliable, secure and legal manner. The following information is intended to ensure that the purpose and method of processing is clear and transparent to you and that you have the opportunity to exercise control over your personal data.
Contact to the Controller
The Controller can be contacted by letter at: Akademia Łomżyńska, 18-400 Łomża, ul. Akademicka 14, phone number: (86) 215 59 50, or by e-mail: rektorat@ansl.edu.pl. The Controller has appointed a Data Protection Officer, who can be contacted in person: ul. Akademicka 1, building B, room B2.20, by phone: 86 216 82 60; 86 215 59 53 ext. 3220 or at the e-mail address: iod@ansl.edu.pl in all matters concerning personal data processed by the Controller.
What personal data do we process, where did we obtain it from, what is the purpose of processing and what entitles us to process it?
Your personal data will be processed for admission purposes. You provide us with the data necessary to carry out the admission process personally. It includes identification data (names and surnames), photo, address of residence, Personal Identification Number (PESEL), and in the absence of it – the name and number of the document confirming the identity and the name of the country that issued it, citizenship, and in the case of foreigners – also the name of the country of birth and information about having a Polish Card (Karta Polaka), date and place of birth, gender, contact phone number, e-mail address and address for correspondence and other documents required from the candidate for studies. The processing of personal data obtained is necessary to fulfil the legal obligations of the Controller, as specified in the Act of 20 July 2018 Law on Higher Education and Science (Journal of Laws of 2018, item 1668, as amended) and the executive regulations issued on its basis and internal normative acts in force at University of Lomza regarding the principles of admission, and to the extent necessary to carry it out (Article 6 item 1 letter c of the GDPR). Providing data is voluntary, however, failure to provide the indicated information will result in the impossibility of admission.
We may process other data that are not necessary to achieve the indicated purpose on the basis of your consent – Article 6 item 1 letter a) or Article 9 section (2) (a) of the GDPR. This applies in particular to information related to a potential disability of a candidate if he/she considers that its transmission will contribute to creating conditions for his/her full participation in the process of admission to university. The consent may be withdrawn by you at any time, however, its withdrawal does not affect the lawfulness of the processing made on the basis of the consent before its withdrawal.
What personal data do we process, where did we get it from, what is the purpose of processing and what entitles us to process it?
Your personal data will be processed in the process of recruitment for studies. You provide us with the data necessary to carry out the recruitment process personally. These are identification data (names and surnames), photo, address of residence, PESEL number, and in the absence of it - the name and number of the document confirming the identity and the name of the country that issued it, citizenship, and in the case of foreigners - also the name of the country of birth and information about having a Polish Card, date and place of birth, gender, contact phone number, e-mail address and address for correspondence and other documents required from the candidate for studies. The processing of personal data obtained is necessary to fulfill the legal obligations of the controller, as specified in the Act of 20 July 2018. Law on Higher Education and Science (Journal of 2018, item 1668, as amended) and the executive acts issued on its basis and internal normative acts in force at the Łomża Academy regarding the principles of recruitment, and to the extent necessary to carry it out (art. 6 item 1 letter c of the GDPR). Providing data is voluntary, however, failure to provide the indicated information will result in the impossibility of recruitment.
We may process other data that are not necessary to achieve the indicated purpose on the basis of your consent - art. 6 item 1 letter a) or art. 9 section (2) (a) of the GDPR, This applies in particular to information related to a potential disability of a candidate if he/she considers that its transmission will contribute to creating conditions for his/her full participation in the process of admission to a university or education. The consent may be withdrawn by you at any time, however, its withdrawal does not affect the lawfulness of the processing made on the basis of the consent before its withdrawal.
Who do we pass your data to?
The collected data will be used only for the purpose of conducting the admission procedure. The recipients of your data may also be entities to which the Controller orders the performance of specific activities, which involve the need to process personal data. In order to ensure the highest possible standard of personal data protection, an agreement will be signed with these entities to entrust the processing of personal data.
How long do we keep your data?
The collected data will be processed for the duration of the admission procedure. In the case of persons not qualified for studying, personal data entered into the admission system will be stored until the admission process is completed. After this period, they will be anonymised and stored in this form for statistical purposes. Once this goal is achieved, they will be removed. If applicable, your personal data will be processed for the period necessary to establish, assert and defend claims. If you agree to be informed about future admission procedures, your personal data will be processed for this purpose until you withdraw your consent. Personal data related to the payment of the admission fee will be stored for a period of 5 years. The data of persons qualified for the first year of study will continue to be processed, and the basis for their processing will be the provisions of law obliging the University to document the course of studies. The above also applies to data on disability, which will be processed on the basis of your consent until its revocation.
Information on automated processing, including profiling
The collected data will not be used to make decisions based on automated processing. They will also not be used to profile your behaviour.
Your rights
In order to exercise your rights related to the protection of personal data, you can apply to us for:
- access to data (information about the data processed by us and a copy of the data), pursuant to Article 15 of the GDPR);
- rectification (correction of data that are incorrect), pursuant to Article 16 of the GDPR;
- deletion of data processed unjustifiably, pursuant to Article 17 of the GDPR,
- limitation of processing (suspension of operations on data or failure to delete data – according to the submitted application), pursuant to Article 18 of the GDPR,
The scope of each of these rights and the situations in which they can be exercised result from the provisions of the General Data Protection Regulation. The right you can exercise will depend, for example, on the legal basis used by us to process your data and the purpose of its processing.
To ensure that you are entitled to make a request, we may ask you for additional information to confirm your identity.
Right to lodge a complaint with a supervisory authority:
You have the right to file a complaint with the Inspector General for the Protection of Personal Data (Prezes UODO), Stawki 2, 00-193 Warsaw, if you believe that our processing of your personal data violates the law.
I have read and accepted the above information.
