SGH Warsaw School of Economics provides essential information about the principles of personal data processing and data subject’s rights. According to Art. 13 of GDPR, detailed information relating to the processing of personal data is provided at the time of collection from the data subject.
I. Controller
The controller of personal data is SGH Warsaw School of Economics with its seat in Warsaw, al. Niepodległości 162, hereinafter referred to as Controller or SGH.
II. Data Protection Officer
You may contact the Data Protection Officer designated by SGH – Katarzyna Janczewska, PhD – via e-mail iod@sgh.waw.pl.
III. The purposes and legal basis of processing of personal data
Performing the tasks of SGH
For over 110 years SGH’s mission has been focused on education, scientific activity, promotion of active citizenship, participation in social development and creation of innovation-based economy.
SGH processes personal data in connection with a legal obligation to which the controller is subject based on point (c) of Art. 6 (1) GDPR (necessity for compliance with a legal obligation, point (e) of Art. 6 (1) GDPR (necessity for the performance of a task carried out in the public interest). The legal basis for processing special categories of personal data (‘sensitive data’) is point (b) of Art. 9 (2) GDPR. SGH carries out the tasks and performs the duties assigned most of all in accordance with the Law on Higher Education and Science, Labor Law and Public Procurement Law.
Contact with SGH
Personal data of persons contacting SGH via e-mail is processed in order to reply to an inquiry. The legal basis for processing is point (a) of Art. 6 (1) GDPR – consent for processing by sending contact details e.g. name, e-mail address. Providing data is voluntary, however necessary if you want to receive information from SGH.
You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
IV. The recipients of personal data
In general, SGH does not disclose personal data to other entities, except entities authorized by law. However, in certain situations, personal data may be disclosed. In such cases, SGH will inform you about such possibility in the information clause. If the controller uses the services of other entities, personal data may be disclosed to them on the basis of contracts entrusting them with the processing of personal data, and these entities will be obliged to preserve the confidentiality of the processed data.
V. The period for which the personal data will be processed
SGH will store your personal data until the completion of the task for which the personal data has been collected, and then, as regards archive materials, for the period resulting from the provisions of the Act of 14 July 1983 on national archival resources and archives. Further information, including the criteria used to determine the period for which the personal data will be stored, is provided in a separate information clause concerning relevant purposes.
Personal data will be processed during the time necessary to respond to queries, and then for the limitation period for claims.
VI. The rights of data subject
SGH respects the privacy and the right to protect personal data of every person whose data it processes.
Under GDPR, you have certain rights in connection with the processing of your personal data depending on the legal basis concerned. You have the right to access and rectify or erase your data, to restrict the processing thereof, the right to object to processing of personal data or to transmit your data to another controller. For example, ‘the right to be forgotten’ is not absolute if the legal basis is compliance with a legal obligation to which the controller is subject and it only applies in certain circumstances, as SGH is required to keep data for a certain retention period for legal purposes. Further information, including the rights applicable to individuals in respect of data processing in particular cases, is provided in a separate information clause concerning relevant purposes. SGH is noted for the highest standards, including personal data protection, but if you consider that the processing of your personal data infringes upon GDPR, you have the right to lodge a complaint with a supervisory authority.
Request related to personal data protection addressed to SGH Warsaw School of Economics
Contact with regard to issues related to the personal data protection
In matters related to the personal data protection and GDPR, we encourage you to contact:
- Katarzyna Janczewska, PhD - Data Protection Officer (iod@sgh.waw.pl),
- Mariusz Molenda - Personal Data Protection Coordinator (kodo@sgh.waw.pl).