INFORMATION CLAUSE CONCERNING THE PROCESSING OF PERSONAL DATA OF GRADUATES OF THE WROCLAW MEDICAL UNIVERSITY

In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, hereinafter: the GDPR), we inform that:

CONTROLLER OF THE PERSONAL DATA

The Controller of the personal data of Graduates of Wroclaw Medical University is Wroclaw Medical University with its registered office at Wybrzeze Pasteura 1, 50-367 Wroclaw, represented by the Rector.

 DATA PROTECTION OFFICER

The Controller has appointed a Data Protection Officer who can be contacted regarding matters concerning the processing of personal data at the following e-mail address: iod@umw.edu.pl

PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

The Controller processes your personal data for the following purposes:

1. monitoring of the professional careers of its graduates,
2. providing information about the University’s news, including sending invitations to participate in events organised by the University,
3. contact regarding organisational matters related to your participation in events organised by the University,
4. archiving documentation related to the organisation of events,
5. promoting the University’s educational offer (internships / training / conferences / doctoral school / studies) and offering discounts in this area.
6. offering promotional fees for additional services available at the University, such as Benefit sports cards,
7. maintaining good relations with the University’s Graduates, as well as building the University’s image,
8. informing about current job offers.

The legal basis for the processing of personal data is Article 6, section 1, letter e) of the GDPR in conjunction with the Act of 20 July 2018. Law on Higher Education and Science, i.e. the necessity of processing for the performance of a task carried out in the public interest, which is the University’s scientific activity, shaping civic attitudes, as well as participation in social development and the creation of an innovation-based economy.

The monitoring of graduates’ professional careers is carried out for a period of 10 years from the date of graduation, based on the aforementioned regulations. After this period, the University shall only collect your data for this purpose based on your consent, expressed by returning the completed surveys/questions. If you do not consent to the University processing your data for this purpose, please leave such messages unanswered.

In the case of sending marketing content via the communication channel to which you have consented, i.e. via a message to the e-mail address provided, the processing of personal data is based on Article 6, section 1 letter a) of the GDPR, i.e. your voluntary consent.

In other cases, i.e. the Controller pursuing a legitimate interest consisting in the correct and timely performance of the University’s tasks, including responding to inquiries addressed to us, the processing is based on Article 6, section 1 letter f) of the GDPR.

RECIPIENTS OF PERSONAL DATA

The Controller may share personal data with other entities working with the University to organise events only for the purpose and to the extent necessary for the proper performance of the assigned tasks.

The data recipients may also be other entities or bodies when such an obligation results from generally applicable laws.

The Controller may entrust another entity, by means of a written Agreement, with the processing of personal data on behalf of the Controller, in particular IT service suppliers.

PERIOD OF STORAGE OF PERSONAL DATA

The Controller shall store the personal data for the period necessary to achieve the above-mentioned purposes, unless you withdraw your consent to receive marketing information or you exercise your right to object to its processing. In such a case, the personal data shall be deleted.

Personal data that the Controller is obliged to store in accordance with the regulations on documentation archiving shall be processed until the deadline indicated in these regulations has expired.

INFORMATION ON YOUR RIGHTS

In the cases, under the rules and in the manner specified in the applicable regulations, you have the right to request: access to and rectification of data (Articles 15 and 16 of the GDPR), erasure of data (Article 17 of the GDPR), restriction of processing (Article 18 of the GDPR), objection to processing (Article 21 of the GDPR), data portability (Article 20 of the GDPR) and the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

All requests regarding your rights, including the withdrawal of consent to the processing of personal data or the report of objection to the data processing, should be sent to the following e-mail address: absolwent@umw.edu.pl.

You also have the right to lodge a complaint with the supervisory body – the President of the Personal Data Protection Office with its registered office at ul. Stawki 2, 00-193 Warsaw – in case of suspicion that the personal data is processed by the Controller in violation of the law.

INFORMATION ON THE OBLIGATION TO PROVIDE DATA AND POSSIBLE CONSEQUENCES OF REFUSING TO PROVIDE DATA 

Providing personal data is not mandatory, but it is necessary for you to receive all the information described above, including information about events organised by Wroclaw Medical University. Refusal to provide data shall prevent the Controller from sending relevant information, including an invitation to establish a partnership.

INFORMATION ON AUTOMATED DECISION-MAKING, INCLUDING PROFILING

Your personal data is not subject to automated decision-making, including profiling, as referred to in Article 4 item 4) of the GDPR, which means a form of automated processing of personal data consisting of using personal data to evaluate certain personal factors of a natural person.