INFORMATION CLAUSE ON THE PROCESSING OF PERSONAL DATA
TO COLLECT INFORMATION ON THE UNIVERSITY PROMOTIONAL ACTIVITIES AND RANDOM SURVEY PARTICIPANT SELECTION TO RECEIVE AN IN-KIND PRIZE

Pursuant to Art. 13 Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation, hereinafter GDPR), we inform you that:

Personal Data Controller

The Controller of your personal data submitted together with the completed survey is Wroclaw Medical University, with its registered office at Wybrzeże Pasteura 1, 50-367 Wroclaw, represented by the Rector.

Data Protection Officer

The Controller has appointed a Data Protection Officer who can be contacted regarding matters associated with the processing of personal data at e-mail: iod@umed.wroc.pl

Purpose and legal grounds for processing

Your personal data will be processed to collect information on: the University promotional activities conducted for admission purposes and random survey participant selection to receive an in-kind prize.
The legal ground for data processing is your consent, i.e., Art. 6 sec. 1 letter (a) of the GDPR.

Recipients of personal data

The Controller does not share your personal data with any recipients except in cases where such an obligation arises from universally applicable legal provisions. The Controller may entrust another entity, by way of a written agreement, with the processing of personal data on behalf of the Controller, in particular IT service providers.

Personal data storage period

The Controller will store your personal data for 4 months or until you withdraw your consent to the processing of personal data.

Information on your rights

In cases, on the terms and in the manner specified in the applicable regulations, you have the right to request access to the content of the data and their rectification (Art. 15 and 16 of the GDPR), data deletion (Art. 17 of the GDPR), processing restriction (Art. 18 of the GDPR), objection to processing (Art. 21 of the GDPR), data transfer (Art. 20 of the GDPR), and to withdraw consent at any time without affecting the lawfulness of the processing that was carried out based on consent before its withdrawal.

You have the right to file a complaint with the supervisory authority – the President of the Personal Data Protection Office with its registered office at ul. Stawki 2, 00-193 Warsaw – if you suspect that your personal data are being processed by the Controller in violation of the law.

Information on whether providing personal data is obligatory and what are the possible consequences of the failure to provide them

Providing your personal data is not obligatory, but necessary to complete the survey and participate in the draw. Failure to provide data will prevent you from sending the survey and participating in the draw.

Information on automated decision-making, including profiling

Your personal data are not subject to automated decision-making, including profiling, as referred to in Art. 4(4) of the GDPR, which means a form of automated processing of personal data involving the use of personal data to evaluate certain personal factors of an individual.