When using the Website Q24 Admission CRM ("Website”), you shall provide us with a number of your personal data and/or data about you shall be collected in connection with your use of certain Website's functionalities.
In our processing of your personal data, we strive to provide adequate protection of your privacy. In addition, we are also required to perform a number of obligations arising from the provisions on the protection of personal data, in particular the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) ("GDPR"), including but not limited a specifically important is the information obligation referred to in articles 13 and 14 of GDPR.
2. Who is the Controller of your personal data?
The controller of your personal data is Warsaw Management University ("Controller").
3. What personal data do we process and how do we acquire the same?
Your personal data that is collected as part of your use of the Website or concerns you and has been entered into the Website are subject to processing. We obtain some of the data directly from you (e.g. by your filling out forms on the Website, sending documents), while some of them come from other persons (e.g. when they provide your data), and other data is collected on the basis of cookies or similar mechanisms for storing information on your devices (e.g. data on logins, IP addresses of devices you use, activity on the Website, traffic generated). Data is also collected when you use our Website as an unlogged user.
In particular, the following categories of relevant personal data may be processed: personal data (name, surname, business name, gender, address of residence, other address(es), identification numbers, types, series and numbers of identity documents and passports, date of birth, your photo, names of family members), contact details (e-mail address, phone number, postal address), data on education and professional experience, medical data, location data (IP address of devices).
4. For what purpose and on what basis do we process your personal data?
The processing of each item of your personal data takes place for a specific objective provided for by a specific legal basis. These objectives and legal bases are as follows:
4.1. performance of the contract for the provision of services by electronic means (Article 6 (1) (b) of the GDPR);
4.2. requirements of the recruitment process for studies and for the conclusion of the education contract in the course of your studies (Article 6 (1) (b) and (c) of the GDPR and Article 9 (2) (a) of the GDPR with regard to the legitimate interest of the Controller in obtaining detailed medical data);
4.3. analytical and statistical purposes (Article 6 (1) (f) of the GDPR in connection with the analysis of the activity of users of the Website, their behaviour, interests, preferences, manner of using the Website and its functionality for the purpose of improving the Website and the services provided);
4.4. identification of the person submitting a complaint and handling the complaint (Article 6 (1) (b) of the GDPR or Article 6 (1) (f) of the GDPR with regard to the legitimate interest of the Controller who needs to consider the complaint);
4.5. establishment, investigation or defense against claims (Article 6 (1) (f) of the GDPR with regard to the need to protect the rights of the Controller).
5. Is the provision of personal data voluntary?
The providing of personal data by you is voluntary. However, in the event that you fail to provide the same, the use of certain functionalities and services of the Website may be restricted or impossible. In such case the completion of the recruitment process for studies with a positive result may be impossible.
6. Do we share your personal data?
Your personal data may be shared with our external service providers and/or companies cooperating with us. In particular, your personal data will be made available to Q24 Sp. z o.o. having its registered office in Warsaw, at ul. Juliana Smulikowskiego 4, 00-389 Warsaw, which is the operator of the Website. They can also be made available to companies responsible for the operation of our IT systems, hosting companies, marketing agencies (in the field of marketing services) and/or to other entities providing services to us, including, but not limited to legal service providers, accounting companies, public relations, etc. Your data may also be disclosed to competent authorities and/or third parties who submit a request for such information, based on the appropriate legal basis from which the legal obligation to provide information arises and in accordance with applicable laws.
7. How long is your personal data processed by us?
We store your personal data only for the period necessary to (a) achieve the purposes and objectives for which the data has been collected, (b) until your consent for personal data processing is withdrawn or an effective objection or request to delete the same has been made and/or (c) for a period required by laws. Thereafter, your personal data will be subject to deletion or anonymization in such a way that it is not possible to determine your identity based on the anonymized data set.
8. Are your personal data transferred outside the EEA?
We cannot exclude an option that certain entities whose services we use and with which we may share your personal data, will process the same outside the European Economic Area (EEA). However, we will transfer your personal data only if an adequate level of protection for your personal data is established, as required by the provisions of the GDPR.
9. What are your rights in relation to the processing of personal data?
On the terms set out in detail in the provisions of the GDPR, you have the right to access your personal data, the right to rectify personal data, the right to delete personal data, the right to restrict the processing of personal data, the right to object to the processing of personal data, the right to transfer personal data, the right to withdraw your consent to the processing of personal data to the extent that the processing of your personal data takes place on the basis of your consent, the right to lodge a complaint with a supervisory authority (i.e. the President of the Personal Data Protection Office).
You can exercise the above rights by sending a request via e-mail to the following address: email@example.com. You will find the full content of your rights under the GDPR in the text of the GDPR.
10. Is your personal data profiled?
Your personal data along with other data originating e.g. from cookies may be processed in an automated manner, including profiling procedures. Automated decision making will consist in adapting the content of the Website, including advertisements, to your interests, preferences, expectations and location.