Information about personal data processing
Personal Data Controller
The Personal Data Controller of the data processed in the application system is the Jagiellonian University in Kraków, ul. Gołębia 24, 31-007 Kraków.
Data Protection Officer (DPO or IOD)
The Personal Data Controller appointed the Data Protection Officer, who can be contacted at: iod@uj.edu.pl.
DPO can be contacted in all matters regarding processing your personal data by the Jagiellonian University, including exercising your rights regarding processing your data.
Purpose and legal basis for data processing
Your personal data will be processed in relation to your applications to the educational programmes of your choice.
Processing of your data is necessary for the purpose of fulfilling legal obligations binding the Jagiellonian University, arising from performing tasks described in, e.g. the Law on Higher Education and Science Act (Dz. U. of 2021 item 478 as amended), its secondary legislation, and Jagiellonian University internal secondary legislation (Article 6(1)(c) of GDPR) in relation with Article 6(1)(e) of GDPR (processing is necessary for the performance of a task carried out in the public interest or the exercise of official authority vested in the controller).
Your personal data may be processed for the purpose of entering into a contract on the organization of studies (Article 6(1)(b) of GDPR).
Your personal data may also be processed based on the legitimate interest pursued by the controller, which is their right to the establishment, exercise or defence of legal claims (Article 6(1)(f) of GDPR).
Your other personal data, not required by the purposes stated above, may be processed based on your separate consent (Article 6(1)(a) of GDPR). Consent may be withdrawn at any time, e.g. by changing information in the application system or sending a message through the Online Application System (OAS or IRK). Please be reminded that withdrawing your consent does not affect the processing performed based on the consent before the consent had been withdrawn.
Period of data archiving
Your personal data will be processed for the period of the admissions and when it has closed for a further six months. When applicable, your personal data will be processed for the period necessary to establish, exercise, or defend legal claims. If you consent to be informed about future admissions, your personal data will be processed for this purpose until you withdraw your consent.
Data recipients
Your personal data will be available to the authorized employees or cooperating parties of the Jagiellonian University, including members of the admission teams who process your data for the purpose of University admissions.
Entities entrusted by the controller with particular tasks which require the processing of your data may also be the recipients of your personal data. To ensure the highest possible standard of personal data protection, personal data processing contracts will be signed with those entities.
Data processing rights
You are guaranteed all rights under the rules specified in GDPR, that is, the right to:
- access the content of your data and receive its copy,
- rectification (correction) of your personal data,
- restriction of processing of your data
- erasure of your personal data (subject to Article 17(3) of GDPR),
- lodge a complaint to the President of the Personal Data Protection Office if you believe that the processing of your personal data infringes the provisions of law regarding personal data processing.
