Information on processing of personal data
The controller of personal data is SGH Warsaw School of Economics with its seat in Warsaw, al. Niepodległości 162, hereinafter referred to as SGH.
2. Data Protection Officer
3. The purposes and legal basis of processing of personal data
Your personal data will be processed for the purposes of supporting the process of study at SGH. The legal basis for processing of personal data is point (c) of Art. 6 (1) GDPR* and Law on Higher Education and Science. 2 Personal data may also be processed for the purpose of monitoring professional careers of alumni, if a relevant consent was given. The legal basis for processing in this case is point (a) of Art. 6 (1) GDPR. You have the right to withdraw consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
4. Voluntary data provision
Providing personal data is voluntary, however necessary to for the purposes mentioned above.
5. The recipients or categories of recipients of the personal data
Personal data will be disclosed to the University of Quebec at Montreal, which is a co-organizer of the Canadian Executive MBA Program. Personal data will be disclosed to Canada, which is a third country. The legal basis of transfer of personal data is point (b) Art. 49 (1) GDPR (transfer is necessary for the performance of a contract). If the controller uses the services of other entities, personal data may be disclosed to them on the basis of contracts entrusting the processing of personal data, and these entities will be obliged to preserve the confidentiality of the data being processed.
In case of conducting classes using the Zoom, your personal data will be disclosed to Zoom Video Communication Inc., as well as its service providers. These entities operate outside the European Economic Area - in the United States of America, Philippines, Canada, Malaysia and Australia. Since there is no adequacy decision by the European Commission concerning these states, the legal basis of transfer of personal data is point (b) Art. 46 (2) GDPR - i.e. an agreement containing standard contractual clauses that have been approved by the European Commission.
6. Automated individual decision-making, including profiling
Your data will not undergo profiling and no automated decision-making will be conducted based on these data.
7. The period for which the personal data will be processed
Personal data will be processed for the duration of studies and then for archival purposes for a period of 50 years.
8. The rights of data subject
You have the right to access and rectify your data or restrict the processing thereof. You have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes upon GDPR.
*Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union, L 119, 4 May 2016, p. 1 as amended). 2 The Act of 20 July 2018 – Law on Higher Education and Science (Journal of Laws [Dz.U.] of 2018 item 1668).