Author: Elżbieta Tryjarska
Last saved by: Beata Sztab

Information Clause
I [ Data Controller and contact details ]
The Data Controller is the Warsaw University of Life Sciences – SGGW, with its registered office at ul. Nowoursynowska 166, 02-787 Warszawa, hereinafter referred to as the SGGW or Controller.
You can contact the Data Controller:
Address for correspondence:
Szkoła Główna Gospodarstwa Wiejskiego w Warszawie
ul. Nowoursynowska 166
02-787 Warszawa
telephone: 22 593 59 06, for people calling from outside Poland: +48 22 593 59 06

II [ Personal Data Protection Inspector ]
Matters related to the processing of your data by the Data Controller should be directed to the Personal Data Protection Inspector, including matters related to the exercise of rights to access your personal data, correct your data, delate it, limit their processing or object to its processing.
1.E-mail address of the Personal Data Protection Inspector: iod@sggw.edu.pl
2. correspondence address of the Data Controller with the note Personal Data Protection Inspector.

III [ Purpose, legal basis and period of data retention ]
Personal data shall be processed in order to:
1.	ensuring the proper course of studies in connection with the implementation of obligations resulting from legal provisions - Article 6, Section 1(c), (e) of the GDPR and in case of signing an agreement on the terms and conditions of payment for educational services, pursuant to this agreement, for its conclusion and implementation - based on Article 6, Section 1(b) of the GDPR, and in the case of health data, Article 9, Section 2(b) of the GDPR;
2.	implementation of applicable legal regulations, especially in the field of tax and accounting (e.g. in the case of payment for studies) - Article 6, Section 1(c) of the GDPR;
3. possible pursuit of claims and defense of rights resulting from the implementation of the study program or administrative decisions issued, which is the legitimate interest of SGGW pursuant to Article 6 Section 1(f) of the GDPR.
Personal Data, obtained on the basis of a premise resulting from a legal provision (Article 6, Section 1(c) of the GDPR), will be stored for 50 years (pursuant to § 15 Section 4 of the Regulation of the Minister of Science and Higher Education on studies) - in the form of copies of submitted documents. Other data will be deleted immediately after the purpose of their processing has expired i.e. after the cessation of tax obligations or after the claims have expired, i.e. 3 years after the termination of the legal relationship between the parties.

IV [ Personal Data Recipients ]
The recipients of the data are:
1.	authorized employees and associates of the SGGW,
2.	entities processing data on request and on behalf of the Data Controller, on the basis of concluded agreement for entrusting the processing of personal data, in order to provide services specified in the agreement e.g. information and communication technology services, i.e. hosting, delivery or maintenance of IT systems; legal services; consulting services, including as part of outsourcing of the Personal Data Protection Inspector; accounting services, traditional mail, and in the case of electronic - Microsoft, along with other tools provided by Microsoft for university students.
3.	entities authorized under the law.

V [ Rights of Person Affected by Personal Data ]
You have the following rights:
1.	the right to access your personal data (Article 15 of the GDPR), including obtaining a copy of the data (Article 15 (3) of the GDPR),
2.	the right to rectify (correct) or supplement incomplete personal data (Article 16 of the GDPR),
3.	the right to request the deletion of your personal data in cases provided for by law (Article 17 of the GDPR),
4.	the right to submit a request to limit the processing of your personal data (Article 18 of the GDPR),
5.	the right to receive your data in a structured, commonly used format and to transfer them when the processing is based on your consent or a concluded agreement, and also when the processing is carried out in an automated manner (Article 20 of the GDPR),
6.	the right to object to the processing of your personal data in the event of their processing in order to implement the legitimate interest of the Controller, for reasons related to its particular situation, including profiling (Article 21 of the GDPR).

VI [ President of the Personal Data Protection Office ]
Where it considers, that the processing of your personal data violates the provisions of the Regulation, You are entitled to lodge a complaint to the supervising body i.e. to the President of Personal Data Protection Office with its registered office at ul. Stawki 2, who can be contacted in the following way:
1. by letter: ul. Stawki 2, 00-193 Warszawa
2.by an electronic inbox available at https://www.uodo.gov.pl/pl/p/kontakt
3. by phone: (22) 531 03 00

VII [ Automated Decision Making ]
Personal data shall not be subjected to automated decision making and shall not be profiled.

VIII [ Data Transfer Outside the European Economic Area (EEA) ]
Due to the use of Microsoft services, data may be transferred outside the European Economic Area (EEA), among others to the USA. Microsoft provides guarantees resulting from compliance with Chapter 5 of the GDPR and has been obliged to comply with the protection of personal data on the basis of standard contractual clauses concluded with SGGW. More information can be found at:
https://privacy.microsoft.com/pl-pl/privacystatement.

IX [ Obligation to Provide Personal Data ]
The data is necessary to sign the agreement on the terms and conditions of payment for educational services and its implementation (Article 6 Section 1(c) of the GDPR). We collect only the personal data that we can process in accordance with the provisions of the Act of July 20, 2018 Law on Higher Education and Science, executive acts issued to it and a resolution of the SGGW senate, pursuant to Article 6 Section 1(c) of the GDPR. Other personal data, if collected while attending SGGW, may be processed on the basis of voluntary consent, in accordance with specific clauses, for the purposes indicated therein when giving such consent.
I have read the content of this information clause on ___-___-_______
Student's signature: …………………………………………………