Personal data processing notice

Data Controller
The University of Warsaw, 26/28 Krakowskie Przedmieście, 00-927 Warsaw is the Controller of your processed personal data.
You can contact the Controller:
*via mail: University of Warsaw, 26/28 Krakowskie Przedmieście, 00-927 Warsaw (indicate the organizational unit that is the addressee of the correspondence);
*by phone: 22 55 20 000.
Data Protection Officer (DPO)
The Controller has appointed a Data Protection Officer (DPO) who may be contacted via e-mail at: [email protected]
You may contact the DPO in all matters regarding your personal data processing by the University of Warsaw and executing your rights related to personal data processing.
Purposes of and legal basis for processing 
Your personal data will be processed for the purposes of inviting for information meeting.
The basis for personal data processing is provided by Article 6(1)(…) of the GDPR .
Consent may be revoked at any time, for example by sending an e-mail to: [email protected] . Please be reminded that withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Data retention period
Your data shall be processed for a period of recruitment and then for 6 months after recruitment.
Data recipients
Access to your personal data shall be granted to authorized employees, associates and/or students of the University of Warsaw who must process your data in connection with the 
executed project. 
Entities that the Controller commissioned to perform certain activities, such as processing data, entailing the necessity to process your personal data may be data recipients.
Data transfers outside of the European Economic Area (EEA)
Your data may also be processed by Google, our G-Suite for education service provider (with whom we have signed a data processing agreement) at their data processing centers . 
Rights connected with data processing
We guarantee you the ability to exercise all your rights according to the principles specified by the GDPR, i.e. the right to:
  • access the data and receive a copy;
  • rectify (correct) your personal data;
  • restrict personal data processing;
  • erase personal data (subject to Article 17(3) of the GDPR);
  • lodge a complaint with the President of the Personal Data Protection Office if you believe that the personal data processing violates the personal data protection laws. 
Obligation to provide data and consequences of failure to provide data
Providing data is necessary for the purposes of inviting for information meeting . Providing other data that is not necessary for the purposes of information meeting is voluntary.