GDPR Information Clause

§1. Data Controller

The controller of personal data of participants of the Project “Education Without Borders for Medical Programmes at UJK” is Jan Kochanowski University in Kielce, ul. Żeromskiego 5, 25-369 Kielce, Poland, e-mail: kancelaria@ujk.edu.pl .

The University has appointed a Data Protection Officer (DPO), who can be contacted at: iod@ujk.edu.pl .

§2. Purpose of data processing

Personal data are processed for the purposes of:

• conducting recruitment for the Project,
• implementation of Intensive International Education Programmes (IIEPs),
• registration and reporting in NAWA ICT systems,
• monitoring, reporting and settlement of the Project,
• fulfilment of legal obligations imposed on the University.

§3. Legal basis for processing

The legal basis for the processing of personal data is:

• Article 6(1)(c) GDPR – compliance with a legal obligation,
• Article 6(1)(e) GDPR – performance of a task carried out in the public interest,
• Article 6(1)(a) GDPR – consent of the data subject, with regard to optional data provided voluntarily.

§4. Data recipients

Personal data may be transferred to authorised entities, including:

• the National Agency for Academic Exchange (NAWA),
• institutions authorised under applicable law,
• IT service providers supporting Project implementation.

§5. Rights of data subjects

Each data subject has the right to:

• access their personal data and obtain a copy thereof,
• rectify inaccurate or incomplete data,
• restrict processing,
• object to processing in cases provided by law,
• withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal,
• lodge a complaint with a supervisory authority.

The supervisory authority in Poland is the President of the Personal Data Protection Office (PUODO).

§6. Data retention

Personal data will be processed for the period necessary to implement and settle the Project and stored in accordance with applicable laws and NAWA and FERS guidelines.