Information on processing of personal data in terms of email accounts

Below you will find information regarding the processing of personal data in connection with creating and operating an email account in the agh.edu.pl domain which we are required to provide in accordance with Article 13(1) and (2) of the GDPR1.

 

  1.  Personal Data Administrator

The Administrator of personal data processing is AGH University of Krakow, al. Adama Mickiewicza 30, 30-059 Krakow (hereinafter referred to as AGH) represented by the Rector.

 

  1. Data Protection Officer

The Data Protection Officer has been appointed at AGH. In matters related to the processing of personal data you may contact directly at the Administrator's office by e-mail: iodo@agh.edu.pl, or by phone: (0048) 12 617 53 25.

 

  1. Purpose and legal grounds of personal data processing

Your data is processed in order to create and operate an email account in the agh.edu.pl domain.

The collection of personal data results from the necessity for AGH to fulfil its legal obligations set forth in the provisions of the Act on Informatization of the Activities of Entities Performing Public Tasks 2 and its implementing acts, including in particular the Regulation of the Council of Ministers on the National Interoperability Framework(...) 3.

Thus, your data is collected pursuant to art. 6(1)(c) of the GDPR, based on the aforementioned provisions, i.e. their processing is necessary for the fulfilment of a legal obligation incumbent on the controller.

 

  1. Recipients of personal data

Recipients 4 of your data shall be:

(a) entities to which AGH is obliged to provide data under applicable laws,

(b) entities providing services to AGH to the extent necessary for processing your personal data, including in particular entities providing IT and administrative services to AGH.

 

  1. Period of personal data storage

Your personal data will be processed for the period of validity of your email account. After its deactivation it will be stored for the period of maturity of any claims arising from the use of that account.

 

  1. Your rights in connection with personal data processing

(a) You have the right to request an access, rectify and restrict the processing of your data, and the right to object to the processing of your data in the cases and under the conditions specified in the GDPR.

(b) You have the right to lodge a complaint with the supervisory authority - the President of the Office for the Protection of Personal Data pursuant to art. 77 of the GDPR (...any person has the right to lodge a complaint with the supervisory authority, (...) if he/she believes that the processing of personal data concerning him/her violates this Regulation).

 

  1. We further inform you that:

(a) Your personal data will not be subject to automated decision-making processes including profiling.

(b) Your personal data will not be transferred to a third country or an international organisation.

(c) Your personal data may be transferred to state authorities, legal protection authorities (Police, Prosecutor's Office, Court) or local government bodies in connection with ongoing proceedings.

 

1 Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on protection of natural persons with regard to personal data processing and on the free flow of such data and repealing Directive 95/46/EC (General Data Protection Regulation) [OJ EU. L. 2016.119.1 of May 4, 2016].

2 Act of February 17, 2005 on informatization of the activities of entities performing public tasks (Journal of Laws of 2023, item 57).

3 Regulation of the Council of Ministers of April 12, 2012 on the National Interoperability Framework, minimum requirements for public registries and exchange of information in electronic form, and minimum requirements for ICT systems (Journal of Laws of 2012, item 526, as amended).

4 Pursuant to Article 4 point 9 of the GDPR, "recipient" means a natural or legal person, public authority, an entity or other subject to whom personal data is disclosed.