I. General provisions
- The Privacy Policy specifies how the Users’ personal data necessary to provide electronic services via the www.pk.edu.pl website (hereinafter: Website) are collected, processed and stored.
- The Website collects only personal data necessary for providing and developing the services offered therein.
- Personal data collected through the Website shall be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR) and the Personal Data Protection Act of 10 May 2018.
II. Data administrator
The administrator of personal data collected through the Website is the Tadeusz Kościuszko Cracow University of Technology, address: 24 Warszawska Street; 31-155 Kraków, NIP Tax Identification Number 675-000-62-57, REGON: 000001560 e-mail address: kancelaria@pk.edu.pl (hereinafter: Administrator).
III. Purpose of personal data collection
- Personal data is used for:
• registering an account and verifying the User’s identity,
• enabling logging in to the Website,
• carrying out the contract concerning services and e-services,
• communication with the User (livechat, contact form, etc.)
• sending a newsletter (after giving the User’s consent to receive it),
• running a comment system,
•providing social media services,
• promoting the Administrator’s offer,
• marketing,
• personalization of the Website for Users,
• analytical and statistical activities, - 2. Providing data is voluntary but necessary to conclude the contract or use other functionalities of the Website.
IV. Type of personal data processed
The Administrator may process the User’s personal data: name and surname, residence address, e-mail address, telephone number, Tax Identification Number.
V. Personal data processing period
Users’ personal data will be processed for the period of:
• when the basis for data processing is the performance of the contract – until the limitation of claims after its performance,
• when the basis for data processing is consent – until its cancellation, and after the withdrawal of consent until the limitation of claims.
VI. Disclosure and sharing of personal data
Users’ personal data may be disclosed to entities related to the Administrator, its subcontractors, and entities cooperating with the Administrator, e.g. companies handling e-payments, companies providing courier/postal services, and law firms.
VII. . Users’ rights
- The Website User has the right to access their personal data, rectify, delete, limit processing, transfer, object to processing, and withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal).
- Application of the User’s request for entitlement under the aforementioned rights shall be sent to kancelaria@pk.edu.pl.
- The Administrator shall comply or refuse to comply with the request immediately – within a maximum of one month of receipt.
- The User has the right to lodge a complaint with the President of the Office for Personal Data Protection if they consider that the processing violates their rights and freedoms (GDPR).
VIII. Cookies
- The Website collects information using session, persistent and third-party cookies.
- The collection of cookies supports the correct provision of services on the Website and serves statistical purposes.
- The User can determine the extent of access for cookies on their device in their browser settings.
IX. Procedures for automated decision-making and profiling
Users’ data may not be processed in an automated manner such that any decisions could be made against them as a result.
X. Final provisions
- The Administrator has the right to make changes to the Privacy Policy, but the Users’ rights will not be limited.
- Information about the introduced changes will appear in the form of a notice available on the Website.
- In matters not covered by this Privacy Policy, the provisions of the GDPR and the provisions of Polish law shall apply.