According to the General Data Protection Regulation (GDPR) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we are obliged to inform you that:
Data controller
The controller of your personal data is the University of Warsaw, with its headquarters at Krakowskie Przedmieście 26/28, 00-927 Warsaw.
You can contact the Data controller:
- by post: the University of Warsaw, Krakowskie Przedmieście 26/28, 00-927 Warsaw (indicate the organizational unit to which correspondence is addressed);
- by telephone: 22 55 20 000.
Data Protection Officer
The controller has appointed a Data Protection Officer (DPO) supervising the correctness of personal data processing, who can be contacted via the following e-mail address: iod@adm.uw.edu.pl;
The DPO can be contacted in all matters regarding the processing of your personal data by the University of Warsaw and use of your rights related with the processing of personal data.
The tasks of the DPO are not, however, to carry out other matters, such as providing information related to the workshop, workshop service, etc.
Purposes and legal grounds for processing
Your personal data will be processed in:
- order to register your participation in “CartoVis24: ICA Workshop on AI, Geovisualization, and Analytical Reasoning”,
- order to review your submission to the workshop,
- contact with you in connection with the workshop,
- take pictures of the workshop’s participants and and publish them at the organizers’ webpages.
The basis for the processing of personal data in order to register your participation and review your submission to the workshop and for the contact is Art. 6 (1) (a) of GDPR.
Consent to the processing of personal data can be withdrawn at any time, by sending an email to: carto-vis-workshop@uw.edu.pl. Please note that the withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal.
We can also process your data for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The basis for processing is Art. 6 (1) (f) GDPR.
Data storage period
Your data processed on the basis of consent will be processed for the period necessary to organize the workshop. Data processed on the basis of Art. 6 (1) (f) will be stored for the period necessary until the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
Data recipients
Access to your personal data will be given to authorized employees of the University of Warsaw who must process your data regarding in the connection with the event.
Your data may also be transferred to institutions / organizations cooperating with the University of Warsaw.
Transfer of data outside the European Economic Area (EEA)
Your data may also be processed by Google – our provider of G-Suit for Education (with which we have signed a data processing agreement) in its data processing centres[1]. In addition, your data will be protected by the standards set out in the Privacy Shield approved by the European Commission[2]. This will provide your data with an appropriate level of security.
In addition, we would like to inform you that during the workshop photos will be taken, which will then be published on websites and social media belonging to the University of Warsaw.
Rights related to data processing
We guarantee you the exercise of all your rights on the terms set out by the GDPR, i.e. the right to:
- access to your data and receive a copy thereof;
- rectify your personal data;
- restrict the processing of personal data;
- erase personal data (with the reservation of the Art. 17 (3) GDPR);
- lodge a complaint to the President of the Personal Data Protection Office, if you believe that the processing of personal data violates the law on personal data protection.
Obligation to provide data and the consequence of not providing data
Providing personal data to the extent necessary to register your participation in the workshop and to review your submission is necessary. If you do not provide data your participation in the event may not be possible.
[1] https://www.google.com/about/datacenters/inside/locations/index.html
[2] https://www.privacyshield.gov
