In accordance with Article 13 para. 1 and para. 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC (Official Journal of the European Union L. 2016.119.1), General Data Protection Regulation, hereinafter referred to as "GDPR", I inform that:
1) The Administrator of your personal data is the British Council Foundation with its registered office at ul. Koszykowa 54, 00-675 Warsaw, registered at the District Court for the capital city of Warsaw in Warsaw, 12th Commercial Department of the National Register Courthouse under the number KRS 0000449621, REGON: 146529782, NIP: 7010369489.
2) The data administrator can be contacted via email: rodo@britishcouncil.pl or in writing at the address of the administrator's office with the note "Data protection".
3) Your personal data will be processed for the following purposes:
| The purpose of personal data processing | Legal basis for processing |
| In order to comply with the terms of the participation agreement in an English language course |
in order to execute and on the basis of a contract you are a party to legal basis: art. 6 para. 1 letter b GDPR |
| Understanding your medical conditions that have or may have an impact on the learning process in order to properly adapt the teaching method and ensure your safety |
processing is necessary to protect the vital interests of the data subject or another natural person legal basis: art. 6 para. 1 letter d GDPR for execution and on the basis of a contract you are a party to legal basis: art. 6 para. 1 letter b GDPR |
| In order to fulfil legal obligations incumbent on the administrator of personal data resulting from legal provisions for tax and accounting purposes |
fulfilling the legal obligations incumbent on the administrator legal basis: art. 6 para. 1 letter c GDPR
|
| In order to assess your satisfaction and determine the quality of our service |
execution of the legitimate interests of the administrator of personal data legal basis: art. 6 para. 1 letter f GDPR |
| For the purpose of marketing, promotion and sales of services |
processing your personal data on the basis of execution of the legitimate interests of the administrator of personal data legal basis: art. 6 para. 1 letter f GDPR The use of your data for the purposes of marketing the personal data administrator’s goods and services will take place on the basis of separate consents granted on the basis of art. 10 of the Act on the provision of electronic services and art. 172 of the Telecommunications Law |
| For internal administrative purposes |
execution of the legitimate interests of the administrator of personal data legal basis: art. 6 para. 1 letter f GDPR |
| In order to establish, investigate or defend against claims in connection with conducting dispute proceedings, proceedings before public authorities and other proceedings |
execution of the legitimate interests of the administrator of personal data legal basis: art. 6 para. 1 letter f GDPR |
| In order to conduct video monitoring by the administrator, in accordance with the provisions of the labour law |
execution of the legitimate interests of the administrator of personal data legal basis: art. 6 para. 1 letter f GDPR |
4) Your personal data may be transferred to:
• entrepreneurs providing accounting and payroll, legal, insurance and IT services to the British Council Foundation;
• national units of the British Council Foundation
5) Personal data will be processed for the following periods of time:
Your personal data will be processed for the period necessary for implementation of goals indicated in point 3.
6) The British Council Foundation ensures that all persons whose personal data is processed have appropriate rights resulting from the GDPR. Therefore, you have:
1. the right to access personal data, including the right to obtain a copy of this data;
2. the right to request correction (revision) of personal data - if the data is incorrect or incomplete
3. the right to request the deletion of personal data (the so-called "right to be forgotten") - in the following events:
a) the data is no longer necessary for the purposes for which it was collected or otherwise processed,
b) the data subject has objected to the processing of the data
c) the data subject has withdrawn the consent on which the processing is based and there is no other legal ground for processing,
d) the data is processed unlawfully
e) the data must be removed in order to comply with the legal obligation;
4. the right to request a restriction to the processing of personal data - in the following events:
a) the data subject questions the correctness of personal data,
b) data processing is unlawful and the data subject opposes data deletion, demanding their restriction instead
c) the administrator no longer needs data for his purposes, but the data subject needs them to identify, defend or pursue claims,
d) the data subject has objected to the processing of the data - pending determination of whether the legitimate grounds on the part of the administrator override the grounds of objection;
5. the right to transfer personal data – in the following events:
a) the processing takes place on the basis of an agreement concluded with the data subject or on the basis of the consent expressed by such person and
b) the processing is automated;
6. the right to withdraw consent to the processing of personal data. To the extent you consented to the processing of personal data, you have the right to withdraw it. Withdrawal of consent does not affect the lawfulness of the processing of data which was made on the basis of consent before its withdrawal.
7) If you believe that the Data Administrator's processing violates the provisions of the GDPR, you have the right to file a complaint with the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw).
8) Providing your personal data is a condition for entering into an agreement for participation in an English language course. Refusal to provide data will result in being unable to participate in a language course organized by the data administrator.