Which members of UWB bodies does this concern?

These include members of self-governing academic bodies of UWB (Academic Senate, Rector, Scientific Council, Internal Evaluation Board, Disciplinary Committee, Board of Trustees, Bursar), members of individual faculty bodies (Academic Senate, Dean, Scientific or Artistic Council, Disciplinary Committee, Secretary), members of bodies of university institutes (e.g. Scientific or Artistic Council) and members of other bodies of UWB (e.g. Ethics Committee), its faculties or individual departments.

Why and on what legal basis does UWB process my personal data?

UWB processes personal data of members of the bodies for the following purposes (for each purpose of processing we also indicate its legal basis):

ensuring the internal organisation and self-governing competence of UWB, keeping records of the members of the bodies, publishing a list of the members of the bodies (e.g. in the annual report or on the website)

•    compliance with legal obligations (Article 6(1)(c) GDPR)

•    the performance of a task carried out in the public interest (Article 6(1)(e) GDPR)

performance of a contract concluded with a member of the body    

•    performance of the contract (Article 6(1)(b) GDPR)

compliance with our legal obligations under generally binding legislation (e.g. the obligation to keep accounting and tax documents)    

•    compliance with legal obligations (Article 6(1)(c) GDPR)

protection of the rights, legitimate interests and property of UWB, including ensuring the security of UWB premises and information systems and solving security incidents (e.g. surveillance camera systems are operated for this purpose)    

•    legitimate interests of UWB (Article 6(1)(f) GDPR)

informing about facts related to the operation and activities of UWB and individual faculties    

•    legitimate interests of UWB (Article 6(1)(f) GDPR)

promotion of UWB (on the UWB website, social media (Facebook, Instagram, Twitter, etc.), in promotional materials)    

•    legitimate interests of UWB (Article 6(1)(f) GDPR) or your consent, if required (Article 6(1)(a) GDPR)

if you give us specific consent to do so, we may also process your personal data for the purposes set out in such consent    

•    your consent (Article 6(1)(a) GDPR)

If we process your personal data in order to comply with our legal obligations under generally binding legal regulations, the provision of such data is a legal requirement and you are obliged to provide us with such personal data. We are unable to comply with our obligations under generally binding legal regulations unless you provide it. If we process your personal data for the purpose of fulfilling a contract, for the legitimate interests of UWB or for the performance of a task carried out in the public interest, this is a contractual requirement of ours or a requirement necessary for the provision of the requested services or a requirement necessary for the performance of a task carried out in the public interest and you are under no legal obligation to provide us with such personal data. However, without providing it, we cannot enter into and/or perform the relevant contract or provide you with the requested services or perform the task carried out in the public interest.

What personal data does UWB process about me?

We only process personal data about you that is adequate, relevant and limited to what is necessary in relation to the purpose for which it is processed.

The personal data we may process about you can be divided into the following categories:

• identification data (e.g. name, surname, title, date of birth, place of residence);
• contact details (e.g. contact address, e-mail, telephone, data box ID);
• banking details (e.g. bank account No.);
• biographical data (e.g. education data, data from educational records, curriculum vitae);
• other information you provide to us in the course of your duties as a member of the body (e.g. information from our communication);
• visual records (e.g. camera footage, photographs).

How long does UWB keep my personal data?

We will only process your personal data for as long as is necessary for the purpose of processing. If your personal data is used for several different processing purposes at the same time, we will process it until the purpose with the longer processing period is no longer applicable. However, we will stop using it for the purpose with the shorter processing period once this period has expired.

UWB uses the following criteria to determine the period of processing of personal data:

• for the purpose of compliance with our legal obligations, your personal data will be processed for the duration of the relevant legal obligation of UWB;
• for the purpose of the performance of the contract, your personal data will be processed until the termination of the obligations under the relevant contract concluded with UWB;
• for the purpose of protecting the rights, legitimate interests and property of UWB, your personal data will be processed for the duration of the relevant legitimate interest of UWB. However, in the case of the initiation and duration of judicial, administrative or other proceedings in which the rights or obligations of UWB towards you will be addressed, the processing will not cease before the conclusion of such proceedings;
• personal data processed for the performance of a task in the public interest will be processed for the duration of the public interest. However, in the event of the commencement and continuation of legal, administrative or other proceedings involving the rights or obligations of UWB towards you, the processing will not cease before the conclusion of such proceedings;
• we will process personal data processed on the basis of your consent until you withdraw your consent, unless we set a shorter processing period.

In the case of archiving, the processing time is governed by the UWB Filing and Shredding Rules.

By the end of the calendar quarter following the end of the processing period at the latest, personal data for which the purpose of processing has ceased shall be irreversibly anonymised or securely destroyed. This shall not apply to archival material which is to be permanently stored in accordance with the Act on Archives and Records Management.

To whom is my personal data provided?

UWB may provide your personal data to the relevant public authorities to whom UWB is obliged to provide your personal data pursuant to generally binding legal regulations. These recipients will process your personal data as separate controllers independent of UWB.

If this is necessary to protect the rights, legitimate interests and property of UWB, we may transfer your personal data to, for example, judicial or administrative authorities, bailiffs, etc.

UWB is also entitled to transfer your personal data to persons who process personal data for UWB as its processors (e.g. accountants, tax or legal advisors, IT service providers). Upon your request, we will provide you with an up-to-date list of UWB processors who process your personal data. Please note that the list of the UWB processors may change and be updated over time.

We will only ever transfer your personal data to the extent necessary to protect your right to data protection and your privacy as much as possible.

Is my personal data transferred abroad?

In general, we do not transfer your personal data outside the European Economic Area (EEA). If one of the recipients of your personal data processes personal data in a country outside the EEA, it may also be transferred to such third country. However, in such a case, we will ensure that your personal data is processed in compliance with the relevant safeguards (e.g. by entering into standard contractual clauses with the recipient of the personal data).

Please note that if we publish some of your personal data on our website (based on our legitimate interest or with your consent if required), persons outside the EEA may also have access to that personal data.

Updating your personal data

Please only provide us with accurate, truthful and up-to-date information. If you become aware that information processed by UWB is inaccurate, untrue or out of date (e.g. due to a change in your personal data), please inform us so that we can take corrective action.

What are my rights in relation to processing and how can I exercise them?

For more information on your rights in relation to the processing of your personal data and information on how to exercise them, please see the Your Rights tab.