In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 04.05.2016, p. 1), hereinafter “GDPR”, the University of the Commission of National Education informs you that:
1. The controller of your personal data is the University of the Commission of National Education in Krakow, ul. Podchorążych 2, 30-084 Krakow.
2. The controller has appointed a Data Protection Officer. Contact with the Data Protection Officer is possible via email at iod@up.krakow.pl or by phone at +48 12 662 62 06.
3. The personal data of Competition Participants provided in the competition application will be processed:
   (a) in the case of all Participants – for the purpose of organizing and conducting the competition pursuant to Article 6(1)(f) of GDPR – i.e., in the legitimate interest of the Controller, consisting of selecting the winner of the organized competition;
   (b) in the case of a Participant who is a Competition Winner – for the purpose of fulfilling legal obligations imposed on the Organizer as the promisor of the prize;
   (c) the personal data of all Participants, including images, will be processed based on expressed consent for publication on the Competition website, social media, and the websites of the University of the Commission of National Education in Krakow.
4. Providing your personal data is necessary to participate in the Competition. The consequence of not providing personal data will be the inability to participate in the Competition.
5. Participants’ data may also be shared with other entities, including authorized state bodies, if required by the competition organization procedure or the verification procedure for fulfilling legal obligations imposed on the Organizer.
6. The personal data of the Participants referred to in point 3(a) above will be processed until the conclusion of the Competition and the announcement of the results.
7. Participants have the right to: obtain information about the processing of personal data and the rights vested in them under GDPR, access the content of their data and request rectification, as well as the right to have their personal data deleted from the controller’s databases (unless further processing is necessary to comply with a legal obligation or to establish, pursue, or defend claims), and the right to restrict processing, transfer data, object to processing – in cases and under conditions specified in GDPR.
8. The personal data of Participants will not be subject to automated decision-making or profiling. Participants have the right to lodge a complaint with the President of the Office for Personal Data Protection if they believe that the processing of their personal data violates the provisions of GDPR.