Information clause based on the GDPR
In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general Regulation on data protection), Journal of Laws EU.L.2016.119.1 (hereinafter: GDPR), we inform you about the rules for the processing of personal data and the related rights.
The administrator of personal data is the Dmuchawiec Democratic Education Foundation with its registered office in Łódź, ul. Peasant Battalions 6/14.
In matters related to the protection of personal data, it is possible to contact the following e-mail address: biuro@fundacjadmuchawiec.pl
Personal data is processed for the purposes of:
resulting from the statutory tasks of the Foundation,
resulting from legal provisions, in particular the Education Law, the Education System Act, the Regulation of the Minister of National Education on the types of other forms of pre-school education, the conditions for creating and organizing these forms and the manner of their operation of August 31, 2010, including in particular for the conduct of classes in accordance with the statutory activity, the implementation of the core curriculum for preschool education and the core curriculum for general education for primary schools in accordance with the Regulation of the Minister of National Education of February 14, 2017 (Journal of Laws, item 356), documenting the course of teaching, educational and care activities,
performance of the contract between the parties to the scope indicated in point 2
the basis for the processing of personal data on the basis of the GDPR is primarily art. 6 sec. 1 lit. c, e and f and art. 9 sec. 2 lit. g of this regulation.
The legal basis for the processing of personal data by the Foundation may sometimes be a voluntary consent to the processing of data obtained on the principles set out in art. 6 sec. 1 lit. a or art. 9 sec. 2 lit. and in connection with art. 7 GDPR.
In connection with the processing of personal data, the recipients of personal data may be:
public authorities and entities authorized to do so on the basis of legal provisions;
authorized entities providing the Foundation with IT or legal services on the basis of data processing agreements;
entities organizing olympics, competitions and other educational events and projects in which the student takes part.
Personal data will not be transferred to a third country or to an international organization, and if it were to take place, it will remain compliant with the principles resulting from the GDPR.
Personal data will be stored for the period resulting from the provisions of law.
In connection with the processing of personal data, you have the right to:
access to personal data,
demand their rectification or removal,
request restriction of processing in the cases specified in art. 18 GDPR,
raising an objection, the implementation of which depends on the fulfillment of the criteria resulting from art. 21 GDPR,
the right to transfer data, but its implementation depends on the fulfillment of the conditions set out in art. 20 GDPR,
if the processing of personal data violates applicable law, it is possible to lodge a complaint with the supervisory body, which in Poland is the President of the Office for Personal Data Protection.
The Foundation does not only perform automated decision-making or profiling referred to in art. 22 sec. 1 and 4 GDPR, which means that no decisions regarding personal data are made only automatically and that no profiles of persons whose data are processed are built.
Providing personal data of the student and his parents (legal guardians) is mandatory when it results directly from the provisions of the above-mentioned acts or regulations issued on their basis, in the remaining scope it is not obligatory, but it is a condition enabling the implementation of the student's rights and obligations .