Data Protection Officer/ Management Control and Security Office

GDPR information clause in relation to the use of video surveillance at the University

1. Personal Data Administrator

The administrator of the personal data provided is the Silesian University of Technology, hereinafter referred to as the University, which may be contacted by post to the address: ul. Akademicka 2A, 44-100 Gliwice or by e-mail: BR@polsl.pl

2. Data Protection Officer

The administrator has appointed a Data Protection Officer who may be contacted in all matters concerning the processing of personal data post to the address: ul. Akademicka 2A, 44-100 Gliwice or by e-mail: iod@polsl.pl

3. Purposes of processing

Personal data will be processed for the purpose of protection of persons and property on the premises of the University.

4. Legal basis for processing

Processing is based on the grounds arising from Article 6 section (1) let. (e). (performance of a task carried out in the public interest) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) in connection with Article 50 of the Act of 20 July 2018. - Law on Higher Education and Science.

5. Personal data storage period

Video surveillance recordings are stored for no longer than three months and then permanently deleted. If the image recording constitutes evidence in proceedings conducted pursuant to legal provisions, the recording storage period will be extended until the final conclusion of such proceedings. After this period, the image recordings will be destroyed in a manner that they cannot be reproduced.

6. Data recipients

Entities performing public tasks. Personal data may also be transferred to partners providing technical and organizational IT support.

7. Rights related to the processing of personal data

You have the following rights related to the processing of personal data:

• the right to access personal data;
• the right to request the rectification of incorrect personal data and the completion of incomplete personal data;
• the right to request the erasure of your personal data, should the circumstances defined in Article 17 of the GDPR arise;
• the right to request restriction of the processing of personal data;
• the right to lodge a complaint with the supervisory authority responsible for the protection of personal data, i.e. the President of the Personal Data Protection Office;
• the right to object to data processing.

The controller does not keep a permanent identification of the persons in the recordings and therefore is not able to exercise the rights under Articles 15 to 20 of the General Data Protection Regulation, unless the data subject provides additional information enabling him or herself to be identified and this shall not prejudice the rights and freedoms of other persons in the recordings.

8. Information about automated processing of personal data

Personal data collected in the video monitoring system will not be subject to automated decision-making, including profiling.