Privacy policy of the „New Sounds” National Student Song Festival website”

in force since May 24, 2018.

The Adam Mickiewicz University Foundation in Poznań places special emphasis on respecting the privacy of the individuals whose personal data it processes, including in connection with the operation of its website and services, and activities carried out or initiated electronically. In order to protect personal data, the Adam Mickiewicz University Foundation in Poznań applies the principles set out in applicable laws, including the GDPR Regulation.

The Privacy Policy sets out how we protect personal data and the rights of the individuals whose personal data we process.

1. Who is the administrator of personal data and how can one contact them?

The Administrator of your personal data is the Adam Mickiewicz University Foundation in Poznań with its registered office in Poznań (61-612), at Rubież 46, entered in the Register of Entrepreneurs and the Register of Associations, Other Social and Professional Organizations, Foundations and Public Health Care Facilities of the National Court Register under KRS number 0000052045, whose registration documents are kept by the Regional Court of Poznań – Nowe Miasto and Wilda, identified by Tax Identification Number NIP: 7810002075, referred to in further parts of the Privacy Policy FUAM.

If you have any questions regarding the processing of personal data or the exercise of your rights, please contact the Data Controller via email sent to the e-mail address: Data Protection Inspector – Natalia Wolskiej: iod@ppnt.poznan.pl.

2. Contact details of the Data Protection Officer.

FUAM has a Data Protection Officer whom you can contact via e-mail sent to the following address: iod@ppnt.poznan.pl.

3. For what purpose and on what legal basis do we process Personal Data?

FUAM processes your personal data for various purposes, which are listed below:

Based on the provision of Article 6(1)(a) of the GDPR, that is, on the basis of the consent expressed by the person, to whom the data relate, FUAM processes personal data for the purpose of:

  1. sending the Newsletter;
  2. sending commercial information;
  3. marketing of own products or services;
  4. taking contact and processing requests resulting from contact forms;
  5. conducting registrations for training, workshops, conferences or other events organized by the FUAM or in cooperation with the FUAM;
  6. recruitment of employees;
  7. recruitment conducted for the purposes of a scholarship program or a support program organized by the FUAM or in cooperation with the FUAM, as well as the implementation of a scholarship program or a support program;
  8. running online services available after registration by users.

The consent to the processing of personal data for any of the above purposes is voluntary, but is necessary for the actions undertaken by FUAM mentioned above.

Pursuant to Article 6(1)(b) of the GDPR, that is, when it is necessary for the performance of a contract to which the data subject is a party, or for the performance of pre-contractual measures requested by the data subject, before the conclusion of the contract, for the purpose of:

  1. the execution of the assignment, the formulation of the content, the modification or termination of agreements between FUAM and the data subject;
  2. taking action at the request of the data subject before the conclusion of the contract.

This section specifically concerns contracts concluded via email or the Internet, as well as actions undertaken before the contract is concluded by the party via the Internet or email.

Pursuant to Article 6(1)(c) of the GDPR, that is, for the purpose of fulfilling the legal obligation imposed on FUAM, in order to:

  1. the execution of contracts with third parties, in particular for the organization of study trips for participants and the insurance of participants;
  2. preparing invoices and fulfilling other obligations arising from tax law regulations.

Pursuant to Article 6(1)(f) of the GDPR, that is for purposes resulting from legitimate interests pursued by FUAM, in order to:

  1. statistical, informational, archival, analytical – in this case, the legally justified interest of FUAM is the analysis of the activities and services already performed by FUAM in order to adapt them to the needs of interested parties in the future, as well as the knowledge of customers’ activity;
  2. the execution, conclusion, formulation, modification or termination of agreements to which FUAM is a party, as well as the taking of actions before the conclusion of the agreement – in the case where the agreement is concluded with a person other than the person indicated for contact regarding the agreement (e.g., an employee, a collaborator of the party) – in this case, FUAM’s legally justified interest is the execution of the agreement or the taking of actions before its conclusion;
  3. the organization of study trips and the insurance of their participants – in this case, the legally justified interest of FUAM is the implementation of the statutory objectives of FUAM;
  4. studies on satisfaction with the services offered by FUAM – in this case, the legally justified interest of FUAM is to learn about the customers’ opinions regarding the services provided in order to adapt them to the needs and expectations of those concerned;
  5. settlement, investigation or defense against claims – in this case, FUAM’s legitimate interest is to possess personal data that will allow it to settle, investigate or defend against claims, including clients and third parties;
  6. administering the FUAM websites – in this case, the legally justified interest of FUAM is the necessity to maintain and administer the websites;
  7. the transmission of commercial information by FUAM – in this case, the legally justified interest of FUAM is direct marketing.

Database.

FUAM informs that each collection of personal data is protected against access by unauthorized persons in a manner adequate to the purposes of processing personal data and threats. The IT system that processes personal data meets the requirements of a high level of protection of personal data. We do not share personal data with third parties unless with their express consent or at the request of the person whose data is concerned or pursuant to the law (including upon a request by authorized authorities under the law of the state for the purposes of proceedings conducted by them or activities related to security or defense, for specific tasks performed in the public interest).

4. How do we use cookies?

FUAM uses cookies on its websites to adapt the services provided and the content displayed on the websites to the individual needs of its users. The user has the right to disable the acceptance of cookies on their computer. In that case, however, they may lose the ability to use some of the functionalities available on our website. Detailed information regarding the purposes and methods of using cookies is included in the Cookie Policy, which is referenced in the cookie information on the respective website.

5. Requirement to provide personal data.

Providing any personal data is voluntary and up to your decision. However, in some cases, providing certain personal data is necessary for FUAM to take appropriate action at your request or to provide specific services.

On the FUAM websites, the data marked in the respective contact forms are those that are necessary for the implementation of the action for which the respective form is intended. Failure to provide the required data therein will prevent the implementation of certain actions.

6. To whom do we disclose the personal data received from you?

We disclose your personal data to the following categories of recipients:

Processing entities.

We work with entities that process your personal data only on our instructions. If necessary, we transfer your personal data to entities that provide financial and human resources services, legal services, insurance services, hosting services, provide us with online marketing systems, manage the delivery of email messages, conduct analysis of traffic on websites, and analyze the effectiveness of marketing campaigns.

State authorities.

We share your personal data if the competent state authorities, in particular the organizational units of the prosecutor’s office, the Police, the General Inspector of Personal Data Protection (since May 25, 2018 the President of the Office for the Protection of Personal Data), the President of the Office for the Protection of Competition and Consumers, or the President of the Office for Electronic Communications, request it. Nevertheless, we guarantee that we analyze each case of requesting the disclosure of personal data very carefully and very thoroughly in order to prevent the information from being disclosed to an unauthorized person.

Third countries.

Like most entrepreneurs, we use various popular services and technologies offered by entities such as Facebook, Microsoft, and Google. These entities have joined the Privacy Shield program under an implementing decision of the European Commission dated July 12, 2016. Entities that have joined the Privacy Shield program guarantee that they will comply with the high standards for the protection of personal data that apply in the European Union, therefore using their services and the technologies offered in the process of processing personal data is legal.

7. How long are your personal data stored for?

We store the personal data of individual States for the period necessary for the purposes for which the data are processed, and in particular, although not exclusively, for the period:

  1. the execution of the service;
  2. the execution of the contract, if such has been concluded;
  3. until the consent is withdrawn by the person authorized – in relation to data processed on the basis of consent;
  4. in the case of data stored specifically for analytical, statistical, or informational purposes – until they are no longer up-to-date or no longer useful.

In addition to the above periods, FUAM stores data for the time necessary to complete the complaint procedure, for the time necessary to secure or pursue any claims that may arise, and also to comply with legal obligations arising, in particular but not exclusively, from tax or accounting regulations.

After you opt out of receiving marketing information, your data will be anonymized.

8. What are your rights in connection with the processing of your personal data?

For any correspondence regarding the processing of personal data and the exercise of your rights related to the processing of your personal data, please send it to: iod@ppnt.poznan.pl or by mail: UAM Foundation, ul.Rubież 46, 61-612 Poznań, with the annotation „Personal Data”.

Right to withdraw consent (Article 7(3) of the GDPR).

Every person whose personal data is processed has the right to withdraw the consent granted to FUAM at the time of providing personal data. The withdrawal of consent does not affect the legality of the processing carried out based on the consent before its withdrawal. The withdrawal of consent does not entail any negative consequences. However, it will prevent further use of the FUAM services, which in accordance with applicable laws we can provide only with your consent.

Right of access to data (Article 15 of the GDPR).

Everyone has the right to obtain confirmation from FUAM as to whether we are processing their personal data, and if so, the person whose data is concerned has the right:

  1. obtain information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of this data, the planned period of data storage or the criteria for determining this period, about the rights granted to you under the GDPR and about the right to lodge a complaint with a supervisory authority, about the source of this data, about automated decision-making, including profiling, and about the safeguards applied in connection with the transfer of this data outside the European Union;
  2. obtain a copy of your data.

Right to rectification of data (Article 16 of the GDPR).

Everyone has the right to correct and supplement the personal data they have provided, if it is incorrect.

Right to erasure of data „Right to be forgotten” (Article 17 of the GDPR).

Each of you has the right to request the deletion of all or some of the personal data processed by the FUAM. This right will be respected by the FUAM without undue delay if:

  1. the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  2. the specific consent has been withdrawn, to the extent that personal data were processed and there is no other legal basis for the processing;
  3. an objection was submitted by you against the use of personal data for purposes such as marketing or satisfaction surveys; the objection was deemed valid;
  4. personal data is processed unlawfully.

In the event of a counter-notification or withdrawal of consent, FUAM may retain certain personal data to the extent necessary for the purpose of establishing, pursuing or defending claims. This applies in particular to personal data comprising: name and surname, email address, and application history; we retain this data for the purpose of handling complaints and claims related to the use of our services.

Right to restrict data processing (Article 18 of the GDPR).

Everyone has the right to request the restriction of the processing of their personal data in the following cases:

  1. the correctness of your personal data is questioned – in that case, their use for the time necessary for us to verify the correctness of your data, but not longer than 30 days;
  2. the processing of the data is unlawful, and instead of deleting the data, the request concerns limiting its use;
  3. the personal data have ceased to be necessary for FUAM for the purposes for which they were collected or used, but they are necessary for the State to establish, investigate or defend claims;
  4. an objection has been raised against the use of your data – in such a case, the restriction is imposed for the time necessary to determine whether the legally justified grounds on the part of the FUAM are superior to the grounds of the objection of the person whose data are concerned.

Right to data portability (Article 20 of the GDPR).

Everyone has the right to receive their personal data that has been provided to FUAM, and then to have it transferred to another personal data administrator of their choice. You also have the right to request that the personal data be transferred by FUAM directly to such another administrator, if technically possible.

Right to object to the use of data (Article 21 of the GDPR).

At any time, you may object to the use of your personal data to FUAM, when your personal data is processed based on FUAM’s legitimate interest, e.g. in connection with the use of marketing services or satisfaction surveys. When your objection is found to be valid and we have no other legal basis to process your personal data, we will delete your personal data in accordance with the objection submitted.

At what time do we fulfill your requests?

If, in the exercise of the aforementioned powers, you make a request to the FUAM, either that request will be met or we will immediately refuse to comply with it, no later than within 1 (one) month after receiving it. In the event that it turns out that due to the complex nature of the request or the number of requests, the FUAM will not be able to meet the request within 1 (one) month, it will be met within the next 2 (two) months, informing you in advance of the intended extension of the deadline.

Reporting complaints, inquiries and requests.

Complaints, inquiries and requests regarding the processing of your personal data can be submitted to the FUAM at any time. If for any reason you believe that your right to the protection of personal data or other rights granted to you under the GDPR have been violated, you have the right to file a complaint with the General Inspector of Personal Data Protection (since May 25, 2018 the President of the Office for the Protection of Personal Data).

9. Automated decision-making and profiling.

FUAM does not carry out automated decision-making, including profiling. The content of the inquiry, which is submitted via contact forms, is not evaluated by the IT system.

10. Changes in privacy policy.

All persons who use our websites in any way are subject to the Privacy Policy in effect at the time of use. Changes in the legislative framework regarding the protection of personal data, as well as other factors, may affect changes to the privacy policy. FUAM declares its adherence to the principles contained in this Privacy Policy, but reserves the right to make changes to the Privacy Policy.