Pursuant to Article 13(1) and Article 13(2) of the Regulation(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Journal of Law of the European Union L. 2016.119.1), hereinafter referred to as the GDPR, you are advised of the following:
1) Your personal data are administered by the Fundacja British Council (Controller), having its registered office at ul. Koszykowej 54, 00-675 Warsaw, registered with the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register under 0000449621 KRS number, REGON: 146529782, NIP: 7010369489.
2) You may contact the Controller in writing at this e-mail address rodo@britishcouncil.pl or at the address of the Controller’s registered office, with a note: ”Data protection”.
3) Your personal data shall be processed for the following purposes:
| Purposes of personal data processing | Legal basis for processing |
| For the purposes of the organisation of and running an online test and an interview evaluating the level of language proficiency of the person for whom you are a legal representative and for the purposes of determining the language competence level of the person for whom you are a legal representative and to assign the person to a suitable study group |
Undertaking activities at your request before a contract for enrolment in an English Language course ie entered Legal basis: Article 6(1)(b) of the GDPR |
| For the purposes of marketing, promotion and sale of services |
Processing of your data on the basis of the performance of legitimate interests of the of personal data Controller Legal basis: Article 6(1)(f) of the GDPR Note: Any use of your data for the marketing of the Controller’s own products and services will occur on the basis of separate consents given pursuant to Article 10 of the Act on providing services by electronic means and Article 172 of the Act – Telecommunication Law |
| For the purposes of ensuring the Controller’s current technical and organizational services connected with organized interviews, including direct contacts with you. |
Performance of legitimate interests of the personal data Controller Legal basis: Article 6(1)(f) of the GDPR |
4) Your personal data may be transferred to enterpreneurs providing IT, accounting and legal services for the Fundacja British Council.
5) Your personal data shall not be transferred for processing outside the European Economic Area.
6) Your personal data will be processed for a period necessary to fulfill the purposes stated in point 3 above.
7) The Fundacja British Council ensures that all individuals whose personal data are processed have rights ensuing from GDPR. Therefore, you (the data subject) have:
1. the right of access to your personal data, incliding the right to obtain a copy of the data;
2. the right to request rectification (correction) of personal data where the data are inacurate or incomplete;
3. the right to erasure of personal data (“right to be fogotten”) – where:
a) the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the data subject has objected to the processing of data,
c) the data subject has withrawn consent on which the processing is based and ther is no other legal ground for the porcessing,
d) the data have been inlawfully processed,
e) the data have to be erased for compliance with a legal obligation ensuing from the provisions of law;
4. the right to restriction of processing – where:
a) the data subject contests the accuracy of the personal data,
b) the processing is unlawful, and the data subject oposes the erasure of the personal data and rquests their restriction instead,
c) the controller no longer needs the personal data for their purposes, but the ae required by the data subject for the establishment, excercise or defence of legal claims,
d) the data subject has objected to the data processing – pending the verification whether the legitimate grounds of the controller override those of the objection;
5. the right to data portability – where:
a) the processing is based on a contract entered into with the data subject or on consent expressed by that subject;
b) the processing is carried out by automated means;
6. the right to withdraw consent to the processing of personal data. You have the right to withraw your cosent to the processing of personal data to the extent granted. The withdrawal of consent shall not affect the lawfulnes of data processing based on consent before its withdrawal.
8) If you consider that that the processing by the Controller infringes the provisions of the GDPR, you are entiled to submit a complaint to the President of the Urządu Ochrony Danych Osobowych [Personal Data Protection Office] (ul. Stawki 2, 00-193 Warszawa).
9) Providing you personal data in the registration form is a prerequisite for the verification of the language proficiency level of the person for whom you are a legal representative. Failure to being verifid shall bar the person for whom you are a statutory representative from taking an Engliah langugae cours organized by the personal data Controller.