Skip to main content

Privacy Policy

The controller of your personal data is Gdynia Maritime University (81-87 Morska Street, Gdynia). The controller has designated a Data Protection Officer (email: iod@umg.edu.pl).

Your personal data is processed on the basis of Article 6(1)(a), (b), (c), (e) and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR), i.e.:

  • Processing is necessary for the performance of tasks carried out in the public interest, in particular as defined in the Act on Higher Education and Science of 20 July 2018 and the Act on the National Archival Resource and Archives of 14 July 1983, as well as on the basis of executive acts issued;
  • Processing is necessary for the performance of a contract to which you are a party or have been designated as the contact person;
  • In certain cases, processing is based on your consent to the processing of personal data for a specific purpose. You may withdraw your consent to processing at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

The processing of your personal data is also necessary for the fulfilment of legal obligations incumbent on Gdynia Maritime University under applicable national legislation, including tax and social security law, in order to fulfil its statutory obligations relating to the employment of staff, contractors and subcontractors, as well as scholarship payments and other benefits, including the calculation and collection of taxes and other public-law liabilities.

The recipients of your personal data are the entities authorised to have access to it in accordance with the rules and the scope provided for by the applicable law or other relevant provisions, in particular the competent tax authority, the Social Insurance Institution (ZUS) or the state labour inspectorate.

The personal data processed by Gdynia Maritime University as the controller consists primarily of personal data that does not fall within the special categories of personal data. In the cases strictly defined in Article 9(2) of the GDPR, special categories of personal data may be processed.

The provision of your personal data is voluntary. However, the processing of your personal data is required in order to comply with legal obligations binding on Gdynia Maritime University or, in certain cases, for the performance of a contract. Refusal to provide your personal data will result, in particular, in your application for admission being unable to proceed and in Gdynia Maritime University being unable to fulfil its statutory obligations relating to bachelor’s (first-cycle), master’s (second-cycle), and combined (long-cycle) master's and doctoral degree programmes. Refusal to provide personal data where a contract has been concluded will result in the contract being terminated prematurely or may hinder its performance.

Your personal data will be retained for the period required under applicable legislation, will not be processed by automated means or be subject to profiling.

You have the right to access your personal data and request its rectification. The right to request the erasure or restriction of processing of your data, and to object to the processing of such data provided for in the GDPR is subject to the limitations of the abovementioned Acts and other provisions of law that require Gdynia Maritime University to retain certain data for a legally defined period of time.

You have the right to lodge a complaint with the President of the Personal Data Protection Office in Warsaw if, in your opinion, the processing of your personal data infringes the applicable legal provisions.