Information clause for PW Navi users

Pursuant to Art. 13 of the Regulation 2016/679 of the European Parliament and of the Council

of 27 April 2016 on the protection of natural persons with regard to the processing of personal

data and to the free flow of the data and repealing Directive 95/46/EC (hereinafter referred to

as GDPR), I hereby inform that:

1) The administrator of your personal data is the Warsaw University of Technology,

represented by the Rector, with the official seat at pl. Politechniki 1, 00-661 Warsaw.

2) The administrator has appointed the Data Protection Inspector to supervise the processing

of personal data. The Inspector can be contacted at the email address: iod@pw.edu.pl.

3) For users with an account in the CMS administration system, the administrator shall process

the personal data to the following extent: name and surname, contact data: e-mail

address. The extent of the data processed is based on the Statutes of the Warsaw

University of Technology, §147, of 26 June 2019.

4) The navigation application for locating the user, which is necessary for the application to

run, shall locate the user on the basis of Bluetooth and GNSS data (as the strength of

signals of available beacons, location and accuracy of the GNSS receiver).

5) If the user enables notifications, including evacuation notifications, the programming library

used by the system developer servicing this function shall use the following data: IP

address, Push Tokens (to send personalised notifications), UserID, in-app purchases,

date of the first session in the library, date of the last session in the library, total number

of sessions in the library, total time of using the application, clicking on the notification.

6) If the function of voluntary provision of analytical data is enabled, the system collects

anonymised data on the user’s location with data on how the location was determined,

data used to determine it and data on the suggested route. The data are collected for

analytical purposes and may be provided to employees, doctoral students and students

for teaching or research purposes at the request of persons interested. Importantly, the

data will be provided with a delay of at least 24h to make it impossible to track users on-

line.

7) Your personal data referred to in point 3 shall be processed by the administrator in order to

authorize the user and grant them the function of managing the navigation application; the

legal basis of the processing of your personal data is Art. 6 section 1 letter c of GDPR, Art.

49 section 2 of the Law on Higher Education and Science, Act of 20 July 2019, Journal of

Acts of 2018, Dz.U.2021.0.478; Art. 21 of the Act of 27 June 1997 on Libraries,

Dz.U.2019.0.1479.

8) You are entitled to access your personal data and you have the right to correct the data,

the right to demand to delete them, limit the processing of the data, the right to object to

the processing of the data. Since the processing of the personal data is not based on your

consent, you are not entitled to transfer the personal data.

9) Your personal data may be made available to the navigation application system software

producer, with their seat in Poland.

10) Providing your personal data is not obligatory; however, it is necessary to meet the

purposes for which they were collected.

11) Your personal data will be processed for the period of completion of the purpose of

processing and later for the period necessary to secure possible claims or perform other

tasks arising from the law.

12) You are entitled to make a complaint to the supervisory authority - President of the Office

for Personal Data Protection if you find that the processing of your personal data violates

the provisions of GDPR.