Mobile application Test FUS privacy policy

This document specifies the conditions for the processing of personal data (hereinafter also referred to as „data”) as part of the Test FUS application , hereinafter referred to as the „Application”.

§1. HOW TO CONTACT THE DATA CONTROLLER

The administrator of personal data processed as part of the Application is the Józef Piłsudski Academy of Physical Education, Branch in Biała Podlaska, based in Biała Podlaska (21-500) at ul. Akademicka 2, established under the Act of August 23, 1938 on the Józef Piłsudski Academy of Physical Education in Warsaw, marked with the REGON number: 000327830 and NIP: 5250011875.

You can contact the Administrator by phone: 83 342 88 01 and by e-mail: hubert.makaruk@awf.edu.pl.

§2. ON WHAT BASIS DO WE PROCESS YOUR PERSONAL DATA

When collecting personal data, we always inform you about the legal basis for their processing. It results from the provisions of the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data on the free movement of such data and repealing Directive 95/46/EC – General Data Protection Regulation). When we inform about:

6 point 1 letter b) GDPR – this means that we process personal data because they are necessary to perform the contract or to take action before concluding it, at the request received,
6 point 1 letter f) GDPR – this means that we process personal data in order to fulfill legally justified interests,
9 point 2 letter j) GDPR – this means that we process personal data in order to perform statistical analysis.

§3. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF ACCOUNT REGISTRATION

1. If you register an account in the Application, your personal data will be processed for this purpose.
2. The legal basis for the processing of this data will be Art. 6 point 1 letter b) GDPR.
3. We will process this data until you delete your account in the Application. You can do this at any time.
4. You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, and the right to lodge a complaint with the supervisory authority.
5. Providing this data is voluntary, but failure to provide this data will prevent you from creating an account.
6. The recipients of this data are: the e-mail service provider and the IT service provider.

§4. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF USING THE APPLICATION

1. We may process data to enable you to use the Application. The processing of this data is based on Art. 6 point 1 letter b) GDPR.
2. The application can access data using the following permissions on the mobile device:

• access to the camera – after obtaining your consent,
• access to the microphone – after obtaining your consent.

3. We will process this data until it is deleted or your account in the Application is deleted.
4. You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, and the right to lodge a complaint with the supervisory authority.
5. Providing this data is voluntary, but failure to provide this data will prevent you from using selected functionalities of the Application.
6. The recipients of this data are: the e-mail service provider and the IT service provider.

§5. INFORMATION ON DATA PROCESSING FOR STATISTICAL PURPOSES

1. We will process the data you enter when conducting tests of fundamental motor skills in sports in order to statistically record the results obtained. We emphasize that the obtained data is anonymized and during processing it will not be possible to assign it to a specific test participant.
2. We may process data for statistical purposes. The processing of this data is based on Art. 9 point 2 letter j) GDPR.
3. We will process this data until it is deleted or your account in the Application is deleted.
4. You have the right to access your data, rectify it, delete it, limit processing, the right to transfer data, and the right to lodge a complaint with the supervisory authority.
5. Providing this data is voluntary, but failure to provide this data will prevent you from using selected functionalities of the Application.
6. The recipient of this data is the IT service provider.

§6. INFORMATION ABOUT DATA PROCESSING TO ENSURE SECURITY

1. From the moment you launch the Application, in order to ensure the security of services, we process data such as:

• public IP address of the device from which the request came,
• date and time of the inquiry,
• number of bytes sent by the server,
• information about errors that occurred during the query.

2. Our legitimate interest in this processing is to maintain server event logs and protect the Application against potential hacker attacks and other abuses. Including the ability to determine the IP address of a person performing an unauthorized activity in the Application area, such as an attempt to break security, the publication of prohibited content, or attempts to perform prohibited activities using our servers.
3. The processing of this data is based on Art. 6 point 1 letter f) GDPR.
4. We will store this data for the period necessary to achieve the specified purposes, no later than until the limitation period for claims arising from separate legal provisions expires.
5. You have the right to access your data, rectify it, delete it, limit processing, object to its processing, as well as the right to lodge a complaint with the supervisory authority.
6. Providing this data is a condition for using the Application. Failure to provide this data will prevent you from using the Application.
7. The recipient of this data is our IT service provider.

§7. INFORMATION ABOUT DATA RECIPIENTS

When processing personal data, we use external services. Therefore, the recipients of your personal data may be third parties. When collecting personal data, we always inform about these recipients, but due to the priority of readability of the message, we do it briefly. Therefore, we hereby clarify that when we inform about specific categories of recipients, these are the following entities:

• IT service provider: Scientific and Academic Computer Network – National Research Institute, ul. Kolska 12, 01-045 Warsaw.
• email service provider: Microsoft Ireland Operations Limited, Attn: Data Protection Officer, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 (Ireland).

§8. INFORMATION ABOUT THE TRANSFER OF DATA TO THIRD COUNTRIES

Your personal data will not be transferred outside the European Economic Area.

§9. ABSOLUTE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED

When we write about the rights related to the processing of your personal data, we refer to the rights described below. The possibility of exercising the following rights is independent of the legal basis for the processing of personal data.
The right to access data

You have the right to obtain from us confirmation as to whether we process personal data relating to you. If this is the case, you have the right to access this data as well as receive additional information about:

• processing purposes,
• categories of relevant data,
• the recipients or categories of recipients to whom the data have been or will be disclosed, in particular recipients in third countries or international organizations,
• if possible, the planned data storage period, and if this is not possible, about the criteria for determining this period,
• the right to request us to rectify, delete or limit data processing, to object to such processing, as well as the right to lodge a complaint with the supervisory authority,
• the data source if your data was not collected from you,
• automated decision-making, including profiling and the rules for making such decisions, as well as the importance and expected consequences of such processing for you.

After receiving such a request, we are obliged to provide a copy of the personal data being processed. If such a request is received electronically and unless we receive any other objection, we will also provide information electronically.
The right to rectify data

You have the right to request that we immediately correct any inaccurate personal data relating to you. Taking into account the purposes of processing, you have the right to request that incomplete personal data be completed, including by providing an additional statement.
The right to delete data (to be forgotten)

You have the right to request that we immediately delete your personal data. We are then obliged to delete personal data without undue delay if one of the following circumstances occurs:

• you have withdrawn your consent to the processing of your personal data and we have no other basis for processing them,
• you have successfully objected to the processing of your data,
• your personal data was processed unlawfully,
• your personal data must be deleted in order to comply with the legal obligation,
• your data was collected in connection with the offering of information society services.

The right to restrict processing

You have the right to request us to restrict processing in the following cases:

• when you question the accuracy of the data – for a period enabling us to check its accuracy,
• the processing is unlawful and you oppose the deletion of the data and instead request the restriction of their use,
• we no longer need personal data for processing purposes, but you need it to establish, pursue or defend claims,
• you have objected to the processing of your data – until it is determined whether our legitimate grounds override the grounds for your objection.

Automated decisions, including profiling

You have the right not to be subject to a decision that is based solely on automated processing, including profiling, and produces legal effects concerning you or similarly significantly affects you.

The law does not apply if this decision:

• is necessary to conclude or perform a contract between you and us,
• is permitted by Union law or the law of the Republic of Poland and which provides for appropriate measures to protect your rights, freedoms and legitimate interests, or
• is based on your explicit consent.

The right to lodge a complaint

You have the right to lodge a complaint regarding the processing of your personal data to the supervisory authority: President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warszawa, tel. 22 531 03 00, fax. 22 531 03 01, e-mail: kancelaria@uodo.gov.pl.

§10. RELATIVE RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED

When we write about the rights related to the processing of your personal data, we refer to the rights described below. The possibility of using them always depends on the legal basis for the processing of personal data.
The right to withdraw consent to processing

If we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time. Naturally, withdrawal of consent does not affect the lawfulness of previous processing of personal data.
The right to transfer data

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to send this personal data to another administrator without any hindrance from us, if the processing takes place:

• based on consent or contract, and
• in an automated manner.

When exercising the right to transfer data, you have the right to request that your personal data be sent directly by us to another administrator, if technically possible. This right must not adversely affect the rights and freedoms of others.
Right to object

If we process your personal data pursuant to Art. 6 point 1 letter f) GDPR, you have the right to object to the processing of this data for reasons related to your particular situation.

We are then no longer permitted to process this personal data unless we demonstrate the existence of:

• valid, legitimate grounds for processing, and these grounds must override your interests, rights and freedoms, or
• grounds for establishing, pursuing or defending claims.

Also, if you object to the processing of your personal data for direct marketing purposes, we will not be able to process it for such purposes.

§11. CHANGES TO THE PRIVACY POLICY

We reserve the right to change this Privacy Policy. In such a case, we will publish an updated version in this location.