In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR) (full text on the website: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=PL), Medical University of Gdańsk informs that:

1. The Controller of your personal data is Medical University of Gdańsk with its registered ad-dress at: ul. M. Skłodowskiej-Curie 3a, 80-210 Gdańsk,
   
   
2. You can contact the Data Protection Officer on the telephone at: (58) 3491027 or by e-mail at: iod@gumed.edu.pl,
   
   
3. Your personal data shall be processed for the purposes of recruitment to the University, and if you are admitted also for the purposes of the Data Controller’s compliance with the statis-tical, statutory, and archive obligations prescribed in the Higher Education Law and Science Act of 20 July 2018 (Journal of Laws 2024: it. 742), along with implementing regulations is-sued on its basis-based on Article 6(1)(b)(c)(e) GDPR, i.e. since the processing is neces-sary for the performance of the contract the data subject is a party to, and for compliance with the legal obligation the Data Controller is subject to, and for the performance of the tasks carried out in the public interest.
   
   
4. Your personal data may also be processed for the purpose of:
   
   a) your using the library resources, and for the performance by the Main Library of the Medical University of Gdańsk of the tasks entrusted to it with respect to the provision of services to the users of the common, partnership library and information system of the Tri-City Library Complex (Academy of Music in Gdańsk, Maritime University in Gdynia, Academy of Fine Arts in Gdańsk, Academy of Physical Education and Sport in Gdańsk, and European Solidarity Centre in Gdańsk) pursuant to Article 6(1)(a) GDPR, i.e. on your consent given to the processing of personal data,
   b) determination and recovery of potential claims in the situations defined in the regula-tions of the common law,
   c) informing you of any organised events, courses, conferences, competitions, promotions, or questionnaires pursuant to Article 6(1)(a) GDPR, i.e. on your consent given to the processing of personal data,
   d) conducting visual monitoring pursuant to Article 6(1)(f) GDPR, i.e. in pursuance of legitimate interests by the Medical University of Gdańsk,
   e) compliance with the legal obligation stemming from the Regulation of the Minister of Health, of 26 August 2019 regarding medical examinations of candidates for sec-ondary schools or higher education and for vocational qualification courses, students of these schools, students, students of qualifying vocational courses and participants of doctoral studies (Journal of Laws 2019: it. 1651, as amended) pursuant to Article 6(1)(c) and Article 9(2)(h) GDPR.
   
   
5. Your provision of your personal data is mandatory once you have made your decision to join in the recruitment process, and it is furthermore necessary to attain the purposes speci-fied in item 3. It is also prerequisite for your participation in the recruitment process and for your subsequent taking and completing the studies.
   
   
6. The recipients of your personal data shall be: the entities entitled to obtain them under the regulations of the law, the persons the Data Controller shall authorise to do process the data in their performance of the duties of their job descriptions. Your data may further be re-ceived by entities, e.g. an occupational medicine unit, whom the Data Controller commis-sions to perform a service, especially with respect to handling the course of the studies run by the MUG, or other entities on the terms of entrustment agreements. The recipients of your personal data may also include intermediaries in the recruitment process, including partnership recruitment agencies abroad (if you submit your recruitment form via their good offices); the list of agencies is available at official website of MUG Admissions Office.
   
   
7. Your personal data shall be processed for the recruitment purposes during the period of im-plementation of all activities related to the recruitment process, and in the case of admission to university, for a period of 50 years, in accordance with the provisions of the Regulation of the Minister of Science and Higher Education of 27 September 2018 on studies (Journal of Laws 2023, it. 2787).
   
   
8. Under the principles laid down in the GDPR regulations, you enjoy:
   a. the right to access your data,
   b. the right to rectify the data, if discordant with the actual facts,
   c. the right to erase the data, restrict their processing, and transfer the data in the circum-stances prescribed by the law,
   d. the right to object to the processing of the data,
   e. the right to lodge a complaint with the supervisory authority, i.e. President of the Personal Data Protection Office, should you decide that the processing of your personal data violates the personal data protection regulations.
   
   
9. The data you provide shall not be processed in any automated way, nor shall they be used to create profiles.
   
   
10. The Data Controller does not intend to transfer any personal data to any third country or in-ternational organization.
    
    
11. In the case of those not admitted to studies, your personal data will be stored for the duration of the recruitment process, and then for a period of 6 months from the moment of termina-tion of all appeal proceedings initiated during the recruitment process, after which the data will be deleted. If a fee is paid as part of the recruitment process (e.g. recruitment fee), the data of the person not admitted will be stored in accordance with art. 74 sec. 2 of the Act of 29 September 1994 on accounting in the accounting system of the Medical University of Gdańsk for 5 consecutive years after the year of payment of the fee.