Personal data

Based on Article. 13 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC, we would like to inform you that the personal data administrator children and parents is the Private Psychological and Pedagogical Counseling Center for Children and Youth with its seat at ul. Filarecka 17/2, 30-110 Kraków, represented by the Director Maria Porębska. Contact details: nppk@o2.pl, 661 922 157.

The data controller is responsible for the security of the personal data provided and its processing in accordance with the law.

FOR WHAT PURPOSE AND ON WHAT LEGAL BASIS DO WE USE THE DATA?

We will use the personal data of children and parents obtained in connection with the use of the services of our facility for the following purposes:

- Performance of statutory activities and performance of legal obligations incumbent on us. These obligations are specified in the law regulating the activities of educational institutions, in particular the Act of December 14, 2016 Educational Law (in accordance with Article 6 (c) of the GDPR) - "legal obligation",

- Performing statutory activities, if you consent to the use of special categories of personal data, e.g. data on the child's health - (legal basis - Article 9 (2) (a) of the GDPR) - "consent",

· Using the image of children, if you consent to the use of personal data for these purposes (legal basis - Article 6 (1) (a) of the GDPR) "consent".

- Providing personal data in the scope specified by the provisions of the Educational Law Act is a statutory requirement and is necessary for our facility to perform its statutory activities. Refusal to provide them will prevent our facility from performing these duties.

HOW LONG WILL WE USE THE DATA?

We will use the data for the period necessary to achieve the purposes described above. Depending on the legal basis, it will be respectively:

The period of performing statutory activities and the period in which the provisions of the Education Law require us to keep documentation,

The time until the consent is withdrawn.

WHAT ARE YOUR RIGHTS?

You can submit an application to our facility for:

Access to personal data (information on personal data being processed and a copy of the data),

Rectification of data when they are incorrect,

Data transfer, in the cases specified in the GDPR,

Deletion or limitation of the processing of personal data.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the law.

The consent granted to the processing of personal data may be withdrawn at any time.

WHO DO WE TRANSFER YOUR DATA TO?

Subject to all data security guarantees, we may transfer your data - in addition to persons authorized by the Data Administrator - to other entities, including:

Entities processing them on our behalf, e.g. technical service providers,

Processing entities to which the Administrator commissioned activities that require data processing, i.e. persons carrying out classes, conducting consultations.

Public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes that result from the provisions of generally applicable law.

Entities indicated by legal guardians on the basis of a written application from the legal guardian (e.g. the school attended by the child)

Personal data is not transferred to a third country or an international organization. The image made public on the basis of the guardian's consent may be transferred to a third country or an international organization (through publication on facebook).

The provided personal data will not be processed in an automated manner and will not be profiled.