Implementation of rights

According to recital 59 of the Regulation of the European Parliament and of the Council of the EU 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (RODO), below is the necessary information on the mode of notification and the exercise of your rights.

How should I report a request for the exercise of my rights regarding the processing of personal data?

You can do it in several ways:

  • by letter to the following address:

    Data Protection Inspector
    Lazarski University,
    Świeradowska 43
    02-662 Warsaw

  • by email, directly to our Data Protection Inspector at: iod@lazarski.edu.pl

What rights can I exercise?

You have the following rights related to the processing of your personal data:

  1. right to object to the processing of your data for marketing purposes
  2. right to object to the processing of your data on the grounds of your particular situation - in cases where we process your data on the basis of our legitimate interest,
  3. right to withdraw consent,
  4. right to access your personal data,
  5. the right to request rectification of your personal data,
  6. the right to request erasure of your personal data, only if we are not obliged by law to process it,
  7. the right to request restriction of processing of your personal data,
  8. the right to portability of your personal data, i.e. The right to receive your personal data from us, in a structured, commonly used machine-readable computer format. You can send this data to another data controller or request that we send your data to another controller. However, we will do so only if such a transfer is technically possible.

What information should be included in the request?

In order to be able to accept your request and be able to analyze it, as well as prepare a response to it, we need to know:

  • who you are
  • what right and to what extent you want to exercise
  • what is the preferred form of receiving a response

How long will I have to wait for a response/fulfillment of the request?

  1. In order to carefully analyze your case and, if warranted, be able to fulfill your request, we have adopted the following lead time:
    • right to object to the processing of data for marketing purposes up to a maximum of 30 days
    • right to object to the processing of data due to a particular situation up to a maximum of 30 days
    • right to access data up to a maximum of 30 days
    • right to request rectification of data 14 days
    • right to request restriction of data processing up to a maximum of 30 days
    • right to request erasure of data ('right to be forgotten') up to a maximum of 30 days
    • right to data portability up to a maximum of 30 days
  2. In case, when the request or the number of your requests is of a complex nature, the deadline for responding may be extended by another two months. Within one month of receipt of the request, the Data Protection Officer will inform you by letter of the extension, stating the reasons for the delay.

Costs for the exercise of my rights?

The exercise of data subjects' rights is free of charge. However, in the case of the right of access to data, we reserve the right, in accordance with the law, to charge a fee for subsequent copies of data resulting from the exercise of the right under Article 15 of the RODO.

Will each of my requests be fulfilled?

Each request made will be forwarded to our Data Protection Officer for analysis. As a result of this analysis, there will be a response regarding its implementation, which you will receive from us. At the same time, we would like to inform you that the result of the analysis may be a refusal to implement the submitted request in case it turns out to be unjustified in accordance with the applicable legal regulations.

How can I revoke the expressed marketing consents?

You can revoke the expressed marketing consents in the following ways:

.