1. The controller of your personal data is Bialystok University of Technology, 45A, Wiejska Street, 15- 351 Bialystok, Poland (hereinafter referred to as ‘the University’), tel.: 85 746 90 00, www.bip.pb.edu.pl, email: rektorat@pb.edu.pl
2. Pursuant to Art. 37 (1) (a) GDPR, the controller of your personal data has appointed the Data Protection Supervisor whom you may contact in matters related to the processing of personal data at: iod@pb.edu.pl 
3. Your personal data will be processed for recruitment for studies and issuing the decision on accepting or rejecting you as a student and when you are given admission for the following purposes:
a) concluding the agreement on the terms and conditions of payment, 
b) accounting
c) the course of your studies and documenting it,
d) your job training provided for in your study plan – pursuant to Art. 6 (1) (b) and (c) of GDPR,
e) exercising of your rights and obligations as a student, including those related to your participation in the University’s student organisations, in particular in student research circles and artistic and sports groups, pursuant to Art. 6 (1) (e) GDPR. 
4. Your personal data may be disclosed to legal services provided to the Administrator, banks, postal and courier service providers, entities providing services to the University, including Internet service providers and entities provided for by law.
5. When given admission your personal data will be stored for periods of time necessary to fulfil the above purposes and for the periods of time provided for in the regulations of the law on archiving. In other cases, your personal data will be stored for a period of 12 months.
6. You have the right to access your data and, within the regulations of the law, to:
a) rectify your data;
b) erase your data;
c) restrict the processing of your data;
d) transfer your data;
e) object to the processing of your data;
7. When you feel that the processing of personal data violates generally applicable provisions in this regard you have the right to lodge a complaint with the competent supervisory body, i.e. the President of the Office for Personal Data Protection, if you think that the processing of your personal data violates generally applicable regulations in this respect. The above right can be exercised by submitting a written request to the University.
8. Providing your data for the purposes:
1) described in items 3 (a-e) is a mandatory and is necessary for the proper conduct of the recruitment process and then providing education. Failure to provide your personal data will make it impossible for you to obtain the status of a student;
2) described in item 3 (4) is a contractual condition and is necessary for your participation in the University’s student organisations. Failure to provide your personal data will make it impossible for you to participate in student organisations. 
8. Personal data will not be used for automated decision making or profiling referred to in art. 22.