Privacy Policy

This Privacy Policy sets out the principles for the processing of personal data collected through the website www.globalcrisesproject.net and any of its subpages. The owner of the Website and, at the same time, the data controller is the Jagiellonian University, with its registered office in Kraków (31-007), ul. Gołębia 24, tax identification number (NIP) 6750002236, REGON number 000001270, hereinafter referred to as the UNIVERSITY. The Website is operated as part of the activities of the Behavior in Crisis Lab, within the Institute of Psychology of the University, as an informational and recruitment tool for the Global Crises Project.

Personal data collected by the UNIVERSITY through the Website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, GDPR). The UNIVERSITY exercises particular diligence in respecting the privacy of Users visiting the Website.

§1 Types of data processed, purposes, and legal basis

The Website collects, first, navigational data generated automatically through the use of its pages, such as the IP address assigned to the User’s device or the external IP address of the internet service provider, the domain name of origin, browser type, access time, and operating system type, as well as information concerning the links and references selected during navigation. The processing of such data is based on the UNIVERSITY’s legitimate interest (Article 6(1)(f) GDPR), consisting of ensuring the proper functioning of the Website and improving its usability.

Second, the Website provides Users with a contact form and a form for expressing interest in collaborating on the project, the latter administered through Microsoft Forms. Completing these forms involves the voluntary provision of data such as first name, surname, email address, institutional affiliation, and any additional information the User chooses to provide. The processing of these data is based, depending on the case, on the consent given by the User at the time of submission (Article 6(1)(a) GDPR), or on the necessity of taking steps requested by the data subject prior to entering into a collaboration agreement, where completion of the form is preparatory to a possible formal collaboration with the project (Article 6(1)(b) GDPR). In all cases, the provision of personal data to the UNIVERSITY is voluntary.

The forms mentioned above are also accompanied by their own specific notices, to which reference should be made for details of the processing directly connected to them; this Privacy Policy applies on a residual and general basis to all processing carried out through the Website.

§2 Recipients of the data and retention period

Users’ personal data may be transferred to service providers engaged by the UNIVERSITY for the operation of the Website, including in particular the hosting provider (OVHcloud) and, with respect to the expression-of-interest form, Microsoft, as provider of the Microsoft Forms service. Depending on the contractual arrangements and circumstances, these providers act on the UNIVERSITY’s instructions as processors, or independently determine the purposes and means of processing as separate controllers.

Where the legal basis for processing is consent, the User’s personal data are processed by the UNIVERSITY until the consent is withdrawn, and thereafter for a period corresponding to the limitation period applicable to claims that may be raised by the UNIVERSITY or against it. Unless otherwise provided, this period is six years, reduced to three years for periodic claims and for claims related to business activity. Where the legal basis for processing is the performance of pre-contractual or contractual measures, the data are processed for as long as necessary for that purpose, and thereafter for the same limitation period indicated above.

This section reproduces, for consistency, the same retention criteria already adopted by the UNIVERSITY for the institutional repository; since this constitutes an extension to a different context, however, these terms should be confirmed by the relevant University office prior to final publication.

§3 Cookies

The Website uses technical cookies and, where applicable, statistical analysis cookies. The management, classification, and detailed disclosure relating to the individual cookies installed are available on the Website’s dedicated page, automatically generated through the Complianz plugin, to which reference should be made for the complete list of cookie categories in use, their respective purposes, and the means by which the User may give, refuse, or withdraw consent. This Privacy Policy does not duplicate that content, which constitutes the reference source on cookies for the Website.

§4 Rights of the data subject

In accordance with the GDPR, the User has the right to withdraw, at any time, any consent given, without affecting the lawfulness of processing carried out prior to the withdrawal (Article 7(3) GDPR); to object, on grounds relating to their particular situation, to processing based on the UNIVERSITY’s legitimate interest (Article 21 GDPR); to obtain erasure of their personal data in the cases provided for in Article 17 GDPR, including where the data are no longer necessary for the purposes for which they were originally collected or where the processing is unlawful; to request restriction of processing in the cases provided for in Article 18 GDPR; to obtain confirmation of whether processing concerning them is taking place and to access their personal data, together with the information set out in Article 15 GDPR; to obtain rectification of inaccurate personal data or completion of incomplete data (Article 16 GDPR); and to receive, in a structured, commonly used, machine-readable format, the personal data provided to the UNIVERSITY, with the possibility of requesting direct transmission to another controller, where technically feasible (Article 20 GDPR).

The User may also submit complaints, inquiries, or requests concerning the processing of their personal data and the exercise of their rights to the email address iod@uj.edu.pl, or by post to: Jagiellonian University, ul. Gołębia 24, 31-007 Kraków, marked “Data Protection Officer.” The User also has the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) if they believe that the processing of their personal data infringes the GDPR.

§5 Amendments to this Privacy Policy and contact details

This Privacy Policy may be amended; the UNIVERSITY will inform Users of any changes seven days in advance. Questions concerning this Privacy Policy may be sent to iod@uj.edu.pl.

Date of last update: