University of Warsaw network Personal data processing notice

Data Controller

The University of Warsaw, 26/28 Krakowskie Przedmieście, 00-927 Warsaw is the Controller of your processed personal data. You can contact the Controller:

  • via mail: University of Warsaw, 26/28 Krakowskie Przedmieście, 00-927 Warsaw (indicate the organizational unit that is the addressee of the correspondence);
  • by phone: 22 55 20 000.

Data Protection Officer (DPO)

The Controller has appointed a Data Protection Officer (DPO) who may be contacted via e-mail at:

You may contact the DPO in all matters regarding your personal data processing by the University of Warsaw and executing your rights related to personal data processing.

Purposes of and legal basis for processing

Your personal data will be processed for the purposes of:

  • ensuring network operation and security,
  • monitoring and analyzing network traffic in order to improve the quality of services,
  • responding to Law Enforcement Requests.

The basis for personal data processing is provided by Article 6(1)(c) of the GDPR.

Consent may be revoked at any time, for example by sending an e-mail to: Please be reminded that withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Data retention period

Your data shall be processed for a period of providing access to network services and then for 1 year.

Data recipients

Access to your personal data shall be granted to authorized employees, associates and/or students of the University of Warsaw who must process your data in connection with the
executed project.

Data transfers outside of the European Economic Area (EEA)

Your data may also be processed by Google, our G-Suite for education service provider (with whom we have signed a data processing agreement) at their data processing centers.

Rights connected with data processing

We guarantee you the ability to exercise all your rights according to the principles specified by the GDPR, i.e. the right to:

  • access the data and receive a copy;
  • rectify (correct) your personal data;
  • restrict personal data processing;
  • erase personal data (subject to Article 17(3) of the GDPR);
  • lodge a complaint with the President of the Personal Data Protection Office if you believe that the personal data processing violates the personal data protection laws.

Obligation to provide data and consequences of failure to provide data

Providing data is necessary for the purposes of accessing Univeristy of Warsaw network.