Information about the processing of personal data in relation to cookies and newsletter subscription

In accordance with Art. 13 sec. 1 and 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free flow of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, the Medical University of Silesia in Katowice provides the following information as the personal data controller:

1. The personal data controller is the Medical University of Silesia in Katowice – 15 Poniatowskiego St., 40-055 Katowice, tel. No. 32 208 3600, NIP (tax ID) 634-000-53-01, REGON (business registry No.) 000289035.
2. The current contact details of the Data Protection Officer of the Medical University of Silesia in Katowice are available at 32 208 3630 or at sum.edu.pl and iod.sum.edu.pl websites.
3. Personal data in the form of cookies are processed to display the publisher's website, collect visitor statistics [Art. 6 sec. 1(b) of the GDPR] and for statistical purposes (Art. 89 of the GDPR).
4. Personal data in the form of an e-mail address are processed for the purpose of providing the newsletter delivery service [Art. 6 sec. 1(a) of the GDPR] by means of electronic communication.
5. The recipients of personal data are the employees of the Medical University of Silesia in Katowice, responsible for content management and authorised to process personal data. Contractors with whom the University has concluded a contract for the provision of publishing system maintenance services are also the recipients of data. Other public authorities who have legitimate grounds for requesting access to personal data may also be the recipients of the data.
6. Personal data in the form of cookies are collected by the Google Analytics system, on servers in distributed architecture, also outside the territory of Poland.
7. Personal data in the form of an e-mail address will be processed until the end of the newsletter or unsubscribe and for the period required by law on archiving documents (25 years), as well as the deadline for pursuing claims.
8. You have the right to demand from the Medical University of Silesia in Katowice access to your personal data, their rectification, deletion or restriction of processing, as well as the right to object to processing and the right to data transfer in accordance with the provisions of the GDPR.
9. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing which was carried out on the basis of the consent prior to its withdrawal. Withdrawal of consent is possible by contacting the editorial office of the journal (redakcjaaams@sum.edu.pl or wydawnictwo@sum.edu.pl).
10. You have the right to lodge a complaint against the processing of your personal data to the supervisory authority, i.e. the President of the Personal Data Protection Office.
11. The provision of personal data is voluntary. Failure to provide data will have no negative consequences, however, they are necessary for the subscription.
12. There is no automated decision making in the processing of the provided personal data.