Privacy Statement
INFORMATION
regarding your personal data processing

In accordance with Article 13 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter “GDPR”) we would like to inform you that we will process your personal data. Details:

I. Data Controller

Centrum Medyczne Kształcenia Podyplomowego (Postgraduate Medical Education Centre) with its registered office in Warsaw, ul. Marymoncka 99/103, 01-813 Warszawa, tel. 22 569 37 00, hereby informs about holding the function of your personal data controller.

II. Data protection officer

We have assigned Data Protection Officer as a contact person regarding matters of your personal data protection and exercise of your rights; you can send us an e-mail iod@cmkp.edu.pl or call us: 22 560 10 04 or contact us in writing to the address of our registered office established in item I.

III. Objectives and grounds for processing

1. Processing of your data indicated in the registration form in order to cooperate within the scope of reviewing your potential publications in academic journal of Centrum Medyczne Kształcenia Podyplomowego titled "Wiedza Medyczna" (“Medical Knowledge”) takes place on the basis of Controller's legitimate interest - obligation to review publications in academic journals and to possibly determine, investigate or defend against claims in connection with unpredictable negative situations arising during the review process (e.g. author's loss and Controller’s accusation) (basis of art. 6 item 1 letter c and f of GDPR).
2. Processing your data as the author of a potential publication in an academic journal of the Postgraduate Medical Education Centre “Wiedza Medyczna" shall be necessary to undertake action at your request before entering into an agreement with us regarding publication in the above journal. Aforementioned is related to the Controller’s obligation to conduct scientific information and publishing activities, including electronic form within the scope of medical and health sciences on the basis of applicable law provisions – act of 13 September 2018 on Post-graduate Medical Education Centre and Resolution no. 189 of Post-graduate Medical Education Centre Council of 26 June 2019 regarding statute adoption of Post-graduate Medical Education Centre (basis: art. 6 item 1 letter b, c, f, GDPR).
3. Processing of your personal data in the form of an e-mail address in order to send notifications, information, advertisements, invitations and announcements regarding academic journal of Postgraduate Medical Education Centre titled “Wiedza Medyczna” after obtaining your consent (basis: art. 6 item 1 letter a GDPR).
4. Data shall be processed for the purposes of preparing internal reports and analyses (including statistics of viewership and readership) (basis: art. 6 item 1 letter f GDPR).

IV. Data recipients

1. Your personal data collected for the purposes of cooperation within the scope of publishing your potential articles shall be made available to readers of the journal, processors who provide legal services which support us with ICT systems, as well as supply and operate our IT systems and software used for the proper website operation. If your study is submitted for review, your personal data shall not be made available to reviewers.
2. Your personal data collected for the purposes of cooperation within the scope of reviewing your potential publications shall be made available to processors who provide legal services which support us with ICT systems, as well as supply and operate our IT systems and software used for the proper website operation.
3. Your personal data collected in the form of an e-mail address for the purposes of sending notifications, information, advertisements, invitations and announcements regarding academic journal shall be made available to processors who provide legal services which support us with ICT systems, as well as supply and operate our IT systems and software used for the proper website operation.
4. Author's data may also be transferred to publishers of databases and indexing catalogues, e.g.:

a) SCOPUS
b) Pol-index
c) WorldCat
d) Google Scholar
e) CEJSH
f) Crossref Metadata Search

5. If necessary, your personal data may also be disclosed only to entities authorized to receive your data on the basis of applicable legal regulations.

V. Data transfer to third countries or international organisations

We do not transfer your data outside the European Economic Area. If a study is submitted for review, the reviewer shall not receive author’s personal data and reviewer’s personal data shall not be disclosed to the author.

VI. Data storage duration

1. Your personal data collected for cooperation purposes within the scope of publishing your works shall be stored for the period necessary to implement objectives referred to in points III.1, III.2 and III.3 of this Information. Furthermore, archival materials shall be stored in accordance with the CMKP Law Firm's Manual prepared on the basis of provisions of the Act of 14 July 1983 on National Archival Resources and Archives.
2. Your personal data collected for cooperation purposes while publishing your potential articles which were eventually rejected and unpublished shall be stored for 2 years. Furthermore, archival materials shall be stored in accordance with the CMKP Law Firm's Manual prepared on the basis of provisions of the Act of 14 July 1983 on National Archival Resources and Archives.
3. Your personal data in the form of an e-mail address in order to send notifications, information, advertisements, invitations and announcements regarding academic journal shall be stored as long as “Wiedza Medyczna” is issued or until you withdraw your consent to receiving aforementioned notifications.

VII. Your rights:

You shall have the right to:
a) access your personal data – obtaining confirmation from the Controller whether your data is processed and in such case gaining access and information within the scope indicated in art. 15 GDPR;
b) rectify your personal data – demanding from the Controller to immediately rectify personal data which is incorrect and to complete appropriate personal data in accordance with art. 16 of GDPR;
c) remove your personal data - demanding from the Controller to immediately remove your personal data in case of any occurring circumstances referred to in art. 17 of GDPR, including when personal data is no longer necessary for the purposes for which it was collected. Right to remove your data may be limited due to Controller's obligations resulting from applicable law;
d) limit your personal data processing in cases referred to in art. 18 of GDPR, including questioning personal data accuracy;
e) data portability – receiving your personal data in a structured, commonly used and machine-readable format in accordance with art. 20 of GDPR. You may send this data to another data controller or demand from Controller to send it directly to another controller, if technically possible;
f) object to the processing of your personal data in cases specified in art. 21 of GDPR;
g) lodge a complaint to the data protection supervisory authority in accordance with art. 77 of GDPR;
h) withdraw the consent for personal data processing in accordance with art. 7 item 3 of GDPR.

In order to exercise the above-mentioned rights, please address your request to Personal Data Controller or Data Protection Officer - contact details were specified in item I or II of this information. Bear in mind that prior to exercising your rights, Controller needs to ensure whether you are eligible, i.e. to identify you.

VIII. Providing data:

Providing your data is voluntary, however, it is necessary for sending notifications, information, advertisements, invitations and announcements regarding academic journal to commence cooperation within the scope of editing, reviewing potential publications and undertaking actions in order to publish your article in the academic journal.

IX. Information on automated decision making, including profiling:

Your personal data is not subject to automated decision making, including profiling.