Why and on what legal basis does UWB process my personal data?

UWB processes personal data of visitors to its premises for the following purposes (for each purpose of processing we also indicate its legal basis):

records of arrivals (guest books may be kept for this purpose)

•    the legitimate interests of UWB (Article 6(1)(f) GDPR)

protection of the rights, legitimate interests and property of UWB, including ensuring the security of UWB premises and dealing with security incidents (e.g. surveillance camera systems are operated for this purpose)

•    the legitimate interests of UWB (Article 6(1)(f) GDPR)

What personal data does UWB process about me?

We only process personal data about you that is adequate, relevant and limited to what is necessary in relation to the purpose for which it is processed.

The personal data we may process about you can be divided into the following categories:

• identification data (e.g. name, surname, signature);
• visual and audio recordings (e.g. camera recordings).

How long does UWB keep my personal data?

We will only process your personal data for as long as is necessary for the purpose of the processing.

We will process your personal data for the duration of the relevant legitimate interest of UWB. However, in the case of the initiation and duration of judicial, administrative or other proceedings in which the rights or obligations of UWB towards you will be addressed, the processing will not end before the conclusion of such proceedings.

In the case of archiving, the processing period is governed by the UWB Filing and Shredding Rules.

At the latest by the end of the calendar quarter following the end of the processing period, your personal data for which the purpose of processing has ceased will be irreversibly anonymised or securely destroyed.

To whom is my personal data transferred?

UWB may transfer your personal data to the relevant public authorities to which UWB is obliged to transfer your personal data pursuant to generally binding legal regulations. These recipients will process your personal data as separate controllers independent of UWB.

If this is necessary to protect the rights, legitimate interests and property of UWB, we may transfer your personal data to, for example, judicial or administrative authorities, bailiffs, etc.

UWB is also entitled to transfer your personal data to persons who process personal data for UWB as its processors (e.g. accountants, tax or legal advisors, IT service providers). Upon your request, we will provide you with an up-to-date list of UWB processors who process your personal data. Please note that the list of the UWB processors may change and be updated over time.

We will only ever transfer your personal data to the extent necessary to protect your right to data protection and your privacy as much as possible.

Is my personal data transferred abroad?

In general, we do not transfer your personal data outside the European Economic Area (EEA). If one of the recipients of your personal data processes personal data in a country outside the EEA, it may be transferred to such third country. However, in such a case, we will ensure that your personal data is processed in compliance with the relevant safeguards (e.g. by entering into standard contractual clauses with the recipient of the personal data).

What are my rights in relation to processing and how can I exercise them?

For more information about your rights you have in relation to the processing of your personal data and information related to exercising them, please see the Your Rights tab.