Student internships
INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA
in connection with student internships
In connection with the implementation of the requirements of the GDPR [1], we would like to inform you about the principles and your rights related to the processing of your personal data.
- Controller
The controller of your personal data is the Statistical Office in Bydgoszcz with its registered office in Bydgoszcz (85-066 Bydgoszcz), ul. Ks. Stanisława Konarskiego 1-3 – hereinafter referred to as the ‘Controller’.
- Data Protection Officer
You can contact the Data Protection Officer (DPO):
- by post to the following address: Urząd Statystyczny w Bydgoszczy, ul. Ks. Stanisława Konarskiego 1-3, 85-066 Bydgoszcz, with the note IOD;
- by email to the email address: iod_usbdg@stat.gov.pl
Please only refer to the DPO matters relating to the processing of your personal data by the Controller, including the exercise of your rights under the GDPR.
- Purposes and legal basis for processing your personal data
The purpose of processing your personal data is to recruit for student or graduate internships and to implement:
- contracts (agreements) for the organisation of an internship at the Statistical Office in Bydgoszcz – in the case of student internships;
- contracts on the organisation of graduate internships – in the case of graduate internships.
Legal basis for processing your personal data:
If the internship is conducted on the basis of a contract to which you are a party, the legal basis for the processing of your personal data will be taking action at your request, before concluding the contract and performing the contract [2] .
Another legal basis for the processing of personal data is the performance by the Controller of a task carried out in the public interest [3] , which is to enable:
- students to undertake internships based on the Law on Higher Education and Science,
- graduates to undertake graduate internships based on the Act on Graduate Internships.
If the internship takes place on the basis of a contract concluded with the referring entity, the basis for the processing of your personal data at the recruitment stage is the consent expressed by participating in the recruitment process [4] and then performing by the Controller a task carried out in the public interest [5] , which is to enable students to complete internships based on the Law on Higher Education and Science.
Moreover, the basis for the processing of your personal data during the internship will be the fulfillment of the obligation incumbent on the Controller [6] resulting in particular from: the provisions of the Labour Code, the Act on Official Statistics, the provisions on archiving, the GDPR, the Law on Higher Education and Science, the Act on Graduate Internships.
- Recipients of personal data
Your personal data may be made available to public authorities authorised to obtain personal data under the law, entities with which the Controller has concluded an agreement entrusting the processing of personal data (including in the scope related to the technical support of the HR and payroll system and building security) and the educational entity that sent you to a student internship.
A separate category of recipients to whom your personal data may be disclosed are entities authorised to handle deliveries and entities with which the Controller has concluded an agreement entrusting the processing of personal data in the scope of technical support of systems, including the email system.
- Period of storage of personal data
Your personal data will be processed for the time necessary to conduct the recruitment process for internships and to carry out the internship on the basis of the contract (agreement) regarding admission to a student or graduate internship, and after that time will be stored in accordance with the provisions on archiving [7] .
- Data source
If your personal data were not provided directly by you, they were provided to us by the supervising university.
- Voluntary provision of/obligation to provide personal data
Providing personal data is voluntary but necessary to complete the internship. Failure to provide personal data will prevent you from participating in the internship recruitment process and from performing the internship contract.
- Rights of the data subject
You have the right to:
- access to personal data, including the right to obtain a copy of such data,
- if data processing is based on consent, the right to withdraw it,
- request rectification (correction) of personal data – if the data is incorrect or incomplete,
- request the erasure of personal data in the situations specified in Article 17 of the GDPR,
- request to limit the processing of personal data in the situations specified in Article 18 of the GDPR,
- lodge a complaint with the President of the Personal Data Protection Office if, in your opinion, the processing of your personal data violates the provisions of the GDPR.
Furthermore, you have the right to object, for reasons relating to your particular situation, to the processing of personal data based on Article 6(1)(e) of the GDPR.
- Automated decision-making, including profiling
Your personal data will not be processed in an automated manner, including in the form of profiling.
[1] Based on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as: GDPR) (OJ EU L 119, 04.05.2016, p. 1, as amended).
[2] Article 6(1)(b) of the GDPR.
[3] Article 6(1)(e) of the GDPR in conjunction with the Act of 20 July 2018 – Law on Higher Education and Science (Journal of Laws of 2024, item 1571, as amended).
[4] Article 6(1)(a) of the GDPR.
[5] Article 6(1)(e) of the GDPR in conjunction with the Act of 20 July 2018 – Law on Higher Education and Science (Journal of Laws of 2024, item 1571, as amended).
[6] Article 6(1)(c) of the GDPR in conjunction with the Act of 26 June 1974 – Labour Code (Journal of Laws of 2025, item 277, as amended), the Act of 29 June 1995 on Official Statistics (consolidated text: Journal of Laws of 2024, item 1799), the GDPR, the Act of 14 July 1983 on the National Archival Resources and Archives (consolidated text: Journal of Laws of 2022, item 164), the Regulation of the Minister of Culture and National Heritage of 20 October 2015 on the classification and categorisation of records, the transfer of archival materials to state archives and the disposal of non-archival records (Journal of Laws of 2019, item 246, as amended).
[7] The Act of 14 July 1983 on the National Archival Resources and Archives (consolidated text: Journal of Laws of 2020, item 164) and the Regulation of the Minister of Culture and National Heritage of 20 October 2015 on the classification and categorisation of records, the transfer of archival materials to state archives and the disposal of non-archival records (Journal of Laws of 2019, item 246, as amended). Annex to Order No. 17 of the President of Statistics Poland of 19 December 2019 on the introduction of the Records Management Instruction for organisational units of the official statistics services and the Uniform Subject File Plan for Statistics Poland and statistical offices.