Information Clause for Users of the UMLUB navi Application

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), we hereby inform you that:

1)     The Controller of your personal data is the Medical University of Lublin, with its registered office in Lublin, Poland.

2)   The Controller has appointed a Data Protection Officer, who may be contacted via e-mail at: t2tsystem@gmail.com.

3)   The UMLUB navi application is intended for indoor navigation within the facilities of the Medical University of Lublin and for supporting accessibility for persons with disabilities.

4)     Users of the application are not required to create an account or provide personal data in order to use the basic functionalities of the application.

5)   In the case of users who have administrative privileges in the CMS system, the Controller processes the e-mail address for the purpose of authorizing access to the administrative panel and managing the navigation system.

6)    The application uses the user’s location data solely to the extent necessary to provide navigation functionalities. For this purpose, the application may collect:
a) GNSS (GPS) receiver data,
b) Bluetooth module data,
c) information regarding the signal strength of BLE beacon devices,
d) information concerning the accuracy of the determined position.

7)    In order to ensure the proper operation of navigation functionalities, anonymous location data may be transmitted to the system infrastructure. Such data is not used to identify users.

8)    The application may collect anonymous analytical data concerning the use of the system, including in particular:
a) information about calculated routes,
b) data concerning positioning methods,
c) information regarding the effectiveness of the positioning system,
d) statistical data concerning application usage.

9)    The transfer of analytical data is voluntary and requires the user’s consent. The user may disable such data sharing at any time in the application settings.

10)  If the user consents to receiving notifications, the application may process technical data necessary for delivering messages, including organizational, safety, and evacuation notifications.

11)  Personal data of CMS administrative panel users is processed pursuant to Article 6(1)(c) and Article 6(1)(e) of the GDPR for the purpose of maintaining and administering the navigation system of the Medical University of Lublin.

12)  Recipients of personal data may include entities providing maintenance and support services to the Controller, in particular T2T System, the manufacturer of the navigation system, solely to the extent necessary to provide technical support services.

13)   The system is maintained on the ICT infrastructure of the Medical University of Lublin.

14)  Personal data of CMS administrative panel users is stored for the duration of their administrative privileges and subsequently for the period necessary to fulfill legal obligations or pursue potential claims.

15)   Analytical data is stored for the period necessary to achieve the purposes related to the maintenance, development, and improvement of the navigation system.

16)   Every person whose personal data is processed has the right to:
a) access their personal data,
b) rectify their personal data,
c) request deletion of their personal data in cases provided by law,
d) restrict processing,
e) object to processing,
f) lodge a complaint with the competent supervisory authority responsible for personal data protection.

17)   Providing personal data by CMS administrative panel users is voluntary; however, it is necessary for the use of the system’s administrative functionalities.

18)   The Controller does not make automated decisions concerning users, including decisions based on profiling.

19)   The current version of this Privacy Policy is available within the UMLUB navi application and on the websites of the Medical University of Lublin.