GDPR
1. Introduction
We are pleased that you have visited our website. We want you to feel comfortable on it, which is why we have prepared this cookie policy (i.e. related to the popular ‘cookies’) for you.
It will help you to find out, among other things:
[2] Telecommunications Act of 16 July 2004 (Journal of Laws of 2004 no. 171, item 1800, as amended).
It will help you to find out, among other things:
- What are cookies?
- Which cookies do we use and why?
- How do they affect your privacy?
- What rights you have under the GDPR1 and the Polish Telecommunications Act2.
[2] Telecommunications Act of 16 July 2004 (Journal of Laws of 2004 no. 171, item 1800, as amended).
What are cookies?
- In simplest terms, cookies are small text files that are stored on your computer or smartphone when you view our website. There are different types of cookies. We have divided them for you into two groups:
- those that are essential for the use of our website, and
- other cookies.
- Cookies that are essential for our website are used, among other things, for ensuring its stability (they measure traffic, protecting us against congestion), remembering your selected privacy preferences, filling in online forms provided by us, saving the contents of your shopping cart, and for monitor your login status. We use these cookies by default, i.e. we store them on your computer or smartphone when you access our website (pursuant to Article 173(3) of the Telecommunications Act).
- We only use the other cookies if you have given us your consent to do so. You will read more about them in the next section of our Policy.
- We have implemented the reCAPTCHA v3 function, which is subject to Google Privacy Policy and Terms of Use. reCAPTCHA is only used to combat spam and abuse on the site.
3. What cookies do we use?
- Essential cookies - they ensure the correct functioning of our website and its basic functions. Without them, you will not be able to use our online services properly. These cookies are exempt from the requirement to obtain your consent (Article 173(3) of the Telecommunications Act).
- Server logs - We use proprietary cookies to ensure the correct operation of the website, in particular the operation of your account. The use of the website involves sending requests to the server on which the website is stored. Each request made to the server is recorded in the server logs.
The logs include, among others, your IP address, the date and time of the server, information about your browser and the operating system you are using. The logs are saved and stored on the server.
The data stored in the server logs are not associated with specific users of the website and are not used by us to identify you.
The server logs are only ancillary material for the administration of the site and their contents are not disclosed to anyone other than those authorised to administer the server.
- Server logs - We use proprietary cookies to ensure the correct operation of the website, in particular the operation of your account. The use of the website involves sending requests to the server on which the website is stored. Each request made to the server is recorded in the server logs.
- Analytical cookies - our site uses cookies furnished by the name of the analytical cookie provider. Analytical cookies allow us to track the number and sources of visits so that we can measure and improve the performance of our website. This type of cookie helps us understand which pages are most or least visited and how visitors navigate our website. If you refuse to store analytical cookies on your computer or smartphone, your visit will not be included in our statistics, but at the same time it will not restrict any functionality on our website for you.
- Google Analytics - We use them for analysing website traffic. This tool does not collect any directly personally identifiable data. In particular, we analyse: time spent on the website, transitions between pages and the source of traffic. If you disable Google Analytics, this will prevent us from carrying out effective analytical activities. Google LLC cookies relating to the Google Analytics service are used for this purpose.
- Marketing cookies - we use these cookies to personalise the content that is displayed to you. Marketing cookies may be used in our advertising campaigns that are run on third party websites. If you consent to the use of marketing cookies, you may receive information about the websites of our trusted partners where you have responded to our advertising. If you opt out of marketing cookies, you will be shown generic and non-personalised adverts. As with analytical cookies, if you refuse to store marketing cookies on your computer or smartphone, this will not restrict any functionality on our website for you.
- GetResponse Sp. z o.o. - Purpose: use of the mailing system where your personal data are processed if you have subscribed to the newsletter of the Polish History Museum.
- Facebook Pixel, Facebook Inc., 1601 S. California Ave. Palo Alto, CA 94304, USA. - Purpose: Marketing of our own products or services including personalised advertising on Facebook. This involves the use of Facebook cookies.
4. Consent to the installation of cookies
- When you visit our website, a banner will be displayed to inform you that it uses cookies. If you select the ‘Allow all’ option, this will mean that you accept all cookies that are placed on our website and you confirm that you have read the information about cookies and the purposes of their use, as well as the cases in which the data collected with the help of cookies are transferred to our partners.
- Please note that your consent is not required for essential cookies, as cookies of this kind ensure the full and uninterrupted functioning of our website. These cookies are exempt from the requirement to obtain your consent pursuant to Article 173(3) of the Telecommunications Act.
5. Lack of consent to the installation of cookies
If you do not want our cookies to be stored on your device, you can select the ‘Reject’ option. By selecting it, you will reject all but the technically necessary cookies that we use on our website.
6. Modifying your cookie settings
You can manage your cookie preferences in detail by selecting the ‘Show details’ box on the cookie banner displayed to you.
7. Personal data
As some of the cookies we use constitute personal data we want you to know your rights under the GDPR:
- The controller of your personal data, i.e. the entity that decides on the purposes and methods of data processing, is the Polish History Museum in Warsaw, ul. Gwardii 1, 01-538 Warsaw, Poland, entered in the Register of Cultural Institutions kept by the Minister of Culture and National Heritage under No. RIK 73/2006. You can contact the controller in writing, by surface mail, writing to the address of our registered office;
- The Data Protection Officer appointed by the controller supervises the correctness of personal data processing. You can contact the Data Protection Officer by surface mail sent to: ul. Gwardii 1, 01-538 Warsaw, Poland, via e-mail to: [email protected] or by telephone (+48) 534 432 884;
- Your personal data will be processed in order to provide the basic functions of our website. If you have given the appropriate (voluntary) consent, your data will also be processed to provide you with services, offers and communications tailored to your preferences and to analyse website traffic and provide social features (depending on the preferences you have indicated);
- The recipients of your personal data are the entities to which the controller subcontracts the performance of activities that require data processing (processors). In accordance with the applicable law, the controller may transfer your data to entities processing them on its behalf on the basis of personal data processing outsourcing agreements (e.g. to consultants, auditors and IT service providers) and to other entities authorised on the basis of applicable regulations (e.g. courts and law enforcement agencies) - on the basis of a request with a legal basis;
- Personal data will in principle not be transferred outside the European Economic Area (EEA). However, given the services by our subcontractors provided to support ICT services and IT infrastructure, the Museum may outsource certain activities or IT tasks to recognised subcontractors operating outside the EEA, which may result in the transfer of your data outside the EEA. In accordance with the European Commission’s decision, recipient countries outside the EEA provide an adequate level of personal data protection in accordance with EEA standards. In order to ensure an adequate level of this protection, for recipients in the territory of countries not covered by the European Commission’s decision the data exporter (controller or processor acting on behalf of the controller) shall enter into contracts with recipients of personal data which are based on the standard contractual clauses issued by the European Commission in accordance with Article 46(2)(c) of the GDPR;
- The data will be stored for the period necessary to fulfil the purposes specified above or in the case of consent, but no longer than until the withdrawal of the consent given, and thereafter until the statute of limitations for possible claims or until the expiry of data retention obligations under the law;
- You have the right of access the contents of your personal data and - subject to the law - the right to data rectification, data erasure, restriction of data processing, as well as the right to data portability and the right to object to data processing;
- Where your personal data are processed on the basis of your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal;
- As your personal data are processed on the basis of the controller’s legitimate interest, the controller will no longer process them for the indicated purpose if you object to such processing. You have the right to object at any time, free of charge, to the processing of personal data concerning you when their processing is based on a legitimate interest and the objection is justified by the particular situation in which you find yourself;
- You have the right to lodge a complaint with the supervisory authority in charge of personal data protection, i.e. the President of the Polish Personal Data Protection Office;
- The provision of data is voluntary, yet necessary for the provision of services;
- Your personal data will not be used for the purpose of automated decision-making (including in the form of profiling) in such a way that any decisions could be made as a result of such automated processing that would produce legal effects or would similarly have any effect on you;
- You can obtain more information on how to exercise your rights, as set out above, by contacting the controller or the Data Protection Officer as set out in paras. 1 and 2;
- The controller shall make every effort to ensure all measures of physical, technical and organisational protection of personal data against accidental or intentional destruction, loss, alteration, unauthorised disclosure, use or access, in accordance with all applicable legislation.
8. Withdrawl of consent
Please note that you can change the consents you have given at any time by clicking on the black-and white-icon representing a ‘paper clip’ located in the bottom left corner of our website.
9. Chnges to the cookie policy
We reserve the right to change this cookie policy at any time. Any changes to it will be published on www.muzhp.pl/polityka-prywatnosci.