Obligation to provide information concerning personal data protection
Pursuant to Article 13, paras. 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter the ‘GDPR’), we wish to inform you that:
a) the controller of your personal data shall be the Polish History Museum seated in Warsaw, ul. Mokotowska 33/35, 00-560 Warsaw, entered into the register of cultural institutions kept by the Ministry of Culture and National Heritage under the number RIK 73/2006, holding the taxpayer identification number NIP 701-00-15-596 and the statistical number REGON 140530761;
b) the data protection inspector Paweł Sidor can be reached by telephone at (+48) 534 432 884, or e-mail at daneosobowe@muzhp.pl;
c) your personal data shall be processed for the following purposes:
- marketing activities using means of electronic communication pursuant to Article 6(1)(a) of the GDPR;
- recruitment pursuant to Article 6(1)(a) and Article 6(1)(b) of the GDPR;
- entering into and performance of an agreement pursuant to Article 6(1)(b) of the GDPR;
- performing the controller’s obligations stemming from legislation, including accounting and financial reporting as well as document archiving pursuant to Article 6(1)(c) of the GDPR;
- providing information to authorised bodies pursuant to Article 6(1)(c);
- delivering public procurement processes pursuant to Article 6(1)(c) of the GDPR,
- performing administrative tasks pursuant to Article 6(1)(c) of the GDPR;
- performing public-interest tasks in pursuant to Article 6(1)(e) of the GDPR,
- managing the contact form pursuant to Article 6(1)(f) of the GDPR;
- protecting against or pursuing claims pursuant to Article 6(1)(f) of the GDPR, and
- ensuring public security and order protection as well as person and property protection pursuant to Article 6(1)(f) of the GDPR;
d) the recipients of your personal data shall be entities authorised for the said purpose to process them under a data entrusting agreement and entities authorised under relevant legislation;
e) your personal data shall not be transferred to a third state/an international organisation;
f) your personal data shall be stored until withdrawal of your consent, termination of cooperation or as prescribed by legislation concerning data archiving;
g) you shall have the right to access and rectify your data, to remove them and limit their processing, to transfer them, to withdraw your consent at any time without affecting the legality of the processing (if the basis for the processing is legal) performed under your consent clause before its withdrawal;
h) you shall have the right to lodge an objection under Article 21 of the GDPR;
i) you shall have the right to file a complaint to a supervisory body, should you conclude that the processing of your personal data infringes on the provisions of the General Data Protection Regulation or national legislation;
j) the provision of your personal data shall be voluntary yet indispensable for achieving the abovementioned objectives, and
k) your data shall not be processed in any automated way, including in the form of profiling.
a) the controller of your personal data shall be the Polish History Museum seated in Warsaw, ul. Mokotowska 33/35, 00-560 Warsaw, entered into the register of cultural institutions kept by the Ministry of Culture and National Heritage under the number RIK 73/2006, holding the taxpayer identification number NIP 701-00-15-596 and the statistical number REGON 140530761;
b) the data protection inspector Paweł Sidor can be reached by telephone at (+48) 534 432 884, or e-mail at daneosobowe@muzhp.pl;
c) your personal data shall be processed for the following purposes:
- marketing activities using means of electronic communication pursuant to Article 6(1)(a) of the GDPR;
- recruitment pursuant to Article 6(1)(a) and Article 6(1)(b) of the GDPR;
- entering into and performance of an agreement pursuant to Article 6(1)(b) of the GDPR;
- performing the controller’s obligations stemming from legislation, including accounting and financial reporting as well as document archiving pursuant to Article 6(1)(c) of the GDPR;
- providing information to authorised bodies pursuant to Article 6(1)(c);
- delivering public procurement processes pursuant to Article 6(1)(c) of the GDPR,
- performing administrative tasks pursuant to Article 6(1)(c) of the GDPR;
- performing public-interest tasks in pursuant to Article 6(1)(e) of the GDPR,
- managing the contact form pursuant to Article 6(1)(f) of the GDPR;
- protecting against or pursuing claims pursuant to Article 6(1)(f) of the GDPR, and
- ensuring public security and order protection as well as person and property protection pursuant to Article 6(1)(f) of the GDPR;
d) the recipients of your personal data shall be entities authorised for the said purpose to process them under a data entrusting agreement and entities authorised under relevant legislation;
e) your personal data shall not be transferred to a third state/an international organisation;
f) your personal data shall be stored until withdrawal of your consent, termination of cooperation or as prescribed by legislation concerning data archiving;
g) you shall have the right to access and rectify your data, to remove them and limit their processing, to transfer them, to withdraw your consent at any time without affecting the legality of the processing (if the basis for the processing is legal) performed under your consent clause before its withdrawal;
h) you shall have the right to lodge an objection under Article 21 of the GDPR;
i) you shall have the right to file a complaint to a supervisory body, should you conclude that the processing of your personal data infringes on the provisions of the General Data Protection Regulation or national legislation;
j) the provision of your personal data shall be voluntary yet indispensable for achieving the abovementioned objectives, and
k) your data shall not be processed in any automated way, including in the form of profiling.