Information Notice for Individuals Covered by Video Surveillance Monitoring
Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR):
1. The Data Controller is the Polish History Museum in Warsaw, street address: Gwardii 1, 01-538 Warsaw, entered in the Register of Cultural Institutions maintained by the Minister of Culture and National Heritage under No. RIK 73/2006. You may contact the Controller in writing by traditional mail sent to our registered office address.
2. The Data Protection Officer (DPO) appointed by the Controller supervises the proper processing of personal data. The DPO can be contacted by e-mail at: [email protected] or by phone at +48 534 432 884.
3. Your personal data will be processed for the following purposes:
4. The processing of your data is necessary for compliance with a legal obligation to which the Controller is subject, pursuant to Article 6(1)(c) of the GDPR (based on the Museums Act, the regulation on protecting museum collections against fire, theft and other risks of destruction or loss, and the Act on the Protection of Persons and Property).
5. Recipients of your personal data include entities engaged by the Controller to perform activities requiring data processing (data processors). In accordance with applicable law, the Controller may transfer data to processors acting on its behalf under personal data processing agreements (e.g., IT service providers, security agencies), as well as to other entities authorized under applicable regulations (e.g., courts, law enforcement authorities) upon a legally justified request.
6. Your personal data is not transferred to third countries (i.e., outside the European Economic Area (EEA)) or to international organizations.
7. The CCTV monitoring system operates 24 hours a day, and recorded footage is stored on an electronic medium for no longer than 30 days. After 30 days, new recordings overwrite existing ones, unless there is a justified need to retain footage as evidence in preparatory proceedings conducted by the relevant authorities.
8. You have the right to access the content of your personal data and, subject to legal provisions, the right to request its erasure and restriction of processing.
9. You have the right to lodge a complaint with the supervisory authority responsible for personal data protection, namely the President of the Personal Data Protection Office (UODO).
10. By entering the Museum premises, you voluntarily provide your personal data to the Museum. If you do not wish your image to be recorded by the CCTV system, you should refrain from entering areas of the Museum covered by video surveillance.
11. Without your separate consent, your personal data will not be processed by automated means, including profiling.
12. Further information regarding the exercise of your rights described above can be obtained by contacting the Controller or the Data Protection Officer using the contact details specified in Sections 1 and 2.
13. The Controller makes every effort to ensure all physical, technical, and organizational measures necessary to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, use, or access, in accordance with all applicable legal requirements.
1. The Data Controller is the Polish History Museum in Warsaw, street address: Gwardii 1, 01-538 Warsaw, entered in the Register of Cultural Institutions maintained by the Minister of Culture and National Heritage under No. RIK 73/2006. You may contact the Controller in writing by traditional mail sent to our registered office address.
2. The Data Protection Officer (DPO) appointed by the Controller supervises the proper processing of personal data. The DPO can be contacted by e-mail at: [email protected] or by phone at +48 534 432 884.
3. Your personal data will be processed for the following purposes:
- ensuring the safety of persons present on the Museum premises;
- ensuring the protection of persons and property, including Museum property;
- safeguarding legally protected confidential information, including business secrets;
- ensuring the security of the processed personal data.
4. The processing of your data is necessary for compliance with a legal obligation to which the Controller is subject, pursuant to Article 6(1)(c) of the GDPR (based on the Museums Act, the regulation on protecting museum collections against fire, theft and other risks of destruction or loss, and the Act on the Protection of Persons and Property).
5. Recipients of your personal data include entities engaged by the Controller to perform activities requiring data processing (data processors). In accordance with applicable law, the Controller may transfer data to processors acting on its behalf under personal data processing agreements (e.g., IT service providers, security agencies), as well as to other entities authorized under applicable regulations (e.g., courts, law enforcement authorities) upon a legally justified request.
6. Your personal data is not transferred to third countries (i.e., outside the European Economic Area (EEA)) or to international organizations.
7. The CCTV monitoring system operates 24 hours a day, and recorded footage is stored on an electronic medium for no longer than 30 days. After 30 days, new recordings overwrite existing ones, unless there is a justified need to retain footage as evidence in preparatory proceedings conducted by the relevant authorities.
8. You have the right to access the content of your personal data and, subject to legal provisions, the right to request its erasure and restriction of processing.
9. You have the right to lodge a complaint with the supervisory authority responsible for personal data protection, namely the President of the Personal Data Protection Office (UODO).
10. By entering the Museum premises, you voluntarily provide your personal data to the Museum. If you do not wish your image to be recorded by the CCTV system, you should refrain from entering areas of the Museum covered by video surveillance.
11. Without your separate consent, your personal data will not be processed by automated means, including profiling.
12. Further information regarding the exercise of your rights described above can be obtained by contacting the Controller or the Data Protection Officer using the contact details specified in Sections 1 and 2.
13. The Controller makes every effort to ensure all physical, technical, and organizational measures necessary to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, use, or access, in accordance with all applicable legal requirements.