Privacy policy

In fulfilling the obligations of a personal data controller set out in Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the "General Data Protection Regulation" or "GDPR") (OJ EU L 119 of 4.5.2016), we inform you that the National Museum in Kraków has prepared the following information for the individuals whose data it processes. The purpose of this information provided by the National Museum in Kraków is to enable you to exercise the rights set out in the GDPR, in particular the right of access to data, the right to rectification of data, erasure of data, and the other rights set out in the GDPR.

Information on the processing of personal data by the National Museum in Kraków

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, Official Journal of the EU, L 119/1 of 4 May 2016 (hereinafter: the General Data Protection Regulation), the National Museum in Kraków, as the Controller of your personal data as a natural person (the data subject), provides the following information.

1. Details of the Controller: Cracovia Centrum Historii, [address], tel. [phone number], e-mail address: [e-mail address]
2. Your personal data will be processed for the purposes of: subscribing to the newsletter, performing concluded service or work contracts, pursuant to Art. 6(1)(b) of the GDPR; fulfilling legal obligations incumbent on the Controller, pursuant to Art. 6(1)(c) of the GDPR, for tax and accounting purposes; and arising from legitimate interests pursued by the Controller, pursuant to Art. 6(1)(f) of the GDPR, i.e. a) for the purpose of marketing the Controller's own services and products, b) for the purpose of establishing, defending and pursuing claims, c) for the purpose of compiling reports, analyses and statistics for the Controller's internal needs, which includes reporting, market research, planning the development of services, and building statistical models, d) for administrative purposes, and to ensure network and information security.
3. The recipients of your personal data are:
   • entities supporting the operational performance of the Agreement, such as: technical support of devices and products used to perform the Agreement, invoice handling, contact platform support, entities carrying out postal and courier activities,
   • entities providing advisory, consulting, audit, legal, tax and accounting assistance services to the Controller.

4. Personal data will be stored for the duration of the Agreement, and in the scope related to the defence or pursuit of claims, until the claims become time-barred. The Controller may store personal data for longer, but only for justified reasons, where the law permits such storage.
5. We also inform you that Cracovia Centrum Historii has appointed a Data Protection Officer, whom you may contact in matters concerning the protection and exercise of your rights regarding personal data. Contact e-mail for the Data Protection Officer: [DPO e-mail address]
6. With respect to your personal data, and subject to the scope of and exceptions arising from the GDPR or other legal provisions, you have the right to:
   • request access to your personal data from the Controller,
   • request the rectification of personal data from the Controller,
   • request the erasure of data,
   • request the restriction of data processing,
   • object to the processing of personal data,
   • data portability to the extent specified in Art. 20 of the GDPR,
   • lodge a complaint with the President of the Personal Data Protection Office (UODO) if you consider that the processing of your personal data infringes data protection regulations.

Providing the data is voluntary but necessary to achieve the purposes indicated above.