I. Information clause
According to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”), we hereby provide the following information:
1. Personal data controller
The local government cultural institution Gdynia City Museum entered in the register of cultural institutions kept by the Municipality of Gdynia under number 2 is the controller of your personal data. Its seat is in Gdynia (81-374) in 1 Zawiszy Czarnego Street, email address: firstname.lastname@example.org. (Hereinafter referred to as the “Museum”)
The Museum has appointed a Data Protection Officer who can be contacted by post at the Museum’s address or at the email address: email@example.com
2. Personal data processing purposes
Your personal data, especially full name, residential address, user’s address, e-mail address, telephone number, personal identity number (PESEL) are processed for the purpose of:
- concluding and execution of the agreement concluded with the Museum,
- running the website, especially the registration process,
- filling in the contact form,
- establishment and proper completion of the service provided online and the completion of the orders placed by the users, including the orders of the products offered by the online shop,
- marketing and promotion of the services,
- fulfilling the legal obligations of the Museum resulting from the applicable law,
- claim assertion and defence against potential claims connected with the concluded agreement,
- pursuing the archive objectives in the public interest as well as the research or history objectives and statistical objectives.
The legal basis of the processing is Art. 6 section 1 letter a), b), c) and f) of GDPR.
We have the right to process your data for our legitimate interests, for collecting, taking inventory, cataloguing, research and providing access to the resources.
3. Transfer of personal data
In connection with processing your personal data, the Museum may transfer it to third parties for a proper completion of various services for the Museum by these entities (e.g. Providers of IT services, educational services, security services, services connected with claim assertion and investigating the circumstances of unlawful use of the services provided online) as well as to public authorities, to fulfill the obligations resulting from legal regulations.
4. Personal data retention period
Your data will be retained for the period required for observing the applicable legal regulations. During the term of the agreement and after its termination, for a period which is necessary for securing claims assertions and defense from potential claims and fulfilling the obligations resulting from the applicable legal regulations. For the period which is necessary for meeting the objectives for which it was collected from the users.
5. Your rights
A person whose personal data is processed is entitled to access to his or her personal data, to their correction, deleting, transfer, limiting its processing and objection to its processing.
You can exercise these rights by reporting it to the Museum.
You are also entitled to filing a complaint with the supervisory body responsible for personal data protection, i.e. President of the Personal Data Protection Office.
Providing personal data is voluntary but it is necessary for concluding the agreement and its performance as well as fulfilling the obligations resulting from legal regulations.
If the personal data was provided based on your consent, providing the data was voluntary however, not providing it makes it impossible to use the service. You have the right to withdraw your consent at any moment, with no impact on the lawfulness of the processing which was conducted based on the consent before it was withdrawn.
The internal personal data and the http://www.gdyniawsieci.pl website (hereinafter referred to as http://www.gdyniawsieci.pl) user files are controlled by the Gdynia City Museum with the seat in Gdynia in 1 Zawiszy Czarnego Street (hereinafter referred to as the “Museum”) entered into the Cultural Institution Register of the Gdynia Municipality under no. 2. email address: firstname.lastname@example.org.
Privacy protection, including personal data of the users of the Website is the Museum’s priority.
The Museum uses its best efforts to protect the interest of data subjects and it especially guarantees that the data is processed in accordance with the law, diligently and in a way which is transparent to the data subjects, that the data is collected for specific, clear and legally justified purposes and is not further processed in ways which are not in accord with purposes and that it is done adequately and appropriately and that the processing is limited to what is necessary for the purposes for which it is processed, that it is correct and updated if necessary, that it is kept in a form which makes it possible to identify the data subject for a period of time which is not longer than necessary for the purposes for which the data is processed. Personal data can be kept for a longer time, if it is processed solely for archive purposes for public interest, for academic or historical research or for statistical purposes based on Art. 89 section 1 of the regulation, with the stipulation that proper technical and organisational measures required based on this regulation will be introduced to protect the rights and liberties of the data subjects and it will be processed in a way which provides proper personal data safety, including protection against prohibited or unlawful processing or accidental loss, damage or destruction, with proper technical and organisational measures.
Each data subject is entitled to requesting he data controller to provide access to the personal data of the data subject, their correction, deletion or limiting its use or the right to oppose to its processing as well as the right to withdraw the agreement at any time and the right to file a complaint with the supervisory body.
According to the Regulation (EU) 2016/679 of the European Parliament and Council of 27th 2016, the Museum may entrust third parties with the processing of personal data, especially the ones who provide hosting services for the Website.
The Museum has the right and obligation to provide information on the Website’s users’ personal data it has to state authorities which are entitled to receiving it, based on separate legal regulations, for the purpose of the proceedings they conduct.