Information Clause

INFORMATION CLAUSE

1. The duties of your personal data controller shall be exercised by the Museum of Modern Art having its registered office in Warsaw at ul. Pańska 3, 00-124 Warsaw, registered in the Register of Institutions of Culture of the Capital City of Warsaw under the number: RIK/1/2023, hereinafter referred to as “the Museum”. You can contact us by:
a) mail: to the address of the registered office of the Museum
b) e-mail to: iod@artmuseum.pl
2. The Controller has appointed a data protection officer, e-mail iod@artmuseum.pl. Data subjects can contact the data protection officer in all matters connected with their personal data processing and exercising their rights under the GDPR.
3. The Museum will process your personal data in connection with execution of rights and obligations under this agreement, including the issuance of a billing document for the service provided.
4. Your personal data will be processed on the basis of the following regulations:
- Article 6 item 1 c) of the GDPR for the purposes of execution of the Museum’s legal obligations under generally applicable regulations of the law, including in particular tax and social insurance laws
- Article 6 item 1 f) of the GDPR for the purposes of the Museum’s legitimate interest which covers in particular (i) seeking the Museum’s claims and defending its rights, if any
5. The recipients of your personal data may be: entities providing email hosting services and other IT service providers, the Museum's contractors to whom it has contracted the performance of all or part of the services in connection with the performance of the contract concluded with the contractor, including those providing transportation services, entities providing accounting, auditing or consulting services, including legal and tax services. Your personal data may also be made available through the procedure of access to public information (as long as the terms and conditions of the contract may constitute public information within the meaning of the regulations on access to public information), and tax authorities (the Tax Office).
6. Your personal data will be stored for the period envisaged in the regulations of the law which is necessary for the purposes of their storage.
7. In connection with your personal data processing, you have the following rights:
a) the right to access your personal data and receive their copies,
b) the right to rectify (amend) your data,
c) the right to have your data removed when the data are not processed in order to meet a legal obligation or as part of exercise of public authority,
d) the right to restriction of data processing,
e) the right to data portability,
f) the right to complain with the President of the Data Protection Office,
g) if data are processed on the basis of consent - the right to revoke the consent at any time with no effect on the legality of any processing done on the basis of the consent before its withdrawal;
8. Provision of personal data is voluntary, however it is necessary for conclusion and execution of the application.
9. Your personal data will be not processed in an automated manner, including by profiling.
10. Pursuant to Article 21 item 4 of the GDPR, pleased be advised that you have the right to object to your personal data processing. The objection needs to be submitted with the data protection officer whose contact details have been specified in point 2 above. Pursuant to Article 21 item 1 of the GDPR, when submitting the objection, you need to specify its causes connected with your specific situation.

[1] GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (O.J. of the EU L 119 of 04.05.2016, page 1).