Museum open at 12:00pm
Cinema is closed now
Museum open at 12:00pm
Cinema is closed now
Information Clause
concerning the processing of personal data of non-entrepreneurs who have concluded a contract to perform specific work with the Museum
Pursuant to the obligation under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR), we inform you that:
1. The controller of your personal data is the Museum of Modern Art in Warsaw, address: ul. Pańska 3, 00-124 Warsaw, entered in
the register of cultural institutions of the Capital City of Warsaw under No. RIK/1/2023, National Business Register Number [REGON]: 140187435, NIP (Tax Identification Number): 525-234-18-32 (hereinafter also ‘Controller’ or ‘Museum’). In matters relating to personal data protection, you can contact the Museum:
a) by post: to the address of the Museum's registered office,
b) by e-mail: iod@artMuseum.pl.
2. The Data Controller has appointed a Data Protection Officer who can be contacted by email at:iod@artmuseum.pl.
3. Personal data is processed for the purpose of establishing and executing a contract to perform specific work, in which case the basis for the processing of personal data is Article 6(1)(b) of the GDPR.
4. Personal data may also be processed on the basis of:
a) Article 6(1)(f) of the GDPR, i.e. when the processing is necessary for the purposes of the legitimate interests pursued by
the Controller or by a third party, such as the establishment, exercise or defence of legal claims in connection with the conclusion and performance of a contract to perform specific work concluded with the Museum,
a) Article 6(1)(a) of the GDPR, if you have given your consent to the processing of specific categories of personal data for a specific purpose; this may apply in particular to the processing of personal data in the form of images in connection with the documentation of an event through photographs and/or video or audio-video recordings,
b) Article 6(1)(c) of the GDPR, i.e. where processing is necessary for compliance with a legal obligation to which the Museum,
as the data controller, is subject, including in respect of archiving obligations concerning the retention of documents for tax purposes, archiving documentation related to the conclusion and performance of the contract pursuant to the provisions on the national archival asset and archives, as well as obligations arising from social security regulations – for the purpose of reporting the conclusion of the specific-task contract to the Social Insurance Institution (ZUS).
5. The Museum obtains personal data directly from the data subjects as a matter of principle.
6. The provision of personal data is voluntary, but necessary for the conclusion and performance of the contract to perform specific work, as well as for the future labelling of the work. If you do not provide your data, it may not be possible to conclude and perform
the Contract, and if you refuse to provide your data for the purpose of labelling the work, the work may be made available anonymously. Where personal data is processed on the basis of consent, as a general rule, no consequences are foreseen for failure to provide such data.
7. The recipients of your personal data may include: providers of email hosting services and other IT service providers, contractors of
the Museum to whom it has outsourced the performance of all or part of the services in connection with the execution of the specific-task contract, as well as entities providing accounting, auditing, or advisory services, including legal and tax advisory. Your personal data may also be disclosed under the access to public information procedure (if the terms and conditions of the agreement can constitute public information within the meaning of the regulations on access to public information), and in addition, the personal data of counterparties who are natural persons may be disclosed to an unlimited circle of addressees via the Internet through
the Central Register of Agreements of the Capital City of Warsaw. In connection with the potential publication of information concerning a person or their image, the recipients thereof may also include social networking service providers where the Museum maintains its social media profiles (Facebook, Instagram, LinkedIn, X), visitors to the websites where the prepared materials will be available, including the Museum’s website and social media channels operated by the Museum, as well as recipients of other materials.
8. Your personal data will be processed by the Museum for the duration of the contract and may also be processed subsequently, i.e. for the period necessary for the establishment, exercise, or defence of legal claims in accordance with the applicable provisions of law (i.e. 3 or 6 years), or in connection with the necessity to comply with legal obligations incumbent on the Museum as the data controller,
in particular the archiving obligation concerning documents stored for tax and accounting purposes (i.e. for a period of 5 years from the end of the year in which the tax was paid), whichever period is longer. Separate regulations may also provide for a longer period of document storage, including personal data, for selected categories of cases. This may concern, in particular, documentation
of archival value, where data may be stored for a longer period in the public interest in accordance with the provisions on archiving. This processing is carried out in accordance with the document classification system applicable at the Museum, i.e. as a general rule, for a period of 25 years, and in strictly defined cases, perpetually.
9. You have the right to: request access to the personal data you have provided, rectify your personal data, request the erasure of your personal data, and restrict the processing of your personal data.
10. If your data is processed on the basis of point 3 or 4(b) above, you also have the right to personal data portability, provided that
the processing is carried out by automated means.
11. If your personal data is processed on the basis of point 4(a) above, you also have the right to object to the processing of personal data on grounds relating to your particular situation.
12. If your data is processed on the basis of point 4(b) above, you also have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
13. In addition, you have the right to lodge a complaint with the competent supervisory authority, which in Poland is the President of
the Office for Personal Data Protection.
14. No decisions in respect of the provided personal data will be taken by automated means, including profiling.
15. In the case of publication of materials containing information concerning a person or their image on social networking services (Facebook, Instagram, LinkedIn, X), personal data may be transferred to the USA. This takes place on the basis of the European Commission’s adequacy decision (the EU-US Data Privacy Framework).
1. The controller of your personal data is the Museum of Modern Art in Warsaw, address: ul. Pańska 3, 00-124 Warsaw, entered in
the register of cultural institutions of the Capital City of Warsaw under No. RIK/1/2023, National Business Register Number [REGON]: 140187435, NIP (Tax Identification Number): 525-234-18-32 (hereinafter also ‘Controller’ or ‘Museum’). In matters relating to personal data protection, you can contact the Museum:
a) by post: to the address of the Museum's registered office,
b) by e-mail: iod@artMuseum.pl.
2. The Data Controller has appointed a Data Protection Officer who can be contacted by email at:iod@artmuseum.pl.
3. Personal data is processed for the purpose of establishing and executing a contract to perform specific work, in which case the basis for the processing of personal data is Article 6(1)(b) of the GDPR.
4. Personal data may also be processed on the basis of:
a) Article 6(1)(f) of the GDPR, i.e. when the processing is necessary for the purposes of the legitimate interests pursued by
the Controller or by a third party, such as the establishment, exercise or defence of legal claims in connection with the conclusion and performance of a contract to perform specific work concluded with the Museum,
a) Article 6(1)(a) of the GDPR, if you have given your consent to the processing of specific categories of personal data for a specific purpose; this may apply in particular to the processing of personal data in the form of images in connection with the documentation of an event through photographs and/or video or audio-video recordings,
b) Article 6(1)(c) of the GDPR, i.e. where processing is necessary for compliance with a legal obligation to which the Museum,
as the data controller, is subject, including in respect of archiving obligations concerning the retention of documents for tax purposes, archiving documentation related to the conclusion and performance of the contract pursuant to the provisions on the national archival asset and archives, as well as obligations arising from social security regulations – for the purpose of reporting the conclusion of the specific-task contract to the Social Insurance Institution (ZUS).
5. The Museum obtains personal data directly from the data subjects as a matter of principle.
6. The provision of personal data is voluntary, but necessary for the conclusion and performance of the contract to perform specific work, as well as for the future labelling of the work. If you do not provide your data, it may not be possible to conclude and perform
the Contract, and if you refuse to provide your data for the purpose of labelling the work, the work may be made available anonymously. Where personal data is processed on the basis of consent, as a general rule, no consequences are foreseen for failure to provide such data.
7. The recipients of your personal data may include: providers of email hosting services and other IT service providers, contractors of
the Museum to whom it has outsourced the performance of all or part of the services in connection with the execution of the specific-task contract, as well as entities providing accounting, auditing, or advisory services, including legal and tax advisory. Your personal data may also be disclosed under the access to public information procedure (if the terms and conditions of the agreement can constitute public information within the meaning of the regulations on access to public information), and in addition, the personal data of counterparties who are natural persons may be disclosed to an unlimited circle of addressees via the Internet through
the Central Register of Agreements of the Capital City of Warsaw. In connection with the potential publication of information concerning a person or their image, the recipients thereof may also include social networking service providers where the Museum maintains its social media profiles (Facebook, Instagram, LinkedIn, X), visitors to the websites where the prepared materials will be available, including the Museum’s website and social media channels operated by the Museum, as well as recipients of other materials.
8. Your personal data will be processed by the Museum for the duration of the contract and may also be processed subsequently, i.e. for the period necessary for the establishment, exercise, or defence of legal claims in accordance with the applicable provisions of law (i.e. 3 or 6 years), or in connection with the necessity to comply with legal obligations incumbent on the Museum as the data controller,
in particular the archiving obligation concerning documents stored for tax and accounting purposes (i.e. for a period of 5 years from the end of the year in which the tax was paid), whichever period is longer. Separate regulations may also provide for a longer period of document storage, including personal data, for selected categories of cases. This may concern, in particular, documentation
of archival value, where data may be stored for a longer period in the public interest in accordance with the provisions on archiving. This processing is carried out in accordance with the document classification system applicable at the Museum, i.e. as a general rule, for a period of 25 years, and in strictly defined cases, perpetually.
9. You have the right to: request access to the personal data you have provided, rectify your personal data, request the erasure of your personal data, and restrict the processing of your personal data.
10. If your data is processed on the basis of point 3 or 4(b) above, you also have the right to personal data portability, provided that
the processing is carried out by automated means.
11. If your personal data is processed on the basis of point 4(a) above, you also have the right to object to the processing of personal data on grounds relating to your particular situation.
12. If your data is processed on the basis of point 4(b) above, you also have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
13. In addition, you have the right to lodge a complaint with the competent supervisory authority, which in Poland is the President of
the Office for Personal Data Protection.
14. No decisions in respect of the provided personal data will be taken by automated means, including profiling.
15. In the case of publication of materials containing information concerning a person or their image on social networking services (Facebook, Instagram, LinkedIn, X), personal data may be transferred to the USA. This takes place on the basis of the European Commission’s adequacy decision (the EU-US Data Privacy Framework).