Privacy policy

Personal data, the rules for the processing of which are defined in this document, are controlled by the Museum of Modern Art in Warsaw, 00-124, PaƄska 3, NIP tax id number: 525-234-18-32, REGON: 140187435.

In order to contact us regarding personal data, send an e-mail to the Data Protection Supervisor: or a letter addressed to our office.
Our Privacy Policy contains the most important information on the rules of personal data processing in our institution. It defines the groups of people whose data we collect and explains why we collect them, what is the legal basis for that and how long we store them. It also states the rights of people whose data we process.
Our aim is for all our actions regarding personal data to be legal and based on a respectful approach towards privacy and the autonomy of the people it refers to.

Where and how data is processed

Most of the data is stored in electronic form: primarily on a server we rent, but also on office computers, portable discs and phones. Our team and parties the Museum cooperates with process data with digital tools: email and file storage cloud. Some of the data is stored in the form of printed documents.

Who is entrusted with data

Personal data is processed by parties we cooperate with on a long-term basis who are responsible, among other things, for the Museum's IT maintenance.
Those parties are bound by entrustment agreements and are under the same obligation to protect personal data privacy as we are. In some cases we hand over data to other parties (for instance ones we work with while organizing training or other events). In such cases, we always inform the participants beforehand, for instance during registration. When using traditional mail, we also hand over data to mail companies (Poczta Polska and other companies operating according to postal law) which process it according to the law, entrustment agreements and service provider regulations.

Legal rights of people whose data we process

Everyone whose data is processed by the Museum has the right to access its content, the right to receive a copy of the data, the right to request its correction, and - in certain cases - the right to erase it or restrict its processing. We care about making the execution of your rights regarding the data we process as simple as possible. However, as a data administrator, we need to be sure we will not share your data with unauthorized parties. That is why, if we have doubts as to whether the person asking for access to data or its erasure is in fact the person whose data is processed, we may ask them to provide additional information.
If you think that your data was used inappropriately, you can file a complaint to the director of the national office for personal data protection. However, if you notice a problem, please let us know too. We do everything we can to make sure your data is protected. If we make a mistake, we would like to fix it as soon as possible.

Whose data is processed and how

When you use our websites, we collect only the data necessary to manage the sites, ensure the efficiency of the functionalities they offer, and analyze the effectiveness of our communication.
Our tool for generating and analyzing site visitor statistics uses cookies to collect: the address and type of device that makes the connection, screen resolution, type of operating system, the name of the domain the user enters our site from, location data (country, city), and which content on our site was visited by the user.

Newsletter subscriber data

We process the email addresses of the subscribers to the Museum's newsletter and specific mailing lists for the purpose of sending the requested information, based on the interested person's consent. Providing this data is voluntary, but it is necessary to receive the emails. We do not track clicks in our mailings, which means we do not check who opens which links included in the emails. However, in the case of our newsletter, we do track the loading of images included in it, to have a general idea as to how many people read it. But we analyze the data collectively, and not as the activity of particular recipients. You can unsubscribe from the list at any time by clicking the unsubscribe link at the bottom of the email. That is where you will also find a link that will allow you to stop receiving any emails from us.

Data of survey respondents

We like to get to know the opinions of people we work for. That is why, from time to time, we publish surveys in which we ask, for example, about your perceptions of the Museum. Such surveys do not collect any additional data (such as IP addresses). Please do not include any personal data in our surveys. However, if you decide to do so, we will process it based on our legitimate interest for archiving purposes for the duration of the Museum's operations. If you would like us to erase it sooner, you can file a complaint to:

Data of public event participants

When we organize open, public events, we do not ask for the participants’ personal data. In case of events that require registration, we usually ask for your first and last name, email address and phone number, unless the event requires collecting additional information. In such cases providing your data is voluntary, but it is necessary to register for the event. We process the data for the purpose of organizing the event, for promotional and information purposes, as well as for the purpose of financial reporting concerning, for instance, educational programs.
After the event, we process the data based on our legitimate interest for the purpose of relations management. We process the data of participants who qualify for an event that requires registration for two years after the end of the calendar year. The remaining data is erased promptly after the event is over, but no later than six months after the end of the calendar year in which it took place. If you would like us to erase it sooner, you can file a complaint to If an event is organized with the financial support of grant providers who require us to store the documentation for a longer time, we will inform participants about it before they sign up for the event. When organizing certain events we will also ask for your consent to receive information about other, similar initiatives. A person who gives such consent has the right to withdraw it at any time, as well as to require the transfer of their data. If they do not do so, we will store their data for the duration of the Museum's operations.

Data of media professionals

We process the personal data of media professionals (journalists, publishers, etc.) obtained directly from them, from their editorial offices or from the internet. The data we process may include their first and last name, gender, email address, phone number, office address, history of interactions and history of publications. We process the data based on our legitimate interest for the purpose of informing about the Museum's activities and managing our relations.
The data is processed for the duration of the Museum's operations. If you do not wish to receive our press releases, you can object to the processing of your data. If you wish to do so, or have additional questions, please email us at

Data of people using private communication channels

The personal data of people we contact via email, phone, text or mail is processed based on justifiable interest, for the purpose of managing correspondence, for purposes issuing from the contents of the correspondence, or for the purpose of contacting them in the future. This data may include first and last name, address, email address, phone number and possibly other information included in the correspondence. Providing this data is voluntary. The data is processed for the purposes of archiving and managing relations for the duration of the Museum's operations, with the exception of sensitive data, which is erased immediately after the particular matter is closed.

Data of people interacting with the Museum via social networks

Facebook and Twitter are the administrators of their users’ personal data and process it according to their own regulations. When you interact with us via Facebook or Twitter (that includes liking or following our page, reacting to our posts, sharing or retweeting, commenting, sending private messages), the Museum also becomes the administrator of your data. Data such as your first and last name or nickname, public profile and other information we receive via direct messages or comments is processed based on our legitimate interest, for the purpose of replying to comments and messages, staying in touch with people who interact with us, and analyzing the effectiveness of our communications. Your interactions with us on Facebook are by principal not connected with information provided to us via other channels (such as email), unless the circumstances suggest it (for instance if you send us a Facebook message in which you provide your email address and ask us to contact you). We will not share your personal data with anyone. However, please remember that if you use Facebook or Twitter, those companies have access to all of your information as site administrators. If you would like for your data to be processed according to our Privacy Policy, we encourage you to contact us via channels other than social media. If you write us an email, for instance, we have control over what happens to your information and who has access to it. You also have the possibility encrypt it.

Cookie files

Our websites use text files commonly known as cookies, which are necessary for the maintenance of our sites and the use of its functionalities. We do not use cookies to track our users’ navigation. We also do not include third-party cookies on our websites. Sites available in the domain use cookies only to create anonymous site visit statistics. Users can change their cookie settings themselves at any time, indicating the conditions under which they are stored and how they gain access to their devices. Users can change the settings mentioned above by going to their browser settings or via service configurations. Those settings can be changed in particular to block the automatic accepting of cookies in browser settings or to inform the user every time cookies are set on their device. More detailed information on the possibilities and methods of cookie processing are available in browser or software settings.
Users can erase cookies at any time using the appropriate functionalities in the browser they are using.