Personal data, the rules for the processing of which are defined in this document, are controlled by the Museum of Modern Art in Warsaw, 00-124, Pańska 3, NIP tax id number: 525-234-18-32, REGON: 140187435.
In order to contact us regarding personal data, send an e-mail to the Data Protection Supervisor: firstname.lastname@example.org or a letter addressed to our office.
Our aim is for all our actions regarding personal data to be legal and based on a respectful approach towards privacy and the autonomy of the people it refers to.
Where and how data is processed
Most of the data is stored in electronic form: primarily on a server we rent, but also on office computers, portable discs and phones. Our team and parties the Museum cooperates with process data with digital tools: email and file storage cloud. Some of the data is stored in the form of printed documents.
Who is entrusted with data
Personal data is processed by parties we cooperate with on a long-term basis who are responsible, among other things, for the Museum's IT maintenance.
Those parties are bound by entrustment agreements and are under the same obligation to protect personal data privacy as we are. In some cases we hand over data to other parties (for instance ones we work with while organizing training or other events). In such cases, we always inform the participants beforehand, for instance during registration. When using traditional mail, we also hand over data to mail companies (Poczta Polska and other companies operating according to postal law) which process it according to the law, entrustment agreements and service provider regulations.
Legal rights of people whose data we process
Everyone whose data is processed by the Museum has the right to access its content, the right to receive a copy of the data, the right to request its correction, and - in certain cases - the right to erase it or restrict its processing. We care about making the execution of your rights regarding the data we process as simple as possible. However, as a data administrator, we need to be sure we will not share your data with unauthorized parties. That is why, if we have doubts as to whether the person asking for access to data or its erasure is in fact the person whose data is processed, we may ask them to provide additional information.
If you think that your data was used inappropriately, you can file a complaint to the director of the national office for personal data protection. However, if you notice a problem, please let us know too. We do everything we can to make sure your data is protected. If we make a mistake, we would like to fix it as soon as possible.
Whose data is processed and how
When you use our websites, we collect only the data necessary to manage the sites, ensure the efficiency of the functionalities they offer, and analyze the effectiveness of our communication.
Newsletter subscriber data
We process the email addresses of the subscribers to the Museum's newsletter and specific mailing lists for the purpose of sending the requested information, based on the interested person's consent. Providing this data is voluntary, but it is necessary to receive the emails. We do not track clicks in our mailings, which means we do not check who opens which links included in the emails. However, in the case of our newsletter, we do track the loading of images included in it, to have a general idea as to how many people read it. But we analyze the data collectively, and not as the activity of particular recipients. You can unsubscribe from the list at any time by clicking the unsubscribe link at the bottom of the email. That is where you will also find a link that will allow you to stop receiving any emails from us.
Data of survey respondents
We like to get to know the opinions of people we work for. That is why, from time to time, we publish surveys in which we ask, for example, about your perceptions of the Museum. Such surveys do not collect any additional data (such as IP addresses). Please do not include any personal data in our surveys. However, if you decide to do so, we will process it based on our legitimate interest for archiving purposes for the duration of the Museum's operations. If you would like us to erase it sooner, you can file a complaint to: email@example.com.
Data of public event participants
When we organize open, public events, we do not ask for the participants’ personal data. In case of events that require registration, we usually ask for your first and last name, email address and phone number, unless the event requires collecting additional information. In such cases providing your data is voluntary, but it is necessary to register for the event. We process the data for the purpose of organizing the event, for promotional and information purposes, as well as for the purpose of financial reporting concerning, for instance, educational programs.
After the event, we process the data based on our legitimate interest for the purpose of relations management. We process the data of participants who qualify for an event that requires registration for two years after the end of the calendar year. The remaining data is erased promptly after the event is over, but no later than six months after the end of the calendar year in which it took place. If you would like us to erase it sooner, you can file a complaint to firstname.lastname@example.org. If an event is organized with the financial support of grant providers who require us to store the documentation for a longer time, we will inform participants about it before they sign up for the event. When organizing certain events we will also ask for your consent to receive information about other, similar initiatives. A person who gives such consent has the right to withdraw it at any time, as well as to require the transfer of their data. If they do not do so, we will store their data for the duration of the Museum's operations.
Data of media professionals
We process the personal data of media professionals (journalists, publishers, etc.) obtained directly from them, from their editorial offices or from the internet. The data we process may include their first and last name, gender, email address, phone number, office address, history of interactions and history of publications. We process the data based on our legitimate interest for the purpose of informing about the Museum's activities and managing our relations.
The data is processed for the duration of the Museum's operations. If you do not wish to receive our press releases, you can object to the processing of your data. If you wish to do so, or have additional questions, please email us at email@example.com.
Data of people using private communication channels
The personal data of people we contact via email, phone, text or mail is processed based on justifiable interest, for the purpose of managing correspondence, for purposes issuing from the contents of the correspondence, or for the purpose of contacting them in the future. This data may include first and last name, address, email address, phone number and possibly other information included in the correspondence. Providing this data is voluntary. The data is processed for the purposes of archiving and managing relations for the duration of the Museum's operations, with the exception of sensitive data, which is erased immediately after the particular matter is closed.
Data of people interacting with the Museum via social networks
Users can erase cookies at any time using the appropriate functionalities in the browser they are using.