The following document defines the rules of processing User's personal data and access to information collected through Cookies, in order to fulfill the obligations and services provided to the User electronically by the POLIN Museum of the History of Polish Jews, 00-157 Warsaw, ul. Anielewicza 6.
Article 1 Personal data
The administrator of personal data of the Users of the following Websites: www.polin.pl, www.sztetl.org.pl, www.sprawiedliwi.org.pl, www.judaika.polin.pl, www.warsze.polin.pl (hereinafter: Websites) is the POLIN Museum of the History of Polish Jews with its registered office in Warsaw, hereinafter: the Museum (NIP [Taxpayer Identification Number]: 525-23-47-728), which processes personal data of Websites Users in accordance with the provisions of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and revoking the Directive 95/46/EC (GDPR), the General Data Protection Regulation of May 10, 2018 (Journal of Laws 2018 item 1000), Act of July 18, 2002 on the provision of electronic services (Journal of Laws No. 144, item 1204 as amended) and the Act of July 16, 2004 Telecommunications Law (Journal of Laws 2004 No. 171 item 1800, as amended).
The Museum processes Users’ personal data for technical purposes, and to run the Websites, to ensure their efficient operation (more on this subject in the Websites Cookies Policy), to enable the provision of services offered on the Websites (according to the contractual obligations, or to take action before concluding the contract), as well as for marketing purposes (in the case of Users' consents required by the generally applicable law).
The Museum processes only the categories of personal data provided by Users.
The Museum ensures that all Websites Users, whose data it processes to any extend, can exercise their rights resulting from the Regulation of the European Parliament and Council (EU) 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and revoking the Directive 95/46/EC (GDPR) further referred to in Article 3 below.
The Museum collects personal data in accordance with applicable law and accepted standards.
The duration of data processing will be determined by the purpose of their processing, and after the expiry of this time limit it will be determined by the limitation period of potential claims. In the event of a valid revocation of consent, filing an objection, requesting deletion of data, the data will not be further processed except for the data that are necessary to defend against potential claims until the expiration of their validity.
The Museum has appointed the Data Protection Supervisor, who can be contacted via e-mail: firstname.lastname@example.org, or by phone: 22 471 03 41.
Personal data will not be processed in an automated manner, nor will they be profiled.
- Providing personal data is voluntary, however it is necessary for the provision of services, including electronic services or for the conclusion and implementation of contracts, as well as for marketing purposes. The consequence of not providing personal data required by the Museum is the lack of the ability to provide services and to implement contracts, as well as the inability to receive marketing information.
Article 2 Transmission of information
- The recipients of Users' personal data may be:
- suppliers of IT systems and IT services;
- entities providing accounting services to the Museum as well as those providing quality of service research, debt recovery, legal, analytical and marketing services;
- postal operators and couriers;
- operators of electronic payment systems and banks in the matter of payments;
- the Museum's trade partners in case of the User's consent as required by the generally applicable law;
- bodies entitled to receive personal data on the basis of legal provisions.
Any information which in accordance with generally applicable laws is considered as commercial information or direct marketing may be sent to Users only with their consent, in accordance with the Act of July 18, 2002 on the provision of electronic services (Journal of Laws of 2002, No. 144, item 1204, as amended) and the Act of July 16, 2004 - Telecommunications Law (Journal of Laws of 2004 No. 171, item 1800).
- All unsolicited commercial information should be reported to email@example.com
Article 3 Rights of Websites Users
The User has the right of access to their data, the right to rectify and delete them and to demand to limit their processing due to his/her special circumstances. The User has also the right to withdraw the consent at any time; however, the withdrawal of the prior consent will not affect the legality of data processing before the withdrawal as well as the right to transfer them. The User also has the right to lodge a complaint with the Office for Personal Data Protection if he/she thinks that his/her data is processed in a manner contrary to the provisions of generally applicable law.
- The User is obliged to update the data which he/she provided immediately after each change of such data. The user can update the data by sending information on their change to firstname.lastname@example.org.
Article 4 Technical conditions
The Museum stores cookie files, which contain information necessary for the proper functioning of the Websites, among others to maintain the User's session and for better matching the Websites to the needs of Users. Information on cookie files can be found in the Websites Cookies Policy.
- A User who has given his/her consent referred to in Article 2 section 3 may withdraw it at any time. To do this, click on the resignation link (resignation footer) being an element of every message sent by the Museum, or send such information to email@example.com
- In case when the User decides that his/her privacy has been compromised in some way, he/she may send appropriate information to firstname.lastname@example.org.