TICKETS

Information on Customer data processing

Information on Customer data processing

In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation - hereinafter referred to as the 'GDPR'), I hereby inform you that:

  1. The Controller of your personal data is the Museum of Warsaw with its registered office in Warsaw at RynekStaregoMiasta28-42(00-272Warsaw),entered in the Register of Cultural Institutions maintained by the President of the City of Warsaw under RIK/8/2000/SPW, with REGON (National Business Registry Number) 016387044 and NIP (Tax Id. Number) 5251290392.
  2. The DPO may be contacted by e-mail: dane.osobowe@muzeumwarszawy.pl,or by calling the telephone number published atwww.muzeumwarszawy.plin the tag:„personal data protection”.
  3. Your personal data shall be processed for the performance of the agreement under Article 6 (1)(a)(b)(c)(d) of the GDPR.
  4. The recipient of the Customer’s personal data shall be entities authorized to process data based on the data processing agreement for the aforementioned purpose and the data may be transferred to entities authorized based on legal regulations.
  5. The Customer’s personal data shall not be transferred to a third country/international organization.
  6. The Customer’s personal data shall be stored for the period specified in the archiving regulations.
  7. You have the right to access the content of your data and the right to rectification, erasure, restriction, portability, right to object, right to withdraw consent to the data processing at any time without affecting the lawfulness of the processing (if the ground for the processing is compliant) carried out based on consent given prior to the processing.
  8. You have the right to lodge a complaint with a supervisory authority when you consider that the processing of your personal data violates the provisions of the General Data Protection Regulation or national laws.
  9. The Customer’s provision of personal data is voluntary, but necessary for the aforementioned purpose.
  10. Your data will not be processed automatically, including profiling.