Privacy Policy

Information on the processing of personal data by the Army Museum in Białystok
Pursuant to Article 13 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, Official Journal of the European Union L 119 of 4.5.2016 (referred to as: the GDPR) inform that:
1. The controller of personal data is the Army Museum in Białystok with its registered office at 7 Jana Kilińskiego 7, 15-089 Białystok, Poland, Tax Identification Number (NIP): 5421290558, National Business Registry Number (REGON): 00067116.
2. The Controller have designated the Data Protection Officer (‘the DPO’) that can be contacted via the following e-mail address: iod@mwb.com.pl or in writing to the address of the registered office of the controller with a note ‘IOD’. The Data Protection Officer can be contacted in all matters regarding the processing of personal data and an exercise of the rights related to data processing at the Army Museum in Białystok.
3. Personal data may be processed for the purposes of implementing the statutory activities of the Army Museum in Białystok as a fulfilment of the legal obligation incumbent on the Controller specified in the Act of 21 November 1996 on museums (Journal of Laws 2012, item 987) and the Act of 25 October 1991 on organising and conducting cultural activities (Journal of Laws 2012, item 406) – (pursuant to Article 6 paragraph 1 (c) of the General Data Protection Regulation of 27 April 2016). Furthermore, the processing may take place additionally based on:
A. for the recruitment purposes – pursuant to Article 6 par. 1 (a) and (c) of the General Data Protection Regulation of 27 April 2016,
B. for the purposes of entering into and performing contracts – pursuant to Art. 6 par. 1 (b) of the General Data Protection Regulation of 27 April 2016,
C. for the purposes of implementing educational activities – pursuant to Art. 6 par.1 (e) of the General Data Protection Regulation of 27 April 2016,
D. for the purposes of performing exhibition activities pursuant to Art. 6 par. 1 (d) and (e) of the General Data Protection Regulation of 27 April 2016,
E. for the purposes of protecting property and ensuring safety of visitors in the monitored area – pursuant to Art. 6 par. 1 (d) and (e) of the General Data Protection Regulation of 27 April 2016,
F. for the purposes of establishing contact – pursuant to Article 6 par. 1(f) of the General Data Protection Regulation of 27 April 2016 as the legitimate interest of the controller,
G. for the information purposes – pursuant to Art. 6 par. 1 (d) and (e) of the General Data Protection Regulation of 27 April 2016,
H. for the purposes of the order performance – pursuant to Article 6 par. 1 (b) of the General Data Protection Regulation of 27 April 2016,
I. for the purposes of carrying out tasks related to conducting scientific research – pursuant to Art. 6 clause 1 (d) and (e) of the General Data Protection Regulation of 27 April 2016,
J. for the purposes of pursuing or securing claims – pursuant to Art. 6 par. 1 (f) of the General Data Protection Regulation of 27 April 2016,
K. for the purposes of conducting ceremonies – pursuant to Art. 6 par. 1 (e) of the General Data Protection Regulation of 27 April 2016,
L. for the purposes of carrying out tasks related to the image of the Army Museum in Białystok– pursuant Art. 6 par. 1 (d) and (e) of the General Data Protection Regulation of 27 April 2016,
M. for the purposes of booking entry tickets to the Army Museum in Białystok – pursuant to Art. 6 par. 1 (b) of the General Data Protection Regulation of 27 April 2016,
4. The recipient of personal data may be all entities related to the Controller in order to fulfil their obligations and entities authorised to obtain data on the basis of the applicable law – only if they make a request based on the appropriate legal grounds.
5. Personal data collected by the Museum are not transferred to the third countries, i.e. outside the European Economic Area (EEA) or outside international organisations.
6. Personal data is processed for the time that is necessary to achieve a designated purpose, which is conducting statutory activity pursuant the provisions of the Act. In some cases, including in particular when the processing results from a legal obligation incumbent on the Controller specified in particular in the Act of 21 November 1996 on museums (Journal of Laws 2012, item 987) and the Act of 25 October 1991 on organising and conducting cultural activities (Journal of Laws 2012, item 406) – (Article 6 (1) (c) of the GDPR), the data will not be subject to erasure or destruction and transfer. In some cases, where permitted by the provisions governing statutory activity of the Museum, the period of personal data processing will be consistent with the term of the contract or consent to data processing and a period of pursuing claims in this respect or for a period necessary to fulfil the legal obligation of the Museum arising from office and archival law provisions.
7. Pursuant to the applicable regulations (Articles 12–22 of the GDPR), in connection with the processing of personal data by the Museum, you have:
A. the right to information about the processing of your personal data and the right of access as the data subject,
B. the right to rectification,
C. the right to restrict of processing,
D. the right to object to data processing,
E. the right to lodge a complaint with the President of the Office for Personal Data Protection, if you consider that the processing of personal data violates the provisions of the GDPR.
8. Providing your personal data is a precondition for achieving the objectives set out in par. 4. You are obliged to provide it, and a consequence of a failure to provide it will prevent from taking action to achieve the objectives set out in par. 4.
9. The collected personal data will not be subject to a decision based solely on automated processing, including profiling.