GDPR Obligation to Provide Information Natural Persons

In relation to the provisions of Article 13 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter referred to as ‘GDPR’, MOCAK the Museum of Contemporary Art in Krakow with its registered office in Krakow informs that:

Personal Data Controller

The controller of your personal data is MOCAK the Museum of Contemporary Art in Krakow, 30-702 Krakow Lipowa Street 4; a local government cultural institution entered in the Register of Institutions of Culture kept by the Municipality of Krakow under number 31; NIP 675-142-70-73, REGON 121135203, office@mocak.pl, tel. 12 263 40 03, hereinafter referred to as the Museum.

Data Protection Officer

In all matters related to the processing of personal data by the Museum, contact the appointed the data protection officer appointed by MOCAK: iod@mocak.pl

 

Purpose of the processing of personal data and legal basis of the processing

Your personal data obtained in as a result of you entering into correspondence with MOCAK or due to you letting us have your business card we use or may use it for the following purposes:

1. Documentation of the Museum’s activity (art. 6 paragraph 1 point b of the GDPR) in accordance with the requirements of the Act of 14 July 1983 on national archives and archival resources.
2. Compliance with the wishes of the data subject, including the handling of the application sent to the Museum to the extent enabling contact with this person (Article 6(1)(b) of the GDPR).

in the case of notification or business card provided in connection with the expectation of inclusion of the person in the Museum's marketing pool: sending out to the person notification of their inclusion in the Newsletter service under the terms and conditions contained in the terms of provision of this service.

 

Scope of Data Processed

In respect of the above mentioned purposes, we process your personal data in the following scope: name and surname, your contact data including your e-mail address and telephone number and in the case of entering into a contract also correspondence address.

 

Data Recipients

The recipients of your personal data are or may be entities:

1) servicing the Museum’s equipment involved in the processing of personal data;

2) providing and maintaining software used for the processing of personal data, the data controller of which is the Museum;

3) entities to which documentation is transferred for destruction purposes after the end of the storage period;

4) providing advisory and control services commissioned by the Museum (e.g. audit and certification companies), as well as legal services.

 

Period during which the data will be kept for processing

Your personal data will be processed during the period of mutual relations specified for the purposes of data processing, and subsequently for the period necessary for the Museum to comply with its legal obligations resulting from the archive and office regulations.

Your personal data will be kept for the purposes of processing for the duration of the contract and then until the expiration of the rights to claim, and after the expiry of the said rights for the period necessary for the Museum to comply with its legal obligations resulting from administrative and data storage regulations.

 

Implementation of the rights of the data subject

You have the right to:

• rectification (correction) of data;
• erasure of data processed without justification;
• limitations of processing (suspension of operations on data, including their erasure – following the data subject submitting application to that effect);
• access your data (including copy of your data);
• transfer your data to another data controller (in the scope and with exclusions specified in Article 20 of the GDPR);
• withdraw consent to the processing of your data at any time without this affecting compliance with the data controller’s right to process your data which will have been carried out on the basis of your consent given before its withdrawal.

 

In order to exercise the rights referred to above, a request should be sent to the e-mail address: iod@mocak.pl, in writing to the address of the Museum or in person at the Museum’s main office.

Before exercising your rights, the Museum must confirm your identity in a manner compatible with any individual request.

If you believe that the processing of your personal data by the Museum violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for the Protection of Personal Data, ul. Stawki 2 00-193 Warsaw.

Your personal data will not be transferred to countries outside the European Economic Area and will not be transferred to international organisations.

Information on the data requirement

Providing data is obligatory and necessary for the purposes of entering into a contract, also such as including the data subject in the Newsletter service under the terms and conditions contained in the terms of provision of this service. Failure to provide personal data will result in the impossibility of concluding a contract and its execution.

In other cases, providing personal data is voluntary and has no consequences other than the impossibility of including a person who declines to provide their identification personal data in dealing with events (such as responding to e-mails).

Automated decisions

The Museum will not apply automated decision making to your data, including profiling.