GDPR INFORMATION NOTICE

In accordance with Articles 13 and 14 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU 2016, L 119, item 1), we hereby inform you that the Controller of your personal data is:

The Archaeological Museum of the Middle Odra Region in Zielona Góra, with its registered office in Świdnica, represented by the Museum Director, with its registered office at: ul. Długa 27, 66-008 Świdnica, Telephone: (68) 321 54 78, email: muzeum@muzeum-swidnica.org.

1. Please be advised that, pursuant to Article 37(1)(a) of the GDPR, the Controller has appointed a Data Protection Officer (DPO) – Mr Rafał Wielgus – who oversees the processing of personal data on the Controller’s behalf. The DPO can be contacted at the following email address: iod@bhpex.pl
2. The Archaeological Museum of the Middle Oder Valley processes your data for the purpose of carrying out public tasks arising from legal provisions and tasks carried out in the public interest.
3. The legal basis for the processing of your data stems from a range of laws and regulations, the duties and tasks statutorily assigned to the Museum, concluded contracts, and the consent given by the data subject.
4. The Controller processes your personal data to the strictly defined, minimum extent necessary to achieve the purposes referred to above.
5. In specific situations, the Controller may transfer/entrust your data to other entities. The basis for the transfer/entrustment of data is provided by legal provisions (e.g. other local authority bodies, institutions involved in the administration of EU funds in the broadest sense) or data processing agreements with entities providing services to the Controller. The recipients of personal data will be authorised entities pursuant to legal provisions or entities providing services to the Controller under separate agreements.
6. Personal data processed by the Archaeological Museum of the Middle Oder will be stored for the period necessary to fulfil the purpose for which it was collected, in accordance with the archiving periods specified by generally applicable law, including the Regulation of the Prime Minister of 18 January 2011 on office procedures, standardised subject-based file registers and instructions on the organisation and scope of operation of company archives. In the case of processing based on consent, the data will be stored until the purpose for which it was collected ceases to apply or until consent is withdrawn.
7. Every person, subject to the exceptions provided for by law, has the right to:

• access to their personal data and receive a copy of it,
• request that it be rectified,
• erased or that its processing be restricted,
• object to its processing.

8. A data subject whose data is processed on the basis of their consent has the right to withdraw that consent at any time, without this affecting the lawfulness of the processing carried out on the basis of consent prior to its withdrawal.

9. You may exercise the above rights at the Controller’s premises by sending correspondence to the Controller’s address: Archaeological Museum of the Middle Odra Region, ul. Długa 27, 66-008 Świdnica, or by email to: iod@bhpex.pl

10. You have the right to lodge a complaint with the supervisory authority regarding the processing of your personal data by the Archaeological Museum in breach of the GDPR. The competent authority for such complaints is: The President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

11. Depending on the processing activities to which your personal data is subject at the Data Controller, the provision of personal data is a statutory requirement, necessary for the performance of a contract, or voluntary.

12. The processing of personal data is not subject to automated decision-making or profiling.

13. Data will not be transferred to third countries or international organisations, except in cases where data is transferred on the basis of international agreements to which the Republic of Poland is a party.

14. You will be informed of the details regarding the basis for the collection of personal data, whether its provision is mandatory or voluntary, and the potential consequences of not providing the data, by the relevant department of the Data Controller responsible for processing and by the Data Protection Officer.