Our websites use technology, such as cookies, to collect and process personal data in order to analyze website traffic. We would like to familiarize you with details of the technologies we use and the regulations that will soon come into force to give you full knowledge and comfort in using our websites. Please read the information below before you move on to the website. .
On 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (commonly referred to as ‘GDPR') will enter into force. GDPR will be in force to the same extent in all countries of the European Union, and thus also in Poland, and introduces a number of changes to the rules governing the processing of personal data, which will affect many areas of life, including the use of Internet services, such as, among others, the website of the Museum of the Second World War in Gdańsk. In this notice we present a summary of the most important issues concerning the processing of your personal data, which may take place after 25 May 2018 in connection with the use of our services. We ask you to read it; it should not take more than a few minutes.
What is personal information
Personal data is, according to GDPR, information about an identified or identifiable natural person. In case of using our websites, such data include e-mail address, IP address or your Museum of the details of your Second World War in Gdańsk account. Personal data may be saved in cookies or similar technologies (e.g. local storage) installed by us or our Trusted Partners on our sites and devices that you use when using our services.
Basis and purpose of processing
The processing of personal data requires a legal basis. GDPR provides several types of such legal basis for the processing of data; in connection with our services there will be primarily three of them:
Processing necessary to conclude or perform a contract to which you are a party. The contract is, in our case, the terms and conditions of the website. Therefore, if we conclude a contract with you for the provision of a given service (e.g. a service that provides you with the opportunity to become acquainted with one of our websites based on the terms and conditions of that website), we may process your data to the extent necessary for the performance of that contract. If you set up an account with us to purchase a ticket, the contract to provide this account entitles us to process the data necessary to provide it (e.g. the details you have provided in the profile of this account). Without this possibility we would not be able to provide you with the service and you would not be able to use it.
Processing necessary for the purposes of legitimate interests pursued by the controller or by a third party. This basis for data processing refers to cases where processing is justified due to our justified needs, which includes, among others, the need to ensure the security of the service (e.g. checking if an unauthorized person does not log into your account), making statistical measurements, improving our services and adjusting them to the needs and convenience of users (e.g. personalizing the content of the services) as well as marketing and promoting the administrator's own services from the Museum of the Second World War in Gdańsk on the website of this administrator (e.g. if you are interested in history and view historical materials on the site, the website may suggest similar articles).
Your data, within the framework of our services, will be processed only if we or another data processor has one of the legal bases allowed by GDPR and only for the purpose adapted to the given base, as described above. Your data will be processed as long as there is a basis for their processing - i.e., if your consent is granted, until it is revoked, limited or other actions are taken on your part restricting this consent; if the data are necessary for the performance of the contract - for the duration of the contract and, if the basis for processing the data is the legitimate interest of the controller - until this legitimate interest exists.
The controller of your personal data will be the Museum of the Second World War in Gdańsk, whose website you have just accessed.
Transfer of data
Your data will be processed by entities from the Museum of the Second World War in Gdańsk and Trusted Partners if you give your consent, but they may also be entrusted to other entities for processing. In any such case, the transfer of the data does not entitle the recipient to use them in any way, but only for the purposes expressly indicated by the given entity or Trusted Partner. The transfer of data generally takes place in the case of cooperation with a subcontractor (e.g. a marketing agency) or a service provider (e.g. data storage provider). This allows us, for example, to better select the most interesting or cheapest offers tailored to you. In any case, the transfer of data does not relieve the transferor of responsibility for its processing. Data may also be transferred to public authorities, provided that they are authorised to do so by the applicable legislation and that they make an appropriate request, but never otherwise.
Our websites and applications use technologies such as cookies, local storage and similar technologies to collect and process personal and usage data in order to personalize the content and advertising provided and to analyze the traffic on our sites. Our Trusted Partners also use this technology in this way. Cookies are IT data stored in files and on your terminal device (i.e. your computer, tablet, smartphone, etc.) that your browser sends to the server each time you access a page from that device, when you visit different pages on the Internet.
According to GDPR, you have the following rights in connection with your data and their processing by us and Trusted Partners.
If you have given your consent to the processing of your data, you may revoke it at any time.
You also have the right to request access to your personal data, its correction, deletion or restriction of processing, the right to transfer the data, to object to the processing of the data and the right to lodge a complaint with the supervisory authority - GIODO. You also have the above rights in case of proper data processing by the controller.
Data Protection Officer: firstname.lastname@example.org