Privacy Policy

Privacy Policy

Information on the processing of personal data by the Sybir Memorial Museum

According to the article 13 (paragraphs 1 and 2) of the General Data Protection Regulation (GDPR) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we are obliged to inform you on how your personal data is administered by us.

  1. The administrator of personal data is the Sybir Memorial Museum with its registered office at 26 Sienkiewicza Street, postcode: 15-092, Bialystok, NIP (Tax Number): 5423264915, REGON (National Business Registry Number): 366215932.
  2. The administrator has appointed a data protection officer (DPO) who can be contacted by
    e-mail: iod@sybir.bialystok.pl or in writing to the address of the administrator's registered office with the note 'IOD'. You can contact the data protection inspector in all matters relating to the processing of personal data and the use of data processing rights at the Sybir Memorial Museum.
  3. Personal data may be processed for the purposes of implementing the statutory activities of the Sybir Memorial Museum as fulfilling the legal obligation incumbent on the administrator specified in the Act on museums of 21 November 1996. (Journal of Acts of 2012, item 987) and the Act on organizing and conducting cultural activities of 25 October 1991 (Journal of Acts of 2012, item 406) - (pursuant to Article 6, paragraph 1, letter c of the General Data Protection Regulation of 27 April 2016). In addition, the processing can be additionally based on:
    1. recruitment purposes - pursuant to article 6, paragraph 1, letters a and c of the General Data Protection Regulation of 27 April 2016,
    2. conclusion and performance of contracts - pursuant to article 6 paragraph 1 letter b of the General Data Protection Regulation of 27 April 2016,
    3. the implementation of educational activity - pursuant to article 6, paragraph 1, letter e of the General Data Protection Regulation of 27 April 2016,
    4. the implementation of the exhibition activity - pursuant to article 6, paragraph 1, letters d and e of the General Data Protection Regulation of 27 April 2016,
    5. property protection and the safety of visitors in the monitored area - pursuant to article 6, paragraph 1, letters d and e of the General Data Protection Regulation of 27 April 2016,
    6. making contact - pursuant to Article 6 paragraph 1 letter f of the General Data Protection Regulation of 27 April 2016, as an excused administrator's interest,
    7. information purposes - pursuant to article 6, paragraph 1, letters d and e of the General Data Protection Regulation of 27 April 2016,
    8. the execution of the contract - pursuant to article 6, paragraph 1, letter b of the General Data Protection Regulation of 27 April 2016,
    9. implementation of tasks related to conducting scientific research - pursuant to article 6, paragraph 1, letters d and e of the General Data Protection Regulation of 27 April 2016,
    10. the purposes of securing or pursuing claims - pursuant to article 6, paragraph 1, letter f of the General Data Protection Regulation of 27 April 2016,
    11. the purposes related to conducting ceremonies - pursuant to article 6, paragraph 1, letter e of the General Data Protection Regulation of 27 April 2016,
    12. the purposes related to the image of the Sybir Memorial Museum - pursuant to article 6, paragraph 1, letters d and e of the General Data Protection Regulation of 27 April 2016,
    13. the purpose of booking admission tickets to the Sybir Memorial Museum - pursuant to article 6, paragraph 1, letter b of the General Data Protection Regulation of 27 April 2016.
  4. The recipient of personal data may be all entities associated with the administrator in order to fulfill obligations and entities authorized to obtain data on the basis of applicable law - only if they make a request based on the appropriate legal basis.
  5. Personal data collected by the Museum are not transferred to Third Countries, that is, outside the European Economic Area or outside international organizations.
  6. Personal data is processed for the time that is necessary to achieve the goal of conducting statutory activities based on the provisions of the Act. In some cases, especially when the processing will result from the legal obligation imposed on the administrator specified in the Act on museums of 21 November 1996 (Journal of Laws of 2012, item 987) and the Act on the organization and conduct of cultural activities of 25 October 1991 (Journal of Laws of 2012, item 406) - (Article 6, paragraph 1, letter c of the GDPR), data may not be subject to removal or destruction and transfer. In some cases, if it is allowed by the regulations governing the Museum's statutory activities, the processing of personal data will be in accordance with the duration of the contract or consent to the processing of data and the claim settlement period or for the period necessary to fulfill the legal obligation of the Museum resulting from the registry and archives regulations.
  7. In accordance with applicable regulations (Articles 12-22 of the GDPR), in connection with the processing of personal data by the Museum, you are entitled to:
    1. obtain information about the processing of your personal data and the right to access them,
    2. rectify the data,
    3. limit processing,
    4. object to data processing,
    5. file a complaint to the President of the Personal Data Protection Office, when you believe that the processing of personal data violates the provisions of the GDPR.
  8. Providing personal data by you is a condition for achieving the objectives set out in point. 4. You are obliged to provide them, and the consequence of failing to do so will be the inability to take action to achieve the objectives set out in point. 4.
  9. The collected personal data will not be subject to automated decision-making, including profiling.

Do góry