In accordance with Article 13 para. 1 and para. 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons in regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC (Official Journal of the European Union L. 2016.119.1), General Data Protection Regulation, hereinafter referred to as “GDPR”, the Sybir Memorial Museum informs that:

1. The Administrator of your personal data is the Sybir Memorial Museum with its registered office at Węglowa 1 Street, 15-121 Bialystok, REGON: 366215932, NIP: 5423264915
2. The data administrator can be contacted via email: iod@sybir.bialystok.pl.
3. The received personal data will be processed in order to conduct ongoing recruitment and to check the skills and abilities of the candidate to assess whether the candidate is the right person for the recruited position.
4. The basis for the processing of personal data is the consent of the candidate and the legitimate interest of the administrator, who must check the skills and abilities of the candidate to assess whether the candidate is a suitable person for the recruited position (art. 6 para. 1 letter f GDPR).
5. Your personal data will be stored for the duration of the current recruitment and will be deleted after its completion in accordance with the procedures in force at the Administrator or until the consent has been withdrawn, without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
6. The recipients of your personal data may be entities providing the Administrator with technical and organizational support, such as, for example, software and IT system suppliers, entities providing IT services, entities providing legal services cooperating with the Administrator on strictly defined terms.
7. You have the right to request access to your personal data, rectification, deletion or limitation of processing and the right to object to the processing, as well as the right to transfer personal data.
8. If you believe that the processing of personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection.
9. Your personal data will not be subject to automated decision making, including profiling.
10. Your data will not be transferred to third countries or to international organizations.
11. Your personal data is necessary to achieve the purpose referred to in point 3.