In accordance with Articles 13.1 and 13.2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the “GDPR”), please be advised that:
I. The controller of your personal data is the Auschwitz-Birkenau State Museum in Oświęcim, ul. Więźniów Oświęcimia 20, 32-603 Oświęcim, Poland.
II. In matters concerning personal data, you may contact the Data Protection Officer appointed at the Auschwitz-Birkenau State Museum, by e-mail at iod@auschwitz.org or by writing to the address of the data controller specified in section I.
III. Your personal data will be processed under Article 6.1 of the GDPR in order to register for the educational session/seminar/educational conference/study visit/training workshop/course. The period of processing of your personal data is related to purpose for which this data is processed, as specified above. In view of the above, your personal data will be processed for the time for which the data controller is legally obliged to store this data or for the period until the prescription periods have lapsed for potential claims the pursuing of which requires this data.
IV. If you agree to receiving marketing communications to your e-mail address, the legal basis for processing will also be Article 10 of the Polish Law of 18/07/2002 on the Provision of Electronic Services and Article 172 of the Polish Telecommunications Law of 16/07/2004. This data will be processed for a marketing purpose consisting in sending you marketing information concerning new educational proposals of the Auschwitz-Birkenau State Museum, new projects, and invitations to conferences and educational sessions. Data will be processed by us for the duration of marketing activities or until you have objected to further processing of data for marketing purposes or until you have withdrawn your consent to receiving messages to your e-mail address. Withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal.
V. You have the right to access your personal data, rectify it, or have it deleted, the right to limit its processing/withdraw your consent, the right to data portability, and the right to object to the processing of your personal data.
VI. In the cases and according to the principles specified in generally applicable personal data protection regulations, you have the right to access your data and receive a copy of it, to rectify (correct) your data, to have your data deleted, to limit its processing, to object to its processing, and to data portability. You also have the right to file a complaint with the supervisory authority if, in your opinion, the processing of your personal data violates the provisions of the GDPR.
VII. Your personal data will be shared with specific data recipients: the authorized institutions specified in legal regulations and the processors that provide services to the data controller and to which this data is entrusted, including accounting firms, law firms, IT firms, external auditors, etc.
VIII. Your provision of personal data is voluntary, but is required to start the recruitment process or receive marketing messages. If you do not provide your personal data, this will result in you not being admitted to the recruitment process. Lack of consent to personal data processing for the marketing purpose will result in no marketing messages being sent to you.
IX. Your personal data will not be processed in an automated manner and will not be subject to profiling.