INFORMATION ON PERSONAL DATA PROCESSING

Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"), and the Personal Data Protection Act of 10 May 2018 (Journal of Laws of 2018, item 1000), the Municipal Cultural Center in Mogilany provides the following basic information regarding the processing of collected personal data.

 

The Data Controller is the Municipal Cultural Center in Mogilany, ul. Grodzka 1, 32-031 Mogilany, tel. +48 12 270 16 12, e-mail: gok@mogilany.pl

Contact with the Data Protection Officer responsible for data protection at the Municipal Cultural Center in Mogilany: e-mail: bhp.iod.domagala@o2.pl

The Controller processes data for the purpose of fulfilling its statutory tasks. Personal data will be processed and stored for the period necessary to achieve the specified purposes, in accordance with legal regulations.

 

 

INFORMATION ON COLLECTED PERSONAL DATA:

 

1. Personal data are processed:
   1. on the basis of Article 6(1)(a) of the GDPR – that is, based on the consent of the data subject;
   2. on the basis of Article 6(1)(b) of the GDPR – for the purpose of performing contracts to which the data subject is a party;
   3. on the basis of Article 6(1)(c) of the GDPR – for compliance with a legal obligation to which the controller is subject;
   4. on the basis of Article 6(1)(f) of the GDPR – where processing is necessary for the purposes of the legitimate interests pursued by the controller.
2. If Article 6(1)(a) applies, in the case of services offered directly to a child, it is lawful to process the child’s personal data if the child is at least 16 years old. If the child is under 16, such processing is lawful only if and to the extent that consent is given or authorized by the holder of parental responsibility over the child.
3. Data are shared only with entities authorized under the law. These data will not be made available to other institutions, organizations, or third parties.
4. Data will be stored in accordance with legal regulations, particularly with the requirements of the Act of 14 July 1983 on the national archival resources and archives.
5. The data subject has the right to request from the controller access to personal data, the right to rectification, erasure, or restriction of processing, the right to object to processing, the right to data portability, and the right to withdraw consent at any time. This right may be subject to legal limitations.
6. If data are collected to perform statutory tasks of the Municipal Cultural Center in Mogilany, providing them is mandatory; in other cases, providing data is voluntary but necessary for participation in classes, workshops, etc.

 

THE CONTROLLER INFORMS THAT THE DATA SUBJECT HAS THE FOLLOWING RIGHTS:

 

1. The right to access their personal data (Article 15 GDPR),
2. The right to rectify (correct) inaccurate data (Article 16 GDPR),
3. The right to erasure of data ("right to be forgotten" – Article 17 GDPR),
4. The right to restrict data processing (Article 18 GDPR),
5. The right to data portability for data processed by automated means under the terms set out in Article 20 GDPR, meaning you have the right to request that your personal data be transmitted directly by us to another controller, if technically feasible,
6. The right to object to the processing of data (in cases specified in Article 21 GDPR),
7. The right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal (if the processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR),
8. The right to lodge a complaint with a supervisory authority – to the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the provisions of the GDPR.