Personal data protection notice regarding data processing for contractors

Data Protection Officer

Warszawskie Obserwatorium Kultury, ul. Mokotowska 29a, 00-560 Warsaw, entered in the Register of Cultural Institutions of the City of Warsaw under number RIA/166/91, NIP: 5251000514, REGON. 010941634 (“Warsaw Observatory of Culture”)

Contact details of the Data Protection Officer

iod@wok.art.pl

Purposes of and legal basis for personal data processing

The processing of your personal data takes place:

• pursuant to the provisions of Article 6 Section 1(b) of the GDPR, – where processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract;
• pursuant to Article 6 Section 1(c) of the GDPR ­– the fulfilment of a legal obligation imposed on Personal Data Controller resulting from generally applicable provisions of law, such as, inter alia, tax regulations, including the provisions of the Act of 26 July 1991 on personal income tax.

Information on personal data processing

Access to your personal data will be granted to authorised employees of the Personal Data Controller and entities providing services to the Controller. Personal data may be disclosed to recipients who will process the data on behalf of the Warsaw Observatory of Culture, and public administration bodies authorised to obtain the personal data in pursuance of generally applicable laws.

Personal data retention period

Personal data will be retained for the period required for the fulfilment of the particular legal obligations incumbent on the Controller, i.e.: for the period specified by law, e.g. tax law, within the term of the contract, and thereafter for the period after which the statute of limitations begin to apply to claims arising from the connecting contract, and in the case claims are pursued, for the duration the relevant proceedings.

Data from other sources

If you make a payment through a bank or payment institution, we will come into possession of information about which account and which institution you made the payment with. We will process these data in order to verify whether you have made the required payment and, if necessary, for settlement purposes. We will process these data in order to fulfil our legal obligation pursuing from the law, i.e., from the Accounting Act.

Rights pursuing from Articles 15 to 19 of the General Regulation of the European Parliament and of the Council (EU) 2016/679

In connection with the processing of personal data you have the following rights:

• the right to access your data and to receive a copy of them;
• the right to rectification (correction) of your data;
• the right to the erasure of your personal data where the processing does not take place for the purposes of the performance of an obligation imposed by law or by way of official authority;
• the right to restrict data processing;
• the right to transfer your data;
• where processing is based on consent, the right to withdraw the consent at any time.

Right to file a complaint

You have the right to file a complaint to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, if you believe that the processing of your personal data by the Data Protection Officer violates the provisions of Regulation of the European Parliament and of the Council (EU) 2016/679.

Information on voluntary or obligatory provision of personal data