Information about personal data protection regarding the organisation of the Baltic Sea States Forum titled "Cultural Heritage in Promotion and Development of the Baltic Sea Region".
(notification forwarded pursuant to Article 13 of the Regulation (EC) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and from the repeal of Directive 95/46/EC (General Data Protection Regulation))
In connection with the organisation by the Ministry of Culture and National Heritage and the National Maritime Museum in Gdańsk of the Baltic Sea States Forum titled "Cultural Heritage in Promotion and Development of the Baltic Sea Region", hereinafter referred to as the Forum – the National Maritime Museum in Gdańsk forwards the following notification regarding the processing of personal data included in the registration form of persons wishing to participate in the Forum and persons selected as Forum participants.
I. Information about the data controller
The controller of your personal data processed in connection with registration for participation in the Forum, selection of Forum participants and participation in the Forum is the National Maritime Museum in Gdańsk with the registered office at: 80-751 Gdańsk, ul. Ołowianka 9/13, entered into the Register of National Cultural Institutions under No. RNIK 14/92, Statistical No. 000 635 075.
II. Data Protection Officer
We provide the opportunity to contact the Data Protection Officer in matters regarding the exercise of rights related to personal data.
Contact details of the Personal Data Officer
-
Mailing address: National Maritime Museum in Gdańsk, Ołowianka 9-13, 80-751 Gdańsk, with the note Data Protection Officer;
-
Email: ochrona.danych@nmm.pl.
III. For what purpose and on what basis do we process your data
We process personal data for the following purposes:
-
Enabling registration of persons who want to participate in the Forum, allowing the selection of the Forum participants and in the case of an applicant for participation in the Forum, also enabling the participation in the Forum – Article 6 Section 1b of the GDPR;
-
Fulfilment of the legal obligation – Article 6 Section 1c of the GDPR;
-
Fulfilment of legally justified interests of the Controller – Article 6 Section 1f of the GDPR;
-
On the basis of the consent granted – Article 6 Section 1a of the GDPR – this basis will be applicable only if in connection with participation in the Forum the participant grants additional consent to the processing of personal data;
-
On the basis of the consent granted – information on dietary preferences and food allergies (intolerance) – Article 9 Section 2a of the GDPR.
Data processing based on a legitimate interest
Due to legitimate interest, we are authorised to process personal data for the purposes of:
-
Reporting and providing information on the activities which constitute a fulfilment of our legitimate interest related to the provision of information on the activities conducted and the publication of materials related to the Forum, in particular materials from the Forum (legal basis under Article 6 Section 1f of the GDPR;
-
For the purpose of determining, investigating or defending against claims, constituting the fulfilment of our legitimate interest (legal basis under Article 6 Section 1f of the GDPR);
-
Ensuring access control and security at the Museum.
IV. Information regarding the obligation to provide data and the consequences of the failure to provide data
Provision of personal data is a prerequisite for registration and enabling selection of Forum participants. In the event of approval of an applicant wishing to participate in the Forum, provision of data is also a condition of participation in the Forum. Failure to provide data will result in no possibility of registration, selection of participants and participation in the Forum.
Provision of data on food preferences and food intolerance (allergies) is voluntary. Failure to provide these data does not affect the decision to qualify for the Forum, however, in the case of selection of a person willing to participate in the Forum – it may affect the possibility of providing the right amount of meals according to preferences, and in the case of food allergies affects the lack of opportunity to prepare meals taking into account food intolerances.
V. Who can be the recipient of personal data
Your personal data may be made available to the following entities:
-
Ministry of Culture and National Heritage;
-
Entities providing postal or courier services as well as other entities to whom the transfer of data is necessary for the organisation and operation of the Forum;
-
Entities providing IT and hosting services;
-
Entities providing legal services;
-
State authorities.
Personal data will not be transferred to third countries.
VI. Period of personal data storage
The period of personal data storage by the Controller depends on the legal basis of the processing and the purpose of the processing.
-
In the case where the basis for processing is the need to register, allow selection for a period necessary to select participants and expiration the related claims, and if the participant is qualified for the Forum, the data will be kept until the end of the Forum and the period of expiration of claims;
-
In the case of data on dietary preferences and food allergies (intolerance) of people who have not been qualified for the Forum, these data will be deleted immediately after the decision on the qualification for the Forum, and in the case of people qualified for the Forum – these data will be kept until the end of the Forum and for a period of 14 days from its completion;
-
When the basis for processing is the law – the period of their storage is specified by the law;
-
In the case of data processing based on the justified interest of the Controller – the data are stored for a period enabling its fulfilment or until an effective objection to the processing of data is submitted;
-
In the case of granted consent, the data will be kept for the duration of the implementation of the goal resulting from the granted consent or until it is withdrawn.
VII. Supervisory authority regarding personal data
Please be advised that the supervisory authority in the scope of compliance with the law in relation to the processing of personal data is the President of the Office for Personal Data Protection.
VIII. Rights of data subjects
You have the following rights under the terms set by law:
-
Access to your personal data and their rectification – in accordance with Article 15 and 16 of the GDPR;
-
To delete personal data – in accordance with Article 17 of the GDPR;
-
Restrictions on the processing of personal data – in accordance with Article 18 of the GDPR;
-
Transfer of personal data – in accordance with Article 20 of the GDPR;
-
Objection to their processing in the event of data processing on the basis of a legitimate interest – in accordance with Article 21 of the GDPR;
-
To file a complaint to the supervisory body – the President of the Office for Personal Data Protection – pursuant to Article 77 of the GDPR;
-
If the processing takes place on the basis of the granted consent, the consent may be revoked at any time, which does not affect the lawfulness of data processing, which was carried out on the basis of consent before its withdrawal.
IX. Reporting requests related to the exercise of rights
A request for the exercise of rights related to personal data may be submitted:
-
In the form of correspondence to the following address: National Maritime Museum in Gdańsk, ul. Ołowianka 9/13, 80-751 Gdańsk;
-
By e-mail, to the following address: ochrona.danych@nmm.pl;
-
At the headquarters of the National Maritime Museum in Gdańsk, ul. Ołowianka 9/13, 80-751 Gdańsk.
