GDPR Information Clause

Who processes your personal data?

The Data Controller is the Fr. Emil Drobny Rybnik Museum (hereinafter "the Museum"), located at No. 18 Rynek, 44-200 Rybnik.

Why do we process your personal data?

Primarily to enable you to access the Museum’s collections and attractions, in accordance with Art. 6(1)(b) of the GDPR.

If you request a VAT invoice, the Museum must issue it based on applicable legal regulations, requiring additional information under Art. 6(1)(c) of the GDPR.

Your image and other characteristics are processed via video surveillance (CCTV). This data is processed to ensure the safety of visitors and the protection of property, as permitted by the Act on Gmina Self-Government and in accordance with Art. 6(1)(c) and (e) of the GDPR. Surveillance covers common areas of the Museum facilities and, with regard to the Juliusz Education Centre, also the surrounding grounds.

Your data is also processed within our IT environment to ensure system security and functionality (e.g., backups, system testing, fault detection, and protection against cyberattacks) under Art. 6(1)(c) and (f) of the GDPR.

Providing your personal data is mandatory; failure to do so will prevent you from accessing the Museum’s collections and attractions. Your data will not be subject to profiling (automated inference of specific characteristics). Regardless of the legal basis for this, the Museum is committed to protecting your privacy and ensuring data security.

What are your rights with regard to the processing of personal data by the Museum?

In accordance with the regulations and ethical principles in force at the Museum, have the right to:

know what data we process and what we do with it, e.g. by receiving a copy of it; however, your right to access CCTV recordings must not infringe on the rights and freedoms of others within the terms of the GDPR. The Museum does not have or use software to anonymise the images of persons captured on CCTV recordings,
correct your data should you find any inaccuracies,
transfer your data to another entity, provided that this is legally permissible and technically practicable,
restrict the processing of your data or even request its removal if and when this is justified by law.

If you believe that the way the Museum processes your personal data is in breach of your rights, please notify us. We will make every effort to respond to your comments and suggestions and clarify any doubts you may have. You also have the right to submit a complaint to the supervisory authority, i.e. the President of the Personal Data Protection Office.

Who can access your data?

Personal data may only be shared with entities authorised to receive information under generally applicable laws.

How long is your data stored?

Data is stored only for the period necessary to fulfill the purpose for which it was collected. Afterwards, it may be kept solely for archiving purposes as required by law.

CCTV recordings are stored for no longer than 30 days, unless they serve as evidence in legal proceedings or the Museum becomes aware they may serve as evidence; in such cases, such recordings are kept until the final conclusion of the proceedings.