GDPR

The General Data Protection Regulation for the Museum of Modern Art Online Store in Warsaw.

1. Personal data administrator

The administrator of your personal data is the Museum of Modern Art in Warsaw, 103 Marszałkowska St., 00-110 Warsaw. You can contact the administrator via e-mail address: iod@artmuseum.pl.


2. Purposes of data processing

Customers' personal data shall be processed in order to:
1. Execution of the sales contract, including order processing, invoicing, payment processing and delivery of goods.
2. Handling complaints and returns.
3. To conduct marketing activities, provided that the Customer agrees.
4. To fulfill legal obligations incumbent on the Administrator.


3. Legal basis for data processing

Personal data are processed on the basis of:
1. Article 6(1)(b) GDPR - for the purpose of performing a contract to which the Customer is a party.
2. Article 6(1)(c) GDPR - to fulfill legal obligations.
3. Article 6(1)(a) GDPR - for direct marketing, if the Customer has consented to it.


4. Recipients of the data

Personal data may be shared with:
1. courier companies for delivery purposes.
2. Entities supporting us in IT support and business operations.
3. Public authorities, if required by law.


5. Storage of data

Personal data will be stored for the time necessary to fulfill the purpose for which they were collected, and for the time required by law (especially tax and accounting law), for a maximum of 7 years after the end of the contract.


6. Rights of data subjects

The customer has the right to:
1. To access their personal data and obtain a copy of it.
2. To rectify the data if it is incorrect or incomplete.
3. Deletion of data (right to be forgotten), unless the data are necessary for the fulfillment of the contract or legal obligations incumbent on the Administrator.
4. Restriction of data processing in certain situations.
5. Transfer of data to another Administrator.
6. To lodge a complaint with the President of the Office for Personal Data Protection if he considers that the processing of his data violates the provisions of the GDPR.


7. Submission of data

Provision of personal data is voluntary, but necessary for the conclusion of the contract and its execution. Failure to provide data may result in the inability to fulfill the order.


8. Changes to the Regulations

The Administrator reserves the right to make changes to the RODO Regulations. Changes will be published on the Store's website.


9 Contact.

If you have any questions about the processing of your personal data, please contact us at e-mail address: iod@artmuseum.pl.