INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA
In order to meet the requirements of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27th April 2016 concerning the protection of natural persons in relation with the processing of personal data and concerning the free flow of such data and the reversal of the directive 95/46/EC (GDPR), we set forth the rules of the processing of your personal data, and your related rights.
The rules below apply since 25th May 2018.
1. The Administrator of your personal data processed by the Polish Royal Opera is: the Director of the Polish Royal Opera, ul. Nowogrodzka 49, 00-695 Warszawa.
2. Should you have any questions about the manner and scope of the processing of your personal data in terms of the activities of the Polish Royal Opera, or about your rights, you may contact the Data Protection Inspector of the Polish Royal Opera at the addressiod@operakrolewska.pl.
3. The Data Protection Inspector – the Director of the Polish Royal Opera – processes your personal data on the basis of the applicable provisions of law, concluded agreements, and granted consents.
4. Your personal data are processed in order to:
a) fulfil the legal requirements of the Polish Royal Opera;
b) fulfil contracts concluded with the Opera’s contractors;
c) in all other cases your personal data are processed only on the basis of your prior consent and within the scope of this consent.
5. In relation to the processing of your personal data described in Pt. 4, the receivers of your personal data may be:
a) various bodies of public authorities and entities performing public tasks or operating on commission of the public authorities, within the scope and for the purposes resulting from the provisions of law.
b) other entities that process personal data on the basis of applicable contracts concluded with the Opera for which the Administrator is the Director of the Polish Royal Opera.
6. Your personal data will be stored for the period necessary to fulfil the purposes expressed in Pt. 4, and afterwards for the period and within the scope required by the provisions of applicable law.
7. In relation to the processing of your personal data, you are entitled to:
a) access your personal data and obtain their copy;
b) request your personal data be corrected, should they be incorrect or incomplete;
c) request your personal data be deleted (the “right to be forgotten”) in case when:
– the data are no longer necessary for the purposes for which they were collected or processed in any other way,
– the data subject raised an objection to the processing of their personal data,
– the data subject withdrew the consent to process their personal data, which is the basis for the processing of personal data and there is no other legal basis for the processing of personal data,
– your personal data is processed in an unlawful manner,
– your personal data must be deleted in order to meet the requirements of applicable law;
d) the right to request the restriction of the processing of personal data – in case when:
– the data subject questions the correctness of their personal data,
– the processing of personal data is illegal, and the data subject objects to the deletion of data and requires the data to be restricted instead,
– the Administrator no longer needs the data for their purposes, but the data subject needs the data to determine, defend, or fight for claims,
– the data subject raised an objection concerning the processing of the data, until it is determined whether the legally-justified basis of the administrator is precedent to the base of the claim;
e) the right to transfer data – in case when all the following conditions are met:
– the processing of data is based on an agreement signed with the data subject or on a consent of the data subject,
– the processing of data is automated;
f) the right to object to the processing of data – in case when all the following conditions are met:
– there will be reasons related to your particular situation, in case the data are processed on the basis of a task carried out for the benefit of the public interest, or within the Administrator’s exercising of public authority,
– the processing is necessary for the purposes resulting from the legally-justified interest carried out by the Administrator or a third party, except for the situation, in which the interest or basic rights of the data subject are precedent to the aforementioned interest and require the protection of personal data, especially when the data subject is a child.
8. In case when the processing of personal data is carried out on the basis of a consent for the processing of personal data (Art. 1, Par.1,Pt. A of GDPR), you are entitled to withdraw your consent at any given moment. The withdrawal does not influence the compliance of prior processing of data with the applicable law.
9. Should you find out that your personal data are being processed in an unlawful manner by the Polish Royal Opera, you may file a complaint to a supervisory authority competent in matters of personal data protection.
10. In case when the processing of personal data is carried out on the basis of the consent of the data subject, providing your personal data to the Administrator is voluntary.
11. Providing your personal data is mandatory when the premise for the processing of your personal data is a legal provision or an agreement between the parties.
12. Your data may be processed in an automated manner and will not be profiled.
