Privacy policy

INFORMATION ABOUT THE DATA ADMINISTRATOR AND ITS PROCESSING OF PERSONAL DATA

The administrator of your personal data is ARANEUS COMPANY , represented by Sebastian Wadycki, with headquarters in Wałbrzych, at Orkan 142A Street. Contact with the Administrator: kontakt@muzeumtortur.pl

The administrator runs a website at www.muzeumtortur.pl, hereinafter referred to as the Service.

Personal data, in accordance with this Privacy Policy, are all information about a natural person identified or identifiable through one or more specific factors, including device IP, location data, internet identifier and information collected through cookies or other similar technology.

Providing personal data for the purpose of purchasing tickets, as defined in the Online Ticket Sales Regulations, is voluntary, but is also a condition for concluding a sales contract. The consequence of not providing personal data will be the inability to purchase a ticket

The acronym of the RODO (known as GDPR , which refers to General Data Protection Regulations) should be understood as Regulation of the European Parliament and of the Council ( EU ) 2016/679 of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC.

The user, in accordance with this Privacy Policy, is any natural person visiting the Website or using the online ticket sales service.

The administrator selects and applies appropriate technical and organizational measures with due diligence to ensure the protection of personal data processed. Only persons duly authorized by the Administrator have full access to the databases.

The administrator protects personal data against disclosure to unauthorized persons, as well as against their processing in violation of applicable law.

USER RIGHTS

The Website User has the right to request:

access to his personal data, including a copy of his data ( art. 15 GDPR or – if applicable – art. 13 section 1 lit. f RODO (GDPR) ),

their correction ( art. 16 RODO (GDPR) ),
their removal ( art. 17 RODO (GDPR)),
restrictions on their processing ( art. 18 RODO (GDPR)),
data transfer to another administrator ( art. 20 RODO (GDPR)),

as well as the right to object to the processing of his data at any time:

for reasons related to the User’s special situation – regarding the processing of personal data concerning him, based on art. 6 clause 1 lit. f GDPR ( which is on the legitimate interests we pursue ), including profiling ( art. 21 paragraph. 1 GDPR );

if personal data are processed for the purposes of direct marketing, including profiling, to the extent that the processing is related to such direct marketing ( art. 21 paragraph. 2 GDPR ).

Contact us if you want to use your rights. You can express an objection to our use of ( cookies which you read below ) using the appropriate browser settings.

If you believe that your data is being processed unlawfully, you can lodge a complaint with the President of the Office for Personal Data Protection.

OBJECTIVES AND GROUNDS FOR THE PROCESSING OF PERSONAL DATA BY THE ADMINISTRATOR

Personal data will be processed in order to:

Performance of the contract for the provision of ticket sales services specified in the Online Ticket Sales Regulations ( pursuant to art. 6 clause 1 / b GDPR )

Basis: legal obligation related to accounting, obliging to process personal data ( art. 6 clause 1 /c GDPR )

Failure to provide data results in the inability to purchase an online ticket.

Contact via the contact form

Basis: 1 ) agreement or actions taken at the User’s request, aiming at its conclusion ( art. 6 clause 1 / b GDPR ) – if the inquiry or notification concerns a contract, which we are or may be a part 2 our legitimate interest in processing User’s data for communication with him ( art. 6 clause 1 /f GDPR ) – if the inquiry or application is not related to the contract

Failure to provide data results in the inability to answer the User’s request.

Browser settings or other similar activity allowing marketing activities

Purpose: direct marketing, consisting in displaying personalized ads ( more on this topic in the „ Profiling ” and „ Cookies ” ).

Basis: our legitimate interest in processing data for the above purpose ( art. 6 clause 1 /f GDPR ).

Failure to provide data results in the User’s unability to receive suggestions for products or services that he/she may be interested in.

Browser settings or other similar activity allowing analytical activities

Purpose: analysis of how the User uses and navies the Website, to adapt the site to the needs and behavior of Users ( more on this topic in section „ Analytical activities ” and „ Cookies ”) Basis: our legitimate interest in processing data for the above purpose ( art. 6 clause 1 / f GDPR ).

Failure to provide data will result in the User’s preferences regarding the use of the Website not being taken into account in the development of the Website.

User’s consent to receive marketing content from us ( e.g. information about special offers )

Purpose: sending marketing information, especially special offers

Basis: User’s consent for marketing activities ( art. 6 clause 1 lit. and GDPR )

Failure to consent results in the User not receiving marketing materials, including information about special offers.

Newsletter subscription
Purpose: sending the newsletter

Basis: contract for the provision of newsletter shipping service ( art. 6 clause 1 lit. b GDPR )

Failure to agree to receive the newsletter will mean that the User will not receive information relating to the Service.

PROCESSING TIME FOR PERSONAL DATA

As a general rule, data shall be processed for the duration of the provision of the service or the fulfilment of the order, until the withdrawal of the consent given or until an effective objection is raised against the processing of the data in cases where the legal basis for the processing is the legitimate interest of the Administrator.

The processing period may be extended if the processing is necessary for the establishment, assertion or defence of possible claims, and thereafter only if and to the extent required by law. After the expiry of the processing period, the data shall be irreversibly deleted or become anonymous.

PROFILING

As part of the Service, we carry out profiling – if the User allows us to do so. This profiling consists of automatically assessing what products or services the User may be interested in, using information about the content the User displays. As a result, advertisements for products or services displayed within the online services used by the User will be more tailored to the User’s needs.

ANALYTICAL MEASURES

We conduct analytics on the Website to make it more intuitive and accessible – if you allow us to do so. As part of this analysis, we will take into account how you navigate the Website, such as how long you spend on a particular subpage. This allows us to adjust the layout and design of the Website and its content to meet your needs.

SYSTEM LOGS

The User’s activity on the Website, including his/her personal data, may be recorded in system logs. The information collected in the logs is processed in connection with the provision of services. The Administrator also processes them for technical purposes – in particular, data may be temporarily stored and processed in order to ensure security and correct functioning of IT systems, e.g. in connection with making security copies, testing changes in IT systems, detecting irregularities or protecting against abuse and attacks.

DATA SECURITY

When processing Users’ personal data, we apply organisational and technical measures in accordance with the relevant legislation, including the use of connection encryption with an SSL certificate.

COOKIES

Our Website, like most websites, uses so-called ,,cookies”

These files:

•are saved in the memory of the User’s device ( computer, telephone, etc. );
do not change the user’s device settings

This Website uses ,,cookies” for statistical and marketing purposes.

Most browsers allow users to control their cookies in their preference settings. Users should read the privacy policies of these browsers to understand their rules on the use of cookies. Restricting the setting of cookies may impair the overall functionality of the use of the muzeumtortur.pl website.

DATA RECIPIENTS

In connection with the implementation of services, personal data will be disclosed to external entities, including in particular those responsible for operating IT systems, entities such as payment operators, entities providing accounting, legal, audit and consulting services, and also to the relevant public authorities to the extent that we are required to provide them with data.

Personal data will not be transferred to third countries or international organizations.

FOR AMENDING THE PRIVACY POLICY

The privacy policy is continuously reviewed and updated as necessary.