GENERAL INFORMATION ON PROTECTION OF PERSONAL DATA PROCESSED BY OPERA KRAKOWSKA (THE KRAKOW OPERA)
The Personal Data Controller is the Krakow Opera in Krakow with its registered office at ul. Lubicz 48, 31-512 Krakow operating on the basis of an entry in the cultural institutions’ registry book maintained by the Local Government of the Małopolska Province No. RIK 2/99. Contact data: e-mail: firstname.lastname@example.org, tel.: 12 296 61 01 (02), by post: ul. Lubicz 48, 31-512 Krakow.
We have appointed a Data Protection Officer (DPO). Contact with the DPO is possible using the above contact data of the Controller, adding a postscript “To the Data Protection Officer” or by e-mail to the address: email@example.com.
The Opera uses appropriate protection and procedures so that the processed personal data are safe.
The Opera gathers data only within the scope necessary to implement the assumed detailed objective, i.e., co-creating and promoting the heritage of the Polish national opera as well as worldwide opera, operetta, ballet, musical works and other forms of cultural activities.
Personal data are processed in a partially automated way and in a way other than for the period necessary for the implementation of the abovementioned objectives, no longer than is necessary, and, in particular, for the time necessary to protect the information in the event of a legal need to present facts or until the expiration of potential claims. The periods for storing personal data at the Opera have been regulated in detail with the documents: “Office Manual of the ‘Krakow Opera’ in Krakow” and “Uniform material list of files of the Krakow Opera in Krakow”.
The provision of data is voluntary. However, their absence may prevent us from implementing the objectives for which data are provided to us. When processing of personal data takes place on the basis of a consent of a person, their provision is voluntary and as a result, this person has the right to withdraw this consent at any time. This withdrawal does not affect the compliance of processing which took place on the basis of the consent before its withdrawal. If the reason for processing personal data are the provisions of the applicable law or an agreement concluded between the parties, their provision is necessary for the implementation of the obligations resulting from them.
The gathered data are processed only by the Opera and entities and persons acting for and on behalf of the Opera. The recipients of the personal data provided to the Opera shall only include entities authorised to acquire personal data on the basis of the provisions of applicable law. The gathered data may be entrusted for processing to third parties within the framework of the services implemented by them on the basis of agreements for entrusting personal data, and these entities are also obliged to maintain the confidentiality of the processed data. The data recipients may include: · Persons authorised by the Opera to process data within the framework of performing their official duties; · Other entities, if it is necessary to fulfil obligations resulting from the agreements concluded or the provisions of law, or exercise the Opera’s legal rights; · Entities providing postal and courier services, banks, insurers, law offices, tax advisors; · Entities to which we outsource services related to the processing of personal data, for example, IT service providers, including the providers of software necessary to process the data, courts and public organs, with which the Opera is obliged or authorised to share your data.
The legal bases for personal data processing are: · art. 6 sec. 1 (A) GDPR – consent of the data subject; or · art. 6 sec. 1 (B) GDPR – the necessity of processing for the implementation of the agreement or for taking activities before the conclusion of the agreement; or · art. 6 sec. 1 (C) GDPR – the necessity of processing for the fulfilment of the legal obligation of the controller; or · art. 6 sec. 1 (E) GDPR – the necessity of processing for the implementation of the general interest task; or · art. 6 sec. 1 (F) GDPR – the necessity of processing for the purposes resulting from legally justified interests.
You have the right to access the personal data, to their rectification and supplementation or deletion, in the event of circumstances provided for in art. 17 of the GDPR, the right to restriction of processing of personal data, in cases indicated in art. 18 of the GDPR, the right to transfer your personal data, which we process in a partially automated way on the basis of an agreement or a consent, the right to object to processing, and the right to lodge a complaint with a supervisory authority involved in personal data protection, i.e., the President of the Data Protection Office (Data Protection Office ul. Stawki 2, 00-193 Warsaw, tel. 22 531-03-00, e-mail: firstname.lastname@example.org).
You have the right to object to the processing of your personal data for reasons resulting from our legally justified interests. The right to object to the processing of your data is not valid if your data are processed on the basis of art. 6 sec. 1 (C) of the GDPR.
We do not transfer your data outside the territory of the EU/European Economic Area.
Within the scope of processing of your data, automated decision-making, including profiling, will not take place,