CONTACT / PERSONAL DATA PROTECTION
Based on Art. 14 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), we hereby inform you about principles under which your personal data are processed and about your related rights being in force since 25 May 2018.
1. The controller of your personal data is: Bałtycka Agencja Artystyczna BART, ul. Kościuszki 61, 81-703 Sopot, firstname.lastname@example.org, tel. (58) 555 84 40.
2. Contact data of the Data Protection Officer: email@example.com.
3. The data controller processes your personal data on the basis of applicable legal regulations / agreements / your consent / the controller’s legitimate interest.
4. Your personal data may be processed for the following purposes: fulfilling legal obligations by the data controller or performing duties in the public interest or as part of public authority vested in the data controller; performing agreements with business partners where processing is based on a natural person’s voluntary consent for any purpose and/or for the purpose of the controller fulfilling its legitimate interests.
5. In connection with the data processing for purposes referred to in Section 4 above, your personal data may be shared with: public authorities or entities performing public tasks or acting at request of public authorities to the extent and for purposes stemming from commonly applicable legal regulations, as well as other entities that process personal data on the basis of relevant agreements entered into with the data controller.
6. Your personal data will be stored: for the period necessary to achieve the goals set out in Section 4 above (including, without limitation, until the withdrawal of the consent) and thereafter for the period and to the extent required on the basis of commonly applicable legal regulations.
7. In connection with your personal data processing, you have the following rights: right to access your personal data, including the right to obtain copies of such data; right to rectification (correction) of your personal data if the data are incorrect or incomplete; right to erase your personal data (so called right to be forgotten) if: the data are no longer necessary for purposes they have been collected or otherwise processed, the data subject objected to the personal data processing, the data subject withdrew the processing consent and there is no other legal basis for the the data processing, the personal data are processed illegally, the personal data must be deleted to meet obligations set out by law; the right to restrict the personal data processing if: the data subject questions the accuracy of the personal data, the data processing is illegal and the data subject objects to the erasure of the data and requests to restrict the data, the data controller does not need the data any more for its own purposes, but the data subject needs them to identify, defend or pursue his/her claims, the data subject objected to the data processing until it is identified whether the data controller’s legitimate interest prevails over the basis for such an objection; the right to data portability if all of the following conditions are met: the data are processed on the basis of an agreement with the data subject or on the basis of the data subject’s consent, the processing is fully automated; the right to object to data processing if all of the following conditions are met: there are grounds relating to your particular situation if the processing is necessary for the performance of a task carried out for reasons of public interest or public authority by the data controller, the processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except for circumstances where the interests or basic rights and freedoms of the data subject prevail over the legitimate interests of the data controller, where the personal data must be protected, and in particular if the data subject is a child.
8. If the personal data are processed based on the data subject’s consent (Art. 6.1.a of the GDPR), you have the right to withdraw your consent at any time. The withdrawal of the consent is without prejudice to the compliance of the lawful processing based on the consent given before such withdrawal.
9. If you become aware of any illegal processing of your personal data by the data controller, you have the right to lodge a complaint with the Chairman of the Personal Data Protection Office.
10. If the personal data are processed based on the data subject’s consent, the data are submitted to the data controller voluntarily.
11. You must submit your personal data if the data are processed by law or on the basis of the agreement between the parties.
12. Your personal data may be subject to automated processing and may be profiled.