<
 
 
 
 
×
>
You are viewing an archived web page, collected at the request of United Nations Educational, Scientific and Cultural Organization (UNESCO) using Archive-It. This page was captured on 22:35:10 Sep 16, 2019, and is part of the UNESCO collection. The information on this web page may be out of date. See All versions of this archived page.
Loading media information hide

MEMORIAL AND MUSEUM

AUSCHWITZ-BIRKENAU

FORMER GERMAN NAZI
CONCENTRATION AND EXTERMINATION CAMP

Main page > GDPR

GDPR

INFORMATION ON THE PROCESSING OF PERSONAL DATA


Pursuant to the Regulation of the European Parliament and the EU Council 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/45/EC, hereafter “GDPR”, we wish to inform that:

  1. Data Administrator:

    The data Administrator is the Auschwitz-Birkenau State Museum in Oświęcim, ul. Więźniów Oświęcimia 20. Tax ID: 5490005549, REGON (National Official Business Register): 000276015 (hereafter the Museum).

  2. Data Protection Officer:

    The Museum has appointed a Data Protection Inspector, address: ul. Więźniów Oświęcimia 20, 32-600 Oświęcim, e-mail address: . Information on the Data Protection Officer is available at the Museum’s website in the tab “Contact/Safety Office”.

  3. Categories of personal data:

    The museum processes personal data obtained from data subjects. These include: identification data (video surveillance), data of visitors to the Museum, data necessary for the conclusion and performance of contracts, agreements, issuing certificates; data of applicants, users of the IT systems, libraries; data of persons participating in ceremonies and educational programs; data of TV crews, drone operators and journalist accreditations.

  4. Legal bases and purpose of data processing:

    Personal data may be processed by the Museum to implement its statutory activities:

    1. for recruitment purposes, pursuant to Article 6 sec. 1(c) of the GDPR,
    2. to conclude and perform contracts, agreements, pursuant to Article 6 sec. 1(b) of the GDPR,
    3. to implement application procedures, pursuant to Article 6 sec. 1(d) and (e) of the GDPR,
    4. to book entry passes to the Museum, pursuant to Article 6 sec. 1(b) of the GDPR
    5. to implement educational activities, pursuant to Article 6 sec. 1(e) of the GDPR,
    6. to carry out information activities, pursuant to Article 6 sec. 1(d) and (e) of the GDPR,
    7. to implement tasks in the scope of lending library resources, pursuant to Article 6 sec. 1(d) and (e) of the GDPR,
    8. to implement tasks related to the conduct of scientific research, pursuant to Article 6 sec. 1(d) and (e) of the GDPR,
    9. to implement tasks related to the organisation of celebrations, pursuant to Article 6 sec. 1(e) of the GDPR,
    10. to implement tasks related to the dissemination of the history of KL Auschwitz, pursuant to Article 6 sec. 1(d) and (e) of the GDPR,
    11. to implement exhibition activities, pursuant to Article 6 sec. 1(d) and (e) of the GDPR,
    12. to implement conservation activities, pursuant to Article 6 sec. 1(d) and (e) of the GDPR,
    13. to implement tasks related to the image of the Museum, pursuant to Article 6 sec. 1(d) and (e) of the GDPR,
    14. to implement tasks related to the organisation of celebrations, pursuant to Article 6 sec 1(e) of the GDPR,
    15. to implement tasks related to ensuring the safety of visitors and persons staying on the premises of the Museum (including video surveillance) - pursuant to Article 6 sec. 1(d) and (e) of the GDPR,
    16. to conduct investigations or secure claims, pursuant to Article 6 sec. 1(f) of the GDPR.
  5. Sharing of personal data:

    Your data may be transferred to entities processing them at the request of the Museum, e.g. sub-contractors, service providers, cooperating institutions, postal operators, couriers, banks, carriers, and entities authorised to obtain data under the existing law - only if they lodge a request based on relevant legal bases.

  6. Transfer of personal data to a third country:

    Personal data collected by the Museum will not be transferred to a third country unless the target country provides an adequate level of personal data protection on its territory, and the necessity to transfer data shall be based on appropriate legal bases.

  7. Data retention period:

    Your personal data will be stored for the period of:

    1. the recruitment process for vacancies and up to 6 months after its completion, and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from the regulations of the office and archives,
    2. implementation and validity of agreements and obligations - until the expiration of the right to claims, and upon its expiration for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives,
    3. implementation of the application procedures, archiving of documents in compliance with existing regulations of the office and archives,
    4. implementation of educational activities, for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives,
    5. implementation of information activities, for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives.
    6. implementation of tasks in the scope of lending library resources, until the expiration of the right to claims or validity of the account, and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives,
    7. implementation of tasks related to the conduct of scientific research, until the accomplishment of the intended goal, and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives.
    8. implementation of tasks related to the organisation of celebrations - until the accomplishment of the intended goal, and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives,
    9. implementation of tasks related to the dissemination of the history of KL Auschwitz, until the accomplishment of the intended goal, and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives,
    10. implementation of exhibition activities, until the accomplishment of the intended goal, and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives,
    11. implementation of tasks related to the image of the Museum, until the accomplishment of the intended goal, and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives,
    12. implementation of conservation activities, until the accomplishment of the intended goal, and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives,
    13. implementation of tasks related to ensuring the safety of visitors, persons staying on the premises of the Museum (including video surveillance),
    14. booking Entry Passesin the system, until the expiration of the right to claims or validity of the account in the system (depending on which date is longer), and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives,
    15. 30 days in the video surveillance system. In the case of investigation proceedings or investigations related to the safety of visitors, for a period necessary to perform the above activities,
    16. validity of the account in the online store or until the expiration of the right to claims (depending on which date is longer), and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives,
    17. in the database system for sending e-mail messages with information related to the activities of the Museum (newsletter) - until the consent of the data subject is revoked,
    18. in the journalists’ accreditation databases, and TV crew and drone operators databases - for 5 years following the date of registration in these databases, and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from regulations of the office and archives,
    19. in the databases of the Museum’s counterparties, until the accomplishment of the intended goal, and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from the regulations of the office and archives,
    20. implementation of tasks related to ensuring the safety of visitors, persons staying on the premises of the Museum, until the accomplishment of the intended goal, and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from the regulations of the office and archives,
    21. conducting the investigation or securing claims, until the expiration of the right to claims and upon its expiration, for a period necessary for the Museum to fulfil its legal obligations resulting from tax or accounting regulations, or the regulations of the office and archives,

    Personal data processed subject to a separate consent shall be stored until their revocation.

  8. Vested rights:

    In connection with the processing of your personal data by the Museum, you have the right to:

    1. access the content of your data, as well as to rectify, delete, restrict processing; the right to transfer data, object to data processing including profiling,
    2. withdraw consent at any moment and by any means, if your data is processed by the Museum based on consent, without affecting the legitimacy of processing, which was done before the withdrawal of consent.
    3. lodge a complaint to the Inspector General for Personal Data Protection, if you have reasons to believe that the processing of personal data violates the provisions of the GDPR.
  9. Requirement to provide data:

    Provision of personal data is a prerequisite for achieving the objectives set out in pt. 4. You are obliged to provide them; failure to do so will result in the inability to undertake actions aimed at implementing the objectives set out in pt. 4.

  10. Automated decision-making, including profiling

    The Museum does not profile personal data transferred to it.