Privacy policy

Privacy Policy

1. Information about the Personal Data Controller

The controller of personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”) is Muzeum Świat Grawitacji sp. z o.o., with its registered office in Warsaw, 02-203, ul. Kurhan 6, NIP 9512409323, REGON 364010338, KRS 0000608971, operating the Museum of Gravity in Warsaw, 00-236, ul. Świętojerska 5/7 (“Museum”).

Natural persons whose personal data are collected or processed are referred to as “Users.”

2. Contact with the Personal Data Controller

The Personal Data Controller provides the following contact options for Users:

By mail:
Muzeum Świat Grawitacji Sp. z o.o.
ul. Świętojerska 5/7
00-236 Warsaw, Poland

By email:
muzeum@muzeumgrawitacji.pl

3. Personal Data

3.1. The Personal Data Controller collects personal data obtained via the websites
www.muzeumgrawitacji.pl and muzeumgrawitacji.tikecik.pl that are necessary for making reservations and selling tickets in the reservation system, selling products in the online sales system, or sending personalized invitations to the exhibition (Art. 6(1)(b) GDPR), conducting direct marketing of its own products (Art. 6(1)(f) GDPR), voluntarily sending advertising or marketing materials of the Gravity Museum (Art. 6(1)(a) GDPR), and fulfilling legal obligations related to accounting for transactions and storing personal data (Art. 6(1)(c) GDPR).

3.2. During a User’s visit to our website, data relating to the visit are automatically collected, such as the IP address, domain name, browser type, operating system type, etc.

3.3. The User is not obliged to provide personal data; however, failure to provide them will result in the Personal Data Controller refusing to perform the transaction or action for which the processing of such data is necessary.

3.4. With regard to the sale or reservation of tickets and personalized invitations, the following data are processed: first name and last name, email address, phone number, and data required for issuing an invoice or proof of purchase.

3.5. The Personal Data Controller collects only the data necessary for processing within the scope of legitimate interest, in order to enable use of the website and reservation and sale of tickets or products and, after obtaining the User’s consent, for marketing activities.

4. User Consent to Commercial Information

4.1. The Personal Data Controller may use the User’s personal data to send commercial information or marketing materials only after obtaining the User’s prior consent.

4.2. The User gives the consent referred to in section 4.1 by selecting the appropriate checkbox on the website www.muzeumgrawitacji.pl during reservation or purchase on the website or within the Museum’s reservation system.

4.3. If the User gives consent, marketing materials will be sent to the User’s email address.

5. User Rights

5.1. The User has the right to access their personal data and to request their modification, rectification, correction, deletion, restriction of processing, to object to processing, and to withdraw consent to the processing of personal data, except for data necessary for the Personal Data Controller to fulfill its legal obligations.

5.2. The User may withdraw consent to receive marketing materials and commercial information at any time.

6. Cookies and Tracking Technologies

The website uses information stored by the server on the User’s end device, which is then read each time the web browser connects to the website (Cookies), as well as tracking scripts for the purpose of analysis and statistical monitoring of visits to the Gravity Museum website and for marketing purposes.

The User may change browser settings at their discretion in order to limit or refuse the acceptance of Cookies and to receive notifications about their transmission. Refusing Cookies may limit or hinder the use of the Gravity Museum website.

Failure to change the settings of software that uses Cookies on the website www.muzeumgrawitacji.pl constitutes, in accordance with Article 173(2) of the Polish Telecommunications Law, consent to the use of Cookies by this website and its subpages.

7. Processing of Personal Data

7.1. The Personal Data Controller processes the User’s personal data only for the purposes specified in this Privacy Policy.

7.2. Personal data may be transferred by the Controller to other entities, in particular: the online payment operator, reservation system operator, IT and hosting service providers, email service provider, courier service provider, accounting office, and other entities authorized to receive personal data under applicable law.

7.3. The Personal Data Controller transfers personal data to other entities in accordance with applicable legal provisions.

7.4. The Personal Data Controller ensures the protection of data by applying technical and organizational measures appropriate to the risk of unauthorized data leakage.

7.5. The Personal Data Controller maintains a breach notification procedure that includes a register of incidents and notifications to competent authorities regarding breaches.

7.6. The Personal Data Controller does not use automated decision-making that results in profiling Users or refusing or limiting their access.

7.7. The User may contact the Personal Data Controller using the contact details described in section 2, including reporting a personal data breach.

7.8. A User whose rights have been violated may lodge a complaint with the Inspector General for Personal Data Protection.

8. Storage of Personal Data

8.1. Personal data will be stored by the Personal Data Controller for the period necessary to complete the transaction and handle post-sale complaints, but no longer than 5 years.

8.2. Personal data for marketing purposes will be processed from the moment the User grants consent until the consent is withdrawn or the User objects to such processing.