Purposes and legal bases for processing
Your personal data will be processed based on:
1. Article 6(1)(b) GDPR – processing is necessary for the performance of a contract to which the data subject is a party (i.e. Science Centre and Planetarium Visitor Regulations), for the purpose of processing a ticket refund;
2. Article 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation to which the Controller is subject;
3. Article 6(1)(f) GDPR – processing is necessary to pursue the legitimate interests of the Controller, namely to pursue any claims related to the concluded contract.
Data retention period
Your personal data will be processed for no longer than is necessary for the purposes for which it is processed and to comply with legal obligations, i.e., accounting data will be processed for a period of 5 years from the date of its collection. Data may also be processed to establish, pursue, or defend against potential claims until the expiry of the relevant limitation periods.
Recipients of data
Your personal data may be disclosed to entities providing services to CSC (such as banks, postal service providers, and IT system providers) as well as to entities authorised to receive such data under applicable law.
Rights of data subjects
In the situations specified by the GDPR, you have the right to:
1. access your data;
2. request rectification of your data;
3. request erasure of your data;
4. request restriction of processing;
5. object to the processing of your data on grounds relating to your particular situation, in accordance with Article 21 GDPR. You may exercise the above rights by contacting: zwroty@kopernik.org.pl.
You also have the right to lodge a complaint with the Personal Data Protection Office (Urząd Ochrony Danych Osobowych) if you believe that the processing of your personal data infringes the GDPR.
Is the provision of personal data mandatory?
Providing your personal data is a condition for submitting a ticket refund request. Without providing personal data, we cannot process the refund.
Transfer of personal data to third countries
Your personal data will not be transferred outside the European Union.
Automated decision-making, including profiling
Your personal data will not be processed by automated means (including profiling) in a manner that would produce legal effects concerning you or similarly significantly affect you.
We inform you that the Controller has appointed a Data Protection Officer (DPO). The DPO may be contacted regarding any matter related to the processing of personal data at: iod@kopernik.org.pl.