Privacy Policy

  1. This Privacy Policy sets out the rules for collecting, processing and using information, including personal data of users of the website (hereinafter referred to as the “Website”).
  2. The Controller of the Website users’ data is the Copernicus Science Centre with its registered office in Warsaw (00-390) at 20 Wybrzeże Kościuszkowskie Street (hereinafter referred to as “CNK”). You can contact the Controller at
  3. CNK treats the protection of privacy, including the protection of the personal data of Website users, as its priority. CNK makes every effort, including applying precautions and security measures such as encrypting the transmission between users and the web server and securing the transmission between the web server and the CNK cash register system by using a dedicated encrypted VPN connection. CNK also uses the separation of the database server from the external network so that the personal data provided by the Website users is protected against loss, destruction, disclosure or access by unauthorised persons.
  4. Using the Website may involve the collection by the CNK of user data necessary to operate all Website features properly. In particular, information about the user's location, the IP address of the device they use, their activity on the Website, and so-called cookies may be collected. The Website user can learn more about the rules of collecting and using cookies by reading separate information on the Website.
  5. CNK does not use the data referred to in Point 4 to determine the identity of Website users. If this data, alone or in combination with other information, would enable the identification of the user, it will be treated as personal data, and the rules described in Points 6 to 16 below will apply.
  6. The Website will process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”).
  7. The purposes and basis of using the data:
    1. As part of your use of the Website, your personal data is processed for the following purposes:

      1. a. to respond to complaints related to the provision of Services by the Collector - the legal basis is compliance with a legal obligation to which the Controller is subject (Article 6 (1) (c) of the GDPR);
      2. b. to improve the functionality and speed of the website, the legal basis for the processing of data collected using cookies and other technologies necessary for the proper functioning of the Website is the legitimate interest of the Collector (Article 6 (1) (f) of the GDPR), and otherwise (including to the extent that we use cookies for advertising or analytical purposes) – your consent (Article 6 (1) (a) of the GDPR)
      3. c. to establish, pursue, or defend against claims—the legal basis for data processing is the necessity of processing to pursue the Controller’s legitimate interest (Article 6 (1) (f) of the GDPR); the Controller’s legitimate interest is to protect against claims related to the use of the Website.
    2. In addition, depending on the service you use on the Website, we process your personal data for the following purposes:
      1. A. Registration on the Website
        Your personal data is processed to provide services (features) available on the Website and to perform the Controller’s obligations as a website provider. The basis for processing your personal data is the necessity of processing for the performance of the agreement for the provision of Website services (Article 6 (1) (b) of the GDPR).
      2. B. Newsletter
        Your personal data is processed based on Article 6 (1) (f) of the GDPR in order to deliver the ordered Newsletter to the provided e-mail address (which constitutes the implementation of our legitimate interest understood as the marketing of our goods and services and the exercise of the rights resulting from your consent referred to in the Act on the provision of electronic services and the Telecommunications Law). Your personal data will also be processed in order to fulfil the obligations arising from the Act on the provision of electronic services and the Telecommunications Law (under Article 6 (1) (c) of the GDPR).
      3. C. Contact with the Controller
        Your personal data is processed to prepare answers to submitted questions and conduct correspondence. The basis for processing your personal data is the necessity of processing to pursue our legitimate interest, which is the ability to answer the questions asked (Article 6 (1) (f) of the GDPR).
      4. D. Social media
        Your personal data is processed to conduct ongoing correspondence using the tools provided by the social media used and to conduct other marketing activities in connection with promoting various events. The basis for the processing of your personal data is the Controller’s legitimate interest, which consists of promoting its own brand and improving the quality of provided services (Article 6 (1) (f) of the GDPR).
  8. Data is collected to ensure the User can use all the Website’s features.
  9. Period of data processing.
    We will use your personal data:

    1. a. for the duration of your use of the Website to the extent that your personal data are processed to provide a specific service and fulfil the Controller’s obligations,
    2. b. in relation to cookies,
    3. c. for a period not longer than the periods of limitation in civil and criminal matters determined in accordance with the applicable provisions of Polish law to the extent that your personal data will be processed to determine, pursue or defend against claims.
    4. d. until you withdraw your consent, to the extent that your data is processed to send the Newsletter.
    5. e. until you object to the processing of your data in relation to social media.
  10. Personal data may be entrusted to entities providing services to the CNK and made available to entities authorised under the law.
  11. Everyone has the right to access their data, rectify it, delete it, limit its processing, and request the transfer of data.
  12. You have the right to object to the processing of your data.
  13. Where data is processed based on consent, you have the right to withdraw your consent at any time.  Withdrawal of consent does not affect the lawfulness of data processing carried out based on consent before its withdrawal.
  14. The rights listed in items 11-13 can be exercised by contacting the address of the Controller’s registered office or by writing to the following email address:
  15. The User has the right to lodge a complaint against the CNK proceedings with the supervisory authority, the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
  16. Providing personal data is voluntary but may be necessary to use all of the Website’s features.
  17. Decisions regarding the personal data provided will not be made in an automated manner.
  18. As a rule, using the Website’s features does not require creating an account and logging in to the Website.
  19. Creating an account on the Website is necessary to purchase tickets for events organised by the CNK. The Website also allows you to subscribe to a Newsletter with information about the CNK activities, whereby, when the Controller obtains the User’s consent to send the Newsletter, they also acquire the ability to process your data based on consent. Using the Website features in the scope referred to above requires providing personal data indicated in the registration forms. Detailed rules for processing the above-mentioned data and users’ rights in connection with the provision of data include information clauses found in registration forms.
  20. This Privacy Policy applies only to the Website. CNK is not responsible for the rules and privacy policies of websites accessed by the Website user via links provided on the Website.
  21. Any changes to this Privacy Policy will be communicated to the Website’s users using the information posted therein.
  22. Please be advised that the Controller has appointed a Data Protection Officer (DPO), namely Ewa Chrabąszcz. You can contact the DPO in any matter related to the processing of personal data by writing to the following email address: