1. GENERAL INFORMATION
1.1 This Privacy Policy (hereinafter referred to as the "Policy") sets out the rules for the processing of personal data of users of the website (hereinafter referred to as the "Users") operating at www.internationaleonline.org (hereinafter referred to as the "Website").

2. PERSONAL DATA CONTROLLER, AND PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
2.1 The controller of personal data within the meaning of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”) is Muzeum Sztuki Nowoczesnej in Warsaw (00-124 ), address: Pańska 3, NIP (tax identification number): 5252341832, REGON: 140187435, entered in the register of cultural institutions kept by the capital city of Warsaw under number RIK/1/2023 (hereinafter referred to as the “Controller”) in the following scope:
2.2 In respect of personal data of the Users:
2.2.1 In the scope necessary for the purposes resulting from the legitimate interests pursued by the Controller, in particular ensuring the proper operation of the Website, the possibility of navigating the Website and using its basic functions, as well as for the establishment, exercise or defense of any legal claims pursuant to Article 6(1)(f) of the GDPR;
2.2.2 In the scope necessary for marketing purposes, such as personalization of advertisements and content based on the User's interests, measuring the performance of advertisements and content and obtaining insight into recipients who have seen advertisements and content pursuant to Article 6(1)(a) of the GDPR.
2.2.3. In the scope necessary for the performance of a task carried out in the public interest or in the exercise of official authorities vested in the Controller pursuant to Article 6(1)(e) of the GDPR.
2.3. In respect of personal data of the Newsletter subscribers:
2.3.1. In the scope necessary for the purposes of informing about news, events, changes, offers, updates in the scope of the Controller's activities, resulting from the legitimate interests pursued by the Controller under Article 6(1)(f) of the GDPR – in case of giving consent to receive information via electronic means of communication to the e-mail address provided.

3. CONTACT IN MATTERS RELATED TO THE PROCESSING OF PERSONAL DATA3.1 In matters related to the protection of personal data, the Controller can be contacted by e-mail to the following address: iod@artmuseum.pl or by post to the following address: Muzeum Sztuki Nowoczesnej w Warszawie, ul. Pańska 3 00-124 Warszawa, phone number: +48 22 596 40 10, email address: info@artmuseum.pl

4 RECIPIENTS OF PERSONAL DATA
4.1. Recipients of personal data may be - only in cases where it is necessary and to the extent necessary - entities cooperating with the Controller in the scope of services provided to the Controller and supporting the Controller's current operations, in particular entities providing IT, marketing and legal services. The recipients of personal data may also be the Partners indicated in sec. 8.2 of the Policy.
4.2. Personal data will not be transferred to third countries or international organizations.

5. PERSONAL DATA STORAGE PERIOD
5.1. If data is processed on the basis of a voluntarily given consent, personal data will be stored until the consent to the processing of personal data is withdrawn for specific, explicit, and legitimate purposes. The consent to the processing of personal data may be withdrawn at any time. The consent to the processing of data may be withdrawn by contacting the Controller pursuant to section 3 above. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
5.2. If processing is necessary for the purposes resulting from the legitimate interests pursued by the Controller or by a third party, your personal data will be processed for a period not longer than it is necessary for the purposes for which the data is processed or until you object to the processing of personal data in the scope of personal data processing for these purposes, for reasons related to your particular situation, unless the Controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
5.3. If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authorities vested in the Controller, your personal data will be processed until such time as the data subject raises an objection to their processing.

6 IS THE PROVISION OF PERSONAL DATA OBLIGATORY?
6.1 If personal data are processed on the basis of the consent of the data subject, the provision of personal data is voluntary.
6.2 If personal data is processed for purposes resulting from the legitimate interests pursued by the Controller or by a third party, the provision of personal data is voluntary, but necessary to achieve these purposes.
6.3 If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authorities vested in the Controller the provision of personal data is voluntary, but necessary to achieve these purposes.

7 RIGHTS WITH REGARD TO THE PROCESSING OF PERSONAL DATA
7.1 The data subjects have the right of access to their personal data, right to rectification or erasure of their personal data, right to restriction of processing of their personal data and right to personal data portability - in the scope of data processing on the basis of consent or for the purposes necessary to perform the contract and by automated means, and the right to object to processing of personal data - in the scope of data processing for purposes resulting from the legitimate interests pursued by the Controller, unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subjects, or grounds for establishing, pursuing or defending claims.
7.2 In the case of processing personal data on the basis of the consent of the data subjects, they have the right to withdraw consent to the processing of personal data at any time, without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal. The consent to the processing of data may be withdrawn by contacting the Controller pursuant to section 3 above.
7.3 The data subject also has the right to lodge a complaint with the supervisory authority for the protection of personal data - the President of the Personal Data Protection Office (Stawki 2, 00-193 Warsaw).

8. COOKIES
8.1 The Website uses cookie files (i.e. small text files sent to the User's device, identifying it in a way necessary to simplify or cancel a given operation) in order to collect information related to the use of the Website by the User.
8.2 Information, including personal data, obtained in connection with the use of cookies on the Website, is processed by the Controller as the Website's service provider and may be processed by its Partners, the list of which is available in Cookie Settings panel (hereinafter "Partners").
8.3 The Website uses the following types of cookies due to the purpose of their use:
8.3.1 Necessary cookies - they are used to ensure the proper operation of the Website, in particular the ability to navigate the Website and use its basic functions. They are necessary for the operation of the Website and cannot be turned off, as disabling them would prevent the Website from functioning. The basis for the processing of personal data obtained in connection with the use of necessary cookies is the necessity for the purposes described above resulting from the legitimate interests pursued by the Controller (Article 6(1)(f) of the GDPR);
8.3.2 Functional cookies: These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
8.3.3 Analytics cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
8.3.4 Advertising cookies: These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

8.4 Types of cookies according to the storage period in the browser:
8.4.1 Session cookies - they are stored on the User's device and remain there until the end of the browser session. The saved information is then permanently deleted from the device memory. The session cookie mechanism does not allow the collection of any personal data or any confidential information from the User's device;
8.4.2 Persistent cookies - they are stored on the User's device for the time specified in the cookie parameters or until they are deleted by the User. Ending a browser session or turning off the device does not delete them from the User's device. The persistent cookie mechanism does not allow the collection of any personal data or any confidential information from the User's device.
8.5 The types of cookies by origin:
8.5.1 first-party cookies - set by the Website's servers.
8.5.2. third-party cookies - set by web servers of parties other than the Website.
8.6 Cookies are used on the Website based on the User's consent expressed by selecting the appropriate option when using the Website, adjusting the cookie choices via the Cookie Settings panel or by properly configuring the User's browser settings. Expressing consent to the use of cookies on the Website is voluntary.
8.7. Before giving consent to the use of cookies, the User is informed about the purposes of using cookies and about the possibility of changing cookie settings at any time.
8.8 The User may withdraw the prior consent to the use of cookies and change the cookie settings at any time via the Cookie Settings panel, as well as delete cookies from the User's device memory.
8.9. In addition, the User may at any time change the settings for cookies used on the Website in the settings of the web browser. Detailed information on the possibility and methods of changing cookie settings in the most popular web browsers can be obtained at:
a) Google Chrome
b) Firefox
c) Internet Explorer
d) Opera
e) Safari