Digital file order form

(if you are unable to provide a link, please include a description of the photo)
(e.g., name of an individual / name of organisation / library / cultural centre / museum)
(temporary exhibition / permanent exhibition / publication in a journal or book / publication on social media / research or academic purpose / educational / other – please specify)
(e.g., exhibition title and description / publication title and publisher / nature of the social media post, e.g., commemoration of the events of March 1968)
I hereby give my consent for my personal data included in this form to be processed by the POLIN Museum of the History of Polish Jews for the purpose of verifying the completed questionnaire for ordering digital files from the POLIN Museum collections and providing the requested files.

Disclosure obligation resulting from the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR").

  1. The Controller of your personal data is the POLIN Museum of the History of Polish Jews, hereinafter referred to as the Museum or Controller, with its registered office in Warsaw (00-157) ul. Anielewicza 6. The Controller can be contacted in writing, by post, writing to the address of our registered office.
  2. The Data Protection Officer has been appointed at the Museum. The Data Protection Officer appointed by the Administrator supervises the correctness of personal data processing. The Data Protection Officer can be contacted by post at the following address: ul. Anielewicza 6, 00-157 Warsaw, via e-mail address: [email protected] or telephone 22 471 03 41.
  3. Your personal data will be processed for the purpose of verifying the completed questionnaire for ordering digital files from the POLIN Museum collections and providing the requested files.
  4. The legal basis for the processing of your personal data is your consent (Article 6( 1)(a) of the GDPR).
  5. The recipients of your personal data are entities to whom the Controller entrusts tasks that require the processing of data (data processors). In accordance with applicable law, the Controller may transfer data to entities processing it on behalf of the Controller under data processing agreements (e.g., advisors, auditors, IT service providers), as well as to other entities authorised under applicable regulations (e.g., courts, law enforcement authorities) — based on a legally justified request.
  6. Your personal data is not transferred to “Third Countries”, i.e., outside the European Economic Area (EEA), nor to international organisations.
  7. The data will be stored for the period necessary to achieve the purposes specified above, but no longer than until the given consent given is withdrawn.
  8. You have the right to access the content of your data and, subject to the provisions of law, the right to rectify, delete or limit its processing.
  9. You have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out based on consent before its withdrawal. For evidential purposes, the Museum requests that the withdrawal of consent be made in writing to the address (Warsaw 00-157, ul. Anielewicza 6) or electronically (by email to the address [email protected]).
  10. You will have the right to lodge a complaint with the supervisory authority in charge of personal data protection, i.e. the President of the Office for Personal Data Protection.
  11. Providing the data is voluntary, but necessary for the fulfillment of the purpose for which it is collected.
  12. Your personal data will not be processed in an automated manner, including profiling, without your explicit consent.
  13. You can find more information about how to exercise your rights, as described above, by contacting the Administrator or the Data Protection Officer in the manner specified in points 1 and 2.
  14. The Administrator makes every effort to ensure all physical, technical, and organisational measures are in place to protect personal data against accidental or intentional destruction, loss, alteration, unauthorized disclosure, use, or access, in accordance with all applicable regulations.