Privacy Policy

At the Malbork Castle Museum, all personal data is processed in conformity to applicable European Union law provisions (in particular to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th of April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”/”the Regulation”), the currently applicable Personal Data Protection Act, implementation laws issued on the basis thereof, and sectoral regulations.

1. Data Controller and Data Protection Officer (DPO)
The Malbork Castle Museum is the appointed data controller, its registered seat in Malbork (82-200), Poland, at Starościńska No.1, recorded in the Register of Institutions of Culture kept by the Minister of Culture and National Heritage as No. RIK 13/92, and in the State Register of Museums kept by the said Minister as No. PRM/17/98. The Museum is represented by its Director. The duly appointed Data Protection Officer can be contacted at: inspektor@zamek.malbork.pl

2. Purposes and legal basis (grounds) for data processing
The Malbork Castle Museum shall process personal data exclusively to the extent required to:
• Handle the article publishing process (submission, reviews, editing-related correspondence) – Article 6 clause 1 (b) and (c) of the GDPR,
• Discharge legal obligations associated with documenting the body of scientific achievements – Article 6 clause 1 (c) of the GDPR,
• Handle analytical and statistical purposes connected to website operation – Article 6 clause 1 (f) of the GDPR,
• Handle any contact with regard to matters associated with publishing and/or operating the periodical – Article 6 clause 1 (f) of the GDPR.

3. Categories of persons and data
• Authors and reviewers – data transmitted via the Editorial System (https://www.editorialsystem.com/zamek): first name, last name, affiliation, e-mail address, contact details.
• Website users – technical data (IP address, browser and operating system information, date and time of visiting the website, subpages viewed).
Authors and reviewers are registered in the Editorial System only. The periodical’s website serves information purposes only. It does not allow user account creation.

4. Cookies and analytical data
The periodical’s website uses cookies, including Google Analytics, to analyse traffic and improve service quality. Cookies may include information regarding:
• Browser and operating system type,
• IP address,
• Subsites visited,
• Date and time of the visit.
Types of cookies:
• Session cookies – necessary for proper website operation; deleted once the browser is closed,
• Persistent cookies – stored on the browser for a pre-specified time; used to remember settings,
• Analytical cookies – used by Google Analytics to generate visit statistics.
Users may change cookie settings in their browsers. Details regarding Google data processing are available at: https://policies.google.com/privacy
Add-on allowing Google Analytics to be blocked: https://tools.google.com/dlpage/gaoptout

5. Recipients of data
Data may only be transferred to the following:
• Institutions duly authorised by law,
• Science-funding institutions (within their reporting duty remit).

6. Data transfer beyond the EEA
Data may be transferred beyond the European Economic Area in connection with Google Analytics use. Any such transfer shall take place in conformity to Google-defined rules (e.g. standard contractual clauses).

7. Data retention period
• Publication-related data – permanent, for archiving and documentation purposes,
• Correspondence data – until the given matter has been resolved,
• Cookies – in conformity to browser settings and Google policy.

8. Rights of data subjects
Every data subject shall have the right to:
• Access his/her data,
• Rectify his/her data,
• Have his/her data deleted or subjected to processing restrictions,
• Transfer his/her data,
• Object to the processing of his/her data,
• Withdraw formerly granted consent (if such consent had been grounds for data processing).
To exercise aforesaid rights, contact the Data Protection Officer at: inspektor@zamek.malbork.pl
Every data subject shall further have the right to file a complaint with the President of the Personal Data Protection Office (Moniuszki No. 1A, Warsaw (00-014), Poland, Tel. No. +48 22 531-03-00).

9. Changes to the Privacy Policy
The Malbork Castle Museum hereby reserves the right to amend the Privacy Policy as specified herein. The current Privacy Policy version shall be posted to the periodical’s website.

10. Information clause
The full version of the information clause regarding personal data processing is available at the Museum’s head office (seat) and website: https://zamek.malbork.pl/ochrona-danych/rodo/