„`html id=”rodo_privacy_notice_en”INFORMATION CLAUSE ON PERSONAL DATA PROCESSING

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation “GDPR”), we hereby inform you about the rules of processing your personal data and your related rights.

1. The controller of your personal data is: Teatr im. Wilama Horzycy, Pl. Teatralny 1, 87-100 Toruń.
2. Data Protection Officer: Aneta Belcik; contact: iod@teatr.torun.pl
3. The controller processes your personal data on the basis of applicable law, concluded contracts, and/or consent granted by you, depending on the purpose for which the data was obtained or provided.
4. The legal basis for processing your personal data depends on the purpose for which the data was provided:
5. a) Recruitment:

– Art. 6(1)(a) GDPR – consent of the data subject for processing data beyond those required by applicable law (Art. 221 §1 of the Polish Labour Code)

– Art. 9(2)(a) GDPR – as above, but concerning special categories of personal data (e.g. religious beliefs, health data, etc.)

– Art. 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation (Labour Code, social security regulations, etc.)

5. b) Employment:

– Art. 6(1)(a) and Art. 9(2)(a) GDPR – in case of submitting application documents containing additional data beyond legal requirements, until withdrawn or deleted

– Art. 6(1)(c) GDPR – legal obligation (Labour Code, social insurance regulations, etc.)

– Art. 6(1)(b) GDPR – processing necessary for performance of a contract

1. c) Public procurement: Art. 6(1)(c) GDPR in connection with the Public Procurement Law
2. d) Educational and cultural activities: Art. 6(1)(c) GDPR – legal obligation arising from statutory cultural activities
3. e) Civil law contracts, sales, leases: Art. 6(1)(b) GDPR – contract performance
4. f) Volunteering: Art. 6(1)(a) and (b) GDPR – recruitment and contract conclusion
5. g) CCTV monitoring: Art. 6(1)(c) GDPR – legal obligation and public interest tasks
6. h) Newsletter, marketing: Art. 6(1)(a) GDPR – consent

5. Recipients of your personal data may include public authorities and entities performing public tasks or acting on behalf of public authorities, as well as entities processing data on behalf of the controller (e.g. IT service providers).
6. Your personal data will be stored for the period necessary to fulfil the purposes indicated above, and thereafter in accordance with applicable law and internal record-keeping rules (e.g. monitoring data up to 30 days, accounting data for 5 years, marketing data until consent withdrawal).
7. You have the right to access, rectify, erase, restrict processing, object to processing, and data portability.
8. If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
9. You have the right to lodge a complaint with the competent supervisory authority for data protection.
10. Providing personal data is voluntary where processing is based on consent, but mandatory where required by law or contract.
11. Your data will not be subject to automated decision-making or profiling.
12. Your personal data will not be transferred to third countries or international organisations.

Contact to Data Protection Officer: Aneta Belcik, email: aneta.belcik@teatr.torun.pl

„`