In order to meet the requirements of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing

of personal data and on the free movement of such data, and repealing Directive 95/46/EC (general regulation on data protection – “GDPR” Art. 13), we inform that:

1. The Administrator of your personal data is the Central Museum of Textiles in Łódź,

Piotrkowska 282, 93-034 Łódź, Poland;

2. You can contact the inspector of data protection at the e-mail address: iod@cmwl.pl;

3. Your personal data will be processed in order to carry out the statutory activity (promotion and popularisation of culture), on the basis of Art. 6 (1), point a and e (GDPR).

4. Public administration bodies or entities acting on commission of the public administration bodies may be the recipient of your personal data, in the scope and for the purposes that stem from the regulations of common law.

5. Your personal data will be stored for the period of time necessary for the accomplishment of aims specified in point 3, and after that time – for the period and in the range required by the regulations of common law.

6. You have the right to:

- demand from the Administrator the access to your personal data,

- correct them, remove them or limit their processing,

- object to their processing,

- transfer the data,

- file a complaint to the supervisory organ,

- revoke your consent for personal data processing.

7. In case personal data processing takes place on the basis of personal consent to process the personal data (GDPR Art 6 (1), point a), you have the right to revoke that consent at any given moment.

8. In case of learning about unlawful processing of your personal data, you have the right to submit

a complaint to a supervisory authority.

9. In case personal data processing takes places on the basis of consent of the person to whom the data relates, providing the Administrator with your personal data is voluntary.

10. Providing your personal data is obligatory if the premise to process personal data is a regulation of law or an agreement closed between the parties.

11. Your personal data can be processed in an automated way and they will not be profiled.