Privacy Policy

This Privacy Policy sets out the rules for collecting, processing and using information, including personal data of users of the www.kopernik.org.pl website (hereinafter referred to as the “Website”).
The Controller of the Website users’ data is the Copernicus Science Centre with its registered office in Warsaw (00-390) at 20 Wybrzeże Kościuszkowskie Street (hereinafter referred to as “CNK”). You can contact the Controller at info@kopernik.org.pl
CNK treats the protection of privacy, including the protection of the personal data of Website users, as its priority. CNK makes every effort, including applying precautions and security measures such as encrypting the transmission between users and the web server and securing the transmission between the web server and the CNK cash register system by using a dedicated encrypted VPN connection. CNK also uses the separation of the database server from the external network so that the personal data provided by the Website users is protected against loss, destruction, disclosure or access by unauthorised persons.
Using the Website may involve the collection by the CNK of user data necessary to operate all Website features properly. In particular, information about the user's location, the IP address of the device they use, their activity on the Website, and so-called cookies may be collected. The Website user can learn more about the rules of collecting and using cookies by reading separate information on the Website.
CNK does not use the data referred to in Point 4 to determine the identity of Website users. If this data, alone or in combination with other information, would enable the identification of the user, it will be treated as personal data, and the rules described in Points 6 to 16 below will apply.
The Website will process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”).
The purposes and basis of using the data:
1. As part of your use of the Website, your personal data is processed for the following purposes:
  1. a. to respond to complaints related to the provision of Services by the Collector - the legal basis is compliance with a legal obligation to which the Controller is subject (Article 6 (1) (c) of the GDPR);
  2. b. to improve the functionality and speed of the website, the legal basis for the processing of data collected using cookies and other technologies necessary for the proper functioning of the Website is the legitimate interest of the Collector (Article 6 (1) (f) of the GDPR), and otherwise (including to the extent that we use cookies for advertising or analytical purposes) – your consent (Article 6 (1) (a) of the GDPR)
  3. c. to establish, pursue, or defend against claims—the legal basis for data processing is the necessity of processing to pursue the Controller’s legitimate interest (Article 6 (1) (f) of the GDPR); the Controller’s legitimate interest is to protect against claims related to the use of the Website.
2. In addition, depending on the service you use on the Website, we process your personal data for the following purposes:
  1. A. Registration on the Website
    Your personal data is processed to provide services (features) available on the Website and to perform the Controller’s obligations as a website provider. The basis for processing your personal data is the necessity of processing for the performance of the agreement for the provision of Website services (Article 6 (1) (b) of the GDPR).
  2. B. Newsletter
    Your personal data is processed based on Article 6 (1) (f) of the GDPR in order to deliver the ordered Newsletter to the provided e-mail address (which constitutes the implementation of our legitimate interest understood as the marketing of our goods and services and the exercise of the rights resulting from your consent referred to in the Act on the provision of electronic services and the Telecommunications Law). Your personal data will also be processed in order to fulfil the obligations arising from the Act on the provision of electronic services and the Telecommunications Law (under Article 6 (1) (c) of the GDPR).
  3. C. Contact with the Controller
    Your personal data is processed to prepare answers to submitted questions and conduct correspondence. The basis for processing your personal data is the necessity of processing to pursue our legitimate interest, which is the ability to answer the questions asked (Article 6 (1) (f) of the GDPR).
  4. D. Social media
    Your personal data is processed to conduct ongoing correspondence using the tools provided by the social media used and to conduct other marketing activities in connection with promoting various events. The basis for the processing of your personal data is the Controller’s legitimate interest, which consists of promoting its own brand and improving the quality of provided services (Article 6 (1) (f) of the GDPR).
Data is collected to ensure the User can use all the Website’s features.
Period of data processing.
We will use your personal data:
1. a. for the duration of your use of the Website to the extent that your personal data are processed to provide a specific service and fulfil the Controller’s obligations,
2. b. in relation to cookies,
3. c. for a period not longer than the periods of limitation in civil and criminal matters determined in accordance with the applicable provisions of Polish law to the extent that your personal data will be processed to determine, pursue or defend against claims.
4. d. until you withdraw your consent, to the extent that your data is processed to send the Newsletter.
5. e. until you object to the processing of your data in relation to social media.
Personal data may be entrusted to entities providing services to the CNK and made available to entities authorised under the law.
Everyone has the right to access their data, rectify it, delete it, limit its processing, and request the transfer of data.
You have the right to object to the processing of your data.
Where data is processed based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of data processing carried out based on consent before its withdrawal.
The rights listed in items 11-13 can be exercised by contacting the address of the Controller’s registered office or by writing to the following email address: info@kopernik.org.pl
The User has the right to lodge a complaint against the CNK proceedings with the supervisory authority, the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
Providing personal data is voluntary but may be necessary to use all of the Website’s features.
Decisions regarding the personal data provided will not be made in an automated manner.
As a rule, using the Website’s features does not require creating an account and logging in to the Website.
Creating an account on the Website is necessary to purchase tickets for events organised by the CNK. The Website also allows you to subscribe to a Newsletter with information about the CNK activities, whereby, when the Controller obtains the User’s consent to send the Newsletter, they also acquire the ability to process your data based on consent. Using the Website features in the scope referred to above requires providing personal data indicated in the registration forms. Detailed rules for processing the above-mentioned data and users’ rights in connection with the provision of data include information clauses found in registration forms.
This Privacy Policy applies only to the Website. CNK is not responsible for the rules and privacy policies of websites accessed by the Website user via links provided on the Website.
Any changes to this Privacy Policy will be communicated to the Website’s users using the information posted therein.
Please be advised that the Controller has appointed a Data Protection Officer (DPO), namely Ewa Chrabąszcz. You can contact the DPO in any matter related to the processing of personal data by writing to the following email address: iod@kopernik.org.pl

This Privacy Policy stipulates the principles of collecting, processing and using information, including personal data of www.kopernik.org.pl website (hereinafter referred to as “the Website”) users.

Website users’ data is administered by the Copernicus Science Centre with its registered office in Warsaw (00-390) at ul. Wybrzeże Kościuszkowskie 20 (hereinafter referred to as “the CSC”).

Protection of privacy, including the protection of Website users’ personal data is treated by the CSC with priority. The CSC makes all efforts, including precautions and securities in a form of coding the transmission between users and the web server, as well as securing transmission between the web server and the CSC’s cash system by using a dedicated coded VPN connection. Furthermore, the CSC separates the database server from the external network so that the personal data transferred by the Website users is protected against loss, damage, disclosure or access of unauthorised persons.

Using the Website can be related to the CSC collecting users’ data necessary for proper operation of all Website’s functionalities. In particular, the information on user’s location, IP of the device used, user’s activity on the Website and so-called cookies are collected. The Website user can learn more on the principles of collecting and using cookies from the separate information posted on the Website.

The CSC does not use data referred to in point 4 to determine the Website users’ identity. In case this data, independently or together with other information, enables determining the user’s identity, it is treated as personal data and principles described in points 6 – 16 below apply.

Personal data is processed on the Website in compliance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “the GDPR”).

The data is processed pursuant to Article 6 par. 1 letter f) of the general regulation on personal data protection of 27 April 2016, i.e. processing is necessary to execute the CSC’s legally justified interests which comprise running the Website by the CSC and informing through the agency thereof of activity conducted by the CSC.

The data is collected in order to provide the User with the possibility to use all Website’s functions.

Data is processed for a period necessary to provide the User with the possibility of using the Website fully.

The personal data can be entrusted to entities providing services to the benefit of the CSC and disclosed to entities authorised to this end pursuant to legal provisions.

Each person has the right to access their data, they can rectify, erase or limit processing thereof, as well as demand transferring data.

The User has the right to object processing their data.

The User has the right to lodge a complaint against the CSC to the supervisory authority i.e. the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

Giving personal data is voluntary, however, it may be necessary to use all functionalities of the Website.

Decisions regarding given personal data shall not be taken in an automated manner.

Contact with the CSC, including the person acting for the CSC as the data protection officer, is possible in writing, to the address of the registered office given in point 1 or electronically, to the email address: iod@kopernik.org.pl.

As a rule, using the Website functionalities does not require opening an account and logging in the Website.

In case of the willingness to purchase tickets to events organised by the CSC, it is necessary to open an account on the Website. The Website also enables signing in the electronic newsletter informing of the CSC’s activities. Using the functionalities of the Website in the aforementioned scope requires giving personal data indicated in registration forms. Detailed principles of processing thereof and the rights vested in users with regard to giving data are included in information clauses next to registration forms.

This Privacy Policy applies solely to the Website. The CSC is not held liable for the principles and privacy policies of websites entered by the Website user through the links posted on the Website.

Any amendments hereto shall be communicated to Website users by posting information on the Website.

Archival Privacy Policy (to 08.2023)

Newsletter