GDPR

Information on the Protection of Personal Data for Library Users

 

In accordance with the information obligation set out in Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR”, the Data Controller provides the following information:

  1. The controller of your personal data is the Stanisław Reymont Public Library in Wierzchosławice.
    Address and contact details: Wierzchosławice 696, 33-122 Wierzchosławice, Poland. Tel.: +48 14 67 97 215, +48 14 657 52 31
    Email: biblioteka@wierzchoslawice.pl
  1. For matters related to the protection of personal data, you may contact the Data Protection Officer by email at: inspektor@interia.eu
  2. Your personal data are collected and processed for the following purposes:
    • To fulfil a legal obligation incumbent on the Controller (Article 6(1)(c) of the GDPR), in particular under:
  3. the Act of 27 June 1997 on Libraries, especially Articles 4, 18, and 20a,
  4. the Act of 25 October 1991 on Organizing and Conducting Cultural Activities,
  5. the Statute of the Stanisław Reymont Public Library in Wierzchosławice,
  6. the Regulations on Access to Collections of the Stanisław Reymont Public Library in Wierzchosławice,
  7. the Act of 29 June 1995 on Public Statistics.
    • Because processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (Article 6(1)(e) of the GDPR) — in particular, the pursuit or defence of legal claims, protection of the library’s rights, and ensuring the security of the library’s property.
    • Because processing is necessary for the performance of a contract or to take steps prior to entering into a contract (Article 6(1)(b) of the GDPR).
    • To notify users about the availability of requested items, due dates, overdue returns, or financial liabilities — on the basis of the consent given under Article 6(1)(a) of the GDPR.
      Consent is expressed by providing an email address and contact number in the registration form.
  8. Your personal data will be disclosed to entities authorized under the law, as well as to entities processing personal data on behalf of the Controller under concluded data processing agreements (e.g. IT service providers, hosting services, equipment and software maintenance).
  9. Data will be processed for the duration of your use of the library’s resources and for a period of 5 years after termination of library use, provided there are no outstanding obligations such as unreturned library items or financial liabilities to the library.
    The data retention period is defined in accordance with the Act on the National Archival Resource and Archives and Article 6(2) of the GDPR, pursuant to the filing and archival procedures in force at the Controller’s institution, including the office instruction, the unified file classification scheme, and the regulations governing the operation of the institutional archive.
    Personal data processed on the basis of consent will be processed for the duration of the consent or until it is withdrawn.
  10. You have the right to access your personal data, request their rectification, erasure, restriction of processing, data portability, and to object to processing — in accordance with the principles and cases specified in Articles 15–21 of the GDPR.
  11. Because part of the data (contact number and email address) is processed on the basis of consent (Article 6(1)(a) of the GDPR), you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  12. The data subject has the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
  13. Providing your personal data is a statutory requirement. You are obliged to provide them, and failure to do so will result in the inability to use the library’s services.Providing your email address and contact number is voluntary and the absence of this data will not entail any negative consequences.
  14. Your data are not subject to automated decision-making, including profiling.

 

By providing your contact details (telephone number and email address), you consent to the processing of this data and to being contacted for the purposes of notifying you about the availability of requested items, due dates, overdue returns, and financial liabilities.
The processing of this data is based on your consent pursuant to Article 6(1)(a) of the GDPR.