Privacy policy

By using our service, you entrust us with your personal data. We realize that this is a great responsibility and we ensure their safety and give you control over them.

From this Privacy Policy, you will learn what data we collect and for what purpose, as well as how you can manage them.

Effective date of the Privacy Policy: 2022-03-14
Date of the last significant update: 2022-03-15

- Personal Data Administrator: The King John III's Palace Museum at Wilanów, located at Stanisława Kostki Potockiego Street 10/16, 02-958 Warsaw, which provides services electronically and stores and gains access to information in the User's devices,
- Data Protection Officer: A person appointed by the King John III's Palace Museum at Wilanów to ensure the application of the provisions of the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, which is Mr. Maciej Byczkowski. You can contact him by writing to: iod@muzeum-wilanow.pl,
- Cookies and LocalStorage: Information data, especially small text files, saved and stored on devices through which the User uses websites. Cookies usually contain the name of the website from which they originate, their storage time on the end device, and a randomly generated unique number used to identify the browser from which the connection to the website is made. Cookies do not identify the user and the user's identity is not determined based on them.
- Service: The website www.inmuseums.pl run by the Administrator,
- Device: An electronic device (e.g., computer, smartphone) through which the User accesses the Service,
- User: A person using the Service, on behalf of whom, in accordance with the Regulations and legal provisions, services can be provided electronically.
The cookies used by the Administrator are safe for the User's Device. In particular, this is not a possible way for viruses or other unwanted or malicious software to enter Users' Devices. These files allow to identify the software used by the User and tailor the Service individually to each User. Cookies usually contain the name of the domain from which they originate, the time of their storage on the Device, and the assigned value.

The Administrator uses the following types of cookies:
- session: they are stored on the User's Device and remain there until the end of the session of a given browser. The saved information is then permanently removed from the Device's memory. The session cookies mechanism does not allow for the collection of any personal data or any confidential information from the User's Device,
- persistent: they are stored on the User's Device and remain there until they are deleted. The end of a given browser session or the switching off of the Device does not result in their removal from the User's Device. The persistent cookies mechanism does not allow for the collection of any personal data or any confidential information from the User's Device,
- external: originating from websites other than the Service.
We do not store data longer than necessary.

We do not collect data that are not needed to achieve the set, specific purpose.
The Administrator uses its own cookies for the following purposes:

1. Service Configuration
- to tailor the content of the Service's web pages to the User's preferences and to optimize the use of the Service's web pages,
- to recognize the User's Service device and its location and appropriately display the website, tailored to his individual needs,
- to remember the settings selected by the User and personalize the User's interface, for example, in terms of the selected language or region from which the User comes,
- to remember the history of pages visited in the service for the purpose of recommending content, font size, website appearance, etc.
2. User authentication in the service and ensuring user session in the Service
- maintaining the User's Service session (after logging in), thanks to which the User does not have to re-enter their login and password on each subpage of the Service,
- correct configuration of selected Service features, in particular verifying the authenticity of the browser session,
- optimization and increase of performance of services provided by the Administrator.
3. Implementation of processes necessary for full functionality of the Service
- adjusting the content of the Service's web pages to the User's preferences and optimizing the use of the Service's web pages. In particular, these files allow to recognize basic parameters of the User's Device and appropriately display the website, tailored to his individual needs,
- proper handling of the partner program, enabling in particular the verification of sources of User redirection to the Service's websites,
- remembering the user's location,
- analysis and research and audience auditing,
- creating anonymous statistics that help to understand how Users of the Service use the Service's web pages, thanks to which we continually improve the structure and content of the Service,
- ensuring the security and reliability of the Service,
- allowing the user to add elements of the service to their favorites.
The Administrator uses external cookies for the following purposes:

1. Presenting multimedia content in the Service, which are downloaded from external internet services
- www.youtube.com (cookie administrator: Google Inc. based in the USA),
- www.sketchfab.com (cookie administrator: Sketchfab Inc. based in the USA).
2. Collecting general and anonymous statistical data through the analytical tool

Google Analytics (cookie administrator: Google Inc. based in the USA).

3. Logging in to the Service using a social networking service
- Facebook Connect (cookie administrator: Facebook Inc. based in the USA or Facebook Ireland based in Ireland),
- Google (cookie administrator: Google Inc. based in the USA),
- LinkedIn (cookie administrator: LinkedIn Ireland based in Ireland).
4. Use of sharing functions to popularize the service using social networking services
- Facebook.com (cookie administrator: Facebook Inc. based in the USA or Facebook Ireland based in Ireland),
- LinkedIn.com (cookie administrator: LinkedIn Ireland based in Ireland),
- Pinterest.com (cookie administrator: Pinterest Inc. based in the USA).
5. Securing the Service against abuses by bots

CAPTCHA (cookie administrator: Google Inc. based in the USA).
- The User can independently and at any time change the settings for Cookies, specifying the conditions for their storage and obtaining access by Cookies to the User's Device. This can be done using the settings of the web browser,
- these settings can be changed in particular in such a way as to block the automatic handling of Cookies in the settings of the web browser or to inform about their each time being placed on the User's device. Detailed information about the possibilities and ways of handling Cookies are available in the settings of the web browser,
- limiting the use of Cookies may affect some of the features available in the Service,
- the User logged into the Service can at any time check their data, correct it, change or permanently delete it. These functions are available in the Profile, under the Settings tab,
- in case of doubt, anyone can contact the DPO (iod@muzeum-wilanow.pl), who ensures full confidentiality of communication, or file a complaint with the President of the Personal Data Protection Office.
- As a general rule, we do not share data with third parties,
- selected Administrator employees responsible for the Service have access to your personal data,
- in addition, external contractors working on behalf of and under a contract with the Administrator may have access to your personal data.