Privacy Policy

Personal data protection

Information on the principles of personal data protection at the Castle Museum in Malbork and its branches: the Castle in Sztum and the Castle in Kwidzyn in connection with the entry into force on May 25, 2018 of the GDPR

Scope of application of the Regulation

The processing of personal data at the Malbork Castle Museum and its branches: the Castle in Sztum and the Castle in Kwidzyn is governed by the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data i on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation); hereinafter referred to as “GDPR”.

data administrator

The Malbork Castle Museum is the administrator of personal data. In accordance with the GDPR, the Museum is responsible for complying with the principles of personal data protection.

Data Protection Officer

Based on Article. 37 sec. 1 of the GDPR, the function of the data protection officer at the Castle Museum in Malbork is performed by Ms. Anna Sosińska. Data subjects may contact the data protection officer in all matters related to the processing of their personal data and the exercise of their rights under the GDPR.

In order to enable contact with the data protection officer, a dedicated e-mail address has been created: rekrutacja@zamek.malbork.pl

The data protection officer ensures full confidentiality of communication with data subjects. According to Art. 38 sec. 5 of the Regulation, the data protection officer is obliged to maintain secrecy or confidentiality regarding the performance of his tasks – in accordance with EU law or the law of a Member State.