1. The obtained personal data collected in the monitoring system will be processed in order to control the movement of persons and materials in the facilities of the Institute of National Remembrance - KŚZpNP subject to mandatory protection.
2. The legal basis for data processing is set out in Art. 6 par. 1 letter c (processing is necessary to fulfill the legal obligation incumbent on the controller) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC), hereinafter "the GDPR". The processing of personal data is an obligation under Art. 45 and 46 of the Act of 5 August 2010 on the protection of classified information, with Art. 5a of the Act of 16 December 2016 on the principles of state property management and Art. 36 par. 1 of the Act of 22 August 1997 on the protection of persons and property.
3. The President of the Institute of National Remembrance - Commission for the Prosecution of Crimes against the Polish Nation, with its registered office at: ul. Janusza Kurtyki 1, 02-676 Warsaw, Poland is the administrator of your personal data. The personal data administrator will provide appropriate technological, physical, administrative and procedural data protection measures in order to protect and ensure confidentiality, correctness and availability of the personal data being processed, as well as protection against unauthorized use or unauthorized access to personal data and protection against breach of personal data security.
4. Contact details of the Data Protection Officer: inspektorochronydanych@ipn.gov.pl, mailing address: ul. Janusza Kurtyki 1, 02-676 Warsaw, Poland with the annotation "Data Protection Officer".
5. Entities authorized under the law, as well as entities authorized by the Data Administrator may be recipients of your personal data.
6. Your personal data will be stored for a period not exceeding 3 months from the date of recording. If image recordings constitute evidence in legal proceedings, or the administrator has learned that they may constitute evidence in proceedings - until the final conclusion of the proceedings. After the indicated period, personal data will be permanently deleted.
7. You have the right to access your data and the right to rectify, delete or limit processing, the right to object to processing, the right to transfer the data.
8. You have the right to lodge a complaint with the President of the Personal Data Protection Office when you feel that the processing of your personal data violates the provisions of the GDPR.