Where do we get your data from?

We have obtained your data from you. You have deposited your data with us while signing up for our evnts during a phone call or on our website.

Who controls your data?

The controller of your data is Witold Lutosławski National of Music, plac Wolności 1, 50-071 Wrocław

How do we use your data?

Your data will be used for marketing our products and services and, if you express (or have already expressed) your consent, also for market research (exclusively to the extent you agree or have agreed for). Since this information concerns personal data processing in relation to marketing, it is not excluded that we process your data for other purposes as well, e.g. to perform an agreement (should you enter or have entered into one) or to perform a legal obligation (e.g. to issue an invoice). Such processing shall always be compliant with relevent laws and regulations.

How to withdraw your consent or to object?

You may withdraw your consent given to the NFM  relation to processing of personal data at any time without any negative consequences. Your withdrawal of consent does not affect the legality of processing the data prior to the withdrawal, i.e. the processing of your data by NOSPR is legal up to the point of you withdrawing your consent.

How to contact our Data Protection Officer?

You can do it by sending an email to iod@nfm.wroclaw.pl

On what basis will we process your personal data?

The basis for processing your personal data is NOSPR’s legally justified interest, i.e. direct marketing of its products and services. In the case of other goals mentioned in this information. the basis for processing is your consent.

When and with whom may we share your data, and with whom will we certainly not share them?

Should you express such consent, we will share your data with our partners, with whom the NFM cooperates ( "partners”), so that they are able to use it for market research. We shall not share your data with third countries (outside the European Economic Area).

What can you do with the personal data you give us?

You may request from NFM access to, amending, deleting, or limiting the processing of your data, as well as moving it to a different data controller. As far as processing data for marketing NOSPR’s own products or services is concerned, you may object.

For how long will we store your data?

Data processed on the basis of your consent will be stored until the consent is withdrawn. Data processed on the basis of the controller’s legally justified interest (i.e. marketing of NFM’s own products and services) will be processed until you object.

Where can you complain about NFM’s processing of your data?

Currently, such complaints may be addressed to the Inspector General for Personal Data Protection (Generalnego Inspektora Ochrony Danych Osobowych). However, we would like to indicate that soon the supervisory authority competent in such cases might be the President of the Data Protection Authority (Prezes Urzędu Ochrony Danych Osobowych). Additionally, you may always send a complaint to NFM ’s Data Protection Officer – iod@nfm.wroclaw.pl You are welcome to read our detailed Privacy policy.

Data is processed for the purpose of rendering services, including performance of agreements, and for the purpose of the sale of products, as well as in cases when it is necessary for meeting the data Controller’s legally justified goals, especially for the purpose of direct marketing of its own products or services, or for other purposes, for which the user expresses their consent, if such consent is required by laws and regulations. In particular, this might be consent for receiving correspondence and trade information concerning the Controller’s and its cooperating partners’ own products and services, delivered by electronic means and on telephone. The person whom the data concerns has the right to withdraw their consent at any time.

The Controller processes the data in compliance with relevant laws and regulations and collects the data for specified and lawful purposes. The data is not further processed except for these purposes. The data is collected only to the extent relevant and necessary for the purposes of its processing. The Controller does not process specific categories of personal data. Sharing your data with the Controller is voluntary, yet necessary for rendering the Controller’s services.

The Controller shall make every effort to protect customers’ and users’ personal data from unauthorised access by third parties, and applies advanced organisational and technical safety measures to this end. The Controller does not share the personal data with any unauthorised recepients. The Controller may entrust, by way of an agreement made in writing, the processing of personal data on behalf of the Controller to a different body. The data may only be shared with bodies authorised to receive it by virtue of mandatory laws and regulations.

The Controller stores the data for a period necessary for the performance of agreement or for a period specified by relevant laws and regulations and no longer than it is necessary for purposes arising from legally justified interests pursued by the Controller or by a third party, e.g. for the purpose of pursuing claims related to the party’s operations. When a person has expressed their consent to processing their personal data for particular purposes, such data is stored until the consent is withdrawn.

The person whom the data concerns has the right to accessing, amending, deleting, or limiting the processing of their data, as well as the right to file a complaint in cases prescribed in statutory law and move their data. Furthermore, the person whom the data concerns also has the right to file a complaint with a supervisory authority, should they observe unlawful processing of their data.

If a person whom the data concerns has expressed consent to their data being processed for one or more specified purposes, they have the right to withdraw such consent at any time. Such a withdrawal does not void the legality of data processing performed before it.

Providing data is voluntary, yet not doing so in case of data marked as required precludes Registration or placing an Order. If processing data is necessary for performing an agreement to which the person whom the data concerns is a party, or for undertaking actions requested by the person whom the data concerns, prior to concluding an agreement, providing a specified and necessary set of data is required.

Cookies policy: The Controller may use cookies when a user uses services available via the Administrator’s website. Cookies that might be used on the website’s pages are exclusively associated with a particular computer’s browser - the user remains anonymous (without providing the user’s name or surname). The cookies constitute information saved by the Controller’s server on the user’s computer, which can be read by the Administrator’s server every time the user’s computer connects with it. Cookies provide statistical data on users’ traffic and their use of particular pages of the Controller’s website. The Controller may also use cookies to monitor user’s traffic within the website. The user may at any time choose the way of processing cookies on the internet by changing automatic processing into individual processing (user settings). Detailed information on this matter is delivered by providers of internet browsers, usually in a tab or menu called “internet options” or similarly. The user’s disabling cookies in their browser, i.e. blocking cookies or subjecting them to notifications, might cause difficulties or even preclude the user from using certain services rendered by the Controller.