Privacy Policy
Last updated: 28 March 2026
1. Data controller
The controller of personal data collected through muzea.waw.pl is the site owner. For data protection inquiries, contact us at: kontakt@muzea.waw.pl.
2. What data we collect
Analytics data (Google Analytics 4)
This site uses Google Analytics 4 (GA4) for traffic analysis. GA4 collects the following data:
- IP address (anonymised)
- Browser and operating system type
- Screen resolution
- Browser language
- Referral source (how you found us)
- Pages visited and time spent on site
- Interactions with page elements (clicks, scrolling)
GA4 only loads after you give consent via the cookie banner. If you do not consent, no analytics data is collected.
The data processor for GA4 is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details: Google Privacy Policy.
Cookies
This site uses the following cookies:
| Name | Purpose | Duration | Type |
|---|---|---|---|
muzea_consent | Remembers your cookie consent decision | 365 days | Necessary |
_ga | Google Analytics identifier | 2 years | Analytics (requires consent) |
_ga_* | Google Analytics session identifier | 2 years | Analytics (requires consent) |
Analytics cookies are only set after you give consent. The muzea_consent cookie is necessary to remember your decision and does not require consent.
3. Legal basis for processing
- Art. 6(1)(a) GDPR — user consent (GA4 analytics)
- Art. 6(1)(f) GDPR — legitimate interest of the controller (ensuring site functionality and security)
4. Data retention
- GA4 data: Retention period set in Google Analytics — 14 months from last activity
muzea_consentcookie: 365 days from consent/refusal
5. Data transfers
Analytics data is processed by Google on servers within the European Union. Google may transfer data to the USA under GDPR compliance mechanisms (including the EU-US Data Privacy Framework).
We do not sell, share, or transfer users’ personal data to any other third parties.
6. Your rights
Under GDPR, you have the following rights:
- Right of access (Art. 15) — find out what data we process
- Right to rectification (Art. 16) — request correction of your data
- Right to erasure (Art. 17) — request deletion of your data (“right to be forgotten”)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21) — object to processing based on legitimate interest
- Right to withdraw consent — you can withdraw cookie consent at any time by clearing your browser cookies
To exercise your rights, contact us at: kontakt@muzea.waw.pl.
7. Managing cookies
You can change your cookie decision at any time:
- Withdraw consent: Clear muzea.waw.pl cookies in your browser settings. The consent banner will reappear on your next visit.
- Block cookies: Most browsers allow you to block cookies in privacy settings.
8. Changes to this policy
We reserve the right to update this privacy policy. Significant changes will be communicated via a prominent notice on the site. The date of the last update is shown at the top of this document.
9. Supervisory authority
If you believe your data is being processed in violation of GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO):
ul. Stawki 2, 00-193 Warsaw, Poland
uodo.gov.pl