PRIVACY POLICY FOR THE MAŁA LITWA AR MOBILE APPLICATION
1. This document outlines the Privacy Policy for the Mała Litwa AR mobile application, hereinafter referred to as the Application. Acceptance of this Privacy Policy is voluntary but necessary for the installation and use of the Application. If you do not agree with the terms described below, please do not install the Application or uninstall it if it is already active.
2. The entity responsible for the proper provision of services within the Application is: Muzeum Budownictwa Ludowego – Park Etnograficzny in Olsztynek, Leśna 23, 11-015 Olsztynek, NIP (Tax ID) 739-10-08-333, hereinafter referred to as the Controller.
3. A User of the Application is anyone who installs it on their mobile device and uses its features.
I. Personal Data in the Application
a) The Application does not collect, store or process personal data of Users.
b) When using the Application on an Android device, only temporary data is saved on the client’s device.
c) Information collected by the Application (e.g., for technical or statistical reasons) does not allow the Controller to identify Users in a way that would enable establishing their identity, and is not considered personal data under applicable regulations.
3. The Android and iOS versions of the Application use the following permissions:
a) Access to the camera – this permission is required for functionalities that involve taking photos, scanning QR/barcodes, and AR (augmented reality) features.
II. Other Information
1. The Application recognises and sends the IP address of the mobile device to the server when it connects to the internet. The Controller does not have access to other data, including the IP address, that would allow for the identification of the User.
2. In accordance with Google’s requirements and the detailed terms set out in the Google Play Privacy Policy, each installed Application is assigned a unique identification code. This code is used for statistical purposes and does not allow the identification of the User.
3. In accordance with Apple’s requirements and the detailed terms set out in the App Store Privacy Policy, each installed Application is assigned a unique identification code. This code is used for statistical purposes and does not allow the identification of the User.
4. The Application recognises basic and necessary information for the proper functioning of the operating system and the device on which it is installed. The Application does not have access to any private resources of the User, such as documents, photos, contact lists, or other applications.
1. The Application does not recognise the physical location of the devices on which it is installed.
2. The Controller may share non-personal, statistical or technical information with other entities.
Personal Data Provided in Other Ways
1. The Controller may process data provided by Users through email, traditional mail or phone contact; the Controller may also process data of Users who submit complaints.
2. Providing the data referred to in section 1 is necessary to establish contact or address a complaint.
3. The Controller processes only those categories of personal data that are necessary to achieve the purposes related to contact.
4. Personal data is processed for the period necessary to achieve the purposes outlined in section 1. 1. Personal data may be processed for an extended period if such rights or obligations are imposed on us as the Data Controller by specific legal provisions, a legally justified interest of the Controller, or when the service we perform is of a continuous nature.
5. The source of the personal data processed by the Controller is the individuals to whom the data pertains.
6. The legal basis for processing personal data is:
a) necessity for the performance of a contract or to take steps before entering into a contract, or
b) necessity for compliance with a legal obligation to which the Controller is subject, or
c) the Controller’s legitimate interest, such as establishing, asserting or defending claims until their limitation period expires or until the relevant proceedings are concluded, if they were initiated during this period, or
d) consent to process personal data for specific purposes, when other legal bases for processing personal data do not apply.
7. Personal data is not transferred by us to any third country or international organisation as defined by the GDPR.
8. The Controller does not disclose personal data to third parties without the explicit consent of the data subject. Personal data may be disclosed without the consent of the data subject only to public law entities, i.e., authorities and administrative bodies (e.g., tax authorities, law enforcement agencies, and other entities empowered by generally applicable legal regulations).
9. Personal data may be entrusted to third parties for processing on behalf of the Controller in accordance with a data processing agreement, such as entities providing hosting services for the Controller and other entities providing services necessary for the ongoing operation of the Controller’s business.
10. The data referred to in section 9 is processed solely to the extent necessary to fulfil the terms of the contracts.
11. Personal data is not subject to profiling by the Controller.
12. In accordance with the GDPR, any individual whose personal data we process as a Data Controller has the right to:
a) be informed about the processing of personal data,
b) access their personal data,
c) rectify, supplement, update or correct their personal data,
d) request the deletion of data (right to be forgotten),
e) restrict processing,
f) request data portability,
g) object to the processing of personal data,
h) withdraw consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal,
i) not to be subject to profiling,
j) lodge a complaint with the supervisory authority, taking into account the principles of using and exercising these rights arising from the provisions of the GDPR.
13. An individual who wishes to exercise their rights referred to in the preceding section is requested to send a message to the email address or a written request to the mailing address provided in the section below.
14. Any inquiries, requests and complaints regarding the processing of personal data by the Controller, hereinafter referred to as Submissions, should be directed to the following email address: sekretariat@muzeumolsztynek.com.pl or in writing to: Muzeum Budownictwa Ludowego – Park Etnograficzny w Olsztynku, ul. Leśna 23 11-015 Olsztynek
15. The Submission should clearly indicate:
a) the personal data of the person or persons concerned,
b) the event that is the reason for the Submission,
c) the requests made and the legal basis for these requests,
d) the expected way of resolving the matter.
Final Provisions
1. The Controller reserves the right to amend this Privacy Policy for the Mała Litwa AR application if necessary due to changes in legal conditions or requirements of online stores where the Application is made available.
2. In matters not regulated by this Privacy Policy, the relevant provisions of applicable law shall apply. In the event of any inconsistencies between the provisions of this Privacy Policy and the aforementioned laws, the latter shall take precedence.
To run the Museum Application at home, you need to download QR codes. Scanning the QR code in the application switches it into AR mode displaying the appropriate objects.