According to Art. 13 Sections 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L No. 119, p. 1 as amended) – hereinafter referred to as GDPR – please be informed that:

1. The controller of your personal data is the National Library with its seat in Warsaw at 213 Niepodległości Avenue, 02-086 Warsaw.
2. You can contact our Data Protection Officer regarding matters related to the processing of your personal data by sending a message to the email address daneosobowe@bn.org.pl or by sending a letter to the address of the National Library given above.
3. Your personal data will be processed in order to answer press inquiries and provide media services pursuant to the Act of 27 June 1997 on Libraries (Journal of Laws of the Republic of Poland, 2019, item 1479) and Art. 3a of the Act of 26 January 1984 on Press Law (Journal of Laws of the Republic of Poland, 2018, item 1914) (Art. 6 Section 1 letter c and/or e GDPR).
4. Your personal data may be transferred to entities authorised to receive it under the law.
5. Your personal data will be stored for a period of time in accordance with the office and archive regulations in force at the National Library.
6. You have the right to request access to your personal data, the right to rectify (amend) your personal data, the right to request erasure or restriction of processing, the right to data portability and the right to object to processing; however, the right to object to processing only applies if further processing is not necessary for the National Library to comply with a legal obligation and there are no other overriding legal grounds for processing.

In addition, you have the right to lodge a complaint with the President of the Office for Personal Data Protection if you consider that the processing of your personal data violates the provisions of the GDPR or other provisions specifying the method of processing and protecting personal data.

• The provision of your personal data is voluntary; however, failure to provide data may result in us being unable to handle your case or to verify your status as a journalist.
• Your personal data will not be used for automated decision-making or profiling.