INFORMATION CLAUSE

Pursuant to Article 13 paragraphs 1 and 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter GDPR), we inform that:

1. The entity processing your personal data is:
   Pro Arte et Historia Foundation
   37-741 Krasiczyn, Krasiczyn 124/179
   VAT number 7952529711
   the Administrator is:
   Industrial Development Agency S.A.
   00-400 Warsaw
   ul. Nowy Świat 6/12;
2. Your personal data will be processed for the purposes of:
   1. concluding and performing a contract or service as well as performing the Administrator's tasks pursuant to Article 6 para. 1 lit. b) and f) GDPR;
   2. marketing purposes, upon separate consent, pursuant to Article 6 para. 1 point a) GDPR;
3. Your personal data will be stored in a form enabling identification of the data subject for no longer than necessary for the purposes for which the data is processed, i.e., for the duration of the contract execution and settlement as well as prescription of claims that may be pursued in connection with the contract. Personal data will be stored for a longer period if processed solely for archival purposes in the public interest, scientific or historical research purposes, or statistical purposes under Article 89 para. 1 GDPR;
4. You have the right to access your data and the right to rectify, delete, restrict processing, the right to data portability, the right to object, and the right to withdraw consent to their processing at any time without affecting the lawfulness of processing based on consent before its withdrawal;
5. You have the right to lodge a complaint with the President of the Personal Data Protection Office if you consider that the processing of your personal data violates GDPR provisions;
6. The Administrator and the processor will not make automated decisions, including decisions resulting from profiling as understood by GDPR;
7. Providing your personal data is voluntary but necessary for the purposes related to concluding and performing a contract or service;