Privacy policy

Polska Biblioteka Muzyczna PWM information clause

(Privacy policy)

I General provisions

This Policy of Polska Biblioteka Muzyczna PWM is informative.

The administrator of the processed personal data is Polskie Wydawnictwo Muzyczne, with its registered office at al. Krasińskiego 11a, (31-111) Kraków, hereinafter referred to as the „Administrator.”

We make sure that the processing of personal data is carried out in accordance with the provisions of:

• Regulation (Eu) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation),
• The Act of 10 May 2018 on the Protection of Personal Data (Dz. U. [Journal of Laws] from 2018, item 1000, as amended),
• The Acts of 21 February 2019 (Dz. U. [Journal of Laws] from 2019, item 730, as amended) amending certain acts in connection with ensuring the application of Regulation (Eu) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation),
• The Acts on the provision of electronic services of July 18 2002 (Dz. U. [Journal of Laws] of 2002 No. 144, item 1204, as amended),
• in accordance with specific provisions (contained, among others, in the Accounting Act and indirect acts).

II Contact with the Data Protection Officer responsible for the protection of personal data in the Publishing House:

Phone no. +48 12 422 70 44 ext. 140, e-mail: iod@pwm.com.pl

III On what terms do we process your personal data

We exercise due diligence to protect the interests of data subjects, and in particular we ensure that they are:

• processed lawfully, fairly and in a transparent manner in relation to the data subject;
• o collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes;
• adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
• accurate and, where necessary, kept up to date; kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
• processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

We take steps to ensure that personal data that is incorrect in the light of the purposes of their processing are immediately removed or rectified.

IV For what purpose and on what legal basis we process your personal data

The legal basis for data processing is the provisions of art. 6 sec. 1 lit. GDPR.

We process personal data for the following purposes and based on the following legal bases:

• o execution of the order placed,
• o performance of obligations under the law, including regulations
  on accounting,
• for the legitimate interests of the Administrator, including, among others, for the purpose of directing offers on services and promotions (also with the help of external service providers), sales (stationary and online stores), sending the Newsletter, through available communication channels, in particular and with your consent – through e-mail, telephone, internet portal, the Publishing House social media,
• for other purposes – the legitimate interest of the Administrator.

Providing your personal data is voluntary, but it is necessary to achieve the purpose for which they are collected.

V What rights do you have in connection with the processing of personal data

We take appropriate measures to provide all relevant information in a concise, transparent, understandable and easily accessible form, in clear and plain language, and to conduct all communications with you regarding the processing of personal data in connection with the exercise of your right to:

• information provided when obtaining personal data,
• information provided on request – whether the data is processed and other issues specified in art. 15 of the GDPR, including the right to copy the data,
• rectification of data,
• be forgotten,
• restriction of processing,
• data portability,
• object,
• information about a data protection breach.

Furthermore, if personal data is processed on the basis of consent, you have the right to withdraw it. The consent may be withdrawn at any time, which does not affect the legality of the processing carried out before its withdrawal.

In order to contact us regarding the implementation of a given right, please contact us at the address of the Administrator’s registered office or at the email address: webmail@pbmpwm.pl
The security of your data is our priority. If, when processing personal data, we violate the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection.

VI How will we be contacting you?

We provide information in writing or otherwise, including, where appropriate, electronically. On request, we can provide information orally, provided that we confirm your identity by other means. If the request is submitted electronically, the information will also be provided electronically, where possible, unless another preferred form of communication is indicated.

VII When will we meet your request?

We try to provide information without undue delay – no later than within one month of receiving the request. If necessary, this period may be extended by another two months due to the complexity of the request or the number of requests. In any case, within one month of receiving the request, we will inform you about the actions taken and (if applicable) about the extension of the deadline, stating the reason for such delay.

VIII Subcontractors/processors – exchange of information with service providers

We cooperate with entities that process personal data on our behalf and use only the services of such processors that provide sufficient guarantees for the implementation of appropriate technical and organizational measures so that the processing meets the requirements of the GDPR and protects the rights of data subjects.

We also share your personal information with certain entities that perform services on behalf of PBM. In this case, we only share the information they need to perform these services.

We check the entities to which we entrust the processing of your data. We execute detailed agreements with them, and we also periodically check the compliance of processing operations with the content of such an agreement and the law.

IX Collection of personal data

By visiting the PBM website, you can take many actions without having to provide any personal information. When you register to use the PBM website and order products or services as a PBM subscriber, the following personal information may be collected to provide those services:

• contact information such as your name, telephone and fax numbers, residential address and e-mail address;
• billing information such as card number, expiration date and type, as well as credit card billing address;
• demographic information such as job title, job description and company name and type;
• profile information, including username and password, and details of purchases and content licensed from us.

X Data retention

Your data will be stored as long as the account is active, the user data is necessary to provide services or as long as it is required to fulfil our legal obligations. If you want to delete your account or request us to stop processing your data in order to provide services, please contact us at: webmail@pbmpwm.pl. We store personal data in a form that allows identification of the data subject for no longer than is necessary for the purposes for which the data is processed. In the retention procedure, we ensure that the period of personal data storage is limited to a minimum. The period of data processing is determined in the first place on the basis of the law (e.g. time of storing accounting documents), as well as the justified interest of the administrator (e.g. marketing activity).

Examples of periods for which data may be stored:

• data on the performance of the contract – up to 10 years from the end of cooperation;
• data required to issue an invoice and accounting documents – 5 years from the end of the calendar year in which the tax payment deadline expired;
• data of co-workers, suppliers, contractors – up to 10 years from the end of cooperation.

The data controller may retain a limited part of personal data in order to demonstrate compliance of its activities with applicable law.

XI Authorised Agent

We ensure that any person acting under our authorization and having access to your personal data processes them only on our instructions, unless other requirements result from the law of the European Union or the law of a Member State.

XII Cookie policy

Polska Biblioteka Muzyczna PWM used a technology called “cookies,” so small text files that a website stores on your computer, laptop or mobile device when you visit the site in order to enable the site to remember your preferences and to personalise websites in terms of displayed content and matching advertisements to recognise and adapt your needs.

Acceptance of “cookies”:
This website uses “cookies”. By using our website, you consent to our use of “cookies” in order to ensure convenience when browsing our website. The settings for these files can be changed at any time using the browser settings.

XIII Other technologies

1. 1. “Plug-ins” on the website of the Polish Music Library PWM can be recognised by the logos of Google, Facebook, Twitter, Instagram, Youtube. While using the Publishing House’s website that uses plug-ins, the browser creates a direct connection with listed websites. The content of the plug-ins is sent from the websites directly to the browser and integrated by it with the Publisher’s website.
2. 2. The Publishing House has no influence on the amount of data, the purpose and scope of data collection and the further processing and use of this data, downloaded using plug-ins by the websites listed in par. 1. 1.
3. Plug-ins may be placed by website operators on their own websites. By clicking on these plug-ins, registered users of the listed websites can automatically leave a note on the website with information that they accept the linked content of the publisher’s website operator.
4. 4. With the help of plug-ins, data on the user’s online activity can be collected and made available by the websites listed in par. 1 as part of the collection and transfer of personal data (transmission) regarding tools, hardware and software used by the user.

XIV The integrated “plug-in” of the Publisher’s website “communicates” on an ongoing basis with the listed websites and directly during the visit to the website on which it is used, sends data to the listed websites – even when the user has not clicked on it.

XV Information and some good advice

1. If you use one computer together with other users, after using the website of the Publishing House to which you are logged in, it is necessary to log out from your setting so that no one can see them.
2. The data provided during registration are known only to you and the Publishing House.
3. On the part of the Publishing House, we guarantee that your data will not be disclosed to anyone, but we recommend that you exercise caution when disclosing them to third parties.
4. It may happen that people using the Publisher’s websites want to “extract” information about themselves from you and use it against you or other people. They can do it, for example, from the desire to profit, to cause damage to the company’s image or, in their opinion, for fun.
5. Be careful and make sure who the person who asks for your personal data is, and what institution they represent. Please remember that you are the person protected by data protection legislation.

XVI Final provisions to the establishments of the Privacy Policy

1. 1. The Administrator uses technical and organizational measures to ensure a level of security of processed personal data appropriate to the risk and categories of data protected, and in particular protects data against unauthorized access, removal by an unauthorized person, processing in violation of applicable regulations and change, loss, damage or destruction.
   2. The Service Provider provides appropriate technical measures to prevent unauthorised persons from obtaining and modifying personal data sent electronically.
   3. This Policy of the PWM Polish Music Library is not a source of obligations and is for information purposes only.
   4. The materials and content posted on the websites perform artistic, educational, scientific and commercial tasks and are in accordance with the Publishing House’s statute.
   5. Employees, contractors, service recipients, users (clients) using the website in any way accept the rules contained in this Policy.
   6. Users may submit questions regarding the Policy via the e-mail address: pwm.com.pl

XVII Policy change

The data administrator may amend the Policy in the event of a change in the law or a change in the functionality of the website, necessitating the adaptation of this document.

Version 2.0 (Kraków, 11th April 2023)