Privacy policy

The data controller is the editorial team of the Cytadela Warszawska portal — an independent information site, not affiliated with the museums. You can reach the team about data-protection matters through the contact form.

This site is informational. For tickets, reservations and events the relevant museum, not the portal, remains the controller of your data.

The contact form covers your name, e-mail address and message. We process this data only to reply to your message, handle content corrections and discuss collaboration.

The form currently runs in a demo mode and does not send data to a server — the message is not actually transmitted or stored. Once message handling is enabled, the rules described here will apply.

Processing is based on the consent of the person making contact and the controller’s legitimate interest in replying (Art. 6(1)(a) and (f) GDPR). Data is kept only for as long as needed to handle the matter and to defend against possible claims, after which it is deleted.

We do not sell or share data with third parties for marketing. Data may only be entrusted to the hosting and e-mail provider to the extent needed to run the service, under a data-processing agreement.

You have the right to access your data, to rectify, erase or restrict its processing, to object, and to withdraw consent at any time, as well as to lodge a complaint with the supervisory authority. Cookie practices are described on the cookies page.