| Data Controller: | The controller of your personal data is Polska Grupa Lotnicza Spółka Akcyjna with its registered office in Warsaw at Komitetu Obrony Robotników 45A, 02 – 146 Warsaw, Poland, KRS (National Court Register number): 00000717327. You can contact us by e‑mail address: pgl@pgl.pl or in writing to our registered office (“PGL S.A.”) |
| Data Protection Officer: | Data Protection Officer is a person who can help you regarding the protection of your personal data. You can contact DPO via email: iod@pgl.pl or in writing: to our address indicated in the “Data controller” section. |
| Purpose and legal bases for processing: | We process your personal data for the following purposes: 1. performance rights and obligations under the business contract concluded with PLL LOT S.A. (based on art. 6(1)(b) GDPR) 2. with the performance of legal obligations of PGL S.A. (based on art. 6(1)© GDPR) such as accounting, bookkeeping, tax-related and other purposes according to legitimate interests of data controller, 3. in accordance to legitimate interests of data controller (based on art. 6(1)(f) GDPR) such as: - contact with you, as a company representatives performing in contract - acting in performance rights and obligations under the business contract (archiving documents, statistical, analytical and reporting activities), - conducting counterparty risk assessment to verify the business credibility and to prevent potential fraud and abuse, - undertaking activities relating to the performance of the business contract as a recovery of claims. |
| Categories of data: | The scope of personal data depends from the category of person: 1. Natural person supplier: name, surname, Taxpayer’s Identification Number, Number of National Official Business Register, address of the place where economic activity is carried out, corresspondence address, e‑mail address, phone number, financial data from invoices and other bookeeping documents, bank account numer; 2. The supplier’s representatives: name, surname, e‑mail address, phone numer, other data made available by supplier. |
| Categories of recipients: | Your Personal Data can be transferred to or shared with: 1. entities related to PGL S.A. i.e. companies from the PGL capital group; 2. contractors providing selected services on behalf and for PGL S.A. (bookkeeping, legal, marketing or IT services – to the extent that it is necessary to provide these services); 3. insurance companies, where the contract concluded with PGL S.A. has covered by insurance. |
| Categories of recipients: Retention period: | The retention period depends from the purposes of processing personal data: 1. to perform rights and obligations under the business contract – for the duration of the business contract and until the expiration of claims; 2. for statistical, analytical and reporting purposes: for the duration of the business contract and until the expiration of claims; 3. for counterparty risk assessment: for the duration of the business contract and until the expiration of claims; 4. for archiving documents: : for the duration of the business contract and until the expiration of claims; 5. for accounting purposes: until the date of approval of the financial statements for the given financial year; 6. for tax purposes: no longer than 5 years from the end of the calendar year, during which the tax obligation arose; 7. for bookkeeping – no longer than 5 years (legal obligation for bookkeeping). |
| Your rights: | According to GDPR, you have the following rights relating to the processing of your personal data, exercised by contacting PGL S.A. via any means of communication: 1. right of access to your personal data; 2. right to rectification of inaccurate personal data; 3. right to erasure of your personal data; PGL S.A. has the right to refuse erasing the personal data in specific circumstances provided by law; 4. right to restriction of processing of your personal data; 5. right to transmit your personal data; 6. right to object to processing your personal data conducted based on legitimate interests, on grounds relating to your particular situation; 7. right to lodge a complaint with a supervisory authority. |
| Source of personal data originate: | The personal data processed by PGL S.A. came from the following sources: 1. made available by the supplier, or 2. from the publicly accessible sources such as public registers or other publicly accessible databases via the Internet, or 3. made available by the one of PGL S.A. partners. One of the partners of PGL S.A. is Dun & Brandsteet and Dow Jones, which provides PGL S.A. economic data. More information about processing personal data by Dun & Brandsteet can be found on their website (in Polish): www.dnb.com/pl-pl/twoje-dane-biznesowe and by Dow Jones can be found on their website: https://www.dowjones.com/privacy-notice/?mod=DJnotice. |
