Personal data protection request

ADDITIONAL INFORMATION:

Pursuant to Article 13(1-2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter "GDPR"), please be advised that:

1. The Controller of your personal data is PGE Paliwa sp. z o.o. with its registered office in Kraków (31-587), ul. Ciepłownicza 1.
2. With regard to the protection of your personal data, you may contact the Data Protection Officer, using the contact form available on the website or sending an email to the address iod.pgepaliwa@gkpge.pl or a letter to the address of our registered office indicated in paragraph I above.
3. Objectives and basis of processing. We will process your data:
   a.    in order to handle your enquiry related to the Controller's processing of your personal data, on the basis of Article 6(1)(c) of the GDPR, i.e. to fulfil the Controller's legal obligation,
   b.    for archival (evidential) purposes, being the fulfilment of our legitimate interest to safeguard information in the event of a legal need to prove facts, on the basis of Article 6(1)(f) of the GDPR.
4. Right to object. You have the right to object to the processing of your data at any time. We will stop processing your data for the above purposes unless we can demonstrate that there are compelling legitimate grounds that override your interests, rights and freedoms, or that your data will be necessary for us to possibly establish, pursue or defend claims.
5. Data retention period. We will keep your data until the statute of limitations for claims for damages that may be made in relation to a breach of the GDPR.
6. Recipients of data. Your personal data may be transferred to our subcontractors (processors) in the event that we need to engage them to respond to your enquiry or handle your request.
7. Transfer of personal data outside the EEA. In principle, your personal data will not be transferred outside the European Economic Area (hereinafter: "EEA"). However, taking into consideration the maintenance of the IT infrastructure and the services provided by the company PGE Systemy S.A. in the capacity of a data processor, whose selected subcontractors operate outside the EEA, your personal data may be transferred outside the EEA.  Each transfer of personal data has a legal basis resulting from Article 46(2) of the GDPR.
8. Rights of data subjects. Pursuant to the GDPR, you have the following rights:
   a.    to access your data and receive their copy,
   b.    to correct your data,
   c.    to remove your data, restrict their processing, or file an objection against their processing,
   d.    to transfer your data,
   e.    to lodge a complaint with the supervisory authority.
9. Information on the voluntary provision of data. The provision of data is necessary for the handling of your request. If you do not provide the required data, we will not be able to handle your request.
10. Automated decision-making. Please be advised that we do not make automated decisions in the process of handling your request and your data are not used for profiling purposes

Data Protection Officer – Mariusz Lach
iod.pgepaliwa@gkpge.pl