Personal data processing for the purposes of maintaining a user account at LOT.com

Data controller:

Polskie Linie Lotnicze LOT Spółka Akcyjna having its registered office in Warsaw, address: ul. Komitetu Obrony Robotników 43, 02-146 Warsaw, KRS: 0000056844, tel.: +48 22 577 77 55 (PLL LOT S.A.).

Data Protection Officer:

Data Protection Officer is a person whom you can contact to discuss matters related to the processing of your personal data. Contact information:

a) email: iod@lot.pl

b) in writing, to the address of our registered office provided in the "Data controller" section.

Purposes and legal grounds for processing:

We process your personal data for the following purposes:

1) to provide services electronically via lot.com website, including the maintenance of your account on this website, enabling the execution of air carriage contract and agreements for additional and special services, making available information through the website. The processing is carried out under an electronically supplied services agreement.

2) statistical, analytical and reporting purposes, based on a legitimate interest of the controller, i.e. the improvement of the quality of services and their adjustment to the needs of passengers and users of the website, 

3) ensuring safety of electronically supplied services, improving the functionality of lot.com website, adjusting the website to the users' needs. Data is processed based on our legitimate interest to ensure safety of our services and the possibility of improving their quality.

4) storing for archiving (evidential) purposes or to establish, exercise or defend claims, if any. Personal data is processed based on our legitimate interest, i.e. to enable us to defend and exercise claims and to secure information in case of a legal need to provide evidence.

Categories of recipients:

Your personal data may be transferred to entities providing selected services to PLL LOT S.A. (including marketing, advertising and IT services) – to the extent to which it is necessary for the provision of such services.

Retention period:

Data retention period depending on the purpose:

1) In order to provide services electronically, including the maintenance of lot.com account – no longer than by the time of deleting the account at lot.com

2) For statistical, analytical and reporting purposes, to ensure the safety of services and the proper functioning of the website – no longer than by the time of deleting the account at lot.com

3) In order to protect information in case of a legal need to provide evidence and to establish, exercise or defend claims – until the expiration of claims related to the provision of the service of maintaining an account at lot.com

Your rights:

You have the following rights related to the processing of your data:

1) ) the right of access to your personal data by requesting access to or sending copies of all your personal data processed by PLL LOT S.A. as well as information on the processing of your data;

2) to demand that your personal data is rectified
 by informing which elements of your personal data are incorrect;

3) to demand that your personal data is erased; PLL lot S.A. has a right to refuse to erase data
in cases permitted by law;

4) to demand limited processing of your personal data;

5) to demand that your personal data is transferred by PLL LOT S.A through the preparation and transfer of the personal data provided by you to another controller or to You in a structured, commonly used machine-readable format; only data processed under a contract may be transferred;

6) to object to the processing of your personal data.

In order to exercise the above-mentioned rights, contact us using any means of communication.

The right to object

To the extent to which we process your personal data based on our legitimate interests – you can object to the processing of your data due to your particular situation.

You have also the right to lodge a complaint to a supervisory authority, especially
in the member state of your habitual residence, your place of work or the place of the alleged infringement, if it is found that the processing of your personal data violates the provisions of the GDPR. In Poland, this function is held by the President of the Data Protection Office.

Voluntary nature of data provision:

You must provide us with your personal data (e-mail address) in order to enable PLL lot S.A. to provide you with the service of maintaining an account at lot.com website.

A failure to provide this data will result in the inability to create and have an account at lot.com

Profiling:

Using the data that you have provided in a given profile, based on your consent, we are able to prepare an automatic offer selection adjusted to your preferences. It is based on the profiling of data that you have provided, such as location or technical parameters of your device (resolution, browser size, etc.). The profiling does not have any legal effects.