Information on personal data processing – as part of performance of the contract concluded with PLL LOT

Data controller:

LOT Polish Airlines with its registered office in Warsaw at ul. Komitetu Obrony Robotników 43, 02-146 Warszawa is the controller of your personal data, KRS no. 0000056844, tel. no.: +48 22 577 77 55, e-mail: lot_info@lot.pl (PLL LOT S.A.).

Data Protection Supervisor:

The Data Protection Supervisor is a person who you can contact regarding issues related to the protection of your personal data. Contact:

a)      email: iod@lot.pl

b)      in writing, to the address of our headquarters (indicated in the “Data controller” section).

The purposes and the legal foundations of processing:

 

Applicable abbreviations:

GDPR – Regulation
(EU) no. 2016/679 of the European Parliament and of the Council dated 27 April 2016 regarding the protection
of legal persons in relation to processing of personal data
and free movement of such data
and repeal of directive 95/46/EC

ARES – Act of 18 July 2002 on Rendering Electronic Services

TL – Act of 16 July 2004 – Telecommunication Law

We process your personal data for the following purposes:

1)     Carry out the rights and obligations under the contract concluded with PLL LOT S.A., and in particular to contact you as a representative of the party to the contract |art. 6 sec. 1 (b) of the GDPR

Personal data submitted as part of performance of the contract: name, (names), surname, e-mail address, phone no, department, position, company name

2)     Undertaking activities under the contract (archiving of documents, internal statistics, reporting) | Art. 6 section 1 (f) of the GDPR (the so-called legitimate interest of the controller, which is providing services at an appropriate level and care for maintaining business relations)

Personal data submitted as part of performance of the contract: name, (names), surname, e-mail address, phone no, department, position, company name

3)     For accounting, bookkeeping, tax and others purposes, connected with the performance of legal obligations by PLL LOT S.A.
|Art. 6 section 1 (c) of the GDPR in connection with Art. 74 section 2 of the Accounting Act of 29 September 1994

Personal data submitted as part of performance of the contract: name, (names), surname, e-mail address, phone no, department, position, company name

4)     Contact to survey counterparty satisfaction that constitutes the implementation of a legitimate interest of determining the quality of our service and the level of counterparty satisfaction with the cooperation | Art. 6 section 1 (f) of the GDPR (the so-called legitimate interest of the controller)

Personal data submitted as part of performance of the contract: name, (names), surname, e-mail address, phone no, department, position, company name

5)     Possible determination, investigation or defense of claims| Art. 6 section 1 letter f) GDPR (so called legitimate interest of the controller)

Personal data submitted as part of performance of the contract: name, (names), surname, e-mail address, phone no, department, position, company name

Categories of recipients:

Your personal data may be transferred to:

1)       entities affiliated with PLL LOT S.A., that is companies from the LOT capital group,

2)       authorized employees or contractors of PLL LOT S.A.,

3)       entities providing selected services to LOT Polish Airlines S.A. (accounting, legal, marketing, IT services - to an extent necessary to provide such services).

Forwarding a call
to non-EEA countries:

 

Applicable abbreviation:

EEA – European Economic Area

Due to the cooperation of PLL LOT S.A. with its related entities and service providers established outside of EEA, your personal data may be transferred to the following states outside of EEA: Belarus, Cyprus, China, Georgia, Israel, Japan, Canada, Kazakhstan, South Korea, Macedonia, Moldova, Russia, Singapore, United States, Turkey, Ukraine.

In order to ensure appropriate level of personal data protection entrusted to states that the European Commission has not considered to have proper degree of protection, PLL LOT S.A. shall apply standard contractual clauses concerning protection of data adopted by European Commission referred to in Art. 46 (2c) of the GDPR. The clauses are available on the Internet on the website of the European Commission (ec.europa.eu) and they can also be accessed in the registered office of PLL LOT S.A.

Retention period:

1)      In order to perform the rights and obligations under the concluded contract – until the date of expiry of any claims due to the contract (no longer than for 10 years from the date of performance, expiry, termination of the contract, unless otherwise provided for in the contract or applicable laws.).

2)      For internal statistics and reporting purposes (no longer than for 10 years from the date of performance, expiry, termination of the contract, unless otherwise provided for in the contract or applicable laws.).

3)      For document archiving purposes – until the date of expiry of any claims due to the contract (no longer than for 10 years from the date of performance, expiry, termination of the contract, unless otherwise provided for in the contract or applicable laws.).

4)      For bookkeeping purposes – until the day the financial statements for the trade year are approved, but no earlier than the date of settlement of the persons entrusted with assets subject to retail sales.

5)       For tax purposes – no longer than a period of 5 years from the end of the calendar year during which the tax obligation arose.

6)      For bookkeeping purposes – 5 years (for a period of maintaining accounting books).

Your authorizations:

 

Applicable abbreviation:

GDPR – Regulation
(EU) no. 2016/679 of the European Parliament and of the Council dated 27 April 2016 regarding the protection
of legal persons in relation to processing of personal data
and free movement of such data
and repeal of directive 95/46/EC

According to the GDPR, you have the following rights that can be exercised by contacting PLL LOT S.A. using any mean of communication:

1)      access to the contents of your personal data (Art. 15 of the GDPR) by request for or transfer of a copy of the personal data package processed by PLL LOT S.A.

2)      request for rectification of personal data (Art. 16 the GDPR) by indicating the incorrect personal data in question

3)      request for deletion of your personal data (Art. 17 of the GDPR); PLL LOT S.A. shall have the right to deny the request for deletion of the data in cases stipulated by law

4)      request for restriction of processing of your personal data (Art. 18 of the GDPR) by indicating which data ought to be limited in terms of processing

5)      for portability of your personal data (Art. 20 of the GDPR) by requesting preparation and transfer of personal data by PLL LOT S.A. (transferred to PLL LOT S.A. or another controller) in a structured, commonly used format in a machine readable form; only data obtained on the basis of this application or a separate consent shall be subject to data portability

6)      appeal against processing of personal data based on Art. 6 section 1 (e) or (f) of the GDPR, due to reasons related with one’s specific situation,

7)      complaint to a supervisory authority, in particular in a member state of habitual residence, workplace or place of alleged infringement, in the event where it is determined that processing of your personal data infringes provisions of GDPR (Art. 77 section 1 of the GDPR).

Freedom to disclose data:

Providing your personal data is not obligatory.

Providing your personal data is necessary in order to:

a)      perform the contract;

b)      undertake activities to conclude a contract and develop a business relation.