Information Clauses

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Journal of Laws of the European Union L. of 2016 No. 119, p. 1, as amended, hereinafter referred to as the "GDPR") we provide you with the following information.

I. Joint controllers

The joint controllers of personal data are LPP S.A. with its registered office in Gdańsk, ul. Łąkowa 39/44, entered into the National Court Register kept by the District Court Gdańsk – North in Gdańsk, VII Commercial Division of the National Court Register under KRS number 0000000778 (hereinafter referred to as "LPP S.A.") and the relevant subsidiary of LPP S.A. indicated in Appendix 1 (hereinafter jointly referred to as "Joint Controllers"). If the relevant subsidiary is not indicated in Appendix 1, it means that the controller of your personal data is solely LPP S.A.

If you are an employee or associate of LPP S.A., only LPP S.A. is the controller of your personal data.

II. Contact

In connection with the processing of personal data for the purposes indicated in point III, you may contact the subsidiary LPP S.A. of which you are an employee or associate. Contact details of individual companies are indicated in Appendix 1.

If you are an employee or co-worker of LPP S.A., you may contact us electronically regarding the processing of personal data for the purposes indicated in point III at: privacyretail@lpp.com

III. Purposes and grounds for the processing of personal data

IV. Requirement to provide personal data

Providing personal data is necessary to perform the duties or legitimate interests of the controller, and at the same time for the exercise your rights. To the extent that the legal basis is consent, the provision of personal data is voluntary.

V. The recipients of personal data may be

1. employees, associates, representatives and members of the governing bodies of LPP S.A. and the relevant LPP S.A subsidiary of which you are an employee or collaborator, to the extent that access to your data is necessary for the performance of their professional duties;
2. entities providing maintenance and maintenance services for equipment or systems used to support training;
3. IT service providers.

VI. We hereby inform you of your right to:

1. access your personal data and request a copy of it;
2. rectify your personal data;
3. request restriction of processing of your data;
4. transfer your personal data;
5. withdraw your consents at any time, whereby the withdrawal of a consent does not affect the lawfulness of processing based on the consent before its withdrawal;
6. erase your data;
7. object to the processing of personal data within the scope of the legitimate interest of the controller;
8. lodge a complaint with the supervisory authority. The list of supervisory authorities relevant to the company of which you are an employee or associate can be found in Appendix 1.

You can exercise the above rights by contacting the relevant company of which you are an employee or co-worker. Contact details are provided in Appendix 1.

VII. Transfer of personal data to a third country

Personal data may be transferred to third countries, including in particular the USA. When the recipient of the data is located outside the European Economic Area, the transfer of data is based on the decision of the European Commission determining the appropriate level of personal data protection, and in the absence of such a decision, the transfer is based on appropriate safeguards, including standard data protection clauses adopted by the European Commission. The controller shall provide a copy of the data or information on the applied safeguards upon request submitted to the following e-mail address: privacyretail@lpp.com.

VIII. Information about automated decision-making, including profiling

There is no automated decision-making, including profiling, in the above-mentioned processing operations.

Appendix 1