Information clause regarding personal data processed by Krajowy Depozyt Papierów Wartościowych S.A. (Central Securities Depository of Poland)
Information clause regarding personal data processed by Krajowy Depozyt Papierów Wartościowych S.A. (Central Securities Depository of Poland)
- The controller of your personal data is Krajowy Depozyt Papierów Wartościowych S.A. (Central Securities Depository of Poland) with its registered office in Warsaw (00-498) at ul. Książęca 4 (hereinafter “Controller”). The Controller can be contacted via the e-mail address: bb@kdpw.pl or in writing at the address indicated above.
- Your personal data are processed on the basis of Article 6(1)(a) GDPR, i.e., based on consent given to the processing.
- Your personal data will be processed for the time necessary to achieve the above-mentioned processing purposes but not shorter than required by the provisions of law applicable to the Controller, with the proviso that if the data constitute evidence in proceedings conducted pursuant to the provisions of law or the Controller becomes aware that they may constitute evidence in proceedings, their retention period may be extended until the final conclusion of the proceedings or the statute of limitation of any claims.
- The recipients of your personal data may be entities providing legal, debt collection, audit or control services and entities providing technical or IT support services to the Controller, including cloud data processing services.
- You have the right to withdraw consent for data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal, the right to access your data and the right to data rectification if they are inconsistent with the actual state of affairs, as well as, in cases provided for by law, the right to request their erasure or restriction of their processing.
- You have the right to object to the processing of personal data on grounds relating to your particular situation regarding each of the purposes indicated in point 3(1) above.
- You have the right to lodge a complaint with the authority competent for the protection of personal data if you feel that the processing of your personal data violates the provisions of the GDPR. The competent authority in Poland is the President of the Personal Data Protection Office (UODO). 8. Your personal data will not be used for automated decision making, including profiling.