Cookies We use cookies for functional purposes to help users use our site and to create anonymous statistics service. If you are not blocking cookies, you agree to their use in the device memory. You can independently manage cookies by changing the settings of your browser. Close
PERSONAL DATA PROCESSING NOTICE
 

 

Data controller
The controller of your personal data is Polska Wytwórnia Papierów Wartościowych S.A. with its registered office in Warsaw at the following address: ul. Sanguszki 1.
Contact information

The data controller can be contacted in the following ways:

  1. by post: ul. Sanguszki 1, 00-222 Warsaw, Poland,
  2. data or by post: PWPW S.A, ul. Sanguszki 1, 00-222 Warsaw, Poland. .

    The Data Protection Officer can be contacted with respect to all matters related to the processing of personal data and the exercising of rights related to the processing of personal data.

Purposes of data processing and legal basis for processing of personal data

Your personal data may be processed:

PURPOSE
LEGAL BASIS
For the purposes of communication and handling a matter by e-mail or traditional correspondence.

article 6 section 1 letter f) of GDPR

The legal basis for data processing is the legitimate interest of the Data Controller consisting in maintaining traditional and electronic correspondence.

For the purposes of contacting someone by phone.

article 6 section 1 letter f) of GDPR

The legal basis for data processing is the legitimate interest of the Data Controller consisting in the need to handle to issue reported which is related to its business.

For the purposes of ensuring the security of persons and property through visual monitoring and access control.

article 6 section 1 letter c) of GDPR

The legal basis for data processing is the Data Controller’s legal duty arising from the act on the principles of managing state property.

 

article 6 section 1 letter f) of GDPR

The legal basis for data processing is the legitimate interest of the Data Controller consisting in ensuring the security of persons and the Data Controller’s property as well as protection of its rights.

For the purposes of recruitment.

article 6 section 1 letter c) of GDPR

The legal basis for data processing is the Data Controller’s legal duty arising from the provisions of the labour code as well as other regulations.

 

article 6 section 1 letter a) of GDPR

The legal basis for data processing is the consent required to carry out the recruitment procedure with respect to the data not required by the provisions of the law and also for the purposes of future recruitment procedures.

For the purposes of providing services or performing contracts.

The rules of personal data processing in connection with the services offered are regulated by other policies which are available on the Data Controller’s websites.

article 6 section 1 letter b) of GDPR

The legal basis for data processing is the execution and performance of a contract.

 

article 6 section 1 letter f) of GDPR

The legal basis for data processing is the legitimate interest of the Data Controller consisting in, in particular, performing a contract.

For the purposes of providing information about products offered.

article 6 section 1 letter a) of GDPR

The legal basis for data processing is the expressed consent that can be withdrawn at any time. Withdrawal of the consent has no effect on the compliance with the right to process the data that was effected basing on the consent prior to its withdrawal.

 

article 6 section 1 letter f) of GDPR

The legal basis for data processing is the legitimate interest of the Data Controller consisting in, in particular, the marketing of own services.

For the purposes of discharging the legal duties of the Data Controller, and in particular keeping the books and tax documentation.

article 6 section 1 letter c) of GDPR in connection with the regulations in force.

The legal basis for data processing is the Data Controller’s legal duty, and in particular the duty arising from the tax law, the act on accounting as well as other regulations.

For the purposes of collecting data in business contacts.

article 6 section 1 letter a) of GDPR

The legal basis for data processing is the expressed consent that can be withdrawn at any time. Withdrawal of the consent has no effect on the compliance with the right to process the data that was effected basing on the consent prior to its withdrawal.

 

article 6 section 1 letter f) of GDPR

The legal basis for data processing is the legitimate interest of the Data Controller consisting in, in particular, the management of business contacts.

For the purposes of communication with the individuals responsible for performing the contract from the business partner’s side.

article 6 section 1 letter f) of GDPR

The legal basis for data processing is the legitimate interest of the Data Controller consisting in communicating with business partners.

For analytical and statistical purposes, filing claims, or protecting the Data Controller’s rights.

article 6 section 1 letter f) of GDPR

The legal basis for data processing is the legitimate interest of the Data Controller.

For the purposes of maintaining the website: Public Information Bulletin in connection with the fulfilment of a legal obligation imposed under the provisions of law.

article 6 section 1 letter c) of GDPR read with article 9 section 4 item 3) and article 9 section 4 a) of the Act of 6 September 2001 on access to public information.

For the purposes of maintaining pages on social networks: Facebook, Twitter, YouToube under the terms and conditions specified by them.

article 6 section 1 letter a) GDPR

The legal basis for data processing is the consent expressed through a clear affirmative action consisting of the user initiating any activity on a given profile.

 

article 6 section 1 letter f) GDPR

The legal basis for data processing is the legitimate interest of the Data Controller consisting in managing websites, providing information on the activities and services offered by PWPW, promoting various events organized by the Company and for the purpose of communication via available functionalities, i.e. comments, chat, messages.

Recipients of data
Your personal data may be shared with:
  1. entities that provide certain services, including but not limited to ICT service providers, postal operators, courier companies,
  2. providers of legal and consulting services, and companies supporting the Data Controller in claim assertion, in particular law firms,
  3. bodies authorised to receive personal data under the law.
  4. administrators of social networks and users of such networks.
Rights of data subjects

You have the right to access your personal data and the right to demand that these data be amended, deleted, or that their processing be limited.

Within the scope in which the basis for the processing of personal data is the legitimate interest of the Data Controller, you have the right to object against the processing of your personal data.

Within the scope in which the basis for the processing of personal data is a consent, you have the right to withdraw this consent at any time without any effect on the legality of the processing that took place pursuant to this consent before its withdrawal.

Within the scope in which your data are used for the purposes of executing and performing a contract on service provision or they are processed pursuant to your consent, you also have the right to transfer the personal data.

You also have the right to file a complaint with the President of the Personal Data Protection Office.

Duration of data storage

Your personal data will be kept until the task for which they were collected is fulfilled, and then, as far as archival materials are concerned, they shall be stored for the duration arising from the act on national archival resources and archives dated 14 July 1983.

In the case of processing of your personal data for the purposes of keeping the books and tax documentation your personal data will be kept for 5 years counting from the end of the calendar year during which the tax obligation arose.

In the case of processing of your personal data for the purposes of claim assertion your personal data will be kept until the expiration of the statute of limitations for claims provided by law.

In the case of your consent to the processing of personal data, your data will be kept until this consent is withdrawn.

In the case of maintaining the Public Information Bulletin, personal data will be processed as long as the basis for the processing exists and for the time necessary to achieve the purpose of the processing.

In the case of data processing on social networks, information within the framework of posted comments will be available on the website until deleted by the author; statistical data on visitors to a given social media profile will be processed for the duration of availability of such data on the given website.

Personal data collected by: Facebook, subject to retention under the terms of service Facebook https://www.facebook.com/policies_center; Twitter Inc. under the terms of service Twitter https://twitter.com/en/privacy; YouTube, whose provider is Google LLC are subject to retention under the terms of the website's privacy policy, more information at: https://policies.google.com/technologies/retention?hl=pl

Notice about data provision requirement

The provision of your personal data is necessary in cases when the reason for personal data processing arises from a provision of the law or a contract concluded by and between the parties.

Provision of personal data for other purposes, e.g. marketing, is voluntary.

Notice about automated decision-making, including profiling

In connection with the processing of personal data you will not be subject to decisions made automatically (without human input).

Your personal data will not be used for profiling.

PWPW (Polish Security Printing Works)

1 R. Sanguszki Street
00-222 Warsaw, Poland
See on map
tel. (+48) 22 235 20 00
fax (+48) 22 235 24 50
data