Dear Sir or Madam,

Due to the fact that since 25 May 2018, the Regulation (EU) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) has become binding, we would like to inform you how your personal data is processed by our company.

Information relating to the protection of personal data

The Controller of your personal data is the company EXCO A2A Polska sp. z o.o. with its registered office in Warsaw (02-585), at the address: ul. Aleja Niepodległości 106, telephone: 022 847 61 17, hereinafter referred to as “EXCO”.

Pursuant to Article 37 of the GDPR, the Personal Data Controller designated a Data Protection Officer. The person acting as Data Protection Officer is Mrs Izabela Oziębła. She can be reached by e-mail at: iod@exco.pl

Your personal data shall processed for the following purposes:

• Concluding and implementing Agreements and rendering services offered by EXCO,
• Sending commercial communication, if you give your prior consent to receive them,
• Performing obligations resulting from other specific legal provisions.

The basis for processing your personal data is the Article 6 (1) letter a) or b) or f) of the Regulation (EU) of the European Parliament and of the Council no 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

The legitimate interest pursued by EXCO is to build and retain business relations with you, as well as direct marketing of EXCO services. Personal data being processed is data that has been obtained directly from you, transmitted on your behalf or collected from public sources, including in particular:

• First and last name
• E-mail address
• Contact phone number
• Correspondence address

The recipients of your personal data are EXCO employees and collaborators and EXCO’s support providers.

Your personal data shall be stored for the period necessary to achieve the purposes for which data is collected and to perform obligations under the law.

Personal data stored for the purposes of commercial communication and direct marketing shall be stored until you withdraw your consent to their processing or request to remove or limit the processing or object to processing, as well as request its transfer.

With regards to the processing of your personal data, you have the right to request access to your personal data, to correct it, to delete or restrict the processing, or the right to object to its processing, as well as the right to transfer it. Should you consent to the processing of your data, you have the right to withdraw your consent at any time without affecting the lawfulness of processing.

In accordance with the currently applicable provisions on the protection of personal data, you also have the right to lodge a complaint with the competent supervisory authority. Should you have any questions relating to personal data processing, please contact us at: iod@exco.pl.