We respect your privacy. Your data is safe with us and is processed in compliance with the General Data Protection Regulation 2016/679 of 27 April 2016 (hereinafter referred to as the “GDPR”).
1. What is personal data?
Information that identifies you or allows identifying you, e.g. name, surname, telephone number or e-mail address. The PKEE has been and is collecting your data in relation to PKEE’s operations, for the purpose of performance of its statutory tasks and marketing activities.
2. Who is responsible for personal data processing and whom at the PKEE can I contact?
Your personal data controller is the Polish Electricity Association with its registered seat in Warsaw (00-052), ul. Świętokrzyska 18 (hereinafter referred to as the ”PKEE”). The PKEE has appointed the person responsible for personal data processing who may be contacted regarding all the matters concerning personal data processing and exercising the rights relating to data processing:
● by sending a mail to the address: Polski Komitet Energii Elektrycznej ul. Świętokrzyska 18 00-052 Warszawa, Poland
● by electronic channel, to the e-mail address: firstname.lastname@example.org , and
● by telephone: 507 780 596
3. For what purpose the PKEE is processing your personal data and on what legal basis?
The PKEE is processing the data of its ordinary, honorary and supporting members in scope of name and surname, likeness, date of birth, address of residence, e-mail address, place of employment and professional experience. The personal data is processed for the purpose of processing the membership and performance of the statutory tasks of the PKEE such as recording membership, membership fee collection processing, organisation and sending invitations to events, and day to day handling of members’ enquiries and motions. Members’ data is also processed for the purpose of conducting statistical studies intended to improve the operations of the Association.
The PKEE is processing the personal data of members belonging to the authorities of the PKEE that consist of the General Meeting, the Audit Committee and the Management Board – in scope of names and surnames, the PESEL number, likeness, date of birth, address of residence, e-mail address, place of employment and professional experience. The personal data is processed for the purpose of performance of the statutory tasks of the PKEE, sending invitations to events and updating the entry in the Register of Unincorporated Associations, as well as for day to day handling of members’ enquiries and motions.
The PKEE is processing the personal data of the employees of the PKEE in scope of name and surname, parents’ first names, date of birth, address of residence, education and up to date employment history. The personal data is processed for the purpose of performance of the employment contracts or the civil law agreements as well as for financial and accounting purposes.
The PKEE is processing the personal data of persons collaborating on one-off basis (e.g. organisation of events) in scope of name and surname, the PESEL number, telephone number and the e-mail address. The personal data is processed solely for the purpose of performance of the agreements.
The personal data processing takes place:
● for the performance contractual obligations (Article 6 (1) b) of the GDPR), including the statutory tasks;
● for compliance with the legal obligations (Article 6 (1) c) of the GDPR) or the performance of tasks carried out in the public interest (Article 6 O(1) e) of the GDPR), as the PKEE we are subject to numerous legal obligations, i.e. the obligations resulting from under the Act of 7 April 1989, the Law on Associations, the Act of 17 December 1 1998 on Old-Age and Disability Pensions from the Social Insurance Fund or the Act of 13 October 1998 on the Social Insurance System.
● on basis of explicit consent (Article 6 (1) a) of the GDPR) if you have given consent to the processing of personal data for the defined purposes or scope (e.g. sending a newsletter), the PKEE is authorised to process such data on basis of such consent. Consent may be withdrawn at any time. Withdrawal of consent has no influence on lawfulness of data processing until the consent was withdrawn.
● for purposes of the legitimate interests pursued by the PKEE or by a third party (Article 6 (1) f) of the GDPR), examples of such activities are:
− updating of the entry in the Register of Unincorporated Associations,
− processing the data of persons acting on behalf of the members of the PKEE,
− assuring the IT security,
− the establishment, exercise or defence of legal claims.
4. Who may the PKEE transfer personal data to?
Personal data may be made available to other recipients for the purpose of performance of the statutory tasks of the PKEE, for the purpose of fulfilling a legal obligation the PKEE is subject to, based on your consent or for purposes resulting out of legitimate interests of the PKEE or a third party.
The recipients may be in particular: the authorised employees of the PKEE and other members of the PKEE, other institutions authorised by the law to receive your personal data on basis of the applicable legal regulations.
Moreover, the data may be transferred to undertakings processing the personal data on instructions of the PKEE and their authorised employees, whereas such undertakings shall process the data on basis of a contract with the PKEE exclusively according to instructions from the PKEE and on condition of observing confidentiality.
5. Will your data be transferred to a third country (outside the European Union)?
The personal data processed by the PKEE is not transferred to recipients in countries outside the European Union ("third countries "). Transfer of personal data by the PKEE to a third country is possible exclusively if this is necessary to perform the statutory tasks of the PKEE, i.e. for purposes of the legitimate interests pursued by the PKEE. Any transfer of data to a third country may take place only after obtaining your consent.
You have the right, upon the request submitted to the PKEE, to receive a copy of the personal data transferred to a third country.
6. How long will the PKEE be processing (storing) your data?
The personal data will be processed for the duration necessary to perform the purposes of the processing, i.e.:
● in scope of performance of an agreement concluded with the PKEE – until completion of its performance, and after this for the time necessary by the legal regulations or for pursuing possible claims;
● in scope of membership – for the duration of membership or after its termination, for a maximum of 10 years following the moment of termination of membership;
● in scope of fulfilment of a management function – for the duration of its fulfilment or after its termination, for a maximum of 10 years following the moment of termination of its fulfilment; ● in scope of employee data – for the duration of employment and after its termination for a maximum of 50 years following the moment of termination of employment;
● in scope of fulfilment of legal obligations binding the PKEE in relation to conducting its activities and fulfilment of agreements entered into – until the time of fulfilment of these obligations by the PKEE;
● in scope of direct marketing performed on basis of consent until the time of withdrawal of consent to such processing;
● until fulfilment of legitimate interests of the PKEE constituting the basis for this processing or until the time you object to such processing, unless legitimate grounds for further data processing exist.
7. What are your rights concerning personal data?
You have the right to:
● request access to your personal data and the right to their rectification, restriction of processing of personal data or to their erasure;
● in scope in which the basis for personal data processing consists of consent, you have the right to withdraw at any time the previously given consent to personal data processing;
● raise at any time an objection against the processing of personal data:
− on grounds relating to your particular situation when the PKEE is processing this data for purposes resulting out of legitimate interests (Article 21 (1) of the GDPR),
− for purposes relating to direct marketing, including against profiling for purposes of marketing in scope in which the processing of your personal data is related to the direct marketing (Article 21 (2) of the GDPR);
● request transfer of the personal data processed for the purpose of entry into and performance of an agreement or processed on basis of consent. The transmission shall consist of receiving from the PKEE the personal data concerning you in a structured, commonly used and machine readable format and transmission of those data to another controller;
● the right to lodge a complaint with the competent supervisory authority, i.e. the President of the Office of Personal Data Protection, if you consider that the processing of your personal data infringes the provisions of the GDPR.
8. Where do we obtain your personal data from and what are their categories?
Generally the personal data collected by the PKEE come directly from you. The PKEE also processes certain categories of personal data that were not received directly from you. The personal data may be received from among others:
● your employers being members of the PKEE
● persons representing you on basis of a granted power of attorney;
● entities you have given consent to their sharing;