Personal data processing within the scope of the "LOT Dla Firm" program

The purposes and the legal foundations of processing:

Applicable abbreviations:

GDPR – Regulation (EU) no. 2016/679 of the European Parliament and of the Council dated 27 April 2016 regarding the protection of legal persons in relation to processing of personal data and free movement of such data and repeal of directive 95/46/WE

ARES – Act of 18 July 2002 on Rendering Electronic Services

TL – Act of 16 July 2004 – Telecommunication Law

We process your personal data for the following purposes:

1) Performance of the rights and obligations of PLL LOT S.A. associated with your participation in the Program (including provision of selected services) Art. 6 section 1 letter b GDPR (if you are a participant of the program) or Art. 6 section 1 letter f GDPR (if your employer is a participant of the program)

Personal data: name, email address, telephone number and other data included in the form devised for the purpose of performing selected services

2) Sending a newsletter to the provided email address, which includes a current offer of the PLL LOT S.A. business partners and information on newly introduced services, organized events and competitions as well as special offers (with your consent) Art. 6 section 1 letter a GDPR and Art. 10 section 2 ARES

Personal data: name, email address, account balance, number related to the participation in the program

3) Sending a newsletter to the provided email address concerning business partners of PLL LOT S.A., which contains the current offer and information on newly introduced promotions and services, organized events and competitions as well as special offers (with your consent) Art. 6 section 1 letter f GDPR and Art. 10 section 2 ARES

Personal data: name, email address, account balance, number related to the participation in the program

4) Statistical, analytical and reporting Art. 6 section 1 letter f GDPR (so-called legitimate interest of the controller, that is improvement in quality of service and adjustments to the needs of the participants of the Program)

Personal data: name, email address, telephone number and other data included in the form devised for the purpose of performing selected services

5) Accounting and tax-related associated with legal duties of PLL LOT S.A. Art. 6 section 1 letter c GDPR in conjunction with Art. 74 section 2 of the Accounting Act of 29 September 1994

Personal data: name, email address, telephone number and other data included in the form made for purposes of implementing selected services

6) Possible determination, investigation or defence of claims Art. 6 section 1 letter f GDPR (so-called legitimate interest of the controller) 

Personal data: name, email address, telephone number and other data included in the form devised for the purpose of performing selected services

At any time, you have the right to withdraw your consent for processing of your personal data with the same method in which it was expressed. In order to withdraw, you should unselect the field on the website of the account of the participant of the Program or contact PLL LOT S.A.

The withdrawal of consent shall not influence the lawfulness of data processing which was made on the basis of your consent before the withdrawal.

Categories of recipients:

Your personal data may be transferred to:

1)Entities affiliated with PLL LOT S.A., that is companies from the LOT capital group, including LOT Team sp. z o.o. and LOT Travel sp. z o.o.

2)Entities involved in implementation of selected prizes (e.g. hotels, restaurants)

3)Authorized employees or contractors of PLL LOT S.A., entities providing selected services related with implementation of the program for PLL LOT S.A. (accounting, legal, marketing, IT services - to an extent necessary to provide such services)

Retention period:

1)In order to perform rights and obligations resulting from the Program – until the date of expiry of possible claims due to the implementation of the Program (no longer than for 10 years from the date of termination of the agreement concerning participation on the Program).

2)In order to send commercial information to the given email address or telephone contact to the provided telephone number – no longer than until the moment of withdrawal of the consent.

3)For statistical, analytical and reporting purposes – 5 years.

4)For accounting purposes – until the day of the approval of financial statements for a given financial year.

5)For tax purposes – no longer than for a period of 5 years from the end of a calendar year, in which the tax obligation arose.

Your authorizations:

Applicable abbreviation:

GDPR – Regulation (EU) no. 2016/679 of the European Parliament and of the Council dated 27 April 2016 regarding the protection of legal persons in relation to processing of personal data and free movement of such data and repeal of directive 95/46/WE

According to GDPR you are entitled to the following authorizations, implemented by contacting PLL LOT S.A. using any mean of communication:

1)Access to the contents of your personal data (Art. 15 GDPR) by request for or transfer of the copy of the personal data package processed by PLL LOT S.A.

2)Request rectification of personal data (Art. 16 GDPR) by indicating the incorrect data and correct data.

3)Request for deletion of your personal data (Art. 17 GDPR). PLL LOT S.A. shall have the right to refuse to delete data, e.g., for legal obligations.

4)Request for restriction of processing of your personal data (Art. 18 GDPR) by indicating which data ought to be limited in terms of processing.

5)Portability of your personal data (Art. 20 GDPR).

6)Appeal against processing of personal data based on Art. 6 section 1 letter e or f GDPR, due to reasons related with one’s specific situation (Art. 21 GDPR). Based on Art. 6 section 1 letter e or f GDPR, due to reasons related with one’s specific situation (Art. 21 GDPR).

7)Complaint to a supervisory authority, in particular in a member state of habitual residence, workplace or place of alleged infringement.

Freedom to disclose data:

Provision of personal data is voluntary.
Provision of personal data marked as obligatory is necessary solely for purposes of:

a) Performance of the services within the scope of the Program.
b) Addressing messages regarding the current offer, validity of the points, information of newly introduced promotions and services, organized events and competitions and special offers by PLL LOT S.A. and its business partners within the scope of the LOT Dla Firm program.