Subscription

Data processing information

Information for the person receiving the Communications Department newsletter on personal data processing by KGHM Polska Miedź S.A. in connection with out legitimate interest.

In pursuance of Articles 13 and 14 of the General Data Protection Regulation (GDPR), we inform you that in connection with the implementation of the Company's information policy your (hereinafter referred to as "your") personal data are processed in the database of KGHM Polska Miedź.

1. Personal data controller.

The controller of your personal data will be KGHM Polska Miedź S.A. with its registered head office in Lubin (hereinafter: "we" or "us"). You can contact us:

• by post at the address: ul. M. Skłodowskiej-Curie 48, 59-301 Lubin
• via e-mail: [komunikacja@kghm.com]

2. Data Protection Officer.

We have appointed a Data Protection Officer. It is a person you can contact in all matters regarding the processing of your personal data and the use of your rights related to the processing of data. You can contact a Data Protection Officer:

• by post to the address: ul. M. Skłodowskiej-Curie 48, 59-301 Lubin
• via e-mail: iod@kghm.com.

3. Purposes of processing your personal data and the legal basis for processing.

We will process your personal data for the purposes of the newsletter subscription.

This is necessary in order to pursue our legitimate interest in our marketing and public relations information policy, which is the legal basis for the processing of personal data under Article 6(1)(f) of GDPR.

4. Type of personal data

We will process the following personal data: the e-mail address you provide and, to the extent that it results from your e-mail address, your name and the name of your editorial office or employer, or the name of your business.

The use of the application will also involve the provision of the Internet ID.

5. Source of data, reasons for and consequences of disclosing personal data.

In the case when data have been provided by you, the disclosure is voluntary, but it is a condition for making an entry in the database and potentially establishing contacts with respect to the information areas described above. 

Your personal data may also be transferred by the entity in which you hold a position, are an employee or associate.

In other cases, your personal data have been obtained from publicly available sources.

6. Retention period of your personal data.

Your personal data will be processed for the period necessary for the implementation of the information policy of KGHM Polska Miedź  S.A. until we are informed that the contact is not useful anymore, and afterwards in the information system backup for another 30 days (however, you may object to the data processing at any time, as stated in Item 8 letter (a)).

If other activities (actions, operations) are undertaken with your participation (e.g. correspondence), your personal data will be kept for the period necessary to document such activities.

7. Recipients of your personal data, including outside the EEA.

Your personal data may be disclosed to entities authorized by law (e.g. public authorities and legal protection authorities, offices, courts, Prosecutor's offices or the Police) and entities and their employees providing services to us that require access to your data - including legal, financial, accounting and IT services.

In order to protect against the Internet robots, we use the Google reCAPTCHA mechanism. In such a case we can provide Google LLC with the data required by this mechanism. The data are transferred in accordance with the principles  set out in the European Commission Decision of 12 July 2016 on the adequate protection of personal data, the EU-US  Privacy Shield.

8. Your rights related to the processing of personal data

You have the following rights related to the processing of personal data:

1. the right to object to the processing of data on the grounds of your special situation - because we process your data on the basis of our legitimate interest as defined in point 3,
2. the right to access your personal data,
3. the right to request the rectification of your personal data,
4. The right to request the deletion of your personal data when the data are no longer necessary for the purposes for which they were collected or otherwise processed or when you have effectively objected to the processing,
5. The right to request that the processing of your personal data be restricted (in which case the data will only be stored) - when: 

• you question the correctness of the data, 
• you believe that the processing is unlawful and you oppose the deletion of the data (requesting restriction of the processing instead);
• the data are not needed for processing purposes, but you need them in order to establish, pursue or defend claims; 
• you have filed an objection to the processing, until it has been examined.

To exercise these rights, please contact us or our Data Protection Officer (contact details in Items 1-2 above).

We will carefully review requests, demands or objections in accordance with applicable data protection laws. We would also like to inform you that these rights are not absolute, as the regulations allow for their non-consideration in specific situations.

You also have the right to lodge a complaint with the supervisory authority dealing with personal data protection, i.e. the President of the Office for Personal Data Protection.

9. Automated decision-making.

As a result of processing, decisions shall not be taken in an automated way (without human intervention) and the data shall not be used for analysis, i.e. profiling shall not take place.