Personal data protection
11.1. The Organiser is the controller of personal data belonging to the Program’s Participants. It is possible to contact the Organiser about the processed personal data of the Program’s Participants at the e-mail address contact@lotbookandcollect.com or at the telephone number (+48 022) 606 66 22
11.2. The Organiser processes personal data of the Participants within the Program for the purposes of:
11.2.1 Program execution – pursuant to Art. 6(1)(b) of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing the Directive 95/46/EC (General Data Protection Regulation) (“GDPR”) (in order to perform the agreement);
11.2.2 sending by electronic means information concerning promotions and services introduced by the Organiser to the market, organised events, competitions and special offers – pursuant to Article 6(1)(f) GDPR (legitimate interest of the Organiser entailing a direct marketing of own services and products);
11.2.3 presenting the Organiser’s offer by telephone at the provided telephone number of the Participant – pursuant to 6(1)(f) GDPR(legitimate interest of the Organiser entailing a direct marketing of own services and products);
11.2.4 sending commercial information by electronic means which concerns current offer, sending information on promotions and services introduced by the Organiser to the market, events, competitions and special offers provided by the Organiser’s business partners – pursuant to Article 6(1)(f) GDPR (legitimate interest of the Organiser entailing a direct marketing of services and products of other entities);
11.2.5 presenting the offer of the Organiser’s business partners via telephone contact at the provided telephone number of the Participant – pursuant to Article 6(1)(f) GDPR (legitimate interest of the Organiser entailing
a direct marketing of services and products of other entities);
11.2.6 for accounting, bookkeeping, tax and others purposes, connected with the performance of legal obligations by the Organiser – pursuant to 6(1)(c) GDPR.
11.2.7 undertaking actions connected with Program execution (pursuing claims, archiving of documents, internal statistics) – pursuant to Article 6(1)(f) GDPR (legitimate interest of the Organiser, i.e. the protection of its proprietary interests and day-to-day management of the enterprise);
11.3. In order to contact the Data Protection Officer, one must write at the Controller’s address or at the following e-mail address: iod@lot.pl.
11.4. Personal data of the Participants may be transferred to:
11.4.1 related entity of the Organiser, i.e. LOT Travel Sp. z o.o. with the registered office in Warsaw; LOT Team Sp. z o.o. with the registered office in Warsaw
11.4.2 business partners of the Organiser, i.e. entities providing marketing, advertising, hotel services, prize providers for the LOT Book&Collect Program;
11.5. Personal data of the Participants will be stored:
11.5.1 in order to perform rights and obligations resulting from the Program – until claims arising from the participation in the Program expire;
11.5.2 in order to send commercial information at the provided e-mail address or telephone contact at the provided telephone number – for no longer than until the consent is withdrawn/appeal is submitted;
11.5.3 for bookkeeping purposes – until the day the financial statements for the trade year are approved;
11.5.4 for tax purposes – for no longer than for a period of 5 years from the end of the calendar year during which the tax obligation originated;
11.6. The Program’s Participant has the following rights, executed by contacting the Organiser via any communication channel:
11.6.1 access to the contents of its personal data by requiring sharing or sending a copy of personal data package processed by the Organiser;
11.6.2 data rectification of inaccurate personal data concerning the Participant
11.6.3 require deletion of its personal data; the Company has the right to refuse deletion of data in cases stipulated by law;
11.6.4 require limitation of processing of its personal data;
11.6.5 to object on grounds relating to the particular situation
at any moment – for the purposes of direct marketing;
11.6.6 to receive the personal data provided to a controller (in a structured, commonly used format in a machine readable form to transmit those data to another controller;
11.6.7 lodge a complaint to a supervisory authority.
11.7. The consents referred to in items 12.2.3 and 12.2.4 above shall be made by way of checking the appropriate fields on the application form during the process of registration for the Program or in the Participant’s account in the Program on the “Consents” tab. Consent can be revoked by the Participant in the scope it was granted. In order to do so, the Participant should log in to his or her account in the Program, open the “Consents” tab and uncheck the field for the given consent or contact the Organiser via any communication channel. The withdrawal of consent shall not affect the lawfulness of data processing which was made on the basis of the Participant’s consent before the withdrawal.
11.8. Provision of the data by the Participant is voluntary. Provision of personal data by the Participant which were indicated as obligatory is necessary only for the purposes of participation in the Program and to send to the Participant a message concerning current offer, information on promotions and services introduced into the market, organised events and competitions and special offers by the Organisers and its business partners.
11.9 The Participant’s data will not be subject to automated decision-making, including profiling. More details about processing your personal data can be found here.