DATA SECURITY
Personal data protection
12.1. The Organiser is the controller of personal data belonging to the Program’s Participants. It is possible to contact the Organiser about the processed personal data of the Program’s Participants at the e-mail address contact@lotbookandcollect.com or at the telephone number (022) 606 66 22
12.2. The Organiser processes personal data of the Participants within the Program for the purposes of:
12.2.1 Program execution – pursuant to Art. 6(1)(b) of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing the Directive 95/46/EC (General Data Protection Regulation) (“GDPR”) (in order to perform the agreement);
processed personal data: full name, address, e-mail address, telephone number, PESEL no. [Personal Statistical Identification Number], date of birth, name of agency, IATA number, address of agency, NIP no. [Tax Identification Number]. REGON no. [Business Identification Number] of the agency;
12.2.2 sending by electronic means information concerning promotions and services introduced by the Organiser to the market, organised events, competitions and special offers – pursuant to Article 6(1)(f) GDPR and Article 10(2) of the Act of
18 July 2002 on provision of services by electronic means (“APSEM”) (legitimate interest of the Organiser entailing a direct marketing of own services and products; with the Participant’s consent); processed personal data: full name, e-mail address;
12.2.3 presenting the Organiser’s offer by telephone at the provided telephone number of the Participant – pursuant to 6(1)(f) GDPR and Article 172(1) of the Act of 16 July 2004 Telecommunications Law (“TL”) (legitimate interest of the Organiser entailing a direct marketing of own services and products; with the Participant’s consent); processed personal data: full name, telephone number;
12.2.4 sending commercial information by electronic means which concerns current offer, sending information on promotions and services introduced by the Organiser to the market, events, competitions and special offers provided by the Organiser’s business partners – pursuant to Article 6(1)(f) GDPR and Article 10(2) APSEM (legitimate interest of the Organiser entailing a direct marketing of services and products of other entities; with the Participant’s consent); processed personal data: full name, e-mail address;
12.2.5 presenting the offer of the Organiser’s business partners via telephone contact at the provided telephone number of the Participant – pursuant to Article 6(1)(f) GDPR and Art. 172(1) TL (legitimate interest of the Organiser entailing a direct marketing of services and products of other entities; with the Participant’s consent); processed personal data: full name, telephone number;
12.2.6 for accounting, bookkeeping, tax and others purposes, connected with the performance of legal obligations by the Organiser – pursuant to 6(1)(c) GDPR.
processed personal data: full name, address of residence, e-mail address, telephone number, PESEL no. [Personal Statistical Identification Number], date of birth;
12.2.7 undertaking actions connected with Programme execution (pursuing claims, archiving of documents, internal statistics) – pursuant to Article 6(1)(f) GDPR (legitimate interest of the Organiser, i.e. the protection of its proprietary interests and day-to-day management of the enterprise); processed personal data: full name, address, e-mail address, telephone number, PESEL no. [Personal Statistical Identification Number], date of birth, name of agency, IATA number, address of agency, NIP no. [Tax Identification Number]. REGON no. [Business Identification Number] of the agency;
12.3. In order to contact the Data Protection Officer, one must write at the Controller’s address or at the following e-mail address: iod@lot.pl.
12.4. Personal data of the Participants may be transferred to:
12.4.1 related entity of the Organiser, i.e. LOT Travel Sp. z o.o. with the registered office
in Warsaw; LOT Team Sp. z o.o. with the registered office in Warsaw
12.4.3 business partners of the Organiser, i.e. entities providing marketing, advertising, hotel services, prize providers for the LOT Kolekcjoner programme;
12.5. Personal data of the Participants will be stored:
12.5.1 in order to perform rights and obligations resulting from the Program – until claims arising from the participation in the Program expire;
12.5.2 in order to send commercial information at the provided e-mail address or telephone contact at the provided telephone number – for no longer than until the consent is withdrawn/appeal is submitted;
12.5.3 for bookkeeping purposes – until the day the financial statements for the trade year are approved;
12.5.4 for tax purposes – for no longer than for a period of 5 years from the end of the calendar year during which the tax obligation originated;
12.6. The Program’s Participant has the following rights, executed by contacting the Organiser via any communication channel:
12.6.1 access to the contents of its personal data (Article 15 GDPR) by requiring sharing or sending a copy of personal data package processed by the Organiser;
12.6.2 data rectification of inaccurate personal data concerning the Participant (Article 16 GDPR);
12.6.3 require deletion of its personal data (Article 17 GDPR); the Company has the right to refuse deletion of data in cases stipulated by law;
12.6.4 require limitation of processing of its personal data (Article 18 GDPR) by indication which data shall be limited in terms of processing;
12.6.5 to object on grounds relating to the particular situation – for the purposes of direct marketing (Article 21 GDPR)
12.6.6 to receive the personal data provided to a controller in a structured, commonly used format in a machine readable form to transmit those data to another controller (Article 20 GDPR);
12.6.7 lodge a complaint to a supervisory authority, in particular in a member state of its habitual residence, workplace or place of alleged infringement, should it claim that processing of its personal data infringes provisions of GDPR (Article 71(1) GDPR).
12.7. The consents referred to in items 12.3 and 12.4 above shall be made by way of checking the appropriate fields on the application form during the process of registration for the Programme or in the Participant’s account in the Programme on the “Consents” tab. Consent can be revoked by the Participant in the scope it was granted. In order to do so, the Participant should log in to his or her account in the Programme, open the “Consents” tab and uncheck the field for the given consent or contact the Organiser via any communication channel. The withdrawal of consent shall not affect the lawfulness of data processing which was made on the basis of the Participant’s consent before the withdrawal.
12.8. Provision of the data by the Participant is voluntary. Provision of personal data by the Participant which were indicated as obligatory is necessary only for the purposes of participation in the Programme and to send to the Participant a message concerning current offer, information on promotions and services introduced into the market, organised events and competitions and special offers by the Organisers and its business partners.
Content of clauses during the registration of the Program’s Participant
CONSENT TO PERSONAL DATA PROCESSING
I hereby agree to receive commercial information by electronic means from Polskie Linie Lotnicze LOT S.A. with its registered office in Warsaw (02-146), at ul. Komitetu Obrony Robotników 43 in accordance with the Act of 18 July 2012 on provision of services by electronic means (Article 10):
[x] information concerning the LOT Book&Collect (promotions, competitions, a listing of point balance in the Program and new things proposed on the Program’s website).
[x] commercial information concerning business partners of PLL LOT S.A via the intermediation of the LOT Book&Collect.
Polskie Linie Lotnicze LOT S.A. is data controller of your personal data. We process your personal data for sending information about the promotions and services as well as special offers. You have a right to object, as well as right: to withdraw your consent, access to your personal data, to demand that your personal data is rectified or limited or to be forgotten. More details about processing your personal data can be found here.