According to Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council (EU) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union, L119, p 1) – hereinafter “GDPR” – please be informed that:
I. Personal data controller
The controller of your personal data is John Paul II International Airport Krakow-Balice Ltd. with its registered office in Balice, 32-083 Balice, ul. Kpt. M. Medweckiego 1, entered into the Register of Entrepreneurs kept by the District Court for Kraków-Śródmieście in Kraków, 12th Commercial Division of the National Court Register under KRS number: 0000008522; NIP (Taxpayer Identification Number): 6761336952, National Business Register (REGON) number: 351117055.
II. Data Protection Officer
You can contact the Data Protection Officer with regard to any matters regarding protection of your personal data and the exercise of your rights in this respect by e-mail at firstname.lastname@example.org; by phone at: 12 639 37 28, or in writing to the address of our registered office indicated in item I.
III. Purposes and grounds for processing
Your personal data will be processed in compliance with the GDPR to handle requests and this data shall include the following: the name, e-mail, address, post-cost/city/country, to measure customer satisfaction and determine service quality and for the possible establishment, exercise or defence of legal claims which constitute our legitimate interest (Article 6(1) of the GDPR).
IV. Transfer of data to third countries or international organisations
We do not transfer your data outside the territory of the Republic of Poland / European Union / European Economic Area.
V. Period for which the personal data will be stored
The data provided by you will be stored for the period of examination of requests and then for archiving purposes; however, not longer than for the period of 25 years, in accordance with legal requirements.
VI. Information on requirement/voluntary decision to provide data
You are free to decide whether to provide your personal data; however, this data is necessary to handle your request. If you refuse to consent to the processing of your personal data, we may not be able to handle your request.
VII. Data recipients
Your data may be disclosed to competent authorities or third parties who request such information only to the extent required by applicable law as well as to establish, exercise or defend claims.
VIII. Your rights
- a) right of access to your data and right to obtain a copy of it;
- b) right to rectify (correct) your data;
- c) right to erasure, restriction of data processing;
- d) right to object against data processing;
- e) right to data portability;
- f) right to lodge a complaint with a supervisory authority responsible for personal data protection;
IX. Right to withdraw consent
Every consent may be withdrawn at any time, provided that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.