As of May 25, 2018 the provisions of the Regulation of the European Parliament and of the Council (EU) on the protection of personal data, commonly known as GDPR, came into force.

Polish Brokers Group Ltd. has made every effort to protect your personal data from the beginning. Implementation of the requirements of the Regulation naturally fits into our privacy policy. Please read the information below.

Kto jest administratorem Twoich danych osobowych?

The administrator, i.e. the entity deciding how your personal data will be used, is Polish Brokers Group Ltd. based in Warsaw 01-205, Młynarska 42 (hereinafter referred to as "PBG").

How to contact us for more information about the processing of your personal data?

Napisz do wyznaczonego przez PBG inspektora danych osobowych.

Where do we get your data?

We received it from you on the basis of the completed contact form available on our websites, during a telephone conversation with our employee or by e-mail or in another electronic or other form. We process your personal data such as identification data, address details such as place of residence, contact details, including e-mail address or telephone number, data provided by you necessary for the provision of services by us / performance of the contract and other data that we will require when concluding the contract, required from us on the basis of our legal obligations or which we obtain from you during its performance and which will be processed for the purposes specified below.

Jaki jest cel i podstawa prawna przetwarzania Twoich danych osobowych?

We may process your data for the following purposes:

a) in order to conclude or perform the contract between you and us, including ensuring the proper quality of service provision and making settlements. Providing your data is voluntary, but without you providing this data, it will not be possible to properly provide services, perform the contract or conclude it, or effectively provide assistance, answer your questions or contact you (legal basis: Article 6(1b) of the GDPR)

b) ensuring transaction processing and solving technical problems, handling your notifications or complaints (legal basis: Article 6(1b) of the GDPR);

c) handling reports and inquiries you send to us (e.g. via the contact form)(legal basis: Article 6(1b) or f) GDPR);

d) fulfillment of our legal obligations, such as tax, accounting, reporting or data archiving and their processing for the period provided for in such legal obligation, of course only to the extent to which we are obliged to do so (legal basis: Article 6(1c) of the GDPR);

e) We also process your personal data for the purposes indicated below, based on the legitimate interest of PBG (legal basis: Article 6(1f) of the GDPR), which may be expressed by:

• contacting you, including for purposes related to permitted marketing activities of our services, via available communication channels, in particular and with your separate consent - by e-mail and telephone;
• ensuring the security of the services we provide to you electronically and preventing fraud and abuse;
• handling your requests, in particular to the Customer Service Department, when they are not directly related to the performance of the contract and processed pursuant to Art. 6 section 1b) GDPR
• debt collection as well as determining, securing and pursuing our claims or defending against claims until these claims expire
• prowadzenie analiz statystycznych;
• and ensuring accountability for the fulfillment of legal obligations (demonstrating our fulfillment of obligations arising from legal provisions).

f) If you agree, we will be able to process your personal data for the following purposes:

• zapisywania danych w plikach cookies, gromadzenia danych ze stron www i aplikacji mobilnych;
• organizing competitions and promotional campaigns in which you can take part;
• marketing services of entities related to the Administrator or its contractors or third parties

With your consent offers.
You can withdraw your consent to the processing of personal data at any time in the same way as you expressed it.
We will process your personal data until you withdraw your consent.

g) for other purposes for which you have given us your consent, unless we will be able to process your personal data based on another basis (legal basis: Article 6(1)(a) of the GDPR).

Do you have to provide us with your personal data?

In addition to the data necessary to conclude a contract, if required by law, we may require you to provide other data necessary, e.g. for accounting or tax reasons. Apart from these cases, providing your data is voluntary.

What rights do you have towards PBG regarding processed data?

You have the right to request from the Administrator access to your personal data, rectification, deletion or limitation of the processing of personal data ("right to be forgotten"), we will fulfill your requests unless we have grounds or an obligation to further process them.
You also have the right to transfer your personal data. You can send this data to another data controller or request that we send your data to another controller. however, only if such transmission proves technically possible.
If we process your data based on your consent, you have the right to withdraw it at any time without negative consequences. However, this does not affect the lawfulness of our data processing before you withdraw your consent to us.

You have the right to lodge a complaint regarding our processing of your personal data to the supervisory authority, which is the President of the Personal Data Protection Office (address: Personal Data Protection Office, Stawki 2, 00-193 Warsaw).

In what situations can you object to the processing of your data?

You have the right to object to the processing of your personal data:

• when the processing of your personal data is based on a legitimate interest or for statistical purposes, and the objection is justified by the specific situation in which you find yourself,
• in relation to data processed for direct marketing purposes, including profiling for this purpose

Who do we share your personal data with?

a) authorized state services and bodies, including local government bodies, e.g. police, law enforcement agencies, courts.

b) entities providing the administrator with various types of external advisory and audit services, legal assistance, tax assistance, accounting assistance, hosting and IT services. Similarly, as part of our legitimate legal interest caused by the need to defend, determine, secure and pursue claims, your data may be transferred to our insurer or insurance broker/intermediary to the extent necessary to implement this legal interest. This data may be made available to other service providers providing PBG with technical and organizational solutions enabling the implementation of, among others, the following: contracts with you and the management of our organization, such as ICT service providers, courier and postal companies.

c) We also entrust data to entities processing data on the basis of a contract for entrusting the processing of personal data.

How long we keep your personal data

a) We store your personal data, in principle, for the duration of negotiations and other activities undertaken to conclude a contract, and after its conclusion, for the duration of the contract concluded with you, and also after its completion for the purposes of:

• pursuing claims in connection with the performance of the contract,
• fulfillment of obligations arising from legal provisions, in particular tax and accounting,
• preventing abuse and fraud,
• statystycznych i archiwizacyjnych,
• for a maximum period of 10 years from the date of completion of the contract, unless the law provides for a longer processing period.

We store your personal data for marketing purposes for the duration of the contract or until you object to such processing, depending on which of these events occurs first.

In the case of organizing loyalty programs, competitions and promotional campaigns in which you can take part - we will process your data for the duration of their duration and the settlement period of awarding prizes.

For the purpose of accountability, i.e. to prove compliance with the provisions regarding the processing of personal data, we will store the data for the period in which PBG is obliged to retain the data or documents containing them to document the fulfillment of legal requirements and enable control of their fulfillment by public authorities.

In the case of data used by us as part of our legitimate legal interest, they will be processed as long as this interest exists and in the case of claims, until they expire.

Do we transfer your data to countries outside the European Economic Area?

Your personal data may be transferred outside the European Economic Area based on appropriate legal safeguards, which are standard contractual clauses for the protection of personal data, approved by the European Commission.

Do we process your personal data automatically (including through profiling) in a way that affects your rights?

Your personal data will not be processed in an automated manner (including in the form of profiling).