Under Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119 of 4 May 2016, p. 1, as amended) (‘GDPR’), please be informed that:

1. The controller of your personal data is the KNF Board (PL: Komisja Nadzoru Finansowego) with its registered office in Warsaw, at ul. Piękna 20, 00-549 Warsaw (‘KNF Board’). You may contact the KNF Board in writing by sending a letter to: Komisja Nadzoru Finansowego, ul. Piękna 20, skr. poczt. 419, 00-549 Warsaw, or by sending an e-mail to: knf@knf.gov.pl.

2. The KNF Board provides the possibility of contacting the Data Protection Officer by e-mail (iod@knf.gov.pl) or by post (by sending a letter to the controller’s correspondence address). The Data Protection Officer may be contacted in all matters concerning the processing of personal data, in particular in relation to the exercise of rights related to the processing. The details of the Data Protection Officer are available at: https://www.knf.gov.pl/o_nas/urzad_komisji/dane_teleadresowe.

3. The legal basis for processing your personal data is Article 6(1)(c) of the GDPR, i.e. processing is necessary for compliance with a legal obligation to which the controller is subject in conjunction with Article 19 of Regulation (EU) No 596/2014 of the European Parliament and of the Council of 16 April 2014 on market abuse (market abuse regulation, hereinafter: ‘MAR’) in conjunction with the Annex to Commission Implementing Regulation (EU) 2016/523 of 10 March 2016 laying down implementing technical standards with regard to the format and template for notification and public disclosure of managers’ transactions in accordance with Regulation (EU) No 596/2014 of the European Parliament and of the Council and the Regulation of the Minister of Development and Finance of 27 December 2016 on technical means and requirements for the submission of certain information by entities supervised by the KNF Board (Journal of Laws 2016, item 2288). The basis for processing is also a legal obligation resulting from the Act of 14 July 1983 on national archive resources and archives (Journal of Laws 2019, item 553) and the provisions on archiving which specify the mandatory storage period for documents at the Polish Financial Supervision Authority (UKNF), adopted based on that Act – based on those provisions, the KNF Board is obliged to archive the received notifications.

4. Your personal data will be processed for the purpose of supervising compliance with the notification requirements by persons discharging managerial obligations and persons closely associated with them.

5. Your personal data will not be disclosed to other recipients, including recipients in third countries or international organisations, except for public authorities for which a provision of law constitutes the legal basis for disclosure.

6. Your personal data will be stored for a period necessary for the purposes referred to in point 3, subject to legal requirements, including the provisions on archiving which specify the mandatory storage period for documents at the UKNF.

7. Subject to exceptions provided by law, you have the right of access to your personal data, the right to obtain their copies, the right to rectification (correction) of your data, the right to restriction of their processing, and the right to erasure of data.

8. You have the right to lodge a complaint with a supervisory authority, i.e. the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw), if you find that the processing of personal data infringes provisions of law.

9. Your personal data will not be used in automated decision-making, including profiling.

10. The provision of personal data is necessary and results from the provisions of law indicated above.