Information obligation

Information Clause
regarding the processing of personal data of shareholders of KBJ S.A.
  1. The Administrator of your personal data is KBJ S.A. with its registered office in Warsaw (01-161), at Obozowa 57, entered into the Register of Entrepreneurs of the National Court Register by the District Court for the Capital City of Warsaw, XIII Commercial Division of the National Court Register under the number 0000387799, NIP: 7262571799, REGON: 100393858.
  2. Inquiries regarding the protection and processing of personal data can be sent via e-mail to the address or by traditional mail to the address of the Administrator's seat.
  3. Providing data is a requirement resulting from the law and a requirement of KBJ for purposes related to the corporate relationship between the shareholder and KBJ. Failure to provide data will result in the impossibility of performing the obligations arising from the provisions of law, as well as exercising the rights resulting from the status of a KBJ shareholder.
  4. The shareholder's personal data will be processed for the following purposes and based on the indicated legal basis, i.e.:
    a. implementation of the legal relationship between the company and the shareholder in connection with the shareholder status in accordance with the KBJ statutes - the legal basis is the necessity of processing to perform the contract to which the shareholder is a party (Article 6(1)(b) of the General Data Protection Regulation 2016/679 - GDPR );
    b. performance of public law obligations of KBJ related to the functioning of joint-stock companies, including obligations arising from the Commercial Companies Code and other regulations regarding the functioning of the company on the public market and the protection of confidential information in accordance with Regulation 596/2014 on market abuse (MAR Regulation) - the legal basis for processing there is a legal obligation incumbent on KBJ (Article 6(1)(c) of the GDPR);
    c. establishing or pursuing possible claims or defending against such claims by KBJ - the legal basis for data processing is the legitimate interest of KBJ (Article 6(1)(f) of the GDPR), the legitimate interest of KBJ is to enable the determination, investigation or defense against claims.
  5. The shareholder's personal data may be transferred to entities providing services related to servicing the General Meeting, as well as to the National Depository for Securities S.A. (KDPW) and the Warsaw Stock Exchange S.A. (WSE).
  6. The personal data of the shareholder will be processed for the period of holding the status of the KBJ shareholder. The processing period may be extended each time by the period of limitation of claims, if the processing of personal data is necessary for the pursuit of any claims or defense against such claims by the KBJ. After this period, the shareholder's personal data will be processed only to the extent and for the period resulting from legal provisions, in particular accounting regulations.
  7. The data subject has the right to access the content of the data and demand their rectification, deletion, processing restrictions, the right to transfer data and the right to object to data processing.
  8. The data subject also has the right to lodge a complaint with the supervisory body dealing with the protection of personal data, if it is found that the processing of personal data violates the provisions of the GDPR.