Information on personal data processing

Publication date: 13.11.2020

Pursuant to Art. 13 para 1 and para 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as: Regulation 2016/679), we inform that:

1) Your personal data controller is the Metropolitan Transport Authority (ZTM), with the registered office in Katowice (40-053), 21A Barbary street, email address:, website:

2) A person for contacts concerning the personal data processing was appointed - the data protection officer. E-mail address:, the other contact data as above.

3) Your personal data will be processed to handle cases, which are within the competence of the Metropolitan Transport Authority (ZTM).

We perform public tasks of metropolitan nature, in accordance with provisions of the law: Act of 9 March 2017 on the Metropolitan Union in the Silesian Voivodeship, Act of 15 November 1984 on the Transport Law, other particular provisions of the law, and the statute of the Metropolitan Transport Authority (ZTM).

We process the personal data, because:

  • we perform legal obligations (Art. 6 para 1(c) of Regulation 2016/679);
  • we perform tasks in the public interest or within the execution of the public powers vested to the ZTM (Art. 6 para 1(e) of Regulation 2016/679);
  • we perform contractual obligations (Art. 6 para 1(b) of Regulation 2016/679).

In particular situations other reasons may also exist, e.g. determination, pursuit or protection of claims, or consent given by you.

The information on specific objectives of processing and legal grounds will be provided within a given case handling, e.g. in a dedicated form, if applicable.

4) In defined situations your personal data may be transferred to other entities. In the case of other public authorities the basis for data transfer will consists of provisions of the law applicable to a given situation.

Moreover, recipients of your personal data will include persons authorised by the personal data controller, service providers in such areas as: post or courier services, development or delivery of IT systems necessary for the ZTM operations, archive and bank services in the field of payments execution.

In addition, within the scope being the public information the data will be disclosed to anybody interested in such information or published in the ZTM BIP.

5) Your personal data will be stored for a period, which each time will depend on the type of case, to which your personal data will apply. The ZTM is obliged to save the case files in the public interest.

The period of storage will result from provisions of the law on archiving, from the office and archive instructions; it may result also from particular provisions applicable to handle your case.

6) In relation to personal data processing by the ZTM, you have a number of rights:

  • to access your personal data and information on the method of processing them,
  • to request their rectification,
  • to request their erasure or restriction of processing,
  • to lodge an objection against processing in the situation when the grounds for processing consists of Art. 6 para 1(e) or Art. 6 para 1(f) of Regulation 2016/679.

In the cases, where the processing is based on consent, you have the right to withdraw the consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

In particular cases those rights may be subject to limitations resulting from the legislation.

The above rights may be exercised contacting the data controller or protection officer.

Moreover, it is possible to lodge a complaint with the President of the Personal Data Protection Office, if you reckon that the processing of your personal data breaches provisions of the general regulation on the personal data protection.

7) You shall give your personal data, unless in a specific situation the information is provided, that the data provision is voluntary.

8) The failure to provide the personal data, in obligatory cases, will result in the lack of possibility to handle your case or to conclude an agreement.