Data processing for the purposes of appeals consideration and pursuit by the ZTM of claims on additional charges

Pursuant to Art. 13 para 1 and para 2 of the Regulation (EU) 2016/679 on the protection of personal data (GPRD), hereby we inform that:

1) Your personal data controller is the Metropolitan Transport Authority (ZTM), with the registered office in Katowice (40-053), 21A Barbary street, email address: kancelaria@metropoliaztm.pl, website: metropoliaztm.pl.

2) A person for contacts concerning the personal data processing was appointed, email address: iod@metropoliaztm.pl.

3) Your personal data will be processed to:

a) pursue from you the payment of a fare and of an additional charge or to consider an appeal,

b) archive the documentation.

The legal grounds for personal data processing consist of:

a) legal obligation of the controller (GPRD Art. 6 para 1(c)) resulting from Art. 33a and Art. 79 of the Transport Law, Art. 121 of the Code of Petty Offences, the Code of Civil Procedure, and the necessity of processing to determine, pursue, or protect the claims (Art. 9 para 2(f)),

b) the controller’s duty resulting from Art. 5 of the Act on the National Archive Resource and Archives (GPRD Art. 6 para 1(c)) and the necessity to process for archival purposes in the public interest (GPRD Art. 9 para 2(j)).

4) Your personal data will be made available to persons authorised by the personal data controller, entities authorised based on provisions of the law, the post operator or courier in the field of paper correspondence, entities providing the collection services on behalf of the ZTM or providing IT services to the ZTM.

5) Your personal data will be stored for a period resulting from provisions of the law on archiving, i.e. 10 years, counting from the 1st of January of the next year after the case completion.

6) You have the right to access the contents of your data and the right to request their rectification, erasure or restriction of processing, and the right to lodge a complaint with the President of the Personal Data Protection Office.

7) The provision of personal data is a statutory requirement and is obligatory. The non-provision of the data results in sending the case to law enforcement or court authorities or in non-consideration of an appeal.

8) Your personal data will not be used for automated decision-making or profiling, referred to in Art. 22.