Pursuant to the Art. 13 (1 and 2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter: "GDPR", we kindly inform you that:
1. Your Personal Data Controller on the GSA Platform is Gas Transmission Operator GAZ-SYSTEM S.A. with its registered office in Warsaw, ul. Mszczonowska 4, 02-337 (hereinafter: „GSA Operator”).
2. You may exercise your rights (or get more information) by contacting GSA Operator at the address: firstname.lastname@example.org.
3. The legal basis of the processing of your personal data are:
a) Art. 6 par. 1 letter b of GDPR – means that personal data processing is necessary for the performance of the Agreement on the use of the Platform GSA or in order to take steps at your request before entering into a contract,
b) Art. 6 par. 1 letter f of GDPR – means that personal data processing is necessary for the purposes of the legitimate interests pursued by GSA Operator or by a third party mentioned below in point 4 letter g.
4. Your personal data is processing in order to:
a) the contract performance on the use of GSA Platform and to taking actions before entering into a contract, especially permissions verification to the mentioned contract,
b) allocating capacity in auctions procedure according to the GSA Platform Rules,
c) booking capacity and making transactions on the primary and secondary market according to the GSA Platform Rules,
d) permissions verification to represent the Transmission System Operator (TSO) or System User by Platform User,
e) permissions managing in GSA Operator recources,
f) ensure the safety of GSA Operator recources,
g) to realisation the purposes resulting from the Personal Data Controller or the third party legitimate interests i.e. Transmission System Operator/ System User that would like to use the services provided by GSA Platform or any administrative authorities in scope of GSA Operator regulations.
5. Your personal data recipients are:
a) GSA Operator employees or persons acting on behalf of GSA Operator, in its interest or from its power regardless of the legal basis of the connection of these persons with the GSA Operator that due to the performed duties has appropriate permissions to the system (executed duties justify the necessity of access to the system services and the protected information),
b) IT services providers for GSA Operator as Processors on the basis of the separate Agreements of entrust (for technical reasons connected with providing IT services),
c) The relevant Transmission System Operator / System User,