Pursuant to point (a) of Article 6(1) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), I consent to the processing of my personal data for the purpose of buying train tickets from “Koleje Mazowieckie - KM” sp. z o.o. via the online ticketing system of Koleje Mazowieckie (hereinafter referred to as the “IKM System”).
I have been made aware that:
The controller of my personal data collected for the purpose of buying train tickets from “Koleje Mazowieckie - KM” sp. z o.o. via the online ticketing system of Koleje Mazowieckie (hereinafter referred to as the “IKM System”) is: “Koleje Mazowieckie - KM” sp. z o.o.
based in Warsaw at ul. Lubelska 26.
The Data Controller has appointed a Data Protection Officer. The Data Protection Officer can be reached at: Warszawa ul. Lubelska 26, email: iod@mazowieckie.com.pl.
The legal basis for the processing is defined in point (b) of Article 6(1) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation): “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”.
The data that will be subject to processing includes: first name and surname, email, photo ID no., type of concessions, Masovian Card no;
a.) for customers who wish to receive an invoice: first name and surname, NIP (taxpayer ID no.), address.
Data collected by the Data Controller is made available to recipients only in cases permitted by the law.
Data recipients may include institutions competent to receive such data.
Personal data will not be transferred to third countries.
Personal data will be processed for 15 months.
I acknowledge that I have received information on my rights:
right of access to my personal data, right to rectify it, delete it, restrict the processing thereof, copy it, right to data portability and right to object to the processing thereof.
right to lodge a complaint with President of the Personal Data Protection Office if I consider that the processing of personal data relating to me infringes the provisions of the General Data Protection Regulation of 27 April 2016.