Under Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“General Data Protection Regulation”, “GDPR”):

1. The Controller of your personal data is Port Lotniczy Poznań-Ławica Sp. z o.o., with its registered office at the address: ul. Bukowska 285, 60-189 Poznań, entered in the register of business operators of the National Court Register kept by District Court Poznań–Nowe Miasto i Wilda w Poznaniu, 8th Commercial Law Division under number KRS 0000003431, NIP (tax ID) 781-15-33-610, REGON (statistical ID) 630981266, phone: +48 61 849-23-43, https://www.airport-poznan.com.pl

2. You can contact our Data Protection Officer via e-mail at [email protected], by calling +48 61 849 22 32, or directly at the address given above.

3. We will process your personal data under Article 6(1)(c) GDPR: the legal basis is the Controller’s legal obligation to meet the requirements of Article 189f(6) of the Aviation Law of 3 July 2002, i.e. the obligation to submit to the Chief of the Border Guard quarterly information on persons subject to background checks who finished their employment, completed their tasks or who lost their authorizations for whom an extended background check is or was required, or the information that there are no such persons.

4. Your data may be shared with bodies authorized to obtain them under applicable laws, such as the Border Guard, bodies authorized to check our operations (such as the Civil Aviation Authority). Your data may also be shared with persons authorized by us – our staff or business partners who need access to those data to be able to perform their duties.

5. The Controller will store your personal data for the time needed by competent authorities to complete an audit of civil aviation security and quality control.

6. You have the right to access your data, the right to rectification, erasure, restriction of processing and the right to data portability. You also have the right to object to the processing based on our legitimate interests. You can exercise the above rights by contacting the Data Protection Officer at the e-mail address [email protected] or by sending a letter to our registered office. If you find that your personal data are processed in violation of the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

7. The provision of your data is a statutory obligation (Article 189f(6) of the Aviation Law of 3 July 2002), necessary for the above purpose.