1. The administrator of your personal data is UNIMOT S.A., with its registered office in Zawadzkie, ul. Świerklańska 2A, 47-120 Zawadzkie, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court in Opole, VIII Commercial Division of the National Court Register under KRS number: 0000382244, NIP: 7561967341, REGON: 160384226 (hereinafter UNIMOT).
2. UNIMOT has appointed a Data Protection Officer who can be contacted via email at odo1@unimot.pl or at the UNIMOT office address with the note “Data Protection Officer.”
3. Personal data will be processed:
a) for the purpose of identifying shareholders based on the Act of July 29, 2005, on trading in financial instruments (Article 6(1)(c) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR));
b) to ensure direct communication with shareholders (Article 6(1)(c) of GDPR);
c) to enable involvement in company matters (Article 6(1)(c) of GDPR);
d) to inform about corporate events (Article 6(1)(c) of GDPR);
e) to facilitate the exercise of shareholder rights (Article 6(1)(c) of GDPR).
4. Personal data may be transferred to:
a) entities providing services to UNIMOT necessary for processing purposes, such as legal services;
b) providers of IT systems and IT services (including hosting, maintenance, and software development companies);
c) entities within the Unimot Capital Group.
5. Personal data will be processed for a period determined by Article 68n of the Act of July 29, 2005, on trading in financial instruments, not exceeding 12 months from the date of obtaining information that the person is no longer a shareholder.
6. You have the right to access your data, request its rectification, deletion, restriction of processing, data portability, and the right to object to data processing. These rights can be exercised by submitting a relevant request to the Data Protection Officer.
7. You also have the right to lodge a complaint with the supervisory authority responsible for personal data protection (President of the Personal Data Protection Office) if you believe that the processing of personal data violates GDPR provisions.
8. Personal data was obtained from the National Depository for Securities S.A., headquartered in Warsaw at ul. Książęca 4, 00-498 Warsaw, based on the Act of July 29, 2005, on trading in financial instruments and Commission Implementing Regulation (EU) 2018/1212 of September 3, 2018, establishing minimum requirements to implement the provisions of Directive 2007/36/EC of the European Parliament and of the Council regarding the identification of shareholders, transmission of information, and facilitation of the exercise of shareholder rights.
9. The categories of personal data processed include ordinary data, including address, identification, and shareholding information.