We care about your privacy. Your data is safe with us and is processed in accordance with the General Data Protection Regulation 2016/679 of 27 April 2016. (hereinafter referred to as: "RODO").

1. what is personal information?

Information which identifies you or enables your identification, e.g. name, surname, telephone number or e-mail address. PKEE collects and collects your data in connection with the activities of PKEE, for the purposes of carrying out statutory tasks and marketing activities.

2. who is responsible for the processing of personal data and who at PKEE can be contacted?

The administrator of your personal data is the Polish Committee for Electrical Energy with its seat in Warsaw (00-124) at Jana Pawła II 12 (hereinafter referred to as "PKEE").

PKEE has appointed a Data Processor who can be contacted on all matters concerning the processing of personal data and the exercise of rights related to data processing:

• • by sending correspondence to the following address Polish Committee for Electrical Energy Jana Pawła II 12 00-124 Warszawa

• • by electronic contact, at e-mail: [email protected], and

• • phone contact: 507 780 596

For what purpose does PKEE process your personal data and on what legal basis?

PKEE processes personal data of ordinary, honorary and supporting members to the extent of first and last name, image, date of birth, home address, e-mail address, place of work and professional experience. Personal data is processed for the purpose of servicing membership and carrying out PKEE statutory tasks such as membership registration, handling the collection of dues, organizing and sending invitations to events, and current handling of members' queries and requests. Members' data is also processed to carry out statistical research aimed at improving the operation of the Committee.

PKEE processes personal data of members belonging to the PKEE governing bodies, which consist of the General Assembly, the Audit Committee and the Governing Board, to the extent of first and last name, PESEL number, image, date of birth, home address, e-mail address, place of work and professional experience. Personal data is processed in order to perform the statutory tasks of PKEE, send invitations to events and update the entry in the Register of Ordinary Associations, as well as for the ongoing handling of members' inquiries and requests.

PKEE processes personal data of employees in the scope of name, surname, parents' names, date of birth, address of residence, education and hitherto employment history. Personal data is processed to execute the employment contract or civil law contract as well as for financial and accounting purposes.

PKEE processes personal data of persons cooperating on a one-time basis (i.e. organization of events) to the extent of name, surname, PESEL number, telephone number and e-mail address. Personal data is processed only to execute the agreement.

The processing of personal data takes place:

• for the fulfilment of contractual obligations (Art. 6(1)(b) RODO), including statutory tasks;

• to comply with legal obligations (Article 6(1)(c) of the RODO) or to perform tasks carried out in the public interest (Article 6(1)(e) of the RODO), as PKEE we are subject to a number of legal obligations, i.e. requirements under, for example, the Act of 7 April 1989. Law on PKEE, the Act of 17 December 1998

on pensions from the Social Insurance Fund or the Act of 13 October 1998 on the social insurance system.

• • Based on explicit consent (Article 6(1)(a) of the RODO), if you have consented to the processing of personal data for specific purposes or scope (e.g. sending newsletters), PKEE is entitled to process such data on the basis of such consent. Consent may be withdrawn at any time. The withdrawal of consent does not affect the legality of data processing until the withdrawal of consent.

• • for purposes arising from legitimate interests pursued by PKEE or a third party (Article 6(1)(f) RODO), an example of such activities is:

• updating the entry in the Register of Ordinary Associations,

• processing of data of persons acting on behalf of PKEE members,

• ensuring IT security,

• asserting and defending against claims.

4 To whom may PKEE transfer personal data?

Personal data may be made available to other recipients in order to carry out PKEE's statutory tasks, to comply with a legal obligation imposed on PKEE, based on your consent or for purposes resulting from PKEE's or a third party's legitimate interests.

Recipients may include, in particular: authorized employees of PKEE and other members of PKEE, other institutions statutorily authorized to receive your personal data under applicable laws.

Moreover, data may be transferred to entities processing personal data on behalf of PKEE to their authorized employees, where such entities process data on the basis of an agreement with PKEE only in accordance with PKEE's instructions and on condition of secrecy.

5. will your personal data be transferred to a third country (outside the European Union)?

Personal data processed by PKEE is not transferred to recipients in countries outside the European Union ("third countries"). It is possible for PKEE to transfer personal data to a third country only if it is necessary to perform PKEE's statutory tasks, i.e. for the purposes resulting from legitimate interests pursued by PKEE. Any other transfer of data to a third country may take place after obtaining your consent.

You are entitled, upon request to PKEE, to a copy of personal data transferred from a third country.

6 How long will PKEE process (store) your data?

Personal data will be processed for the period necessary to achieve the purposes of processing, i.e:

• in the scope of execution of the agreement concluded with PKEE - until its completion and after that time for the period required by law or for the realization of potential claims;

• in respect of membership, for the duration of the membership or after its termination, for a maximum of 10 years following the termination of the membership;

• within the scope of performing the management function - for the period of its performance or after its termination, for maximum 10 years from the moment of terminating its performance;

• in the case of employee data - for the period of employment, and after its termination - for a maximum of 50 years from the moment the employment relationship ends;

• in terms of fulfilling PKEE's legal obligations in connection with the conduct of its business and the performance of concluded agreements - until PKEE fulfills these obligations;

• in the field of direct marketing carried out on the basis of consent until the withdrawal of consent to such processing;

• until the fulfilment of PKEE's legitimate interests constituting the basis for such processing or until you object to such processing, unless there are legitimate grounds for further processing.

7. what rights do you have in relation to your personal data?

You have the right to:

• • request access to your personal data and the right to rectify, restrict or erase it;

• • to the extent that the processing of personal data is based on consent, you have the right to withdraw at any time your consent to the processing of personal data previously given;

• • object at any time to the processing of personal data:

• for reasons related to your particular situation, where PKEE processes data for purposes arising from legitimate interests (Article 21(1) RODO),

• for direct marketing purposes, including against profiling for marketing purposes to the extent that the processing of your data is related to direct marketing (Article 21(2) RODO);

• • request for the transfer of personal data processed in order to conclude and perform an agreement or processed on the basis of consent. A transfer consists in receiving your personal data from PKEE in a structured, commonly used and machine-readable format and transmitting such data to another data controller;

• • make a complaint to the supervisory authority, i.e. to the President of the Office for Personal Data Protection, in case the processing of your personal data violates the provisions of RODO.

8. where do we obtain your personal data from and what are the categories of data?

First and foremost, the personal data collected by PKEE comes directly from you. PKEE also processes certain categories of personal data that are not obtained directly from you. Personal data may be obtained from, among others:

• States of employers being members of PKEE

• persons representing the State under the power of attorney granted;

• entities to which you have given your consent to their transfer;