polski
Issue scheduleGDPR
Information about the processing of personal data
Processing of personal data of individual recipients
1. The personal data controller is Narodowy Bank Polski with its registered office in Warsaw at ul. Świętokrzyska 11/21, 00-919 Warsaw.
2. NBP ensures contact with the data protection officer at NBP by e-mail at the address iod@nbp.pl or by post at the address of the personal data controller. Detailed information concerning the data protection officer is available on the website: www. nbp.pl/RODO and in a publicly accessible location at the seat of NBP.
3. Personal data are processed by NBP for the purpose of:
1) maintaining the register of the sale of gold coins referred to in § 1 para. 3 of the resolution;
2) purchasing collector items documented with a VAT invoice;
3) enabling carrying out orders placed by an individual recipient;
4) resolving complaints.
4. The provision of personal data is voluntary. The data are necessary in order to obtain an individual account at the online shop which enables submitting an order and purchasing collector items offered by the online shop.
5. NBP does not use personal data provided by customers for automated individual decision-making, including profiling
6. The customer is responsible for the accuracy of the provided personal data, including the personal data of an authorised person.
7. The individual recipient has:
1) the right to request access to his or her personal data;
2) the right to modify personal data, including their rectification;
3) the right of erasure or to request restriction of processing of his or her personal data by NBP;
4) the right to object to his or her personal data processing by NBP;
5) the right to request that NBP provides him or her with personal data made available to NBP in order to be transferred to another service provider;
6) the right of withdrawal of consent for the processing of personal data by NBP.
8. The individual recipient has the right to lodge a complaint with the supervisory authority: President of the Office for Personal Data Protection,
ul. Stawki 2, 00-193 Warsaw.
9. Withdrawal of consent to the processing of personal data and the right to erasure of personal data shall not affect the legality of the processing carried out on the basis of the consent granted before its withdrawal.
10. The right to require from the controller to erase personal data should be exercised without undue delay, provided that there are circumstances set out in the GDPR.
11. The data referred to in para. 3 points 1, 2 and 4 are stored by NBP for a period of 5 years, from the year following the year in which they were collected.
12. The data referred to in para. 3 point 3 are processed for the period during which the customer holds an active account at the online shop and in the case where the account has been removed, no more than 5 years, from the year following the year in which the account was removed.
13. The right referred to in para. 7 shall be exercised by an individual recipient with the data protection officer referred to in para. 2.
14. The provisions of paras. 1-12 do not affect the rights of customers regarding NBP’s liability in respect of the protection of personal data of individual recipients, arising from the general provisions of law.
Processing of personal data of a person authorised by the customer
1. The personal data controller of persons authorised by the customer is NBP with its registered office at ul. Świętokrzyska 11/21, 00-919 Warsaw.
2. NBP ensures contact with the data protection officer at NBP by e-mail at the address iod@nbp.pl or by post at the address of the personal data controller. Detailed information concerning the data protection officer is available on the website: www. nbp.pl/RODO and in a publicly accessible location at the seat of NBP.
3. Personal data of the person authorised by the customer, i.e. given name, surname, identity document number are processed by NBP in order to enable the collection of order made by the customer. The provision of personal data is not obligatory, but if the customer fails to provide them, he or she will be obliged to collect the order.
4. NBP does not use personal data concerning authorised persons provided by customers for automated individual decision-making, including profiling.
5. The authorised person has:
1) the right to request access to his or her personal data;
2) the right to modify his or her personal data, including their rectification;
3) the right of erasure or to request restriction of processing of his or her personal data by NBP;
4) the right to object to his or her personal data processing by NBP;
5) the right to request that NBP provides him or her with his or her own personal data made available to NBP;
6) the right to withdraw consent to his or her personal data processing by NBP.
6. The authorised person has the right to lodge a complaint with the supervisory authority: the President of the Office for the Protection of Personal Data:
ul. Stawki 2, 00-193 Warsaw.
7. Withdrawal of consent to the processing of personal data and the right to erasure of personal data shall not affect the legality of the processing carried out on the basis of the consent granted before its withdrawal.
8. Personal data referred to in para. 3 are stored by NBP for a period of 5 years from the year following the year in which they were collected.
9. The right referred to in para. 5 shall be exercised by the individual recipient at the data protection officer referred to in para. 2.
10. NBP shall provide the information referred to in paras. 1-9 to the authorised person at the time of collection of the order from the internet shop by the authorised person at the NBP Regional Branch in Warsaw or at the time of ordering by the customer the delivery of collector items to the authorised person by courier service.
11. The provisions of paras. 1-10 shall not affect the rights of customers relating to NBP’s liability in respect of the protection of personal data of authorised persons, arising from the general provisions of law.