Data administrator

The administrator of your data is Compensa Towarzystwo Ubezpieczeń S.A. Vienna Insurance Group with its registered office in Al. Jerozolimskie 162, 02-236 Warszawa (Compensa, administrator).

Contact details

The controller can be contacted via e-mail address: daneosobowe@liniaetyki.pl or in writing to the registered office address of Compensa

The Administrator has appointed a Data Protection Officer (DPO), who can be contacted in all matters concerning the processing of personal data and the exercise of rights related to data processing by e-mail at: daneosobowe@liniaetyki.pl

Purposes and legal basis of data processing

Your personal data will be processed for the purposes of receiving, verifying and handling your request and for archiving purposes related to the legally required retention period of the information. The legal basis for the processing of your data is the legitimate interest of the controller (Article 6(1)(f) RODO). The legitimate interest of the controller is to be able to prevent fraud and breaches to the detriment of the controller and to operate a secure business. Personal data may also be processed on the basis of the controller's legitimate interest to assert and defend claims.

Period for which the data will be processed

Your personal data will be stored for a period of 3 years, starting from the first day of the following year in which the notification was closed. This period may be extended if the documents relating to the notification form part of a judicial or administrative case file.

Recipients of data

We ensure the confidentiality of the processed data received in connection with a report, but your data may be made available to persons authorised by Compensa to receive reports and carry out follow-up activities. Your data will be processed in accordance with Compensa' whistleblowing procedure.

Your data may also be transferred to entities processing personal data on behalf of the controller, including Ethics Line Ltd., entities providing services such as archiving and document destruction, and other entities performing administrative services - whereby such entities process data on the basis of a contract with the controller and only in accordance with the controller's instructions.

Rights of the data subject

You have the following rights:

1. The right to access the content of your personal data;
2. The right to request the restriction of the processing of your data;
3. The right to request the rectification of your personal data;
4. The right to object to the processing of your data;
5. The right to request erasure or restriction of data processing;

To exercise the above rights, please contact the controller. You also have the right to lodge a complaint with the data protection supervisory authority.

Information about the requirement to provide data

The provision of personal data is voluntary and is not required for the administrator to accept your application.

Your data will not be shared with a third country or an international organisation.

Your data are not subject to profiling or automated decision-making.