INFORMATIVE CLAUSE
GSA PLATFORM
Pursuant to the Art. 13 (1 and 2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter: "GDPR", we kindly inform you that:
1. Your Personal Data Controller on the GSA Platform is Gas Transmission Operator GAZ-SYSTEM S.A. with its registered office in Warsaw, ul. Mszczonowska 4, 02-337 (hereinafter: „GSA Operator”).
2. You may exercise your rights (or get more information) by contacting GSA Operator at the address: rodo@gaz-system.pl.
3. The legal basis of the processing of your personal data are:
a) Art. 6 par. 1 letter b of GDPR – means that personal data processing is necessary for the performance of the Agreement on the use of the Platform GSA or in order to take steps at your request before entering into a contract,
b) Art. 6 par. 1 letter f of GDPR – means that personal data processing is necessary for the purposes of the legitimate interests pursued by GSA Operator or by a third party mentioned below in point 4 letter g.
4. Your personal data is processing in order to:
a) the contract performance on the use of GSA Platform and to taking actions before entering into a contract, especially permissions verification to the mentioned contract,
b) allocating capacity in auctions procedure according to the GSA Platform Rules,
c) booking capacity and making transactions on the primary and secondary market according to the GSA Platform Rules,
d) permissions verification to represent the Transmission System Operator (TSO) or System User by Platform User,
e) permissions managing in GSA Operator recources,
f) ensure the safety of GSA Operator recources,
g) to realisation the purposes resulting from the Personal Data Controller or the third party legitimate interests i.e. Transmission System Operator/ System User that would like to use the services provided by GSA Platform or any administrative authorities in scope of GSA Operator regulations.
5. Your personal data recipients are:
a) GSA Operator employees or persons acting on behalf of GSA Operator, in its interest or from its power regardless of the legal basis of the connection of these persons with the GSA Operator that due to the performed duties has appropriate permissions to the system (executed duties justify the necessity of access to the system services and the protected information),
b) IT services providers for GSA Operator as Processors on the basis of the separate Agreements of entrust (for technical reasons connected with providing IT services),
c) The relevant Transmission System Operator / System User,

d) The relevant administrative authorities that regulate the functioning of GSA Operator as the booking capacity platform on the basis of the provisions of national and european law.
6. You have the right to:
a) access by your personal data, that is permissions to get information which data, how and for what purpose are procesed,
b) rectification of your personal data, that is claim to complete the personal data incompleted or incorrect,
c) erasure your personal data, that is claim to erasure all or the part of personal data – in the case of the legitimacy of the application the data will be delated immediately,
d) restriction of processing that is claim to processing data only for storage – the restriction of processing may be unblocked if the premises justifying it cease,
e) data portability,
f) object to processing of personal data that is ceasing to processing personal data for the mentionned purposes if you consider that we violate your rights within data processing,
g) lodge a complaint at GSA Operator with the President of Personal Data Protection Office, if you consider that your personal data processing violate the regulations.
7. GSA Operator doesn’t transfer personal data to the counrtries that don’t protect this data enough.
8. Personal data will be processed until the User or the Administrator within the Organisation terminate electronically supplied services on the GSA Platform. According to the „Regulations governing the provision of services by electronic means of communication on the GSA Platform” the personal data processing retention period is five years from the day of resignation of electronically supplied services on the GSA Platform.
9. The provision of personal data is a necessary condition to conclude the agreement for the provision of electronic services. The provision of personal data is voluntary but the lack of this data will result in no access to the electronically supplied services on the GSA Platform.
10. GSA Operator doesn’t profile you on the basis of personal data and doesn’t make automated individual decision within the meaning of GDPR.
11. „Regulations governing the provision of services by electronic means of communication on the GSA Platform” is available on the website www.gsaplatform.eu in a form allowing for downloading, preservation and printing.