LTG Cargo Polska Sp. z o.o.
LTG Cargo Polska Sp. z o.o. (hereinafter referred to as LTG Cargo Polska or “the Company” or simply “we”) store information about you in accordance with the General Data Protection Regulation of the European Union (hereinafter – GDPR ) and other data protection legislation. This LTG Cargo Polska Privacy Notice (the “Privacy Notice”) provides details about this.
Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation).
In this Privacy Notice, we provide answers to the most important questions about how we collect, use and store information about you. Please read this important information carefully and visit our website from time to time at https://ltgcargo.pl and read the latest version of the Privacy Notice posted there.
LTG Cargo Polska Sp. z o.o., legal entity code: 5252828959, registered office address: Świętojerska str. 5/7, 00-236 Warsaw, el. email address: [email protected] .
LTG Cargo Polska Sp. z o.o.
|Why do we collect information about you?||What information do we collect about you?||Why do we have the right to collect the information you provide?||How long do we use or store information about you?|
|3.1.||We enter into contracts with you, fulfil contractual obligations and related tax obligations||Name, personal identification code and / or date of birth, address of residence, e-mail address, telephone number, power of attorney, validity period and number of the power of attorney, signature, relationship with the represented person, represented person, position, payer’s code, billing information, settlement period, debt information, bank account number, contract, its additions, amendments and annexes, acceptance-transfer deeds, conclusion dates, contract number, place of conclusion and execution of the contract, information on execution of the contract, information on termination of the contract, extract from the Central Data Register of the Real Estate Register and, as far as the performance of the contract is concerned, communication with you, any other information that may be required for the proper performance of the contract||We enter into a contract with you and fulfil our contractual obligations (Article 6 (1) (b) of the GDPR)||During the term of the contract|
|3.2.||We maintain relations with the natural or legal persons you represent||Name, surname, personal identification number and / or date of birth, address of residence, power of attorney, period and number of validity of the power of attorney, signature, relationship with the represented person, represented person, position, telephone number, e-mail address, login to our systems, all information you provide to the Company (e.g. information about the person you represent, concluded contracts, etc.) and, as far as the performance of the contract is concerned, communication with you, any other information that may be necessary for the proper performance of the contract||We have a legitimate interest (to maintain relations with the persons you represent) (Article 6 (1) (f) of the GDPR)||During the term of the contract|
|3.3.||We inform / interview you about the Company’s services relevant to you||Name and surname, position, telephone number, address, represented organisation, e-mail address||You agree that we will use the information about you (Article 6 (1) (a) of the GDPR, Article 69 (1) of the Law on Electronic Communications of the Republic of Lithuania) or that you have purchased goods or services from us (Article 69 (2) of the Law on Electronic Communications of the Republic of Lithuania).||5 years from the date of consent or termination of the relationship with you, unless you object within this period|
|3.4.||You provide us with a request, suggestion or complaint||Name and surname, e-mail address, country, telephone number, subject of the request, time of receipt of the request, content of the request, attachments to the request, reply to the request||We have your consent(Article 6 (1) (a) of the GDPR) We have a legitimate interest (to examine your inquiries, requests or complaints) Article 6 (1) (f) of the GDPR)||1 year after the last application|
|3.5.||We investigate rail transport disasters, traffic accidents or incidents||Of the witness of a rail transport disaster, traffic accident or incident: name, surname; or name, surname, sex, age, sobriety, personal actions of the person injured during the rail transport disaster, traffic accident or incident; name, surname of the person responsible for a rail transport disaster, traffic accident or incident, and all other information that we must process in accordance with Annex 2 to the Regulations on the Notification of Railway Accidents, Accidents and Incidents, Investigation of Railway Accidents, Accidents and Incidents and Elimination of Their Consequences approved by Order No. 3-531 (1.5 E) of the Minister of Transport and Communications of the Republic of Lithuania of 23 December 2015.||
We must collect information in accordance with the laws (Article 6 (1) (c) of the GDPR, Order No. 369 on serious accidents, accidents and incidents in railway transport of the Minister of Infrastructure and Construction of the Republic of Poland of 18 March 2016)
|10 years after a rail transport disaster, traffic accident or incident|
|3.6.||We may be involved in legal proceedings involving you||All information mentioned in this Privacy Notice, documents sent to you and their attachments, documents submitted by you and their attachments, procedural documents, court orders, rulings, decisions||We have a legitimate interest (to defend the rights of the Company in legal proceedings) (Article 6 (1) (f) of the GDPR)||10 years after the end of the contract with you or 10 years after the end of the legal proceedings|
|Special categories of personal data||The data is necessary for us to make, enforce or defend legal claims (Article 9 (2) (f) of the GDPR).|
Please review the answer to point 3 above – you must provide the information about you that is necessary to:
4.1. enter into contracts with you and fulfil contractual obligations (for the purpose of 3.1);
4.2. enter into contracts with the persons you represent and fulfil contractual obligations (for the purpose of 3.2).
If you do not provide the information specified in clauses 3.1 and 3.2, we will not be able to enter into contracts and fulfil contractual obligations with you and / or the persons represented by you.
Most of the information is provided by you, but we can get some of the information from:
5.2. the legal entities you represent or in which you are employed (for the purpose specified in clause 3.2);
5.3. group of companies of the public company Lietuvos Geležinkeliai (for all purposes specified in clause 3).
We will only pass on information relating to you to the following entities where this is necessary and permitted by applicable law, and for the reasons set out in clause 3:
6.1. to the LTG Cargo Polska parent company AB Lietuvos Geležinkeliai and its subsidiaries (data may be transferred for all purposes specified in Clause 3);
6.2. banks performing settlement operations (data shall be transmitted for the purposes specified in clauses 3.1 and 3.2);
6.3. courts, supervisory, law enforcement and other state institutions (data may be transferred for all purposes specified in clause 3);
6.4. counsels, notaries, bailiffs, auditors, consultants, information technology maintenance service providers, electronic communications service providers, insurance companies, companies providing archiving services and other services to the Company (data may be transferred for all purposes specified in clause 3).
In most cases, personal data are processed and transferred within the European Union and the European Economic Area, but where necessary for the provision of certain services, data may be transferred and processed outside those territories, provided that an adequate level of personal data protection is respected. When permitted by law and for the reasons set forth in clause 6 of this Privacy Notice, we disclose information about you:
7.1. on the basis of the European Commission’s decision on adequacy, meaning that the European Commission has recognized the country in which the third party is established and / or operates as ensuring an adequate level of protection of personal data;
7.2. we have signed a contract with a third party based on the Standard Terms and Conditions approved by the European Commission;
7.3. we have received the permission of the State Data Protection Inspectorate;
Having used, where possible, other possible personal data protection measures and derogations.
The GDPR and other legislation give you rights, provides for the cases in which you can exercise them, the procedures you must follow, and the exceptions in which you cannot exercise the rights granted. When permitted by law, you may:
8.1. access to your personal data, i.e. receive a notification confirming whether LTG Cargo Polska processes your personal data and, if so, request access to the processed data and related information;
8.2. provide us with a request to correct inaccurate, incorrect information used or to supplement it when it is incomplete;
8.3. make a request to us to delete information about you that we have if we use it illegally;
8.4. make a request to us to restrict the processing of available information about you when you dispute the accuracy of the data or object to the processing, do not consent to the deletion of your unlawfully processed data or you need the data to make, enforce or defend legal claims;
8.5. to express disagreement with the use of data when we process your data in the legitimate interests of LTG Cargo Polska and (or) third parties;
8.6. make a request to us to transfer (receive) data which you have provided to us under a contract or consent to the processing of data and which we process by automated means in a commonly used electronic form;
8.7. refuse to be subject to a fully automated decision, including profiling, if such a decision is likely to have legal consequences or a similarly significant effect on you;
8.8. revoke the consents given to us regarding the use of information about you when we use the data on the basis of your consent;
8.9. lodge a complaint with the supervisory authority, in particular in the Member State where you have your habitual residence or the place where the suspected breach of the GDPR has been committed, and seek legal redress
To exercise your rights under Article 8 of this Privacy Notice, you must:
9.1. personally deliver the application to exercise the data subject’s rights (hereinafter – the Application)  to the Company’s registered office or to the Data Protection Officer at the addresses specified in clause 10 of this Privacy Notice (the Application must be accompanied by an identity document);
9.2. send the Application to the Company or to the Data Protection Officer at the postal addresses specified in clause 10 of this Privacy Notice (the Application must be accompanied by a copy of an identity document certified by a notary or under other procedure established by legal acts);
9.3. submit the Application to the Company or the Data Protection Officer at the e-mail addresses specified in Clause 10 of this Privacy Notice (the Application submitted by e-mail must be signed with a secure electronic signature).
 It is recommended to use the Data Subject Rights Application Form here.
If you have questions, comments or complaints about how we collect, use and store information about you, or want to exercise your rights as a data subject, you can contact:
10.1. The Company at Świętojerska str. 5/7, 00-236 Warsaw, e-mail: [email protected] .
10.2. The Data Protection Officer, address: Prūsų g. 1 Vilnius, e-mail: [email protected] .