Information about the ADMINISTRATOR OF CUSTOMER'S PERSONAL DATA

1. [data of the data administrator] Enea S.A. is the administrator of the Customer's personal data. Contact details of the Data Protection Supervisor appointed in Enea S.A.: e-mail address: esa.iod@enea.pl,  address: Górecka 1, 60-201 Poznań.

2. Providing personal data is necessary for the conclusion and performance of the Agreement.

3. [purposes and basics of data processing] Customer's personal data will be processed for the following purposes:

• in order to implement the Contract or take action before the conclusion of the Agreement (legal basis: Article 6 (1) b of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 of the so-called General Data Protection Regulation (GDPR) of personal data, hereinafter: RODO);

• in order to fulfil legal obligations incumbent on Enea S.A. in connection with the performance of the Agreement, in particular accounting and tax settlements (legal basis: Article 6 (1) (c) of RODO);

• to establish, investigate or defend claims between the Customer and Enea S.A. (legal basis: Article 6 (1) (f) of RODO);

• for direct marketing of Enea S.A. products or services during the term of the Agreement with the Client (legal basis: Article 6 paragraph 1 letter f) of RODO);

• research on Customer satisfaction levels of the services and products provided by Enea S.A.(legal basis: Article 6 (1) (f) of RODO);

• invite the Client to take part in competitions organized by Enea S.A. (legal basis: Article 6 (1) (f) of RODO);

• with the consent of the Customer, their personal data may be processed for purposes specified in the consent clause, e.g. Sending commercial offers or telephone contacts by Enea S.A., based on Article. 6 par. 1 lit. and RODO. The consent to the processing of personal data for the above purposes is not required for the conclusion and performance of the Agreement.

4. [recipients of data] Enea S.A. may disclose Customer's personal data to entities providing services to Enea S.A. legal services. Enea S.A., in connection with the performance of the Agreement, discloses personal data to the Distribution Network Operator.

Enea S.A. may also entrust the processing of the Customer's personal data to:

• entities of the Enea Capital Group,
• uppliers of services or products, acting for Enea S.A., in particular entities providing Enea S.A. IT, accounting, service, sales, agency, postal, courier, printing and partner services of ENEA S.A., with whom Enea S.A. cooperates by combining products or services.

In accordance with contracts with such entities entrusted with the processing of personal data, Enea S.A. requires from such service providers, in compliance with the law, a high degree of privacy protection and the security of the Client's personal data processed by them on behalf of Enea S.A.

5. [period of data storage] Personal data of the Customer will be kept for the period necessary to implement the Contract, after which the data will be stored for the period appropriate for limitation of claims and criminal offences or for the period required by law, e.g. tax regulations. During the term of the Agreement with the Customer, their personal data will be processed for the purpose of direct marketing of Enea S.A.'s products or services, Customer satisfaction surveys for the services provided by Enea S.A. services and its products, and to invite the Customer to take part in competitions organized by Enea S.A., and will be kept until the Customer raises any objection to the processing of their personal data for the purpose of achieving such goals. In turn, after the termination of the Customer Agreement, their personal data will be processed for direct marketing of Enea S.A. products or services and will be kept until the Customer withdraws their consent. Enea S.A. however, will leave the name, surname and the client's PESEL number - only to avoid re-use of the person's data for purposes covered by the objection or revoked consent.

6. [Client's rights] The Customer has the following rights:

• access to the content of their data - within the limits of art. 15 RODO,
• their rectification - within the limits of art. 16 RODO,
• their removal - within the limits of art. 17 RODO,
• restrictions on their processing - within the limits of art. 18 RODO,
• data transfer - within the limits of art. 20 RODO.
• in the case of personal data processing for direct marketing of Enea S.A. products or services during the term of the Client Agreement, tests of Customer satisfaction levels of the services and products provided by Enea S.A., and invitations to take part in competitions organized by Enea S.A. - The Customer has the right to object to the processing of their personal data for the purpose of achieving such an objective.

7. In the case of processing personal data based on consent (e.g. consent to the processing of personal data for the purpose of direct marketing of Enea S.A.'s products or services after the termination of the Customer Agreement) - The Customer has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before withdrawal.

8. Execution of the above-mentioned rights may take place by submitting claims to the Data Protection Inspector to the following e-mail address: esa.iod@enea.pl.

9. The Customer has the right to lodge a complaint to the President of the Office for Personal Data Protection if they think that Enea S.A. has processed their personal data in violation of the provisions of RODO.