INFORMATION CLAUSE
In relation to the fulfilment of information obligations resulting from the General Data Protection Regulation (“GDPR”), we inform you that the controller of your personal data is mBank S.A., with its registered office at Prosta 18, 00‑850 Warsaw (“Bank”).
The Data Protection Officer is a Bank employee who can be contacted at: Inspektordanychosobowych@mbank.pl.
The legal basis for the processing of personal data by the Bank is your consent. You provide your personal data voluntarily; however, failure to provide them may prevent effective participation in the organized event as well as the production and publication of face photographs by the Bank.
Your personal data will be stored from the moment they are provided and the photographs are taken for a period of 2 years, and for archival and claim‑related purposes for the period resulting from applicable law regarding the statute of limitations for potential claims. After these periods, the Bank will permanently cease processing personal data for the above purposes.
Your data will be shared/entrusted to the following categories of recipients:
- providers of IT solutions who supply and maintain the registration form on the event website,
- entities through which we disseminate your image captured in the photographs.
By post, you have the right to:
- access your personal data, rectify them, and request their transfer;
- request their deletion, restriction of processing, or object to their processing;
- withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.
Correspondence address:
mBank S.A.
Marketing Communication and Strategy Department
Prosta 18, 00‑850 Warsaw
You also have the right to lodge a complaint with the President of the Personal Data Protection Office, in the manner indicated on the authority’s website: www.uodo.gov.pl.
GDPR Package
More information about data processing rules can be found in the GDPR Packages available on mBank’s website:
https://www.mbank.pl/rodo