Information notice concerning the processing of personal data by the Warsaw Stock Exchange (GPW) in connection with the requirements of Article 13 and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, “GDPR”).
The controller of personal data is the Warsaw Stock Exchange (GPW, ul. Książęca 4, 00-498 Warsaw, Poland, phone +48 22 628 32 32, gpw@gpw.pl).
The controller has appointed a Data Protection Officer who may be contacted at iodgkgpw@gpw.pl.
The scope of personal data processed by GPW includes the first and last name, the business email address, the business phone number, and the job position and, for the entity’s duly authorised representatives, the first and last name, the job position, and data contained in the up-to-date copy of an entry in the relevant register or data contained in the power of attorney.
Personal data of the entity’s duly authorised representatives and data of persons named as business contacts will be processed by GPW in accordance with Article 6(1)(f) GDPR, i.e., for purposes of a legitimate interest pursued by the controller, namely, checking the powers of the entity’s duly authorised representatives in connection with the presented declaration of intent, communications in connection with the submitted application for entry into the register of Authorised Advisers, as well as subsequent communications in matters concerning the performance of obligations of Authorised Advisers, including, among others, the annual report on Authorised Adviser’s activities.
Other data specified in the application for entry into the register of Authorised Advisers, i.e., information about persons holding a certificate, information about the ownership structure and authorities of the Applicant, will be processed by GPW in order to assess whether the entity applying for entry into the register of Authorised Advisers warrants the proper performance of obligations of Authorised Advisers. Data included in the annual report on Authorised Adviser’s activities will be processed for the purpose of its analysis.
The required data are specified in Exhibit 5 to the Alternative Trading System Rules. The scope of the Rules is set out in § 1(1) of the Regulation of the Minister of Finance of 12 April 2019 on the conditions to be met by an alternative trading system or an organised trading platform operated by an investment firm (Article 6(1)(c) GDPR).
Data may be transmitted to personal data processors engaged by GPW in connection with services provided to GPW, e.g., advisory, audit, IT services. GPW may transmit personal data to public authorities if required by applicable law. Personal data may also be transmitted in case of suspicion of crime or fraud, and in such case GPW may transmit the data to a supervisory authority.
Data will be processed within the term of the co-operation and subsequently for a period of time required by law, and stored thereafter for a period of time necessary for the purpose of clearing payments and the establishment, exercise or defence of claims, if any.
Every person has the right to access their personal data, the right to rectification, erasure, restriction of processing, and the right to data portability. Every person has the right to lodge a complaint concerning data processing with the President of the Personal Data Protection Office and the right to object to the processing of their personal data.
Within the limits of the law, every person has the right to object to the processing of their personal data on the basis of legitimate interests of the controller.
In case of the application for entry into the register of Authorised Advisers, the provision of the data is a condition for the execution of the procedure for entry into the register of Authorised Advisers. Failure to provide such data will prevent the execution of the procedure for entry.
Source of data: Personal data may come from the candidate for Authorised Adviser, Authorised Adviser or directly from the data subjects.
The candidate for Authorised Adviser/ Authorised Adviser represents that he/she/it has read the information notice concerning the processing of personal data by the Warsaw Stock Exchange and undertakes to provide such information to the persons whose data is made available by GPW in connection with the procedure of applying for entry into the register of Authorised Advisers and the subsequent operation of the Authorised Adviser in the alternative trading system.