Information on the processing of personal data in relation to the personal data of persons using Passenger Service Point located in the building of the Kraków Główny Railway Station (premises no. 33 (K-040)) located in Kraków at 5A Pawia St. obtained as part of video monitoring

Bearing in mind the provisions of Article 13 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR”, we set out below the information and rules for processing your personal data.

  1. The Data Co-Controllers, i.e. the entity which decides how your personal data will be used, are:
    • Zarząd Dróg Wojewódzkich in Kraków, 56 Głowackiego St., 30-085 Kraków, phone number: 12 44 65 700, e-mail address: [email protected], Electronic Mail Box address: /ZDW/SkrytkaESP;
    • Public Transport Authority in Kraków (hereinafter referred to as: ZTP) with its registered office at 1 Wielopole St., 31-072 Kraków, phone number: 12 616 86 00, e-mail address: [email protected], Electronic Mail Box address: /ZTPK/SkrytkaESP.
  2. Pursuant to the arrangements of the Co-Controllers the contact point is Data Protection Officer of Zarząd Dróg Wojewódzkich in Kraków – you can contact with him by correspondence at the following address: ul. Głowackiego 56, 30-085 Kraków or electronically by e-mail: [email protected].
  3. Independently the above, in all matters relating to the processing of personal data by ZTP, you can contact the Data Protection Officer appointed for this purpose:
    • Zarząd Dróg Wojewódzkich in Kraków, 56 Głowackiego St., 30-085 Kraków or e-mail address: [email protected];
    • Public Transport Authority in Kraków, 1 Wielopole St., 31-072 Kraków or e-mail address: [email protected].
  4. Your personal data may be processed in order to ensure the required safety conditions, consider complaints, conduct correspondence on the functioning of public transport in Kraków agglomeration, protect Data Co-Controllers property, public property,  municipal property and property of people using the Passenger Service Point, as well as optimization of the functioning of the Point and public transport.
  5. In terms of video monitoring, data are recorded on storage media with the use of cameras installed on the premises. The Data Co-Controllers defined and implemented the conditions and technical requirements at the stage of their recording, archiving recordings on storage media, as well as sharing them.
  6. Using video monitoring the Data Co-Controllers process the following scope of personal data:
    • for purpose No. 2 “Considering complaints, claims or correspondence regarding the functioning of public transport in Kraków, examining applications, providing explanations”, and provided by the data subject:
      • name(s);
      • surname;
      • PESEL number;
      • correspondence address (if provided);
      • e-mail address (if provided)
      • telephone number (if provided);
      • health (if applicable);
      • other personal data held by the Data Co-Controllers than those mentioned and provided by the data subjects;
    • for other purposes described in the table:
      • image.
  7. You have the right of access to the content of your data and the right to rectify or complete them, request their erasure or restrict their processing, in the cases provided for by law.
  8. In order to exercise the rights mentioned above, you should address your request to the contact point or to the e-mail address: [email protected] or [email protected], in writing to the address of ZDW’s or ZTP’s registered office, via the Electronic Mail Box: /ZDW/SkrytkaESP or /ZTPK/SkrytkaESP, or submit it in person at the ZDW or ZTP headquarters. Before we can exercise your rights, we will need to confirm your identity in a manner individually tailored to the request.
  9. If you consider that the processing of your personal data by ZTP or ZDW violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection, 1A Moniuszki St., 00-014 Warsaw.
  10. The recipients of your personal data are or may be entities, in particular:
    • providing services consisting in acting as the Operator of the Małopolska Karta Aglomeracyjna (MKA) system and acting as the administrator of the MKA system,
    • servicing equipment through which personal data are processed;
    • providing and maintaining software used for the processing of data;
    • providing advisory and control services commissioned by Data Co-Controllers (e.g. auditing companies, certifying companies);
    • those processing data for the purpose of legal representation, e.g. law firms.
  11. Your data may also be made available to public authorities or entities entitled to obtain data on the basis of applicable law, e.g. courts, law enforcement agencies or state institutions, when they make a request, based on an appropriate legal basis.
  12. Your personal data will not be transferred to countries outside the European Economic Area and will not be transferred to international organisations.
  13. The Data Co-Controllers will not use automated decision-making, including profiling, against you.
  14. Your personal data recorded with the help of video monitoring are stored for 14 to 30 days. A purpose-driven entitlement allows data to be collected by:
    • 90 days, while technical limitations for some of the recording devices limit this time to 14 days, which implies an administrative priority requirement during the operation of these devices, or
    • until the completion of activities related to recorded events of which the the person using the premises or third party is a participant, or
  15. If the recording constitutes evidence in court or administrative proceedings, then the data will be stored until the final conclusion of these proceedings.