GDPR Information Clause

1. The controller of your personal data is DPD Polska Spółka z ograniczoną odpowiedzialnością (DPD), headquartered in Warsaw at ul. Mineralna 5, 02-274 Warsaw.
2. DPD has appointed a Data Protection Officer who can be contacted via email at [email protected] for any matters related to the processing of your personal data.
3. Your personal data collected by DPD in connection with filing a claim and subsequent claim procedures will be processed:
   1. for the purpose of conducting the claim procedure related to the service provided by DPD – the legal basis for processing is DPD's legitimate interest (Article 6(1)(f) of the General Data Protection Regulation (GDPR)).
   2. for statistical and analytical purposes aimed at improving service delivery and monitoring the efficiency of claim procedures – the legal basis for processing is DPD's legitimate interest (Article 6(1)(f) GDPR).
   3. for the purpose of establishing, pursuing, or defending against legal claims – the legal basis for processing is DPD's legitimate interest (Article 6(1)(f) GDPR).
4. Submitting a claim via electronic communication means, including through the Complaint Submission Form available at www.zgloszenia.dpd.com.pl, and providing your email address implies consent to receive correspondence (including notifications, updates, and responses to your claim or its appeal) electronically at the email address provided.
5. The personal data processed in connection with the purposes outlined in point 3 above include the data provided in the Complaint Submission Form and Damage Report, such as your name, email address, bank account number, and any documents required to conduct the claims procedure in accordance with DPD's service regulations and applicable legal provisions.
6. Your personal data may be shared with other entities as necessary to: (i) properly address the claim and provide a response, (ii) conduct legal or settlement proceedings if the claim is rejected or compensation is not paid and the entitled person pursues a claim related to improper performance of the agreement by DPD. Entities that may receive your personal data include service providers acting on behalf of DPD, customer support centres, IT solution providers, insurance companies, legal advisors, common courts, and public authorities handling claims (e.g., the President of the Office of Electronic Communications).
7. Your data will be processed for: (i) the duration of the claim procedure, including any appeals against rejected claims and the period required for compensation payments if the claim is accepted, (ii) the statute of limitations for claims related to improper performance of the service by DPD, (iii) legal, settlement, or administrative proceedings initiated by competent public authorities.
8. Where your data is processed based on consent, it will be processed until the consent is withdrawn, but no longer than the periods outlined in point 7 above.
9. You have the right to access your data, request its correction, deletion, restriction of processing, and object to its processing.
10. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw) if you believe that the processing of your personal data violates GDPR.
11. You have the right to object to the processing of your personal data for purposes specified in point 3 above (based on DPD’s legitimate interest) for reasons related to your particular situation. For evidence purposes, DPD requests that objections be submitted in writing or electronically.
12. Providing your personal data is required by DPD to accept and process your claim, except for optional data marked as voluntary. Failure to provide required personal data will result in the inability to accept and process your claim