NOTIFICATION OF INFRINGEMENTS

Thank you for your willingness to report a perceived infringement.

Please provide as detailed and accurate data as possible to enable a careful analysis of the incident described and to help resolve the problem.

Please read the following Information Clause on the processing of personal data.

Information Clause on Processing Whistleblower's Personal Data.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation; hereinafter: GDPR), we inform you that:

1. Your personal data Controller is the Capital Group Polska Żegluga Bałtycka S.A. (GK PŻB S.A.) with its registered office in Kołobrzeg (78-100), ul. Portowa 41, hereinafter referred to as the "Controller".
2. The Controller has appointed a Data Protection Officer to whom questions and concerns regarding the processing of personal data can be addressed at: iod@polferries.pl.
3. Personal data will be processed for the purposes of:
   1. fulfilment of the Controller's legal obligations in the form of the performance of tasks related to the handling of internal notifications - on the basis of Article 6(1)(c) GDPR in connection with the Act of 14 June 2024 on the protection of whistleblowers;
   2. communication with you in relation to your message sent as part of your application - on the basis of Article 6(1)(f) GDPR on the basis of the legitimate interest pursued by the Controller, which is communication with the person who initiated the contact with the Controller;
   3. possibly to establish, assert or defend claims between you and the Controller - on the basis of Article 6(1)(f) GDPR, i.e. on the basis of the legitimate interest pursued by the Controller, which is the possibility of asserting claims;
   4. special category data may be processed in the course of processing your application - on the basis of Article 9(2)(g) GDPR in connection with the provisions of the Whistleblower Protection Act, if such personal data is contained in your application.
4. Personal data will be made available only to entities authorised to process them on the basis of legal provisions. Personal data will be made available to entities providing, on the basis of contracts concluded by the Controller, support for the Controller's activities (e.g. IT service providers). Personal data may be made available to external entities supporting the Controller in receiving internal requests. Personal data will be shared with separate Controllers, i.e. competent authorities, in the event of follow-up actions.
5. Personal data will be retained for a period of 3 years after the end of the calendar year in which the follow-up actions have been completed or the proceedings initiated by these actions have been concluded.
6. You have the right of access to the content of your data and the right to rectification, deletion in cases provided for by law and restriction of processing.
7. You have the right to lodge a complaint with the supervisory authority, the President of the Office for the Protection of Personal Data, if you consider that the processing of personal data concerning you violates the provisions of the GDPR.
8. The provision of personal data is voluntary.
9. Personal data will not be subject to profiling and no will decisions be taken by automated means on the basis of such data,.

For anyone considering making an internal or external notification, GK PŻB S.A. shall provide, if necessary, psychological or legal assistance, provided at the request of such person, within 3 days of the request. The provision of such assistance shall be done in full confidentiality of the identity of the person seeking to make a report.

The whistleblower may make a report anonymously. In this case, no additional measures will be taken to indirectly identify them on the basis of the contact details provided.

GK PŻB S.A. takes due care to protect whistleblowers, including ensuring that the confidentiality of the whistleblower is protected. GK PŻB S.A. has a zero tolerance for retaliation.

Notification of infringements should be made by e-mail directly to: sygnalista@polferries.pl.

IN ORDER FOR THE NOTIFICATION TO BE RELIABLY VERIFIED AND EFFECTIVELY FOLLOWED UP, THE NOTIFICATION SHOULD INCLUDE AT LEAST:

1. As precise a description as possible of the reported infringement. 
2. Description of the work-related context that enabled the reported infringement to be perceived.
3. Evidence to support the application (if available).
4. Name, contact details to receive feedback.
    If a whistleblower chooses to report an infringement anonymously, we do not require any data.

Send e-mail: sygnalista@polferries.pl