INVESTOR RELATIONS

The Company processes mainly data related to identification or verification of rights to shares issued by the Company. Those are usually data included in share documents or documents confirming rights to shares regardless of their form, a share register, powers of attorney, minutes, extracts from respective registers, or other documents related to a General Shareholders Meeting or to the Shareholder exercising their rights attached to shares. If Shareholders contact the Company electronically, the e-mail address and possibly other data included in the electronic correspondence. Furthermore, the Company can process other personal data provided by a Shareholder or another authorized body or entity if the data cannot be assigned to any of the groups mentioned above and they are processed for the purposes described in the present information.

If data are provided directly to the Company, provision of data is required by regulations of the Commercial Companies Code and in order to allow verification of the Shareholder’s identity, and a failure to provide data results in a lack of possibility to participate in a General Meeting. In the case of an e-mail address, providing such an address is voluntary, however, it is necessary to allow contact between the Company and the Shareholder via e-mail. A failure to provide an e-mail address results in a lack of possibility to maintain contact in this way.

JT S.A. processes personal data of shareholders based on the following regulations:

1.  fulfillment of legal obligations (art. 6 section 1 letter c GDPR), in connection with art. 407 section 1(1) of the Commercial Companies Code;
2.  legally justified interest of JT S.A. (art. 6 section 1 letter f GDPR) – for the purpose of handling, pursuing and defending mutual claims, should they arise.

Personal data can be provided to the following entities or bodies:

• authorized based on provisions of the law,
• other Shareholders within the scope of fulfilment of obligations resulting from provisions of the law, including art. 407 of the Commercial Companies Code,
• which must be provided with the data in order to perform a given act which the Shareholder is a part to, or another act concerning the Shareholder,
• who can receive the data based on a consent or an authorization,
• which are clearing houses or other entities offering clearing and settlement, payment institutions or entities representing such entities if this is related to an act performed by the Shareholder or for their benefit,
• business, economic or legal counsels, accounting firms and auditors who provide services for the Company.

The Company does not plan to provide personal data to countries from outside the European Economic Area.

The Company does not process personal data of Shareholders automatically and it does not use data for profiling purposes.

The Company processes personal data throughout a period when the given person is a Shareholder. Furthermore, the Company processes archived data after expiry of the given legal relationship throughout the archiving period, not shorter that the period of limitation on claims. The basic archiving period is 6 years, whereas it ends with the lapse of the last day of the calendar year, unless provisions of the law set forth a different period. It a dispute, a court case or other proceedings (in particular criminal proceedings) are pending, the archiving period shall be calculated from the day of a legally binding conclusion of proceedings, and in the case of multiple proceedings – a legally binding conclusion of the last of them, regardless of the manner of its conclusion.

Documentation of the Company, including documentation of General Shareholders Meetings, containing personal data is stored throughout the period of existence of the Company, and then can be provided to an entity appointed to store documents. The period of storing data processed based on a consent is indicated in the declaration on consent; in any case, if the Company processes data for this purpose, until the consent is revoked.

• to request from the Company access to their personal data, and the right to correct them if they are not consistent with the facts, and furthermore, in cases provided for by the law, to claim removal of the data or limitation of their processing,
• to object against data processing,
• to move data or to obtain copies of data – whereas this right may have an adverse impact on rights and freedoms of persons, including trade secrets or copyrights, and it shall be executed within the scope of technical possibilities,
• to remove consents or authorizations granted in connection with data processing.

Personal data of Shareholders are obtained from Shareholders, proxies and representatives, in particular in connection with the requirement to prove rights attached to shares or the right to represent a Shareholder.

Requests related to exercising the rights can be submitted by Shareholders electronically at the address: iod@serwer1846452.home.pl or biuro@serwer1846452.home.pl or in writing, at the address of the registered office of the Company.

The Company may request that the Shareholder specifies information or activities which the request concerns. In meeting the request to transfer data or to provide their copies, the Company provides data, informing about the electronic format or the medium used.

Yes, a Shareholder can file a complaint concerning the data processing with the President of the Personal Data Protection Office.

This information fulfills a legal obligation. You are not required to take any action.