FOR THE CONTRACTOR
• September 28, 2021
Necessity of compliance with personal data protection by Contractors
Information for Contractors on the need to observe personal data protection in the performance of contracts for Polska Spółka Gazownictwa.
Polska Spółka Gazownictwa (“PSG”) more and more frequently receives information from data subjects that employees/persons acting on behalf of Contractors that are parties to contracts concluded with PSG are negligent, as a result of which personal data protection violations occur in the form of unauthorised disclosure of data or unauthorised access to data of data subjects by third parties.
In many cases, this leads to justified complaints against PSG (the forms used by the Contractor bear the logo of PSG) and, even worse, complaints against PSG’s data protection violations to the Personal Data Protection Office.
This exposes Contractors to the risk of consequences from the Personal Data Protection Office.
Any situation in which unauthorized disclosure of personal data or unauthorized access to personal data occurs constitutes a violation of personal data protection within the meaning of the GDPR, resulting in the filing of a complaint by the data subject to the supervisory authority, i.e. the President of the Personal Data Protection Office, as a consequence of which the authority may impose an administrative fine of up to EUR 10 000 000.
In view of the above, we would like to inform you of the need for the Contractors to comply with the rules of personal data protection and maintain the confidentiality of personal data processed in connection with the performance of contracts concluded with PSG.
In many cases, this leads to justified complaints against PSG (the forms used by the Contractor bear the logo of PSG) and, even worse, complaints against PSG’s data protection violations to the Personal Data Protection Office.
This exposes Contractors to the risk of consequences from the Personal Data Protection Office.
Any situation in which unauthorized disclosure of personal data or unauthorized access to personal data occurs constitutes a violation of personal data protection within the meaning of the GDPR, resulting in the filing of a complaint by the data subject to the supervisory authority, i.e. the President of the Personal Data Protection Office, as a consequence of which the authority may impose an administrative fine of up to EUR 10 000 000.
In view of the above, we would like to inform you of the need for the Contractors to comply with the rules of personal data protection and maintain the confidentiality of personal data processed in connection with the performance of contracts concluded with PSG.
