Last updated: 26.10.2026
Izba Rozliczeniowa Giełd Towarowych S.A. (“IRGiT” or “Company”) attaches particular importance to ensuring security of personal data.
Personal data means any information concerning an identified or identifiable natural person. IRGiT processes the personal data for different purposes and, depending on the purpose, different methods of collection, legal grounds for the processing and retention periods may apply.
Data Controller: The Data Controller is IRGiT with its registered office in Warsaw, ul. Książęca 4, 00-490 Warsaw.
Purpose: Your personal data provided, among others, via electronic mail or otherwise (e.g. business cards, telephone contact, contact via the email addresses provided on the Service) are collected, processed and retained for the purpose of exchanging correspondence with you and for the purpose for which they were made available to IRGiT.
Grounds: If personal data processing is required for the purpose of performance of an agreement in which the data subject is a party (e.g. if the processing is required to perform a service), the processing takes place on the basis of the agreement. If the data processing is required to perform an obligation arising from the law, e.g. tax regulations following from the necessity to prove or document provision of services, the processing takes place on the basis of such legal obligation. If personal data are processed for other purpose than specified above, the processing is based on legitimate interest of the Data Controller or consent of the data subject.
Retention Period: The personal data processed by IRGiT are retained for a period required to fulfill the purpose for which they were collected (and in accordance with the requirements of prevailing laws). This period may be extended if data retention turns out necessary to establish or pursue claims associated with provision of services as part of which the data are processed and to defend against such claims.
Data Recipients: The following persons and entities may have access to your personal data:
1) the Data Controller’s employees and collaborators authorized to process your personal data;
2) entities to whom the Data Controller entrusted personal data processing, including: providers of technical and organizational services (in particular providers of ICT services);
3) data recipients may also include auditors, statutory auditors and consultancies;
4) other entities, persons or authorities – to the extent and on the rules laid down in the provisions of law.
Your personal data are made available to the aforementioned persons and entities in accordance with prevailing provisions of law and in full compliance with the rules associated with their security and confidentiality.
Data Profiling: We do not perform data profiling.
Social media
IRGiT maintains a profile on the LinkedIn social networking site, available at https://www.linkedin.com/company/irgit, in order to contact users, promote its own activities and inform users about its initiatives.
Users’ personal data are processed pursuant to Article 6(1)(f) of the General Data Protection Regulation (GDPR), i.e. on the basis of IRGiT’s legitimate interest in communicating with users, promoting its own activities and building relationships with users of the LinkedIn social networking site.
IRGiT may process the personal data of users who visit or follow its profile, post comments or reactions, or send messages via LinkedIn. IRGiT may also use aggregated statistical data and analyses concerning users’ activity on the profile made available by LinkedIn.
Users’ personal data are also processed by LinkedIn in accordance with the rules set out in LinkedIn’s privacy policy, available at: https://www.linkedin.com/legal/privacy-policy.
Rights Associated with Personal Data Processing: Each person whose personal data are processed by the Data Controller has the right to demand access to their data, correct, delete, limit the processing of and transfer them, subject to the conditions following from applicable provisions of law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).
Each person has the right to lodge a complaint with the President of the Personal Data Protection Office, object to the processing of their personal data and, if the processing was based on a consent, to withdraw it at any time, without impact on the compliance of the processing which took place on the basis of the consent before its withdrawal.
In particular each person has the right to file an objection to the processing of their personal data on the basis of legitimate interest of the Data Controller and object the processing of their personal data for the purpose of marketing communication.
Contact with the Data Controller: All queries and requests associated with the processing of your personal data by IRGiT can be sent to the e-mail address: @email with a note: personal data.