The reported persons (Article 13 of the GDPR)

We would like to inform you that:

  1. The Controller of your personal data is Impact Clean Power Technology S.A. with its registered office in Warsaw, address: Świętokrzyska 30/63, KRS No.: 0000378990, Tax Identification Number (NIP): 525-250-10-81, National Business Registry Number (REGON): 142846310.
  2. Should you have any questions relating to the processing of your personal data, we encourage you to contact the Data Protection Officer, which can be done by e-mail at or in writing to our registered address marked “Data Protection Office”.
  3. Your personal data will be processed in connection with the fulfilment of the legal obligation imposed on the data controller to protect the identity of persons reporting a violation of the law under applicable law (Article 6(1)(c) of Regulation (EU) 2016/679 of the European Parliament and of the Council), the legitimate interest of the data controller (Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council), in connection with the required time for establishing, pursuing or defending claims, or a voluntary consent if you do not choose to stay anonymous (pursuant to Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council).
  4. Your personal data will not be processed automatically, including profiling.
  5. Your personal data will be retained for the period of 3 years from the end of the calendar year in which follow-up activities were completed, the report was forwarded to the public authority competent to initiate follow-up activities or after completion of the proceedings initiated by these activities.
  6. Your data processed on the basis of consent will be retained until you withdraw your consent. Consent to the processing of personal data may be withdrawn at any time via e-mail at the address Withdrawal of your consent does not affect the lawfulness of the processing which was carried out on the basis of your consent before its withdrawal.
  7. Withdrawal of the consent does not mean the withdrawal of the report. Withdrawal of the consent means that the person reporting a violation who stated his or her personal data will become an anonymous person upon withdrawal of the consent.
  8. Recipients of your data may include entities providing legal services.
  9. Disclosure of the data is voluntary.
  10. Please also be informed that you have the right to access and rectify your personal data, delete them or limit their processing, the right to object to the processing, and also the right to transfer personal data.
  11. Please be informed that you have the right to file a complaint with the supervisory authority, namely the President of the Office for Personal Data Protection.


Please be informed that in situations where the report is filed anonymously, the controller of personal data is unable to identify the details of the reporting person, which means that, under Article 11 of the GDPR, the processing does not require identification. In view of the foregoing, please be informed that Articles 15, 16, 17, 18, 19 and 20 of the GDPR do not apply (unless the data subject provides additional information that allows his or her identification in order to exercise the rights that the data subject is entitled to under these Articles).

  • Article 15 of the GDPR – the right to access the content of your personal data and obtain information, such as the categories of data and the purposes of processing, and to obtain a copy of the data
  • Article 16 of the GDPR – the right to have incorrect personal data rectified or to have incomplete personal data completed
  • Article 17 of the GDPR – the right to erase data (“the right to be forgotten”), that is the right to erase data which are no longer necessary for the purposes for which they were collected as well as data processed without legal basis (the data subject has withdrawn his or her consent to the processing of data) or unlawfully
  • Article 18 of the GDPR – the right to restrict the processing of data, that is the right to discontinue the operations involving the data or not to erase data, as per the request submitted
  • Article 19 of the GDPR – obligation to notify of rectification or erasure of personal data or restriction of processing
  • Article 20 of the GDPR – the right to transfer data processed by automated means