Information on Processing of Personal Data: Shareholders of PCF Group S.A.

PCF Group S.A. controls shareholder personal data.

The company is the data controller for personal information of its shareholders, their agents, and representatives. Data are sourced from the National Securities Depository or directly supplied by shareholders.

Processing is limited to legal obligations.

Processing activities cover the preparation of shareholder lists for general meetings, attendance records, and agent authorisations. These activities fulfill legal obligations under Polish corporate law, public offering statutes, and EU GDPR.

Data is retained for the duration of shareholder status.

Personal data are retained for the duration of shareholder status. Retention is extended if necessary to pursue or defend legal claims, and thereafter only as required by accounting regulations.

Retention period. Personal data is retained for the duration of the shareholder's status, with potential extensions for legal claims or mandatory accounting requirements.

Data may be shared with authorized service providers.

Recipients include other shareholders and authorised parties under legal provisions, as well as service providers assisting business processes. Transfers outside the European Economic Area are permitted only under contractual safeguards.

Data sharing. Data may be shared with authorized third-party service providers, with transfers outside the EEA restricted to those covered by European Commission-approved contractual safeguards.

Shareholders retain rights to access and rectify data.

Shareholders and their agents retain rights to access, rectify, erase or restrict processing, object to lawful interest-based processing, and lodge complaints. Providing personal data is voluntary but essential for participation in general meetings.

Data rights. Shareholders have the right to access, rectify, erase, or restrict their data, though providing this information is a mandatory prerequisite for participating in general meetings or receiving corporate communications.

No automated decision-making or profiling is applied.

PCF Group S.A. does not utilize automated decision-making or profiling processes regarding the personal data of its shareholders. The data set is processed strictly for legal obligations and general meeting management.