General Data Protection Regulation (GDPR)

As of 25 May 2018, the EU personal data protection regulation - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as "GDPR") - enters into force.

Below, we attach our Securities Services Privacy Statement that provides information on the purpose and principles of your personal data processing within the Securities Services of Citi Handlowy and your rights concerning the processing of such data.

The document includes:

• principles concerning the purpose of data processing;
• principles concerning the integrity and confidentiality of data processing;
• principles concerning automated processing of personal data;
• information about the right to access, rectify or erase your personal data processed by the Bank.

The document can be found here: Securities Services Privacy Statement.