pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC - General Data Protection Regulation - (OJEU L of 2016, No. 119, item 1), hereinafter referred to as "GDPR", we would like to inform you that: The Controller of the user's personal data is Press Glass Holding S.A. with its registered office in Konopiska, at ul. Golfowa 19, 42-274 Konopiska, Konopiska commune, entered into the National Court Register by the District Court in Częstochowa, 17th Commercial Division of the National Court Register, under KRS number 0000131477, Tax Identification No. (NIP) 574 000 74 96, Business Statistical No. (REGON) 150021158, with a share capital of PLN 502 000 (in words: five hundred two thousand zlotys 00/100), paid in full, hereinafter referred to as the "Controller" and/or "Press Glass". In all matters regarding the processing of personal data by Press Glass and the exercise of rights related to data processing, the user may contact the Controller by electronic means to the following e-mail address: gdpr@pressglass.com or in writing to the following address: Press Glass Holding S.A. with its registered office in Konopiska, at ul. Golfowa 19, 42-272 Konopiska, with the note "Personal data". The Controller has appointed a Data Protection Officer.
The Data Protection Officer can be contacted directly by electronic means at the following e-mail address: iod@pressglass.com or by phone at: +48 602 638 231. The Controller processes the user's personal data for the purpose of:

• making contact with the user via the website www.pressglass.com or the Press Glass Mobile application, including in order to provide the requested commercial information - pursuant to Article 6(1)(a) and Article 6(1)(f) of the GDPR,
• performance of legal obligations incumbent on the Controller - pursuant to Article 6(1)(c) of the GDPR,
• establishing, defending, and pursuing claims as part of the Controller's legitimate interest - pursuant to Article 6 (1)(f) of the GDPR.

The user's personal data shall be kept for the period necessary to achieve the purposes referred to above, or until the user effectively withdraws the consent to data processing, or until the objection raised by the user is accepted.
The user's personal data may be processed for the time necessary to establish, assert or defend claims resulting from generally applicable provisions of law, but no longer than until their expiry.
After the above-mentioned retention periods, the user's personal data will be permanently deleted or undergo anonymisation, i.e. an irreversible process of personal data encryption, leading to the inability to identify the data subject. Personal data may be transferred to entities processing data at the request of the Controller, including entities providing Press Glass with IT support, the Controller's business partners, companies providing consulting services and marketing agencies in order to conduct advertising and promotional campaigns on behalf of Press Glass. The Controller guarantees that these entities have the right to process personal data at the request and on behalf of the Controller and may process them only on the basis of an agreement concluded with Press Glass and only for the purposes and to the extent specified in such agreement. The user has the following rights:

• the right to access personal data and the right to request a copy thereof,
• the right to rectify (correct) data,
• the right to restrict processing,
• the right to delete data, unless there are exclusionary conditions specified in Article 17(3) of the GDPR,
• the right to object to processing - to data processed on the basis of the user's consent or the legitimate interest of the Controller, including profiling,
• the right to withdraw consent - to the extent that the basis for the processing of personal data is the user's consent, while the withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal,
• the right to transfer personal data - to the extent that personal data are processed on the basis of consent or on the basis of an agreement, or if the processing is carried out in an automated manner.
• the right to lodge a complaint with a supervisory authority. - President of the Personal Data Protection Office.

• the Internet (in particular: the database of the Central Register and Information on Economic Activity, the search engine database of the National Court Register, contact forms available at www.pressglass.com),
• business partners of the Controller.

• The user may voluntarily consent to the processing of his/her personal data, including automated analysis of the user's activity on the www.pressglass.com website and in the Press Glass Mobile application, in order to determine his/her potential interests and to adapt advertisements and commercial offers to his/her preferences.
• The user may withdraw consent to profiling at any time using the GDPR Friendly tab (Advanced Settings).

Personal data processed by the Controller is transferred outside the EEA. In connection with the partnership undertaken by Press Glass with affiliated entities and service providers established outside the EEA, personal data of the user may be transferred to the following countries outside the EEA: the United Kingdom and the USA.
On 12 July 2016, the European Commission adopted a decision on the appropriate protection of personal data (EU-US Privacy Shield Program), which allows the transfer of personal data of EU citizens, while ensuring an adequate data security standard.