Factory in Port Talbot

pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC – General Data Protection Regulation – (OJEU L of 2016, No. 119, item 1), hereinafter referred to as the GDPR. The Controller of the user's personal data is: Glass Systems Ltd with its registered office at Mill Stream Way, CENTRAL BUSINESS PARK, SA7 0AE, SWANSEA, United Kingdom, using Tax Identification Number GB742177142 – in accordance with a valid legal authorisation, hereinafter referred to as the "Controller" and/or "Glass Systems" As the Controller, Glass Systems has not appointed a Data Protection Officer. In all matters relating to the processing of personal data by Glass Systems and the use of rights related to the processing of data, the user may communicate in writing at the following email address: david.wilson-pinkney@glasssystems.co.uk or in writing Glass Systems Ltd with its registered office at Mill Stream Way, CENTRAL BUSINESS PARK, SA7 0AE, SWANSEA, United Kingdom with an annotation "Personal data".

• first name, surname,
• mailing address (residence address),
• e-mail address,
• phone number,
• personal data for the purposes of the recruitment for vacancies (including first name and surname, date of birth, place of residence/mailing address, first names of parents, level of education, previous employment history, image – if the law of a given EU country allows for the processing of the above data in the scope of the recruitment process),
• User IP.

• in relation to personal data in the form of the user's IP address, domain name, browser type, operating system type, processed for the purpose of maintenance and operation of the www.glasssystems.co.uk website, including data collected automatically in the course of the user's visits on the aforementioned website – legal basis – Article 6 sec. 1(f) in conjunction with Article 22 of the GDPR,
• performance of legal obligations imposed on the Controller – legal basis – fulfilment of the legal obligation imposed on the Controller – Article 6 sec. 1(c) of the GDPR,
• to establish, defend and pursue claims – legal basis – legally justified interest pursued by the Controller consisting in conducting business activity – Article 6 sec. 1(f) of the GDPR,
• contacting the user: these data are necessary to enable contact with the user, for purposes directly related to the operation of Glass Systems Ltd, via the www.glasssystems.co.uk website or the Glass Systems Mobile application, for example, in order to submit commercial or promotional information presented to the user – legal basis – Article 6 sec. 1(b) and sec. 1(f) of the GDPR,
• contacting the user for the purpose of his or her participation in the recruitment process conducted by Glass Systems in the scope of the recruitment for a vacant post, including via www.glasssystems.co.uk – legal basis: Article 6 sec. 1(a) and sec. 1(b) of the GDPR.

Personal data of the user shall be kept for the period necessary to perform the tasks of the Controller and comply with the archiving obligations resulting from the provisions of law. In the case of any claims, personal data of the user shall be processed until they expire under the law of a given EU country (the period of limitation on the validity of claims can be checked at: https://beta.e-justice.europa.eu/home?init=true&action=home&plang=en), if such a requirement arises. After the expiry of the above the dates, personal data of the user shall be deleted or anonymised – i.e. subjected to the irreversible process of encrypting personal data, which prevents identification of the person to whom the personal data pertained. Recipients of your personal data Personal data may be transferred to entities that process such data at the request of the Controller, including entities proving Glass Systems with IT support, the Controller's commercial partners, companies providing consulting services, including marketing agencies, for the purpose of conducting advertising and promotional campaigns on behalf of Glass Systems, while such entities shall have the right to process personal data only on the basis of an agreement with Glass Systems and only to the extent specified in such agreement (the so-called entrustment agreement). The user:

• has the right to access his or her personal data and the right to request its rectification, deletion and restriction of its processing. If the basis for the processing of personal data is a legitimate interest of the Controller, the user has the right to object to the processing of his or her personal data. In particular, the user has the right to object to the processing of data for direct marketing purposes, including profiling, as well as for analytical purposes,
• to the extent to which the basis for the processing of personal data is the user's consent, he or she has the right to withdraw consent. The withdrawal of consent does not affect the lawfulness of the processing that was made on the basis of such consent before its withdrawal,
• to the extent to which personal data is processed in order to conclude and perform an agreement/provide services or processed on the basis of consent – the user has the right to transfer personal data. In this situation, the user shall receive from Glass Systems his or her personal data in a structured, commonly used, machine-readable format. The user may send this data to another data controller, the user has also the right to lodge a complaint with the supervisory body dealing with the protection of personal data. It can be done to the address of Glass Systems Ltd with its registered office at Mill Stream Way, CENTRAL BUSINESS PARK, SA7 0AE, SWANSEA, United Kingdom or to the e-mail address: david.wilson-pinkney@glasssystems.co.uk, or to the supervisory body for actions taken by the Controller of the www.glasssystems.co.uk website / free mobile application, Glass Systems Mobile. Assistance can also be found at https://uodo.gov.pl/en/p/data-protection-authorities or https://edpb.europa.eu/edpb_en

• Internet (in particular: contact forms at www.glasssystems.co.uk),
• business partners of the Controller.

Personal data processed by the Controller is transferred outside the EEA. In connection with the cooperation undertaken by Glass Systems with affiliated entities and service providers established outside the EEA, personal data of the user may be transferred to the following states outside the EEA: USA. The European Commission adopted on 12 July 2016 a decision on the appropriate protection of personal data (EU-US Privacy Shield Program), which allows the transfer of personal data of EU citizens, while ensuring an adequate security standard of the above-mentioned procedures.