24/5/2023

The purpose of this document is to provide information regarding the processing of personal data at Glaston Group in connection with Glass Performance Days Finland 2023 survey raffle. In addition, at the end of the document you will find details about the raffle arrangements.

1      Controller and contact details in privacy matters

Glaston Oyj Abp (1651585) (”Glaston” or “We”)

Privacy Matters

Lönnrotinkatu 11, 00120 Helsinki

compliance@glaston.net

2       Why we process personal data? What is the legal basis for processing?

The purpose of the personal data processing is to enable the raffle of a free ticket for GPD Finland 2023 between the respondants of the GPD survery. In order to be able to identify and contact the winner, certain personal data will be collected. The processing of personal data is based on the consent of the participants. Please note the if you wish not to provide your personal data, you will not be able to participate in the raffle.

3       What kind of personal data we collect and process? Where do we collect data?

The register may contain the following types of personal data concerning the potential participants of GPD:

• Identity information (Name, Surname and Company)
• Contact details (E-mail)

The data is provided by individuals when participating in the raffle.

4       To whom we disclose or transfer data?

Glaston does not regularly disclose data to external parties. However, personal data may be disclosed in accordance with the law if so required. The survey is done using Microsoft Forms tool.

5       How do we protect the data and how long we store data?

Only persons who have the right to process the data for their work may use the system which contains personal data. Each user has a personal username and password for accessing the system. The data is collected in databases which are protected by firewalls, passwords, and other technical means. Glaston shall ensure the realisation of data protection with data processing agreements concluded with the subcontractors that process personal data.

Data in the register is stored for as long as is necessary for the purpose or to fulfil statutory obligations. In principle, the personal data is retained for one (1) month from the date of May 25^th, 2023, unless retention is necessary for the purpose of an ongoing criminal, legal or judicial investigation.

6       Your rights as a data subject

Requests for data subject rights must be submitted to the address mentioned in section 1 above. The data subject has the following rights:

• Right to access the data and demand the correction and deletion of data: The data subject has the right to check the data saved about him/her and the right to demand the correction of incorrect information and erasure of information.
• Objection right and right to restrict processing: The data subject has the right to object or request that data processing is restricted.
• Right to lodge a complaint with a supervisory authority: The data subject has the right to lodge a complaint to the Supervisory Authority in the EU Member State where he/she has a habitual residence or place of work or where the alleged infringement has occurred, if he/she considers that the processing of personal data concerning him/her is in breach of the EU General Data Protection Regulation.

Additional Rules for the Raffle

The raffle is organized by Glaston Group (Glass Performance Days team). The individuals who have responded to the anonymous GPD Survey have the option to additionally participate in the raffle by providing their contact details in the raffle survey form. The participation for the raffle is open from May 25^th, 2023 to June 8^th, 2023. The winner will be selected on June 8^th  at random. The winner will contacted by e-mail. The prize can be used only for new registrations for GPD 2023 after May 25^th, 2023.