Dear Sir/Madam,
We kindly inform you that as of May 25, 2018 , the new EU regulations will be in force in the
field of personal data protection (General Data Protection Regulation, i.e. GDPR). GDPR
unifies and directly regulates the rules of protection and processing of personal data within the
European Union.
Security of our Customers' data is a top priority for us. In particular, a key issue is to ensure that
the rights of data subjects are properly exercised.
1. What is GDPR?
GDPR is the Regulation of the European Parliament and of the Council (EU) No. 2016/679 of
April 27, 2016 on the protection of natural persons with regard to the processing of personal data
and on the free movement of such data. The Regulation aims to extend the protection of the
fundamental rights and freedoms of natural persons, and in particular the right to the protection
of personal data.
2. Since when is the GDPR in force?
The Regulation will be in force from May 25, 2018.
3. Who is your personal data controller?
The controller of personal data is Dryvit Systems USA (Europe) Sp. z o.o. with its registered
office in Krze Duże, address: Krze Duże 7, postal code: 96-325 Radziejowice.
4. What are the basic principles of processing personal data by the controller?
In accordance with Article 5 of the GDPR, the processing of personal data should be carried out
in accordance with the following principles:
a) lawfulness – personal data are processed under all the requirements of law, including in
particular having one of the processing grounds referred to in Articles 6 and 9 of the
GDPR;
b) fairness – data are processed in compliance with law at every stage of the processing;
c) transparency – the nature of personal data processing operations performed by the
controller must be clear for the data subjects;
d) purpose limitation – data are collected for specified, explicit and legally legitimate
purposes and not further processed in a manner that is incompatible with the purposes for
which they were collected;
e) data minimisation – the data are adequate, relevant and limited to what is necessary for
the purpose for which they are processed;

f) accuracy – the data are accurate and, where necessary, kept up to date. The controller
undertakes every reasonable step to ensure that personal data that are inaccurate, having
regard to the purposes for which they are processed are erased or rectified without delay;
g) storage limitation – data are kept in a form which permits identification of data subjects
for no longer than is necessary for the purposes for which the personal data are processed.
h) integrity and confidentiality – data are processed in a manner that ensures their
appropriate security, including protection against unauthorized or unlawful processing and
against accidental loss, destruction or damage, using appropriate technical or organizational
measures;
i) accountability – The controller shall be responsible for, and be able to demonstrate,
compliance with GDPR provisions.

5. What are your rights in the scope of personal data processing?
In connection with personal data processing by the controller on the basis of the GDPR, you
have:
 the right to access personal data (including the right to obtain a copy of the data),
 the right to limit personal data processing,
 the right to rectify personal data,
 the right to erase personal data (“right to be forgotten”),
 the right to transfer data to other controller,
 the right to object to data processing,
 the right to lodge a complaint to the President of the Office for Personal Data
Protection, if you deem that personal data processing infringes the provisions of the
GDPR.
In all matters concerning the processing of your personal data, you may contact the Controller's
registered office (at its postal address), as well as the Management Board Office of the Company
at ul. Bokserska 66, 02-690 Warsaw, and by e-mail at dataprotection@dryvit.pl.

Detailed rules concerning the security policy of personal data protection in Dryvit Systems USA
(Europe) Sp. z o.o. with its registered office in Krze Duże, address: Krze Duże 7, postal code:
96-325 Radziejowice are introduced in the Company on the basis of appropriate Procedure.