According to Article 13 of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), we would like to inform you that:

1. The Controller of your personal data is Global Airline Services Sp. z o.o. , having its registered office in Warsaw, ul. Narwik 10, door no. 6, 01-471 Warsaw, info@gasbt.com. You can contact the Data Protection Officer at iod.gas@dpag.pl.
2. Your personal data will be processed by the Controller for the purpose of fulfilling booking orders pursuant to Article 6(1)(b) of the GDPR; to fulfil the legal obligation imposed on the Controller in connection with the Tax Code Act of 29 August 1997 pursuant to Article 6(1)(c) of the GDPR and to introduce solutions facilitating business operations, in particular facilitating contact and the performance of the contract and the pursuit of claims, defence against claims related to the concluded contract, which constitutes a legitimate interest pursued by the Controller (Article 6(1)(f) of the GDPR). If you consent to the processing of your personal data for the purpose of sending commercial information, your personal data will also be processed on the basis of Article 6(1)(a) of the GDPR. Consent may be withdrawn at any time, and withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
3. Your personal data may be received by entities authorised by law to receive it, carriers and payment processors. Your data may also be made available or entrusted to other entities with whom we cooperate, if this is necessary for the performance of the Controller’s tasks.
4. Your personal data will be transferred to a third country which does not provide an adequate level of protection for your data in the absence of a European Commission adequacy finding.
5. Your personal data will be processed until the contract is fulfilled, for the period prescribed by tax and accounting laws and, in the case of the assertion of claims under the contract concluded, until such claims expire.
6. You have the right to:

• request access to your personal data;
• withdraw your consent;
• request rectification of your personal data;
• request erasure of your personal data or restriction of processing, as well as to object to the processing of your personal data, with this right only if further processing is not necessary for the Controller to comply with a legal obligation and there are no other overriding legal grounds for processing;
• You have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw) if you believe that the Controller has mishandled the processing of your personal data.

1. Your provision of personal data is necessary in order to create an account and make a booking, and failure to do so will prevent you from creating an account and/or making a booking.
2. Your personal data will not be subject to profiling or automated decision-making.