Pursuant to Art. 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and

of the Council of 27 April 2016 (GDPR), we hereby inform that:

1. Casinos Poland Sp. z o. o. is the Controller of your personal data, and namely:

e-mail, name and surname.

2. All notifications and questions regarding your personal data should be sent to:

rodo@casinospoland.pl

It is e-mail address of the Data Protection Officer Mr. Waldemar Gełzakowski as well.

3. Personal data have been obtained directly from you, having been entered into the form at www.casinospoland.pl

4. Personal data are processed to reply to the message you have sent.

5. The legal basis for the processing of your personal data is Art. 6(1)(a) of GDPR (that is, your consent expressed by filling in

the form at www.casinospoland.pl and pressing the SEND button).

6. We do not make your data available to third parties.

7. Personal data will be stored until you withdraw your consent.

8. You have the right to:

a. request access to personal data at any time,

b. prompt rectification of inaccurate data and to have incomplete personal data completed,

c. prompt erasure of personal data,

d. restriction of data processing if:

o you contest the accuracy of personal data,

o the processing is unlawful, but you oppose the erasure of data,

o the Controller no longer needs the personal data for the purposes of the processing, but you need them for the establishment, exercise or

defence of legal claims,

e. you object to processing for direct marketing purposes,

f. data portability, including the right to:

o receive (in a structured, commonly used, machine-readable format) data that you have provided to the data Controller and to transmit
those data to another Controller,

o have the data transmitted directly from one controller to another, where technically feasible.

9. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

10. You have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your habitual residence, place of work
or place of the alleged infringement, if you consider that the data processing infringes the Regulation of the  European Parliament and
of the Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such
data, and repealing Directive 95/46/EC (General Data Protection Regulation).