Privacy Policy
B2B Platform Privacy Policy cglass.pl
Last updated: July 29, 2025
This Privacy Policy explains how NORGPOL Sp. z o.o. collects, processes, and protects personal data of users using the B2B platform available at https://cglass.pl (the “Platform”). We are committed to protecting users’ privacy and ensuring that their personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”), the Personal Data Protection Act of May 10, 2018, and the Act on Providing Services by Electronic Means of July 18, 2002.
The Platform is intended for entrepreneurs (B2B), and personal data relates to company representatives such as employees or owners who register and use our services. This policy does not apply to natural persons acting as consumers within the meaning of Article 22¹ of the Civil Code.
Data Controller
The controller of personal data is NORGPOL Sp. z o.o., with its registered office at ul. Baletowa 104, 02-867 Warszawa, Poland, NIP: 9511767374, REGON: 012844970, KRS: 0001093448.
Contact: e-mail: contact@cglass.pl, phone: +48 22 33 15 400.
Categories of Collected Data
We collect the following categories of personal data:
Data category
Examples
Registration data
Full name, e-mail address, phone number, company name, company address, NIP, REGON
Order data
Delivery address, order details
Technical data
IP address, browser type, cookie data
Marketing data
E-mail address for newsletter (with consent)
Data is collected during registration, order placement, use of the Platform, or when consent to marketing communication is given.
Purpose and Legal Basis for Processing
We process personal data for the following purposes and on the following legal bases:
Purpose
Legal basis
Description
Account management
Art. 6(1)(b) GDPR (contract)
Creation and management of a user account on the Platform.
Order fulfillment
Art. 6(1)(b) GDPR (contract)
Processing orders, including delivery and payment organization.
Customer service
Art. 6(1)(f) GDPR (legitimate interest)
Responding to inquiries and providing support.
Marketing
Art. 6(1)(a) GDPR (consent)
Sending newsletters and promotional offers (with consent).
Platform functionality
Art. 6(1)(f) GDPR (legitimate interest)
Monitoring activity to optimize services.
Providing data is voluntary but necessary to use the Platform. Failure to provide data may prevent the provision of services.
Data Sharing
Personal data may be shared with:
Entities processing data on our behalf, such as courier companies, IT service providers, and payment processors, provided they act as processors under agreements ensuring an adequate level of data protection.
Public authorities and other authorized entities, if required by law, e.g., for fraud prevention or in response to court requests.
We do not share data for marketing purposes without user consent.
Transfers Outside the EEA
Currently, we do not transfer personal data outside the European Economic Area (EEA). If necessary, appropriate safeguards will be applied, such as standard contractual clauses approved by the European Commission.
Data Retention Period
We retain personal data for the period necessary to:
Provide services (e.g., maintaining an account, processing orders).
Comply with legal obligations (e.g., 5 years for accounting data, in accordance with the Accounting Act).
Respond to inquiries, prevent abuse, conduct statistical analysis, and for archiving purposes.
For marketing purposes – until consent is withdrawn.
After this period, data is deleted or anonymized.
User Rights
In accordance with GDPR, you have the right to:
Access your data.
Rectify incorrect data.
Erase data.
Restrict processing.
Data portability.
Object to processing (e.g., for marketing purposes).
Withdraw consent at any time.
Lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa).
Contact regarding rights: contact@cglass.pl.
Data Security
We apply appropriate technical and organizational measures, such as:
SSL encryption.
Restricted access to data.
Regular security audits.
We cannot guarantee absolute security of data transmission over the Internet.
Cookies
We use cookies and similar technologies on our Platform to:
Enable login and maintain user sessions.
Remember user preferences.
Analyze traffic and statistics.
Provide personalized content and advertisements (if consent is given).
Cookies are small text files stored on your device that help improve the functionality and performance of the Platform.
We use the following types of cookies:
Type
Description
Necessary
Enable basic Platform functions such as login and session maintenance.
Functional
Improve user experience, e.g., by remembering preferences.
Analytical
Allow monitoring of traffic and analysis of how users use the Platform.
Marketing
Used to personalize ads and content (only with user consent).
You can manage cookie settings in your browser. You can block or delete them, but please note that some Platform functions may not work properly without certain cookies.
More information about managing cookies can be found in your browser documentation or on the website of the Personal Data Protection Office: https://uodo.gov.pl/pl/138/233.
If you have questions regarding cookies, contact us at contact@cglass.pl.
No Processing of Children’s Data
The Platform is not intended for persons under 18 years of age.
No Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects.
Changes to the Policy
We reserve the right to update this policy. Changes will be published on this page with a new update date.
Contact
Questions regarding this policy should be directed to: contact@cglass.pl, phone: +48 22 33 15 400.