Facebook Privacy Policy
- Home
- Facebook Privacy Policy
We treat your personal data and its protection with the utmost responsibility. This Privacy Policy concerns personal data that we process in connection with our activity on Facebook.
We create and manage our profile available at: https://www.facebook.com/CorabSA/ on the Facebook platform.
The document you are reading is based on personal data legislation, including the provisions of the GDPR (General Data Protection Regulation of 27 April 2016) and the Data Protection Act of 10 May 2018.
The content of the Privacy Policy may change at any time. We will always keep you informed of any changes and provide the current version of the document.
Feel free to contact us! |
For any matter related to the processing of your data by us, you can contact us by e-mail at: support@corab.com.pl and/or by phone: +48799396396. |
Data Controller |
The Controller of personal data processed in connection with our activity is CORAB SPÓŁKA AKCYJNA with its registered office in Olsztyn (10-417) at ul. Mariana Bublewicza 8, entered in the Companies Register kept by the District Court in Olsztyn, 8th Economic Division of the National Court Register [KRS], under KRS number: 0000950779, REGON [Business ID]: 510519084, NIP [Tax ID]: 7390207757, with a share capital of PLN 1,184,000.00 fully paid up. The Controller has appointed a Data Protection Officer (Ms. Katarzyna Krzywicka), who can be contacted by e-mail at iod@corab.com.pl or by phone: +48794509753. |
Who is this policy for? |
This policy applies to you if you interact with us on Facebook (e.g., via chat), like or follow our Facebook page, or leave reactions or comments under our posts or comments. |
Basic information
According to the judgment of the Court of Justice of the European Union (judgment number: C-210/16), Facebook (now: Meta Platforms Ireland Limited) is a joint controller of personal data. This means that Facebook co-determines with the controller the purposes and means of processing your data.
However, we emphasise that we have no influence on how Facebook processes your data. To learn more about privacy on Facebook, you can consult the Data Policy and the Page Insights information on Facebook. By providing you with this information, we fulfil the obligations imposed on us by the GDPR in the case of joint controllership with another entity. All cookies used in connection with our Facebook profile come from Facebook, and the principles of data processing and use are set out in the aforementioned Facebook Policy, over which we have no influence.
You can read more about data processing in the Privacy Policy.
What data do we process, for what purpose, and on what basis?
PURPOSE OF PROCESSING |
SCOPE OF DATA |
LEGAL BASIS |
Responding to your message/comment |
Full name; Data contained in your publicly available profile (e.g., information about your place of work, education, city of residence); Any personal data included in the content of the message. |
Article 6(1)(f) of the GDPR, which allows us to pursue the legitimate interest of the data controller (ensuring communication). |
Fulfilling data protection obligations (e.g., obligation to create registers and records) |
The scope of data is determined by legal provisions and varies depending on the specific legal obligation imposed on the controller. |
Article 6(1)(c) of the GDPR (processing is necessary for compliance with a legal obligation to which the controller is subject). |
Fulfilling data protection obligations (e.g., obligation to create registers and records) |
The scope of data is determined by legal provisions and varies depending on the specific legal obligation imposed on the controller. |
Article 6(1)(c) of the GDPR (processing is necessary for compliance with a legal obligation to which the controller is subject). |
Managing the Page or Group on Facebook |
Full name; Data contained in your publicly available profile (e.g., image, information about your place of work, education, city of residence); Any personal data included in the content of your comments on the page; Your reactions to posts. |
Article 6(1)(f) of the GDPR (legitimate interest of the controller in presenting and developing their services on social media). |
Establishing, pursuing, or defending against claims |
All of the above-mentioned data |
Article 6(1)(f) of the GDPR (the controller’s interest is to possess personal data that allows for the establishment, pursuit, or defence against claims of users or third parties). |
Archival and evidentiary purposes, to secure information that may be used to demonstrate facts |
All of the above-mentioned data |
Article 6(1)(f) of the GDPR (the controller’s interest is to possess personal data that enables them to demonstrate facts related to the operation of the Facebook profile). |
As part of the tools provided to us for managing our profile on Facebook, we have access to statistics that provide us with information about user behaviours and interactions within our Facebook profile. This information is anonymised and allows us to tailor our profile and shared content to the preferences of our followers and those interested in our activities on Facebook.
Your rights in relation to the processing of your personal data
We inform you that you have the following rights in relation to the processing of your personal data:
If you wish to exercise your rights, please write to: support@corab.com.pl |
1. Right of access to information – means that every person whose data is processed has the right to know what happens to their personal data. The privacy policy you are reading has been created for this purpose. 2. Right of access to personal data – this means that if the controller of your data receives a request from you to access your data, the controller is obliged to provide you with the relevant information. The data controller should fulfil their obligations in this regard without undue delay, no later than within one month. If it is not possible to meet the deadline, the controller will at least inform you whether your data is being processed and may then extend the deadline for a full response by two months. 3. Right to rectification of personal data – this means that you may request the controller to rectify incorrect data or complete incomplete data. 4. Right to erasure of personal data, right to be forgotten – this means that you may demand the controller to delete your personal data and to inform any person to whom your data has been disclosed about its deletion. You also have the right to request that your data, which has been made public by me, be deleted by other controllers as well. Upon request, the controller is also obliged to inform you which recipients have been provided with your data subject to erasure. 5. Right to restriction of personal data processing – this means that you may request the restriction of the processing of your personal data. This may occur, for example, when you dispute the accuracy of the data being processed or when you consider that the data is no longer needed for processing purposes. 6. Right to object to the processing of personal data – this means that you may object to your data being processed by the controller. 7. Right to data portability – this means that, under certain conditions, you may request the transfer of your data directly to another indicated controller. 8. Right to lodge a complaint – this means that if you believe that our processing of your data violates the law, you may lodge a complaint with the President of the Personal Data Protection Office. |
Data recipients
Your personal data may be disclosed to third parties whose services we use in connection with the operation of www.corab.eu and our social media profiles. We assure you that we carefully select the entities with whom we cooperate or whose services we use, and we always aim to ensure an appropriate level of data protection.
Due to our use of services provided by Google and Meta (Facebook), your data may be transferred to the United States of America (USA) and Canada. However, we inform you that these entities guarantee an adequate level of personal data protection as required by European regulations.
A list of all entities we cooperate with is available in the Privacy Policy on the website www.corab.eu.
Automated decision-making and profiling
Your data is not used by us for automated decision-making that could affect your legal situation or have other similarly serious effects on you.
How long do we process your data?
We process your data until the purpose of processing has been achieved, until it is no longer useful, or until an effective objection is raised (in the case of data processed based on Article 6(1)(f)), for a maximum of 3 years or 6 years in relation to data processed for the purpose of defending claims.
Your data is processed on the Facebook platform in accordance with Facebook’s terms and privacy policy, and we have no influence over how long your data will be processed on Facebook. You may delete your data yourself under the terms specified by Facebook.
We count the retention periods in years from the end of the year in which we began processing personal data, to streamline the process of deleting or destroying personal data. Counting a separate period for each process would result in significant organisational and technical difficulties, as well as considerable financial costs. Therefore, setting one date for deleting or destroying personal data allows us to manage this process more efficiently.
Of course, in cases such as exercising your right to be forgotten, issuing a specific administrative decision, or when required directly by law, the deletion of personal data may occur earlier than indicated above. Each such case is assessed individually.
The additional year related to the processing of personal data is due to the fact that you may hypothetically submit a claim just before the expiry of the limitation period, your request may be delivered with significant delay, or you may incorrectly determine the limitation period for your claim.
If you have any doubts or questions regarding the processing or protection of your personal data, you may contact us at: support@corab.com.pl