Facebook Privacy Policy

Feel free to contact us!  

For any matter related to the processing of your data by us, you can contact us by e-mail at: support@corab.com.pl and/or by phone: +48799396396.

Data Controller      

The Controller of personal data processed in connection with our activity is CORAB SPÓŁKA AKCYJNA with its registered office in Olsztyn (10-417) at ul. Mariana Bublewicza 8, entered in the Companies Register kept by the District Court in Olsztyn, 8th Economic Division of the National Court Register [KRS], under KRS number: 0000950779, REGON [Business ID]: 510519084, NIP [Tax ID]: 7390207757, with a share capital of PLN 1,184,000.00 fully paid up. 

The Controller has appointed a Data Protection Officer (Ms. Katarzyna Krzywicka), who can be contacted by e-mail at iod@corab.com.pl or by phone: +48794509753.

Who is this policy for?     

This policy applies to you if you interact with us on Facebook (e.g., via chat), like or follow our Facebook page, or leave reactions or comments under our posts or comments.

PURPOSE OF PROCESSING

SCOPE OF DATA

LEGAL BASIS

Responding to your message/comment

Full name;

Data contained in your publicly available profile (e.g., information about your place of work, education, city of residence);

Any personal data included in the content of the message.

Article 6(1)(f) of the GDPR, which allows us to pursue the legitimate interest of the data controller (ensuring communication).

Fulfilling data protection obligations (e.g., obligation to create registers and records)

The scope of data is determined by legal provisions and varies depending on the specific legal obligation imposed on the controller.

Article 6(1)(c) of the GDPR (processing is necessary for compliance with a legal obligation to which the controller is subject).

Fulfilling data protection obligations (e.g., obligation to create registers and records)

The scope of data is determined by legal provisions and varies depending on the specific legal obligation imposed on the controller.

Article 6(1)(c) of the GDPR (processing is necessary for compliance with a legal obligation to which the controller is subject).

Managing the Page or Group on Facebook

Full name;

Data contained in your publicly available profile (e.g., image, information about your place of work, education, city of residence);

Any personal data included in the content of your comments on the page;

Your reactions to posts.

Article 6(1)(f) of the GDPR (legitimate interest of the controller in presenting and developing their services on social media).

Establishing, pursuing, or defending against claims

All of the above-mentioned data

Article 6(1)(f) of the GDPR (the controller’s interest is to possess personal data that allows for the establishment, pursuit, or defence against claims of users or third parties).

Archival and evidentiary purposes, to secure information that may be used to demonstrate facts

All of the above-mentioned data

Article 6(1)(f) of the GDPR (the controller’s interest is to possess personal data that enables them to demonstrate facts related to the operation of the Facebook profile).

If you wish to exercise your rights, please write to: support@corab.com.pl

1. Right of access to information – means that every person whose data is processed has the right to know what happens to their personal data. The privacy policy you are reading has been created for this purpose.

2. Right of access to personal data – this means that if the controller of your data receives a request from you to access your data, the controller is obliged to provide you with the relevant information. The data controller should fulfil their obligations in this regard without undue delay, no later than within one month. If it is not possible to meet the deadline, the controller will at least inform you whether your data is being processed and may then extend the deadline for a full response by two months.

3. Right to rectification of personal data – this means that you may request the controller to rectify incorrect data or complete incomplete data.

4. Right to erasure of personal data, right to be forgotten – this means that you may demand the controller to delete your personal data and to inform any person to whom your data has been disclosed about its deletion. You also have the right to request that your data, which has been made public by me, be deleted by other controllers as well. Upon request, the controller is also obliged to inform you which recipients have been provided with your data subject to erasure.

5. Right to restriction of personal data processing – this means that you may request the restriction of the processing of your personal data. This may occur, for example, when you dispute the accuracy of the data being processed or when you consider that the data is no longer needed for processing purposes.

6. Right to object to the processing of personal data – this means that you may object to your data being processed by the controller.

7. Right to data portability – this means that, under certain conditions, you may request the transfer of your data directly to another indicated controller.

8. Right to lodge a complaint – this means that if you believe that our processing of your data violates the law, you may lodge a complaint with the President of the Personal Data Protection Office.