What data are we talking about?

Personal data is information about an identified or identifiable natural person. Therefore, it is primarily about data enabling your identification, including:  profile name, name and surname, profile picture (thanks to it, in some cases, we can get to know your image); public data shared in the profile, the content of comments, reactions (likes, shares,clicks on links), statistical data obtained on the basis of user activity.

Personal Data Controller

The Controller of your personal data is KRUK S.A., with its registered office in Wrocław (51-116), 8 Wołowska Street.

You can send an inquiry to the above-mentioned Administrator by sending it to the address of KRUK S.A., Wołowska 8, 51-116 Wrocław or to the e-mail box info@kruksa.pl.

Data Protection Officer

We have appointed a Data Protection Officer with whom you can contact in all matters regarding the processing of your personal data and your rights in connection with it. You can write to him or her at the following address: Data Protection Officer, KRUK S.A. Wołowska 8, 51-116 Wrocław, or contact him by e-mail: dpo@kruksa.pl

Why and on what basis do we process your personal data?

We will process your personal data in order to conduct communication and promotion as part of the fanpage and the Administrator's channels on Facebook, YouTube, Instagram and  LinkedIn, in particular: responses to reactions, comments, as well as for statistical and advertising purposes carried out through advertising tools within the indicated websites.

In addition, we may process your personal data in order to present offers and conditions of work / cooperation with the administrator, as well as contact for purposes related to enabling recruitment for individual positions or entering into cooperation.

Processing is carried out on the basis of the  legitimate interest of the administrator (Article 6 (1) (f) of the GDPR), which is to ensure the continuity of business communication, marketing of own products, taking care of the brand image, as well as searching for employees or contractors, investigating and defending against possible claims.

How long do we keep your personal data?

Your personal data is stored until you object or the purposes of processing cease to exist.

For evidential purposes - your personal data may be processed until the expiry of the limitation periods for claims.

To whom may we transfer your personal data?

Your personal data may be made available to entities ensuring the proper operation of websites, persons to whom the administrator directs his marketing content.

Your personal data may be made available to entities supporting our business, such as companies from the capital group, entities providing legal and accounting services, telecommunications operators, entities supporting our IT infrastructure, our consultants or auditors and law enforcement authorities, as well as other authorities and entities, if the obligation to provide personal data results from legal provisions.

In addition, your personal data is shared with Meta Platforms Ireland Limited (*) detailed information below.

Do you need to provide us with your personal data?

Providing personal data is voluntary and takes place through the use of the Administrator's Fanpage.

Profiling and automated decision-making

Your personal data will not be subject to automated decision-making, including profiling.

Transfer of your personal data outside the European Economic Area (EEA)

We use suppliers and partners outside the EEA and therefore it is possible to transfer personal data to countries outside the EEA. Such transfer of personal data may take place on the basis of an adequacy decision or subject to appropriate safeguards, Art. 45, 46 GDPR. Information on adequacy decisions of the EU Commission is available here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

What rights do you have in relation to your personal data and how can you use them?

Your rights are:

• Receive information regarding our processing of your personal data and copies of your personal data (Article 15 GDPR).
• Rectification of personal data when it is incorrect, e.g. outdated or incomplete (Art. 16 GDPR).
• Deletion of your personal data ("right to be forgotten"), in the situations described in Art. 17 GDPR.
• The right to object to the processing of your personal data, but it is only granted if further processing is not necessary for the Administrator to comply with the legal obligation and there are no other overriding legal grounds for processing. (Art. 21 GDPR).
• You have the right to issue a complaint to the supervisory body dealing with the protection of personal data, i.e. the President of the Office for Personal Data Protection (Article 77 of the GDPR).

If you want to exercise the above rights, you can submit your request to us via:

• e-mail to the following address: info@kruksa.pl
• by phone: 800 700 020
• our address: KRUK SA, ul.Wołowska 8, 51-116 Wrocław

(*) Information on joint personal data control with Meta Platforms Ireland Limited

1. The Administrator and Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland) are joint controllers of your personal data in accordance with Article 26 of the GDPR in the scope of personal data processing for statistical and advertising purposes.
2. Co-administration includes collective personal data analysis in order to display statistics of the Administrator's Fanpage users.
3. Responsibilities of Meta Platforms Ireland for the processing of your personal data for the purposes indicated:
   - having a legal basis for processing personal data for website statistics purposes;
   - ensuring the exercise of the rights of personal data subjects;
   - reporting infringements to the supervisory authority and notifying the persons concerned by the infringement of the event;
   - ensuring appropriate technical and organizational measures to ensure the security of your personal data.
4. The scope of the Administrator's responsibility for the processing of your data:
   - having a legal basis for processing personal data for statistical purposes;
   - fulfillment of information obligations in the scope of processing purposes pursued by the Administrator.
5. Meta Platforms Ireland will make the main content of the Page Insights Addendum available to personal data subjects (Art. 26 para. 2 GDPR), through the data contained in the Page Insights Information, which can be accessed from all pages.
6. The lead supervisory authority for joint processing is the Irish Data Protection Commission (notwithstanding Article 55(2) GDPR, where applicable).
7. Detailed information on mutual arrangements between administrators is available at: https://www.facebook.com/legal/terms/page_controller_addendum
8. The rules for the processing of your personal data by Meta Platforms Ireland are available at: https://www.facebook.com/privacy/explanation