Facebook information clause

Dear Sir/Madam,
Due to the fact that from 25 May 2018 the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”) have been applicable throughout the European Union, we would like to provide you with information about the processing of personal data by us, as well as about your rights with respect to this.

The data controller with respect to your personal data collected in connection with your activity on the Facebook profile of ERGO Technology & Services S.A. (hereinafter referred to as: “ET&S fan page” or “our fan page”) is ERGO Technology & Services S.A. with its registered office in Gdańs, ul. Droszyńskiego 24, 80-381 Gdańsk (hereinafter: “Controller” or “we”). In matters related to the processing of your personal data, please email the Data Protection Officer appointed by the Controller at: dpo.ets@ergo.com

We hereby wish to inform you that we process the personal data of persons who:

• have subscribed to our fan page by clicking on the “Like” or “Follow” icon,
• have posted a comment under any of the posts published on the ET&S fan page,
• or have responded to its publication by clicking on one of the active icons under the post;
• have contacted us in connection with the use of the ET&S fan page via Facebook's functionalities (chat, messenger);
• have visited the ET&S fan page, regardless of whether the user has a Facebook account or not.

Your personal data processed by us are data which come directly from you. These include:

• identification data (first name and last name) to the extent published by you on your own Facebook profile;
• data published by you on our fan page;
• anonymous information about visitors to our fan page for statistical purposes, available via the “Facebook Insights” function provided free of charge by Facebook under its non-negotiable Terms of Service. These data are collected through spying files, otherwise known as “cookies”, each of which contains a unique user code. The user code can be linked to the connection data of users registered on Facebook, and it is downloaded and processed when you open our fan page.

Your personal data are processed for the following purposes:

• to operate a fan page of Ergo Technology & Services S.A. on Facebook social networking site, subject to the terms and conditions set out by Facebook Ireland Ltd., in order to inform users and visitors about our business and activities, promote our brand and events which we may organise and in which we may participate, promote our products and services, build and maintain an ATENA community, and communicate through the tools and functionalities available and offered on Facebook (comments, chat, messenger), which is our legitimate interest – for the duration of the legitimate interest or until an objection has been successfully submitted (basis: Article 6(1)(f) of GDPR);
• for statistical and analytical purposes related to the functioning, popularity and use of the fan page, which is our legitimate interest – for the period of availability of those data on Facebook, which is 2 years (basis: Article 6(1)(f) of GDPR);
• establishment, investigation or defence against claims, which is our legitimate interest – data will be processed for a period equal to the period of limitation for such claims (basis: Article 6(1)(f) of GDPR);
• your personal data may be processed on the basis of your voluntary consent, to the extent and for the purpose indicated in the wording of the consent, throughout its duration until the consent is withdrawn (basis: Article 6(1)(a) of GDPR).

The Controller makes your personal data available to:

• the owner of Facebook social media portal under its non-negotiable Terms of Service available at https://www.facebook.com/about/privacy;
• employees and associates of the Controller, in particular entities which support the Controller in its activities, including IT, telecom, marketing, audit, legal and other service providers which process personal data on behalf of the Controller on the basis of a personal data processing contract signed with the Controller;
• public authorities and entities performing public tasks, or acting on behalf of public authorities, to the extent and for the purposes resulting from the provisions of generally applicable law.

The Controller makes your personal data available to:

• the owner of Facebook social media portal under its non-negotiable Terms of Service available at https://www.facebook.com/about/privacy;
• employees and associates of the Controller, in particular entities which support the Controller in its activities, including IT, telecom, marketing, audit, legal and other service providers which process personal data on behalf of the Controller on the basis of a personal data processing contract signed with the Controller;
• public authorities and entities performing public tasks, or acting on behalf of public authorities, to the extent and for the purposes resulting from the provisions of generally applicable law.

You have the right to obtain access to your personal data, the right to rectification and erasure, the right to restriction of processing, the right to data portability, and the right to object to the processing of your personal data (where the Controller processes data under Article 6(1)(f) of GDPR). If the processing is based on your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing which took place on the basis of the consent before its withdrawal. To exercise those rights, please contact the Controller's Data Protection Officer. You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-913 Warsaw, if you believe that the Controller violates your personal data protection rights.

We obtain your data from Facebook and directly from you – those data are provided by you voluntarily, although failure to provide them may result in inability to use our fan page or some of its functionalities.

The Controller will not make any decisions about you in an automated manner, including as a result of profiling, which produces legal effects concerning you or similarly significantly affecting you.