Privacy Policy of the Winderen Facebook fan page

Personal data processing

We process your personal data when you use our Facebook fanpage:

1. in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “the GDPR”,
2. in accordance with the rules specified in this document, hereinafter referred to as “the Privacy Policy”, applicable from 06 April 2022.

The Controller

We are responsible for the purpose and manner of our use of your personal data. The entity responsible (hereinafter referred to as “the Controller”) for personal data processing is:

Winderen Sp. z o.o.
ul. Młyńska 27, 22-400 Zamość
Poland
Tel. no. +48 (84) 538 75 84

Contact details for matters connected with personal data

In the matters connected with personal data processing you can contact us using the following details:

Winderen Sp. z o.o.
ul. Młyńska 27, 22-400 Zamość
Poland
[email protected]

Source of personal data

We have obtained your personal data:

1. automatically from Facebook, which is managed by Meta Platforms Ireland Limited - Basic data and statistics available at Meta Business Suite;
2. directly from you – in messages (posts), comments, chat or other correspondence exchanged via Facebook Facebook.

Information Technology used on our fanpage

We process statistics using tools provided by Facebook (e.g. Meta Business Suite), which work on the basis of "cookies", i.e. small files stored in the memory of your web browser(more). Facebook tools analyse user visits to our fanpage and collectively provide us with audience statistics including page likes, age, gender, most popular cities and countries, location, interests (more). This allows us to have more relevant advertisements displayed on Facebook.
Facebook processes your data in the manner described here.

Purpose and legal basis of the processing

We gather personal data for specific, clear and legitimate purposes and we do not process them further beyond these purposes. We process your personal data for the following purposes and on the following legal basis:

1. sharing the Facebook fan page, including sharing texts, photos (and other materials), information on our activities, events, products and services, maintaining a community connected with us and communicating with them, sharing the channel for communicating with us – execution of the contract for the provision of electronically supplied services;
2. making it possible to pursue or defend any claims – our legitimate interest;
3. measurements and statistics regarding the users of our fan page – our legitimate interest;
4. conducting marketing activities, including displaying advertisements (only if you are over 16) - our legitimate interest.

Categories of personal data

If you use our Facebook fan page, we process your Basic Data, i.e. Full name (nickname), profile picture (avatar), which you have previously provided to Facebook and which they provide to us. These data may be also used for defending against your claims or pursuing our claims. For the purpose of taking measurements and gathering statistics, managing advertisements and conducting marketing activities, we process Target Group Statistics, using tools provided by Facebook, described in more detail in section 5.

Please do not provide us in any way with any data that qualifies as a special category of personal data (i.e. personal data revealing ethnic or racial origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data relating to health, sexuality or sexual orientation and criminal record), personal data regarding criminal convictions or any other data beyond the data categories listed above. Making such data available to us will be understood as your express consent to our processing of these data. As we do not have any basis for their processing, we reserve the right to delete them upon their detection, according to the principle of data minimisation.

All personal data are processed in accordance with the principles of: accountability, transparency, correctness, accuracy, integrity and confidentiality.

Recipient categories

The joint controller of your personal data is the owner of Facebook, i.e. Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, that processes them as described here.

We entrust the processing of your personal data to partners (persons or entities) only in cases justified by the execution of a contract, legal obligation, our legitimate interest or with your express consent. Every partner receives only as much data as necessary for fulfilling a given purpose of the processing.

We entrust the processing of your personal data to the following processing entities:

1. IT service providers (entities which operate our information systems or provide us with technical support services, entities which provide data communication tools, including statistical and marketing tools, telecommunications operators, cloud service providers) - such as Google Ireland Limited, Apple Distribution International Limited in Ireland, Microsoft Ireland Operations Limited;
2. agencies (advertising and marketing agencies, entities intermediating in the organisation of marketing activities) – e.g. advertising and promotional campaigns, organisation of events and training;
3. subcontractors (e.g. our advisers, consultants, auditors, legal, tax, accounting assistance, tax representatives) for the purpose of subcontracting certain services and certain work.

Some of the data may be transferred to third countries (outside of the European Economic Area), due to the location of Facebook’s data processing centres. In such cases, data is transferred to the United States of America and possibly other countries based on:

1. the legal mechanisms and standard contractual clauses used by Facebook to ensure adequate protection of your data when it is transferred outside the EEA;
2. a finding by the European Commission that third countries ensure an adequate level of protection of personal data;
3. the so-called Privacy Shield standard.

Period of data processing

Your personal data will be processed for a period not longer than necessary for the purposes of the processing, i.e.:

1. making the fan page available – for the period during which you follow our fan page;
2. defending or pursuing any potential claims – typically 10 years;
3. measurements and statistics – up to two years from the last visit on our fan page;
4. conducting marketing activities - up to a maximum of 180 days from the date of the objection.

If your personal data are used as evidence in legal proceedings, they may be stored for longer than indicated above, until the legal conclusion of those proceedings.

Your rights

According to the GDPR, you have the right to the protection of your personal data, especially you have the right to:

1. Make a request to the Controller to provide you with access to your personal data;
2. rectification of your personal data;
3. delete your personal data;
4. restrict the processing of your personal data;
5. object to the processing of your personal data;
6. transfer your personal data;
7. withdraw your consent to the processing of your personal data at any time;
8. lodge a complaint with a supervisory authority – the President of the Personal Data Protection Office;

You have the right to choose how we process your data, you can:

1. unsubscribe from our profile;
2. use the tools that allow you to choose your advertising and privacy settings: Facebook Ads Settings, Digital Advertising Alliance, European Interactive Digital Advertising Alliance
3. block cookies in your Internet browser and thus block the Information Technologies that use them. However, please note that if you block all cookies in your browser, this may limit the functionality of our fanpage and other websites;
4. delete already stored cookies. If you do not know how to do it, use the support tab in your web browser.

You can also exercise your rights by contacting us as described in section 3.

Amendments to the Privacy Policy

We reserve the right to amend the Privacy Policy without stating reasons at any time. The amendments referred to above do not limit the rights acquired before the amendments enter into force.