Privacy Policy for our Social Media Profiles
 |
Privacy Policy for our Social Media Profiles |
Version 2.0 updated July 05, 2021
In addition to our website, we maintain publicly accessible profiles on social media platforms such as Facebook. In the following segment we would like to inform you about handling of your personal data when you visit our profiles.
Who is the data controller?
A data controller is an organisation that collects and uses personal data and decides how that personal data is used and managed.
If you visit one of our social media profile pages (e.g. Facebook), we
Kontri Ltd.
49 Hevea Road
Burton-on-Trent DE13 0SH
United Kingdom
Email: privacy@kontri.co.uk
(+44) 20 3129 1615
are partially responsible for the data collection and processing described below.
In addition, the respective operators of the social media platforms are partly responsible for data processing as well.
For certain types of processing, we and the platform operator also act as joint controllers, within the meaning of Art. 26 GDPR. Please see below, in the section related to particular social media platform for more information.
In most instances, we cannot influence data processing performed by the operator of the social media platform and we do not know exactly which data they process. The platform operator operates the entire IT infrastructure of the service, maintains its own data protection regulations and has its own user relationship with you.
We are registered with the Information Commissioner's Office (ICO): registration number ZA903038
Our EU representative pursuant to art. 27 GDPR is:
Kontri Sp. z o.o. address: Jacka Kuronia 3, 15-569 Bialystok, Poland, email: rodo@kontri.pl
Data processing through social media platforms
When you visit our social media profile page, certain information about you is processed. If you have your own user account in the social media platform and are logged in to this account, all data related to your visit will be assigned directly to your existing account.
Social media platforms can generally analyse your user behaviour comprehensively, when you visit social media profiles or websites with integrated social media plugins (e.g. “like” buttons or advertising banners). They store data collected about you as user profiles and can use them for advertising and market research purposes.
Under certain circumstances, your personal data can also be recorded if you are not logged into your social media account or do not have one at all. In this case, data is collected mainly via cookies that are stored on your end device or by recording your IP address.
When you visit our social media profile page, we process your actions and interactions with our social media profile page (e.g. the content of your messages, inquiries, posts or comments that you send to us or if you like or share our posts), as well as, your publicly visible profile data (e.g. name of your social profile and your profile picture). Which personal data from your profile is publicly viewable depends on your profile settings, which you can adjust yourself in your settings on the social media platform.
The purpose of data processing by us on our social media profile pages is to inform customers about our offers, products, campaigns, promotions, company news and to interact with visitors to those social media profiles, as well as to answer corresponding questions, praise or criticism. The legal basis for processing by us is to fulfil our legitimate interests.
If your contact with us is aimed at the conclusion of a contract (for example, placing an order in our online store) or relates to an existing contract with us, then processing of your personal data is to perform our contract with you or for any pre-contractual obligations.
From time to time we also offer participation in promotions such us contests, completions etc. on our social media profile pages. Unless specified otherwise in the data protection section of respective promotion or you have not given us further express consent, personal data you provide us in the course of participating in our promotion will only be used to administer the promotion (e.g. determine the winner, winner notification, sending the prize). If your social media account is under a real name or you are recognizable on photos in your profile, identification by other users of the social media platform cannot be ruled out.
We process your data related to your participation in our promotions as part of our contract obligation with you. We will only share your data with relevant third parties to assist in management and fulfilment of our promotions. If you have given your consent in the course of our promotion, you have the right to withdraw your consent at any time with future effect. The data categories related to administering of a promotion are as follows: social profile name (if your social media account is under a real name than your name and last name), contents of your entry.For winners, first and last name, email address, delivery address, phone number.
Data processing by social media platforms may be based on different legal bases that have to be specified by the operators of the social media platforms.
Social media platforms in detail
We have profiles on:
1) Facebook
For more details, see Facebook's privacy policy: https://www.facebook.com/about/privacy/
Transmission and further processing of visitor’s personal data to third countries, such as the USA, cannot be excluded by us as the operator of the site.
You can contact Facebook's data protection officer using the online contact form provided by Facebook at https://www.facebook.com/help/contact/540977946302970.
- Data processing for statistical and marketing purposes
Facebook provides us with a tool called Page Insights https://www.facebook.com/business/a/page/page-insights . This is summarized data, through which we can obtain information about how people interact with our site. Page insights can be based on personal data that is collected in connection with a visit or an interaction on or with our site and its content. These statistics are generated and provided by Facebook. We have no influence on its generation and display. We cannot turn off this function and cannot prevent generation and processing of this data.
The data that Facebook makes available to us helps us, among other things: to get in touch with our followers and interested parties, to understand the use and scope of our posts, to evaluate content and to identify user preferences. This data processing takes place on the basis of our legitimate interests.
You can object to the processing of your data for the aforementioned purposes at any time by changing your settings for advertisements in your Facebook user account at https://www.facebook.com/settings?tab=ads .
According to “Page Insights Controller Addendum” to the existing contractual agreement with Facebook, Facebook Ireland assumes the responsibility for compliance with the applicable obligations under the GDPR for the processing of Insights Data (including, but not limited to, Articles 12 and 13 GDPR, Articles 15 to 21 GDPR, Articles 33 and 34 GDPR). Page Insights Controller Addendum can be viewed at https://www.facebook.com/legal/terms/page_controller_addendum.
2) Instagram
For more details, see Instagram’s privacy policy: https://help.instagram.com/519522125107875
Transmission and further processing of visitor’s personal data to third countries, such as the USA, cannot be excluded by us as the operator of the site.
You can contact Facebook's data protection officer using the online contact form provided by Facebook at https://www.facebook.com/help/contact/540977946302970.
3) Pinterest
For more details, see Pinterest’s privacy policy: https://policy.pinterest.com/en-gb/privacy-policy
Transmission and further processing of visitor’s personal data to third countries, such as the USA, cannot be excluded by us as the operator of the site.
You can contact Pinterest’s data protection officer using the online contact form provided at https://help.pinterest.com/en/data-protection-officer-contact-form
4) Twitter
For more details, see Twitter’s privacy policy: https://twitter.com/en/privacy
Transmission and further processing of visitor’s personal data to third countries, such as the USA, cannot be excluded by us as the operator of the site.
You can contact Twitter’s data protection officer using the online contact form provided at https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp
5) TikTok
For more details, see Tiktok’s privacy policy: https://www.tiktok.com/legal/privacy-policy
Transmission and further processing of visitor’s personal data to third countries, such as the USA, cannot be excluded by us as the operator of the site.
You can contact the TikTok data protection officer using the online contact form provided at https://www.tiktok.com/legal/report/privacy?lang=en
6) Tumblr
For more details, see Tumblr's privacy policy: https://www.tumblr.com/privacy
Transmission and further processing of visitor’s personal data to third countries, such as the USA, cannot be excluded by us as the operator of the site.
You can contact the TikTok regadring your privacy at https://www.tumblr.com/support
Your rights
You can exercise your rights in principle both with us, as well as, with the operator of the respective social media platform (e.g. Facebook).
If you would like to exercise your data subject rights with regard to a particular data processing over which we have an influence, please contact us. We then check your request (e.g. request for information or objection) ourselves or forward it to the responsible social media platform if required, provided that your request involves data processing by the operator of the social media platform.
You have the following rights towards us with regard to your personal data:
• Right to be informed about collection and use of your personal data.
• Right to access personal data we hold about you. This is known as a Subject Access Request.
• Right to correct your personal data when incorrect or incomplete.
• Right to withdraw your consent at any time.
• Right, under certain circumstances, to object to processing of your personal data (for example when we are processing your data for the purpose of our legitimate interest).
• Right, under certain circumstances, to restrict processing of your personal data (in this case we will not process your data for any other purpose than storage).
• Right under certain circumstances, to have your personal data erased, where we no longer have any legal reason to retain them.
• Right to request that we provide to you your personal data in a commonly used format, and if technically possible, that we transfer them to another data controller. This is applicable provided that your data is processed by automated means and that processing is based on your consent, on a contract which you are a part of or on pre-contractual obligations.
• You also have the right to make a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. In the UK this role is performed by the Information Commissioner Office https://ico.org.uk/
More about your right to object
You may object to processing of your personal data when:
• they are processed for the purpose of direct marketing, you can object at any time without providing any justification;
• they are processed under the following purposes: legitimate interest or statistical purpose; you must provide a specific reason and tell us why you are objecting to processing of your data (your grounds should be related to your particular situation).
Storage period
We will keep your personal information for the purposes set out in this privacy policy and in accordance with the law and relevant regulations. The length of time we need to keep the personal data will vary depending on the nature of the personal data and the reason we are need to hold it. If reasonably necessary or required to meet legal or regulatory requirements, prevent fraud, resolve disputes, we may keep hold of some of your information for longer than our general retention policy.
We have no influence on storage period of your data, which are saved by the operators of social media platforms for their own purposes. For details, please contact the operator of the social media platform directly.
All public posts by you on our social media profile pages remain in the timeline indefinitely, unless we delete them due to an update of the topic, a violation of the law or a violation of our guidelines, or you delete the post yourself.
Changes to this privacy policy
We reserve the right to update and change this Privacy Policy from time to time, to reflect any changes in legal requirements or the way we process your personal data. Please check back frequently to see any.