Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”), we hereby inform you as follows:
Data controller
The controller of your personal data is Zviropolis sp. z o.o., ul. Bonarka 19/5, 30-415 Kraków (“Zviropolis”).
You may contact Zviropolis by e-mail at info@zviropolis.com or in writing at the address given above.
Purposes and legal bases for the processing of personal data
Your personal data, as a visitor to the Zviropolis Centrum Weterynaryjne fan page on Instagram, will be processed by Zviropolis for the purpose of running the profile (fan page), in particular to inform you, as a Instagram user, about the activities of Zviropolis and to respond to reactions, comments and messages. The processing is carried out on the basis of Article 6(1)(f) GDPR, i.e. the legitimate interest of Zviropolis in providing information and maintaining relationships with Instagram users.
Recipients of data, transfers of data to third countries
In order to provide certain services, Zviropolis cooperates with external service providers. The recipients of personal data may include, in particular, web analytics agencies, as well as IT service providers, legal advisers, law firms and auditors.
At the same time, any personal data contained in comments or reactions posted on the Zviropolis Centrum Weterynaryjne fan page may also be accessible to other Instagram users.
Your personal data provided on Instagram may also be accessible to the administrator of that platform, i.e. Meta Platforms Ireland Limited (address: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), on the terms available at https://help.instagram.com/519522125107875.
Zviropolis does not intend to transfer data to a third country or an international organisation. Please note, however, that Zviropolis has no influence over how Instagram will process your data, or over any transfer of your personal data by Instagram outside the European Economic Area.
It cannot be ruled out that such data will be transferred to Meta Platforms Inc. in the United States. We inform you of this because the Court of Justice of the European Union (CJEU) has found that the United States does not ensure an adequate level of personal data protection (i.e. a level consistent with EU standards). Where data are transferred to the United States, there is a risk that they may be processed by US authorities/agencies for control and surveillance purposes, probably without the possibility of legal redress.
Data retention period
Your personal data will be retained until you object or until the purposes of processing cease to apply.
Data contained in comments may be processed until they are deleted. You may also at any time stop following, liking or commenting on the Zviropolis Centrum Weterynaryjne fan page.
Irrespective of data retention by Zviropolis, Meta Platforms Ireland Limited may apply its own data retention periods.
Rights relating to the processing of personal data
You have the following rights in relation to the processing of your personal data:
a) the right of access to data (Article 15 GDPR),
b) the right to request rectification of your personal data (Article 16 GDPR),
c) the right to request erasure of your personal data (“right to be forgotten”) (Article 17 GDPR),
d) the right to request restriction of processing of your personal data (Article 18 GDPR),
e) the right to object to the processing of data (Article 21 GDPR).
If you consider that we are processing your data unlawfully, you have the right to lodge a complaint with the national supervisory authority responsible for personal data protection, which is currently the President of the Personal Data Protection Office (UODO).
Obligation to provide personal data
Providing data when using the fan page is voluntary. Failure to provide data may prevent you from using certain features (such as the ability to post comments or to contact us by private message on Instagram).
Source of data, categories of personal data concerned
Zviropolis processes identification data (most often first name and surname or a nickname) and other data, including your image (within the scope of the personal data published by the user on his or her Instagram account), the content of comments posted and conversations held, and anonymous statistical data concerning visitors to the fan page.
The data are obtained directly from the data subjects (i.e. you as a user) or from Meta Platforms Ireland Limited.
Profiling
Personal data will not be subject to automated decision-making or profiling.
Joint controllership
Instagram, on the basis of its own terms and policies, may collect and process information contained in the cookies of visitors to the fan page. On the basis of the data so collected, Instagram may produce anonymous reports and statistics (e.g. concerning the number or profile of visitors to the fan page), which may be made available to Zviropolis as the operator of the fan page.
To this extent, Zviropolis and Meta Platforms Ireland Limited are joint controllers of your data pursuant to Article 26 GDPR with regard to the processing of data for statistical purposes.
The core content of the agreement between the joint controllers is provided by Facebook, which, like Instagram, belongs to Meta Platforms Ireland. Detailed information on the mutual arrangements (including information on the purpose of the joint controllership and the respective responsibilities) is available at: https://www.facebook.com/legal/terms/page_controller_addendum
