Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (“RODO”), we would like to inform you:
Data controller
The controller of your personal data is Zviropolis sp. z o.o., Bonarka 19/5, 30-415 Kraków (“Zviropolis”).
You may contact Zviropolis by email at info@zviropolis.com or in writing at the address indicated above.
Purposes and grounds for processing personal data
Your personal data, as a visitor of the fan page of the Zviropolis Veterinary Center on Instagram, will be processed by Zviropolis for the purpose of maintaining the profile (fan page), in particular, to inform you as an Instagram user about the activities of Zviropolis and to respond to reactions, comments and messages. The processing is based on Article 6(1)(f) RODO, i.e., the legitimate interest of Zviropolis to provide information and take care of the relationship with Instagram users.
Recipients of data, transfer of data to third countries
In order to provide certain services, Zviropolis cooperates with third-party service providers. In particular, the recipients of personal data may be web analytics agencies, as well as IT service providers and legal advisers, law firms, and auditors.
At the same time, any personal data contained in the comments or reactions posted on the page of the Zviropolis Veterinary Center may also be available to other Instagram users.
Your personal data provided on Instagram may also be available to the administrator of this portal – i.e. Meta Platforms Ireland Limited (address: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland) under the terms and conditions available at https://help.instagram.com/519522125107875.
Zviropolis does not intend to transfer data to third countries or international organizations. However, please note that Zviropolis has no control over how Instagram will process your data, as well as over the possible transfer of your personal data by Instagram outside the European Economic Area.
It cannot be ruled out that your data will be transferred to Meta Platforms Inc. in the United States. We are informing you about this because the Court of Justice of the European Union (CJEU) has recognized that the United States does not provide an adequate level of personal data protection (i.e., one that meets EU standards). If you transfer your data to the United States, there is a risk that your data may be processed by U.S. authorities/services for control and surveillance purposes, possibly without recourse.
Data retention period
Your personal data will be stored until you object or until the purposes of processing cease to exist.
Data contained in comments may be processed until they are deleted. You can also always opt out of following, liking or commenting on the page of the Zviropolis Veterinary Center.
Notwithstanding the storage of data by Zviropolis, Meta Platforms Ireland Limited may apply its own data retention periods.
Rights regarding data transfer
You have the following rights regarding the processing of your personal data:
a. the right to access your data (Article 15 RODO),
b. the right to request rectification of your personal data (Article 16 of the GDPR)
c. the right to request the erasure of your personal data (“right to be forgotten”) (Article 17 of the GDPR),
d. the right to request the restriction of processing of your personal data (Article 18 of the GDPR)
e. the right to object to processing (Article 21 of the GDPR).
If you believe that we are processing your data unlawfully, you have the right to lodge a complaint with the national supervisory authority for personal data protection, which is currently the President of the Office for Personal Data Protection.
Obligation to provide personal data
Providing data as part of the use of the fan page is voluntary. Failure to provide data may prevent the use of certain functionalities (e.g. the ability to post comments or contact via private message on Instagram).
Data source, categories of personal data
Zviropolis processes identification data (most often first and last name or nickname) and other data, including images (within the scope of personal data published by the user on the Instagram account belonging to him/her), the content of posted comments and conversations, anonymous statistics relating to the visitors of the fan page.
The data source is the data subjects themselves (i.e. you as a user) or Meta Platforms Ireland Limited.
Profiling
Personal data is not subject to automated decision-making or profiling.
Data sharing
Instagram, in accordance with its own terms and conditions, may collect and process information contained in the cookies of visitors to the Fan Page. Based on the data collected in this way, Instagram may create anonymous statements and statistics (e.g. regarding the number or profile of the visitors of the Fan Page), which may be available to Zviropolis as the operator of the Fan Page.
In this regard, Zviropolis and Meta Platforms Ireland Limited are joint controllers of your data in accordance with Article 26 of the DPA regarding the processing of data for statistical purposes.
The core content of the agreement between the joint controllers is provided by Facebook, which, like Instagram, is owned by Meta Platforms Ireland. Detailed information on reciprocity (including information on the purpose of the joint administration, responsibilities) is available at the following link: https://www.facebook.com/legal/terms/page_controller_addendum
