Privacy Policy

Social Media

Privacy Policy for users of the Defro corporate profiles listed below on social media platforms

https://www.facebook.com/DefroHome
https://www.facebook.com/defroheat
https://www.facebook.com/DefroGarden
https://www.youtube.com/@defroheat
https://www.tiktok.com/@defroheat
https://www.instagram.com/defrohome/
https://www.instagram.com/defroheat/
https://www.instagram.com/defroair/
https://www.instagram.com/defrogarden/
https://pl.pinterest.com/defrohome/
https://www.linkedin.com/company/defro/
https://twitter.com/DEFRO12

This Privacy Policy sets out the rules for collecting, processing and using data, including personal data, obtained in connection with the operation of corporate profiles on social media platforms: Facebook, YouTube, TikTok, Instagram, Pinterest, LinkedIn, and X, at the internet addresses listed above.

We have prepared this Privacy Policy to help you understand the purpose of maintaining our profiles, what data we collect, and how and for what purposes we process such data. Guided by the principle of respecting privacy and protecting information containing Users’ personal data, we kindly ask you to familiarize yourself with the information provided below.

At the same time, we inform you that the controllers of personal data of users of the following services are:

  1. Facebook together with supporting applications (e.g. Messenger) and Instagram – Meta Platforms Ireland Limited, with its registered office at Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

2) YouTube is:
a) Google Ireland Limited – for users of Google services in the European Economic Area and Switzerland – with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.
b) Google LLC – for users of Google services in the United Kingdom – with its registered office at 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.
Google LLC is the data controller responsible for processing information indexed and displayed in services such as Google Search or Google Maps, regardless of the user’s location.

3) TikTok is: if the user resides in the European Economic Area (“EEA”), the United Kingdom (“UK”) or Switzerland – TikTok Technology Limited (an Irish company) and TikTok Information Technologies UK Limited (a UK company). These entities act as joint controllers of all personal data processed by the Platform.

4) Pinterest – if the user resides in the EEA, Switzerland or the United Kingdom, the controllers of personal data are Pinterest Europe Ltd. and Pinterest, Inc. Pinterest Europe Ltd. is an Irish company with its registered office at Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. Pinterest, Inc. is a U.S. company with its registered office at 651 Brannan St., San Francisco, CA 94107, USA. Pinterest Europe Ltd. is the controller responsible for fulfilling key obligations under the GDPR.

5) LinkedIn – if the user resides in the EEA, Switzerland or the United Kingdom, the controller of personal data is LinkedIn Ireland Unlimited Company, with its registered office at Wilton Plaza, Wilton Place, Dublin 2, Ireland.

6) X – if the user resides in a country belonging to the European Union,
    a country belonging to EFTA or in the United Kingdom,
    the controller of personal data is Twitter International
    Unlimited Company
, with its registered office at: Twitter International
    Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2,
    D02 AX07 Ireland.

Please familiarize yourself with information on the processing of personal data by the above platforms/services available at the following links:

  1. Meta Platforms Ireland Limited
  2. Google
  3. TikTok
  4. Pinterest
  5. LinkedIn
  6. X (formerly Twitter)

Controller of personal data obtained through Defro, DefroAir, DefroHome, DefroHeat, DefroGarden profiles/accounts

The controller of personal data of users of corporate profiles operated on the above-mentioned social media platforms is
DEFRO R. Dziubeła Spółka komandytowa with its registered office in Ruda Strawczyńska
103 A, 26-067 Strawczyn, NIP 9591968493 – hereinafter referred to as Defro.

In all matters related to the processing of your personal data, you may contact us by post at the address indicated above, as well as by sending correspondence by e-mail to the Data Protection Officer (DPO) appointed in our company – iod@defro.pl

Purposes of personal data processing:

We use users’ personal data exclusively for the purposes of:

  1. responding to submitted inquiries and maintaining relationships with other users of social media platforms/services;
  2. enabling users to receive personalized information (including marketing information), in particular information about promotions or products and services of the Controller;
  3. marketing of products and services provided by Defro;
  4. statistical and analytical purposes related to analyzing users’ reactions to marketing activities carried out via social media platforms/services, e.g. analyzing visits, likes, comments, etc.

Legal bases for processing personal data:

We process data exclusively on the basis of specific legal grounds. These may include:

  1. the legitimate interest of the Controller, relating to marketing of Defro’s products and services conducted via the Platforms, communication with other users arising from the relationship between the parties, and the preparation of statistical summaries;
  2. performance of a contract binding the Parties, which may arise from correspondence conducted via platform profiles or related applications;
  3. the User’s consent, with regard to the delivery of personalized information concerning the relationship between the Parties, resulting from data provided by the User to the Controller other than the data indicated below.

Scope of processed personal data:

We may collect and process personal data of users provided
within their social media profile or provided during correspondence. This includes:

– e-mail address
– first name(s) and last name
– residential address
– telephone number
– profile photo
– gender
– date of birth
– other data provided to Defro during visits to our profile,
  resulting from likes, comments, content, etc.

Obligation to provide personal data

Providing personal data is voluntary; however, failure to provide data may result in the inability to achieve certain processing purposes. For example, when contacting us to obtain a personalized offer, we may request data necessary to prepare such an offer, or when exercising your rights, in order to identify you in the system.

Personal data retention period

We process personal data only for the time necessary to achieve the purpose for which it was collected, but no longer than for the duration of maintaining the profile or until an effective objection is raised against the processing of personal data based on our legitimate interest. Where the data constitutes an element of a contract between the User and the Controller or forms the basis for consideration of the User’s rights, data will be processed for up to 3 years with regard to the limitation period for claims arising from the relationship between the Parties. Where processing is based on consent, data will be processed until the consent is withdrawn (only with respect to data processed on the basis of consent), but no longer than until the purpose of collection has been fulfilled.

Disclosure of data to third parties

We do not disclose personal data to companies, organizations or individuals outside Defro unless one of the following circumstances occurs:

  • The User has given consent for such disclosure;
  • The recipient is the entity managing the Platform or providing another service on behalf of the Controller;
  • There are legal grounds obliging the Controller to disclose personal data.

User rights in relation to Defro

As the controller of your data, we ensure your right to access your data; you may also rectify it, request its erasure or restriction of its processing. You may also exercise the right to object to the processing of your data by the Controller. If you have given voluntary consent, you have the right to withdraw consent to data processing at any time, which does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. You also have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that your rights have been violated.

Final provisions:

This Privacy Policy enters into force on 02.11.2023 and may be amended from time to time. Any changes to the Privacy Policy will be published on this page, and significant changes will be communicated in this section. We will also retain previous versions of this Privacy Policy in an archive to allow users to review them.