Information clause for users of the website and services of social networking sites
Indication of the Controller
The Controller of your personal data is one of the MDD Group companies:
- .mdd Sp. z o.o. (Ltd.), registered office in Sępólno Krajeńskie, Poland, at (89-400), ul. Koronowska 22, KRS (National Court Register): 0000097731, NIP (Taxpayer Identification Number): 5611437378, REGON (National Official Business Register): 092911632,
- DIRECT DIGITAL Sp. z o.o. (Ltd.), registered office in Bydgoszcz, Poland, at (85-023), ul. Toruńska 33, KRS: 0000915881, NIP: 9532784828, REGON: 389662490;
as communicated by each controller in the summary version of the information obligation made available pursuant to Article 13.1 and Article 14.3 Polish RODO in direct or indirect communication.
The companies .mdd Sp. z o.o. and DIRECT DIGITAL Sp. z o.o. - acting as Joint Controllers, jointly determine the purposes and means of processing personal data in the processing of data on the mdd.eu website and other stand-alone pages dedicated to actions and events organised by these companies and social networking services.
In fulfilment of the obligation set out in the provision of Article 26(2) Polish RODO, the main content of the arrangements between the Joint Administrators is contained in the General Privacy Policy at www.mdd.eu www.mdd.eu
Would you like to notify us of a breach of protection of your personal data, send us a request regarding your rights as a data subject? Do you have questions or concerns about the protection of your personal data? Contact our Data Protection Officer directly at the following email address: iod@mdd.pl
Purposes of data processing and legal basis
- Establishing communication and maintaining a relationship with the Service User or through social media services - processing is necessary for the administrator's legitimate interests of maintaining communication with potential customers and supporters of the .mdd brand (Article 6(1)(f) Polish RODO).
- Pursuing and protecting against claims - processing is necessary for the legitimate interests of the administrator (Article 6(1)(f) of the Polish RODO).
- Marketing of the Administrator's own services, when the processing is necessary for the purposes of the Administrator's legitimate interests (Article 6(1)(f) Polish RODO), and in the case of implementation through a designated communication channel [phone, e-mail], on the basis of the consent granted in this regard (Article 6(1)(f) ) Polish RODO in connection with Article 10(1)-(2) Polish Law on Provision of Electronic Services or Article 172(1) Polish Telecommunications Act).
- Marketing of the Administrator's own services may be preceded by profiling, understood as the automated tailoring of the content provided according to the interests or needs of the customer, when the processing is necessary for the purposes of the Administrator's legitimate interests (Article 6(1)(f) Polish RODO) and in the case of profiling that materially affects your decisions, only if you have given your consent.
- Customization of the Website's functionality to the individual needs of Users, including through the use of mechanisms to monitor activity while using the website - on the basis of the administrator's legitimate interest and your consent (Article 6 (1)(a) and (f) Polish RODO).
Duration of data processing
- Your personal data will be processed for the period during which you remain an active user of the website and after that time for the period necessary to comply with the law, investigate or defend against possible claims, but no longer than 6 years.
- Your personal data processed in the services of social media:
- data collected in private messages - for the time necessary to answer your questions or until the termination of cooperation;
- data contained in the comments under the selected publication - will be available until removed by the author of the publication or entry;
- personal data collected by social media platforms, i.e. history of posts, history of activity - are subject to retention under the terms of the rules of these sites;
- statistical data on visitors to the .mdd fanpage will be processed for the duration of the availability of such data in the services of the social media platform.
- Data processed for the purpose of sending marketing information will be processed until the withdrawal of the consent given, with the proviso that the withdrawal of this consent does not affect the compliance of the data processing carried out before such withdrawal.
Transfer of personal data
Personal data will be shared by the Joint Administrators only with trusted entities, such as companies providing and operating selected IT systems and solutions, providers of accounting, legal, postal and courier services.
Your data may be shared with entities providing IT support services to us for running profiles on social media services.
Your personal data will be shared with the owner of the social network on which you interact with one of the Joint Administrators, in particular:
- Facebook – profile @mddofficefurniture and Instagram – profile @mdd_office under the terms and conditions available at https://www.facebook.com/privacy/policy/version/6218528774917551?locale=pl_PL
- Pinterest – profile @mddoffice zunder the terms and conditions available at https://help.pinterest.com/pl/article/your-privacy-and-data-settings
- Linkedin - profile @.mdd under the terms and conditions available at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footerprivacy-policy
- Youtube – profile @mddofficefurniture1310 under the terms and conditions available at https://support.google.com/youtube/answer/10364219?hl=pl
In this area of processing your data, the Joint Controllers and the owners of the social networks remain Joint Controllers. Each of the aforementioned Joint Controllers independently decides on the purposes and means of data processing, but to a different extent. The companies are only responsible to the extent of the personal data they process.
The .mdd Sp. z o.o. and DIRECT DIGITAL Sp. z o.o. are solely responsible for the personal data they process
As a general rule, personal data will not be transferred outside the EEA or made available to international organisations. However, where the controller uses service providers from outside the EEA that have not been recognised by the European Commission as providing an adequate level of protection for personal data, transfers of personal data to the above-mentioned entities shall be made on the basis of standard data protection clauses adopted by the European Commission, thus subject to adequate safeguards for the protection of the privacy and rights and freedoms of the data subjects. A copy of the standard contractual clauses can be obtained from the controller.
Your rights
Concerning our processing of your personal data, you have the right to:
- request access to your personal data,
- request the rectification of your personal data,
- request the erasure or restriction of the processing of your personal data,
- object to the processing of your data,
- complain to the supervisory authority, which in Poland is the President of the Office for Personal Data Protection.
You may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
You may exercise your rights by sending the appropriate instruction by post to the Administrator's registered office address or by e-mail to: iod@mdd.pl
Other information
Provision of data is voluntary, but necessary to use the functionality of the website and profile on social networks.
The processing of data in the marketing of our own services may be preceded by profiling, understood as the automated adjustment of the content provided according to your interests or needs. If profiling materially affects your decisions, the mechanism is started after you have given your consent.