Privacy Notice for DGS Poland Sp. z o.o. (Demant Group) and DGS Business Services Sp. z o.o. (Demant Group) processing of personal data on social media platforms
1. INTRODUCTION
At Demant Operations Poland Sp. z o. o. and Demant Business Services Poland Sp. z o. o. we respect and protect the privacy of our users, and we are dedicated to being transparent regarding the use of your personal data.
This Privacy policy ("Policy") explains how indicated companies process your personal data as a data controller by use of different social media platforms, such as Facebook, YouTube and LinkedIn.
In this Policy, "we", "us" and "our" mean Demant Operations Poland Sp. z o. o. and Demant Business Services Poland Sp. z o. o. We may update this Policy from time to time, so please check back when you use our services to make sure that you have seen the most recent version.
2. WHO WE ARE
If you have any questions about this Policy, or you would like to exercise your rights, you can contact us by using the contact points below.
Demant Operations Poland Sp. z o. o.
Lubieszyńska 59 Street
72-006 Mierzyn
Demant Business Services Poland Sp. z o. o.
Malczewskiego 26 Street
71-612 Szczecin
E-mail: privacy@demant.com
3. PERSONAL DATA WE COLLECT AND USE
We may process the following types of personal data:
- Your name, email, age, gender, country, job title, current and former employer, education background, profile picture, interests, your friend list/connections/followers etc., and other publicly available information, provided that you have published all this information on your social media profile or posted it on one of our social media pages.
- Other information you provide to us by posting on our social media pages, including your comments and/or likes to our posts and pictures or direct messages you send to us via social media platforms.
In addition to the above, the different social media platforms collect personal data concerning you through your use of these social media platforms and through the use of cookies and similar technologies, including cookies collected via the social media tools, such as Facebook Insights, Facebook Pixel, Facebook Custom Audience, Facebook Lookalike Audience, LinkedIn Insight Tag and LinkedIn sponsored InMail, etc.
In some cases, for instance, in relation to our Facebook page, we are joint controllers together with Facebook in relation to the processing of your personal data. Thus, we recommend that you read Facebook's privacy notice to understand how Facebook processes your personal data.
We generally refer to the different social media platforms' privacy notices for more information about their processing of your personal data. Below you will find a listing of the social media platforms we use and a reference to their privacy notices.
4. WHY DO WE COLLECT AND USE YOUR PERSONAL DATA AND WHAT IS OUR LEGAL BASIS FOR DOING SO
We use your personal data for the following purposes:
- To understand the audience of our social media channels by getting to know the demographic, preferences and interests which enables us to provide relevant information.
- To analyse trends and profiles to enhance, modify, personalise and improve our services and communications for the benefit of our audience.
- To process and respond to requests and enquiries received from you.
- To carry out market surveys to enhance, modify, personalise and improve our services and communications for the benefit of our users through our social media pages on Facebook, and YouTube.
- To recommend products and services we think you will be interested in and to carry out direct marketing to our customers and/or potential customers.
However, if we use electronic methods, such as email or direct messaging through our social media pages, for instance, via Facebook and/or Instagram, to send direct marketing to you, we will only do so if it is permitted under the applicable rules on direct marketing.
The legal basis for collecting and processing your personal data via different social media pages is our legitimate interest as described above in accordance with EU general data protection regulation (“GDPR”) art. 6(1)(f). Our legitimate interests are under these circumstances regarded to override your interests.
5. HOW WE SHARE YOUR PERSONAL DATA
We will not pass, sell or otherwise share or disclose your personal data, except as described herein or otherwise stated at the time the personal data is collected.
As mentioned under section 3, we may act as joint data controller in relation to the processing of your personal data via our social media pages together with the specific provider of the social media, for instance, Facebook Inc. or Facebook Ireland Ltd. This means that we are jointly responsible for processing of your personal data. We have inserted a reference to Facebook’s privacy notice in section 3.
We may share your personal data with affiliated companies within the Demant Group in order to deliver, enhance and develop our products and services. Please refer to the organisational chart in our latest annual report to see which companies form part of the Demant Group. You can find our latest annual report at www.demant.com.
We may share your personal data with our service providers for a variety of tasks, such as:
- Assisting us with administering or troubleshooting our website.
- Assisting us with the supply or design of our products or with our business administration.
- Assisting us with our marketing campaigns, for instance, via Facebook Custom Audiences and Facebook Lookalikes.
- Providing us with electronic or physical storage services or systems.
We will only share your information under these circumstances, if it is necessary in order for our service providers to perform the specific service for us. These service providers are not authorised to keep or use your personal data for any other purposes, and they will always be under an obligation to keep your personal data safe and confidential. We may disclose your personal data to third parties, such as law enforcement agencies, regulatory authorities and our professional advisors if we are under a duty to do so in order to comply with any legal obligation, or if it is in our legitimate interests, or in order to enforce or apply our website Terms of Use or other related contracts with you or your company.
6. TRANSFER OF DATA TO THIRD COUNTRIES
In order to deliver our products and services to you, we may share your personal data with affiliated companies in the Demant Group located outside the EU/EEA and non-affiliated companies, such as service providers or business partners located outside the EU/EEA provided this is considered necessary in relation to a particular data processing activity or performance of the service.
If your personal data are transferred outside the EU/EEA, we will implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of the relevant data protection laws including ensuring the protection of the rights of the data subject. Where necessary, we have entered into the EU Commission’s standard contractual clauses with the recipient of the personal data. The EU Commission finds these clauses to provide adequate guarantees for the protection of privacy, basic rights and liberties, as well as for exercising the associated rights.
7. HOW LONG DO WE KEEP YOUR PERSONAL DATA
We will keep your personal data for as long as necessary for legitimate legal or business reasons, including to comply with any regulatory obligations.
We will delete your personal data, when it is no longer required in relation to the purpose for our collection, processing and storage of your personal data. We will also store personal data that we are obliged to keep in accordance with the law.
If you have commented on any of our posts on social media platforms, such comments will be deleted at the time when the post in question is deleted. We may, however, choose to delete specific comments at an earlier point in time. You may also at any time choose to delete your own comment.
Information that is collected via social media platforms for a specific purpose, for instance, a targeted marketing campaign, will be deleted 1 year after the purpose of processing is carried out. Certain data may be retained up to 2 years from this moment.
If you would like more detailed information about our retention policy, please contact us by using the contact points in section 2 above.
8. YOUR PRIVACY RIGHTS
Pursuant to the GDPR, as a result of our processing of your personal data, you may exercise a number of rights. They are:
- the right to access to your personal data,
- the right to have us rectify (correct) your personal data,
- the right to have us delete your personal data (“the right to be forgotten”),
- the right to restrict our processing of your personal data,
- the right to data portability,
- the right to object to our processing.
These rights may, however, be subject to conditions and/or exemptions, e.g. to ensure other people’s privacy, trade secrets, intellectual property rights or to comply with a legal obligation.
If you would like to exercise one or more of your rights, please contact us by using the contact points in section 2 above.
9. RIGHT TO LODGE A COMPLAINT
If you have a concern in relation to how we use your data, please let us know, and we will reply to your queries and, if necessary, take steps to ensure our practices are compliant with binding law. If you are still not satisfied with the way we use your data, you have the right to lodge a complaint with the competent national data protection authority. The authority responsible for personal data protection in Poland is the President of the Personal Data Protection Office. He may be contacted using the following data:
Personal Data Protection Office
Stawki 2 Street
00-193 Warsaw
helpline: 606 950 000
fax: 22 531 03 01
e-mail: kancelaria@uodo.gov.pl or through the Internet service of the Office available at http://www.uodo.gov.pl.
10. CHILDREN’S PRIVACY
We provide solutions for children but our social media pages on Facebook, YouTube and LinkedIn are not intended or designed to collect personal data about children under the age of 16. We do not intentionally collect personal data from any person we know to be under the age of 16.
11. THIRD PARTY LINKS
Our social media pages on Facebook, YouTube and/or LinkedIn may contain links to websites of other companies and organisations. This Privacy Notice does not apply to such third-party sites, and we suggest that you contact those third-party sites directly for information on their data collection and distribution policies.
12. CHANGES TO THE PRIVACY NOTICE
We may update this Policy from time to time by publishing a new version on our website www.demantszczecin.pl and different social media pages on Facebook, YouTube and/or LinkedIn.
This Privacy Notice was updated on 22nd of April 2022.
Privacy policy for Demant Operations Poland Sp. z o. o. video surveillance
INTRODUCTION
This Privacy Policy (hereinafter "Policy") applies to the processing of personal data obtained from video surveillance.
ABOUT US
Demant Operations Poland Sp. z o. o. is the controller of personal data obtained from video surveillance.
In this Policy, the terms "we", "us" and "our" refer to the controller.
Any questions regarding the Policy and requests related to exercising of your rights shall be filed using the following contact data:
Demant Operations Poland Sp. z o. o.
Lubieszyńska 59 Street
72-006 Mierzyn
Tel: +48 91 441 77 00
E-mail: privacy@demant.com.
COLLECTING AND PROCESSING OF PERSONAL DATA
Controller processes personal data obtained from video surveillance. Video surveillance includes only image, without sound.
Video surveillance is used in the monitored area, which is understood to be the communication routes (corridors, entrance and side doors) and the gym, in the buildings located at the following addresses:
• Lubieszyńska 59 Street, Mierzyn,
• Lubieszyńska 42 Street Mierzyn,
• Wiosenna 5 Street, Mierzyn,
• Zeusa 2 Street, Mierzyn
and the adjacent parking lots.
The monitored area does not include sanitary rooms, changing rooms, canteens, smoking areas and rooms made available to the company trade union organization.
WHAT IS THE PURPOSE AND THE LEGAL BASIS OF COLLECTING AND USING PERSONAL DATA
We process personal data from video surveillance because it is necessary to ensure the safety of employees and the protection of property. The processing of personal data is necessary for the indicated purposes arising from the controller’s legitimate interests.
HOW WE SHARE PERSONAL DATA
Personal data obtained from video surveillance may be shared with public authorities, law enforcement agencies, employees or third parties who have submitted a relevant request.
A request for access to video surveillance recordings may be submitted:
• via email: demant_op_pl_facility_administration@demant.com
- •via Service Desk System (option available for controller’s employees).
SENDING DATA TO THIRD COUNTRIES
Personal data obtained from video surveillance shall not be transferred to third countries (outside the European Union and outside the European Economic Area).
HOW LONG WE STORE PERSONAL DATA
Personal data from video surveillance are processed for a period not exceeding 3 months from the date of recording.
SECURITY
We have implemented respective technical and organizational measures for protection of personal data from accidental losses, alterations, unauthorized disclosures and access of any undesired parties. In the event of any security breach which may result in high risk to the person’s whose personal data is processed on recordings derived from video surveillance rights, controller shall inform about the situation without undue delay, in accordance with binding law.
PRIVACY RIGHTS
The person whose personal data is processed on recordings derived from video surveillance (data subject), has the right to request, the access to their personal data which is processed, information about the origin of this data and the purpose wherefor it is used. Moreover, the person shall have the right to know how long the data shall be stored and with whom it shall be shared. Upon request, we may provide the personal data (together with a copy) we store in regards to the person. The access may be limited due to protection of the privacy of other persons, trade secrets or intellectual property rights. Data subject shall also have the right to transfer data.
In certain cases, we may have an obligation to delete personal data. Data subjects, who believe their personal data is not needed for the purpose wherefor it has been collected, shall have the right to request its deletion. It is also possible to contact us if you believe that the personal data is not processed in compliance with the applicable legal regulations or other respective obligations.
In the event of any request for deletion of personal data, we shall verify whether all the necessary conditions have been fulfilled. If so, we shall delete the data without undue delay, in accordance with binding law.
Data subject shall have the right to object to processing of personal data. In such event, contact us using the data provided at the beginning of this Policy.
THE RIGHT TO LODGE A COMPLAINT
Please contact us in the event of any doubts concerning the manner of processing your personal data. We shall answer your questions and, if necessary, undertake necessary actions. Should data subject still be dissatisfied with the manner of using their personal data by us, it shall be possible to lodge a complaint with the competent national data protection authority. The authority responsible for personal data protection in Poland is the President of the Personal Data Protection Office. He may be contacted using the following data:
Personal Data Protection Office
Stawki 2 Street
00-193 Warsaw
helpline: 606 950 000
fax: 22 531 03 01
or through the Internet service of the Office available at http://www.uodo.gov.pl.
AMENDMENTS TO THE PRIVACY POLICY
The document may be updated and the new version shall be published on our website. Where possible and appropriate, we will inform you of these changes by e-mail.
This privacy policy was updated on 13th of June 2022.