_Information Clause in connection with the processing of personal data via social media

Fulfilling the information obligation resulting from art. 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC (“GDPR”), we indicate that:

The Controller of your personal data is Transition Technologies PSC S.A. with its registered office in University Business Park, Building B, Wolczanska Street 180, 90-530 Lodz, entered in the register of entrepreneurs of the National Court Register (KRS) under number 0000930989, tax ID number (NIP): 7292712388, statistical registration number (REGON): 365249538, with the share capital of PLN 1,468,800.00, whose registration files are kept by the District Court for Łódź-Śródmieście in Łódź, Business Division XX for National Court Register (is referred to as TT PSC).

1. You can contact the Data Controller by way of:
   1. traditional mail at: University Business Park, Building B, Wolczanska Street 180, 90-530 Lodz;
   2. electronic mail at: contact@ttpsc.com;
   3. telephone at: +48 661 799 553;
   4. the Data Protection Inspector:  gdpr@ttpsc.com;
   5. the e-mail address indicated in point d above, for the purposes of obtaining a copy of the information on safeguards used for processing of data outside the EEA or of information regarding the places where they are made available.
2. Your data will be processed for the following purposes:
   1. maintaining a profile in social media, including providing information related to the Data Controller or our activities – the basis for processing is the legitimate interest of the Data Controller in the form of brand image building, maintaining relations with persons interested in our activities (legal basis: Article 6.1.f of the GDPR), and data collection is carried out in accordance with the principles set out in the privacy policy, cookie policy and information clause for cookies.
   2. replying to a message sent to TTPSC via a social networking site – the basis for processing is the consent expressed by sending a message to TTPSC containing personal data (legal basis of Article 6.1.a) of the GDPR),
   3. conduct marketing activities based on automated processing of personal data, such as personalization of communications, audience segmentation and management of marketing schemes  (legal basis: Article 6.1.a GDPR),
   4. determining or pursuing any claims or defending against them, which is the legitimate interest of the Data Controller (legal basis of Article 6.1.f of the GDPR).
3. Your data will be processed for the period of:
   1. necessary to reply to a message sent to TTPSC via a social networking site and end the conversation,
   2. the time in which the current information is available related to the information sent and the activity conducted by the Data Controller,
   3. until the legitimate interests of the Data Controller forming the basis for the processing are fulfilled, or until you object to such processing,
   4. from the time of expression until revocation of consent (when processing based on consent),
   5. until any claims expire,
   6. in the case of cookies, on the terms set out in the Cookies Policy and the information clause for cookies.
4. You have the right to:
   1. access, rectify, request erasure of your data, as well as the right to restrict processing of your data, the right to data portability, and the right to object to the processing of your data,
   2. withdraw your consent at any time without such withdrawal affecting the lawfulness of the processing carried out on the basis of said consent prior to its withdrawal, insofar as the processing is carried out on the basis of Article 6.1.a or Article 9.2.a GDPR- if you provide the data listed in Art. 9 sec. 1 GDPR,
   3. lodge a complaint with the President of the Office for Personal Data Protection (Prezes Urzędu Ochrony Danych Osobowych), st. Stawki 2, 00-193 Warsaw, if in your opinion your personal data are processed in violation of the rules on personal data protection.
5. In connection with the processing of personal data, there may be automated decision-making, including profiling to which you have given your express consent in accordance with the applicable rules and regulations of the relevant social media platform (in particular Facebook – currently Meta Platforms Ireland Limited), LinkedIn Ireland Unlimited Company).
   The collected data may be used to analyze user behavior and preferences, in order to create more personalized interactions and offers. The consequence of profiling will be that TTPSC will tailor communications, advertisements and offers to your individual needs and preferences.
   If, in connection with automated decision-making, you receive information that is not of interest to you, you may express your own position or challenge such decision at any time by contacting a representative of the Administrator who is an individual. The Administrator may be contacted in accordance with Section I of this clause.
6. Your personal data may be transferred to:
   1. To owners of social networks – in particular Meta Platforms Ireland Limited), LinkedIn Ireland Unlimited Company),
   2. companies from the capital group of Transition Technologies PSC S.A. if it is necessary to answer the question,
   3. providers of IT systems (including: analytical services) and hosting services for the TTPSC,
   4. suppliers of external cookies,
   5. law firms (in justified cases).
7. Your personal data may be transferred outside the European Economic Area.
   
   This situation may occur when:
   1. other companies from the capital group of Transition Technologies, with their registered office outside the EEA will be involved in the performance of the contract,
   2. the contract will be performed together with a business partner or subcontractor based outside the EEA,
   3. in connection with the provision of services, the services of Microsoft Corporation and its affiliates will be used, i.e. Office 365, Windows, MDM InTune or other software that processes data outside the EEA.

Each and every instance of transferring of your data outside the European Economic Area will involve the implementation of certain measures by the Company, aimed at protecting your rights and freedoms, in particular in the event that such transfer of data is made to the United States of America, in the light of to the ruling of the judgment of the Court of Justice of the European Union of July 16, 2020 in Case C-311/18 (Data Protection Commissioner v. Facebook Ireland Limited and Maximilian Schrems), which has found that the U.S. does not meet an adequate level of protection.
The transfer will be carried out in line with the safeguards permitted under the GDPR, that is:

• to a country with regard to which the European Commission has issued a decision affirming the adequacy of safeguards applied in the area of personal data protection (Article 45(1) of the GDPR), or
• pursuant to the standard contractual clauses referred to in Article 46.2.c of the GDPR.

8. Providing your personal data is voluntary, however, it is necessary to use the Website of Data Controller it may be necessary to answer your inquiry. Such a situation may take place when answering requires your prior identification. Apart from the above exception, the refusal to provide personal data will not be associated with any consequences. In addition, please remember that you can change your browser settings or privacy settings at any time to revoke our access to data.
9. Should the Data Controller plan to process your personal data for any purpose other than the purposes defined in Section IV above, you will be informed in advance of any such other purpose and any relevant information regarding such processing by placing the appropriate information on the Website of Data Controller.
10. TT PSC acts as a controller only in relation to its company profile and the information contained herein relates to how TT PSC processes only. Regardless, Facebook or LinkedIn is the controller of your personal data and processes your personal data independently of TT PSC. You will find more about the processing of your personal data in the relevant documents of the respective social media platform  – e.g. Facebook (https://www.facebook.com/privacy/center) or LinkedIn  (https://pl.linkedin.com/legal/privacy-policy).