PRIVACY POLICY – INSTAGRAM BUSINESS ACCOUNT i


1. Your privacy is important to us. The following document, which contains all the information required by the GDPRii.

2. This privacy policy relates to communication via Instagram business account of TAURON Polska Energia S. A. in the Instagram social network.

3. Please read Instagram privacy policyiiiin the scope of personal data transmitted via Instagram (Instagram Privacy Policy).

4. The Controllerivof your personal data is TAURON Polska Energia S.A. with its registered office in Katowice (post code: 40-114), at ul. Księdza Piotra Ściegiennego 3, www.tauron.pl 

5. We have appointed the Data Protection Supervisor who can be contacted by writing to:
a. e-mail: tpe.iod@tauron.pl,
b. correspondence address: IOD TAURON Polska Energia S. A., ul. Księdza Piotra Ściegiennego 3, 40-114 Katowice.

6. We will process your personal data for the following purposes:
a. to enable Instagram users to contact the Controller via Instagram business account [legal basis: Article 6(1)(f) of GDPRii - fulfilment of the Controller's legitimate interest];
b. handling of the case on which you are contacted - for the duration of handling of the case [legal basis: Article 6(1)(f) of GDPR - fulfilment of the Controller's legitimate interest];
c. participation and selection of winners in competitions organized by the Administrator via the Instagram social network [legal basis: Article 6(1)(b) of the GDPR - the Controller's legitimate interest] - until the end of the competition, selection of the winners and awarding of prizes;
d. referring the case on which you are contacted to the proper communication channel in TAURON Groupvfor the duration of handling of the case [legal basis: Article 6(1)(f) of GDPR - fulfilment of the Controller's legitimate interest];
e. conducting communication within the Controller's business account, in particular responses to reactions, comments and posts, carried out using the tools provided by the instagram.pl application [legal basis: Article 6(1)(b) of GDPR - conclusion and performance of a contract];
f. monitoring and improvement of the quality of our service, including for the purpose of conducting a satisfaction survey on the quality of our service, carried out in the form of a questionnaire, for the period necessary for the purposes of the processing, however, no longer than for a period of 3 years following the completion of the survey [legal basis: Article 6(1)(f) of the GDPR - the Controller's legitimate interest];
g. statistics concerning the analysis of the operation, popularity, manner of using the business account [legal basis: Article 6(1)(f) of GDPRii - fulfilment of the Controller's legitimate interest];
h. potential investigations and determining, assertion of claims or defence against claims - for the duration of potential proceedings and for the period of limitation of potential claims [legal basis: Article 6(1)(f) of GDPR - fulfilment of the Controller's legitimate interest in the form of investigations, assertion of claims and defence against claims];
i. archiving to the extent necessary to comply with legal obligations arising from the above purposes - for a period not longer than the data archiving provisions [legal basis: Article 6(1)(f) of GDPR].

7. In connection with the processing of your personal data, you shall also have the following rights:
a. right of access to personal data,
b. right of data rectification,
c. right of data erasure,
d. right of limiting personal data processing,
e. right of data portability,
f. right to lodge a complaint,
g. right of access to the conclusions of the balancing test carried out to verify the existence of the controller's legitimate interest in personal data processing.

8. Should you wish to exercise your rights or obtain further information about them, you may do so by writing
a. to the following address: TAURON Obsługa Klienta sp. z o.o. ul. Lwowska 23, 40-389 Katowice,
b. by e-mail to: daneosobowe.wnioski@tauron.pl.

9. If you decide to exercise your rights, we will send you our position on the matter no later than one month after receipt of the request.

10. If you believe that we violate any legal regulations by processing of your personal data, you have the right to lodge a complaint to the supervisory authority, the President of the Office for Personal Data Protection.

11. Information about the intention to transfer the data outside the European Economic Area (EEA). Your personal data may be transferred outside the EEA. Such situation may arise in connection with the outsourcing of certain services/activities to entities established outside the EEA or processing data outside the EEA. Your personal data may only be transferred to such third countries (countries outside the EEA) or entities in third countries for which an adequate level of data protection has been confirmed by the decision of the European Commission, standard data protection clauses have been applied in contracts with these entities or appropriate other safeguards have been applied, as referred to in generally applicable laws.

In connection with the transfer of data outside the EEA, you may request further information on the relevant safeguards in this regard, obtain a copy of these safeguards or information on the pace where they are available by contacting the Data Protection Supervisor as indicated in this notice.

12. The expected recipients of your personal data include:
a. TAURON Group entities - with regard to matters related to them
b. entities authorised to the receive your personal data under the relevant legal regulations,
c. entities which carry out postal or courier activities,
d. entities which operate ICT systems and provide IT servicesvi,
e. entities which provide us with advisory, consulting, audit services and legal, tax, accounting assistance,
f. our subcontractors, i.e. entities which perform other services on our behalf.
g. the owner of the Instagram social network, subject to change without notice to the data protection provisions of Instagram, available at https://help.instagram.com/519522125107875.

Glossary
i Business Account - TAURON Polska Energia account on Instagram.

ii  GDPR - means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. The text of the Regulation is available at www.tauron.pl/rodo.

iii  Instagram - the social network accessible via the www.instagram.com website and the Instagram mobile application.

iv  Controller -means a natural or legal person, a public authority, an agency or other entity which, independently or jointly with others, determines the purposes and means of the personal data processing; if the purposes and means of such processing are determined by the law of the European Union or a Member State, the controller or the specific criteria for its nomination may be also provided in the law of the European Union or the Member State - Article 4(7) of GDPR.

v  TAURON Group -means TAURON Polska Energia S.A. with its registered office in Katowice and its subsidiaries or affiliates. The list of TAURON Group entities is available at: www.tauron.pl/rodo/spolki-grupy.

vi  IT Services - mean tools that enable the execution of defined business processes and allow for simultaneous, efficient and fast communication of many people employed or cooperating in TAURON Group Entities that use access to IT Services and consequently ensure the required cooperation between individuals employed or cooperating in TAURON Group Entities who use access to IT Services. The processing of users’ data in the IT Services is necessary for their due performance of their duties.