Information clause regarding the processing of personal data in connection with running a fan page by LUCKY DUCK GAMES
Sp. z o.o. on the Facebook social network based on Regulation (EU) 2016/679 of the European Parliament and of the Council
of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR.

1) Data Controller

The Controller of your personal data is LUCKY DUCK GAMES Sp. z o.o. seated in Krakow (30-320), ul. gen. Bohdana Zielińskiego 11.
The Controller can be contacted at the above-mentioned address of the registered office of the Company. For additional information regarding the processing of your personal data, you can contact the Data Protection Officer via e-mail: gdpr@luckyduckgames.com

2) Categories of persons whose data is being processed and the scope of processing

a) The Controller processes data of persons who:

b) have subscribed to the company Fan Page by clicking the “Like” or “Follow” button;

c) have published their comment under any of the posts published on the company Fan Page on Facebook.

d) the Controller processes the following type of data:

e) Facebook ID (usually containing your first and last name or a nickname);

f) your profile image/photo;

g) other images (that may also include the images of people)

h) the content of your comments

3) Purposes and legal basis for the processing

a) the Controller processes your personal data:

b) on the basis of a legitimate interest (Article 6(1)(f) of the GDPR) consisting in:

(1) running a fan page under the name of Lucky Duck Games Polska on the Facebook social network, on the terms and conditions set out by Facebook and publishing information about the Controller's activity, promoting events and brands, products and services, building and maintaining a community with the Controller and communicating via the available Facebook functionalities (comments, messages);

(2) possible determination, investigation or defence against claims.

c) on the basis of a separate consent in the scope and for the purpose as defined in the content of the consent and for as long as the consent is not withdrawn (Article 6 (1)(a) of the GDPR);

d) on the basis of provisions of the law (Article 6(1)(c) of the GDPR) with the purpose of fulfilling legal requirements resulting from the law by the Controller.

4) Recipients of data

Access to your personal data shall be granted to:

a) the Controller’s authorized employees, subcontractors and entities providing services to the Controller (i.e. IT and technical support services), that must have access to data to perform their duties.

b) other Users of Facebook (due to the fact that information about people who “follow” or “like” the fan page as well as the content of comments, posts and other information provided by Users are public);

c) public authorities and entities which perform public duties or act upon the order of public authorities in the scope and for purposes resulting from the provisions of the law;

d) owner of Facebook based on terms and conditions made available at https://www.facebook.com/about/privacy.

5) Transfer of data to third countries or international organizations

The Controller does not transfer the data to third countries or international organizations.

6) Data retention period

The processing period is related to the purposes and grounds for processing, therefore:

a) data processed on the basis of consent will be processed until the consent is withdrawn,

b) data processed on the basis of statutory requirements will be processed for the period during which the law prescribes data retention,

c) data processed on the basis of the legally justified interest of the Controller will be processed until an objection is lodged effectively or the interest ceases to exist, e.g. data processed in order to assert or defend against claims will be processed for a period equal to the period of limitations of these claims.

7) The rights of data subjects

As a data subject, you have the right to:

a) access, rectify or erase your personal data and the right to restrict the processing of your personal data, as well as the right to data portability,

b) withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal,

c) object to the processing of data in connection with your special situation;

d) lodge a complaint with the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.

8) Information regarding the source of data

Your personal data is obtained by the Controller from Facebook, your public profile and fan page entries.

9) Other information

Your personal data shall not be subject to automated decision-making, including profiling.
Providing your data is voluntary.

In addition, the Company indicates that, together with Facebook Ireland Limited (hereinafter "Facebook Ireland"), they perform the function of joint controllers in the field of data processing for the purposes of statistics. More on data processing for the purposes of website statistics can be found at the link: https://www.facebook.com/legal/terms/information_about_page_insights_data