Who is the data controller for my personal data?
NORMAL and Facebook are joint controllers for your personal data.
NORMAL’s company information:
CVR no.: 34883793
Facebook’s company information:
Facebook Ireland Ltd.
4 GRAND CANAL SQUARE, GRAND CANAL HARBOUR
CVR no: 462932
NORMAL follows the guidelines of the Danish Data Protection Agency regarding joint data controllers and NORMAL will do its best, with the existing means, to ensure that you will be notified of the processing of your personal data when you visit the Pages. Together with other companies we continuously seek to enter into a dialogue with Facebook regarding the regulation of joint controllers.
Facebook has in this regard published an appendix on the joint responsibility for “Facebook Insight” which you can find at the following link:
What personal data is collected via the Pages?
Depending on your behaviour on the Pages NORMAL and Facebook may collect the following personal data about you:
- Whether you ”like” the Pages or have used other reactions on the Pages
- Comments you leave on the Pages
- That you have visited the Pages
- Your behaviour and interests on the Pages
- Personal data collected in connection with competitions
Furthermore, Facebook uses the Pages to collect anonymised statistical information about visitors’ behaviour on the Pages, including age, gender, relationship status, work, lifestyle, interests, information about purchases and geographical data. For this purpose, Facebook has placed cookies on your device when you visit the Pages. Each cookie contains a unique identification code that will remain active for a period of two years unless they are deleted before the expiration of this period. Facebook receives, stores and processes your personal data through these cookies
What is the purpose with processing your personal data?
NORMAL will also process your personal data to improve NORMAL’s products, improve the Pages and to conduct surveys, compile statistics, develop and protect NORMAL’s services and products, based on, among other things, your feedback. In this connection NORMAL will use aggregated data, which is made available by Facebook through Facebook’s cookies, e.g. information about age, gender, relationship status, work, lifestyle, interests and data on purchases and geographical data.
Facebook processes your personal data to enable Facebook to improve its advertising system and to provide NORMAL with statistics produced by Facebook based on your visit on the Pages, in order to advertise and customise the activities on the Pages. Through cookies, Facebook and NORMAL will know if you “like” or “follow” the Pages and use the Pages’ applications and thereby Facebook and NORMAL will be able to customise the content on the Pages and develop functions that you might be interested in.
What is the legal basis for the processing?
NORMAL processes your personal data based on NORMAL’s legitimate interest in improving NORMAL’s products and services (article 6(1)(f) of the General Data Protection Regulation).
Facebook processes your personal data based on Facebook’s legitimate interests, including Facebook’s interest in providing an innovative, individually tailored, secure and profitable service (article 6(1)(f) of the General Data Protection Regulation). Facebook will also process your personal data in accordance with your consent which you can withdraw at any time via the Facebook settings (article 6(1)(a) of the General Data Protection Regulation).
Who receives my personal data?
NORMAL does not transfer your personal data to other companies at any time.
Facebook may share your personal data with, among other, the following categories of recipients:
- Within the companies of Facebook
- Facebook partners who use analytics services
- Other people using the Pages
- Measurement partners
- Researchers and academics
Storage of personal data
We only store your personal data for as long as is necessary to fulfill the purpose for which it was collected, to establish, exercise or defend legal claims, or to comply with legal requirements. When this is no longer the case, the information is deleted. You can also ask us to delete personal data about you that we have registered. We will accommodate your request unless we are required by law to retain the information, or the information is relevant to an upcoming or pending case/dispute.
What are my rights?
Under the data protection legislation, you have several rights:
- You are at all times entitled to gain access to the information NORMAL and Facebook process about you, with certain statutory exceptions.
- You have the right to object to the collection and further processing of your personal data.
- You have the right to have your personal data rectified, deleted or blocked.
- In certain cases, you have the right to limit the processing of your personal data.
- You have the right to receive the personal data which you have provided us with and, in some cases, have these data transmitted to another data controller (data portability).
If you are a Facebook or Instagram user, you can change your privacy settings to affect how your personal data is collected and processed when you visit and use the Pages.
On Instagram you can change your settings under “Privacy Settings”, located in the “Settings” section.
Use the following links to change your settings on Facebook:
Who can I contact?
Facebook’s general set-up and the agreements NORMAL has entered into with Facebook suggest, that you must contact Facebook if you wish to exercise your rights. This is due to the fact, that only Facebook is functionally able to take the necessary steps to meet most of your requests.
If you wish to make a complaint in connection to our processing of your personal data you are welcome to contact us at firstname.lastname@example.org
If your complaint is not resolved by us and you wish to proceed with the case, you can send your complaint to the Danish Data Protection Agency:
Carl Jacobsens Vej 35
Tel: +45 33 19 32 00