Privacy policy
LEGO House’s Facebook and Instagram pages
1. When does this privacy policy apply?
This privacy policy applies to LEGO House A/S’ (‘LEGO House’) processing of the personal data you leave and/or submit when you visit LEGO House’s Facebook page (‘the Facebook page) and the LEGO House Instagram page or when you participate in competitions through Facebook or Instagram held by LEGO House. This privacy policy supplements Facebook Ireland Ltd.’s (‘Facebook’) general privacy policy.
In the following, ‘Facebook’ and ‘the Facebook page’ are also used as designations for the Instagram page.
2. Who is the data controller for my personal data?
LEGO House and Facebook are joint data controllers of the processing of your personal data.
Facebook’s company information is:
Facebook Ireland Ltd.
4 GRAND CANAL SQUARE, GRAND CANAL HARBOUR
D2 Dublin
IRELAND
Reg no.: 462932
LEGO House follows the guidelines of the Danish Data Protection Agency regarding joint data controllers and LEGO House will do its best, with the existing means, to ensure that you will be notified of the processing of your personal data when you visit the Facebook page.
Facebook has in this regard published an appendix on the joint responsibility for “Facebook Insights” which you can find here.
3. What personal data does Facebook collect?
Depending on your behaviour on the Facebook page, LEGO House and Facebook may collect the following personal data about you:
- Whether you ‘like’ or have used other reactions on the Facebook page
- Comments you leave on the Facebook page
- The fact that you have visited the Facebook page
- Your behaviour and interests on the Facebook page
- Personal data collected in connection with competitions (e.g. name and interests)
Furthermore, Facebook uses ‘Facebook Insight’ on the Facebook page to collect statistical information about visitors’ behaviour on the page, including age, gender, relationship status, work, lifestyle, interests, information about purchases and geographical data. For this purpose, Facebook has placed cookies on your devices when you visit the Facebook page. Each cookie contains a unique identification code that will remain active for a period of two years unless it is deleted before the expiration of this period. Facebook receives, stores and processes your personal data through these cookies.
To read more about Facebook’s use of cookies on the Facebook page, including deletion, please refer to Facebook’s general cookies policy.
Go to Facebook’s cookies policy via the following link:
4. What is the purpose of the processing of your personal data?
LEGO House also processes your personal data to improve products, improve the Facebook page, make surveys, compile statistics, develop and protect LEGO House’s services and products, including based on your feedback. In this connection, LEGO House uses aggregated data, which is made available by Facebook through cookies by ‘Facebook Insight’, e.g. information about age, gender, relationship status, work, lifestyle, interests, purchases and geographical data.
Facebook processes your personal data to enable Facebook to improve its advertising system and to provide LEGO House with statistics that Facebook produces based on your visit on the Facebook page, in order to advertise and customise the activities on the page. Through cookies, Facebook and LEGO House will know if you ‘like’ the Facebook page and use the page’s applications, so that Facebook and LEGO House are able to customise the content on the Facebook page and develop functions that you might be interested in.
5. What is the legal basis for the processing?
LEGO House processes your personal data based on LEGO House’s legitimate interest in improving LEGO House’s products and services and to enable you, a friend or family member to participate in competitions for prizes (Article 6(1)(f) of the GDPR.
Facebook processes your personal data based on Facebook’s legitimate interests, including Facebook’s interest in providing an innovative, individually tailored, secure and profitable service (Article 6(1)(f) of the GDPR). Facebook will also process your personal data in accordance with your consent, which you can withdraw at any time via the Facebook settings (Article 6(1)(a) of the GDPR).
For more information about Facebook’s legal basis for the processing of personal data, please refer to Facebook’s general privacy policy under the section “What is our legal basis for processing data?”.
Go to Facebook’s privacy policy via the following link:
6. Who receives my personal data?
LEGO House does not disclose your personal data to other companies but uses data processors in the form of media agencies and IT providers and may in some cases transfer your personal data to third countries. If your personal data is transferred to countries outside the EU/EEA, such transfer will be made on the following legal basis: Binding company rules, the country has been approved as a so-called ‘safe’ third country or if the country has not been approved as a ‘safe’ third country, we transfer data based on standard provisions adopted by the EU Commission.
Facebook may share personal data with the following categories of recipients:
- Internally among the Facebook companies
- Externally with Facebook partners who use analytics services
- Advertisers
- Other people using the Facebook page
- Measurement partners
- Researchers and academics
For more information about who Facebook shares your personal data with, please refer to Facebook’s general privacy policy under the section “How is this information shared?”.
Facebook can transfer your personal data to Facebook in the United States and other third countries. Facebook uses standard contracts approved by the European Commission and apply European Commission decisions on an adequate level of protection as the basis of transfer to third countries. You can find more information under “How do we process and move data as part of our global services?” in Facebook’s general privacy policy.
See Facebook’s privacy policy via the following link:
7. What are my rights?
Under the data protection legislation, you have several rights:
- You are at all times entitled to gain access to the information LEGO House and Facebook process about you, with certain statutory exceptions
- You have the right to object to the collection and further processing of your personal data
- You have the right to have your personal data rectified, deleted or blocked
- In certain cases, you have the right to limit the processing of your personal data
- You have the right to receive personal data which you have provided us with and, in some cases, have these personal data transmitted to another data controller (data portability)
If you are a Facebook user, you can change your privacy settings to affect how your personal data is collected and processed when you visit and use the Facebook page.
Use the following links to change your settings:
https://www.facebook.com/ads/preferences
https://www.facebook.com/settings
https://www.instagram.com/accounts/privacy_and_security/
8. Who do I contact?
Facebook’s general set-up and the agreements LEGO House has entered into with Facebook suggest, that you must contact Facebook if you wish to exercise your rights. This is due to the fact, that only Facebook is functionally able to take the necessary steps to meet most of your requests.
However, if you believe that LEGO House can meet your request, you are of course very welcome to contact us. Please refer to LEGO House’s general privacy policy on LEGO House’s website for more information on how we process personal data.
Go to LEGO House’s general privacy policy here.
You can visit Facebook’s general privacy policy for more information on how Facebook processes your personal data and for Facebook’s contact information at the following link:
If you wish to make a complaint in connection to our processing of your personal data, please contact us.
If your complaint is not resolved by us and you wish to proceed with the case, you can send your complaint to the Danish Data Protection Agency:
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Telephone: +45 33 19 32 00
Email: dt@datatilsynet.dk
Updated on March 3, 2021.
***