BPI Development Logo
Panoramika 2

Social Media Privacy Policy

BPI Real Estate Poland sp. z o.o. social media privacy policy

When you use our social media accounts, you interact with us — for example by subscribing to a fanpage, leaving reactions (likes, comments) or sending us a message. The information you provide about yourself may constitute personal data. This Privacy Policy (the Policy) describes how we process personal data collected via accounts on the following social media platforms (the Social Media Platforms):

We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, GDPR).

Data Controller

The controller of personal data is BPI Real Estate Poland sp. z o.o. with its registered office in Warsaw (02-146) at ul. Komitetu Obrony Robotników 48 (the Controller or we). The Controller can be contacted at the registered office address indicated above.

Categories of Data Subjects and Scope of Processed Data

FACEBOOK

We process the data of persons who:

  • subscribed to the account by clicking the "Like" or "Follow" icon,
  • posted a comment, shared content or clicked the "Like" icon under any of the posts published on the account.

We process the following types of personal data:

  • account identifier (typically containing first and last name or nickname),
  • profile picture,
  • other photos (which may also depict the data subject's image),
  • the content of your comments,
  • statistical data on persons visiting the fanpage available via the "Facebook Insights" function, collected by means of cookies.

INSTAGRAM

We process the data of persons who:

  • subscribed to the account by clicking the "Follow" icon,
  • posted a comment under any of the posts published on the account or reacted to published photos.

We process the following types of personal data:

  • account identifier (typically containing first and last name or nickname),
  • profile picture,
  • other photos (which may also depict the data subject's image),
  • the content of your comments,
  • statistical data on persons visiting the account, collected by means of cookies.

LINKEDIN

We process the data of persons who:

  • visited the Controller's page,
  • interacted with the Controller,
  • posted or submitted data via services offered by the LinkedIn platform (e.g. completed forms, responded to surveys).

We process the following types of personal data:

  • first name, last name, image and other identification data made publicly available by you on a profile created on LinkedIn (including address and contact data such as e-mail address, phone number, as well as data about education, work experience, professional qualifications and previous employment),
  • statistical data on persons visiting the account, collected by means of cookies.

YOUTUBE

We process the data of persons who:

  • subscribed to the account by clicking the "Subscribe" icon,
  • posted a comment under any of the videos published on the account or reacted to published videos.

We process the following types of personal data:

  • account identifier (typically containing first and last name or nickname),
  • profile picture,
  • the content of your comments,
  • statistical data on persons visiting the account, collected by means of cookies.

Purposes and Legal Bases of Processing

We process your personal data:

  • on the basis of legitimate interest (Article 6(1)(f) GDPR), consisting of:
    • maintaining an account on the Social Media Platform on the terms and rules set out by the Platform operator and informing through it about our activity, promoting events and the brand, products and services, building and maintaining a community with us (including supervision over content published by users) and for the purpose of communication via the available functionalities of the Social Media Platform (comments, messages),
    • keeping statistics (by analysing data on the activity of users of our account),
    • possibly establishing, asserting or defending against claims.
  • on the basis of separately given consent within the scope and for the purpose specified in the content of the consent and for the time until its withdrawal (Article 6(1)(a) or Article 9(2)(a) GDPR),
  • on the basis of statutory requirements in order to fulfil our legal obligations arising from the provisions of law (Article 6(1)(c) GDPR).

Where we organise promotional campaigns via the Social Media Platform, the rules of processing your personal data, including the purpose and legal basis of such processing, are described in the regulations of the campaign. Before participating in such a promotional campaign, please review its regulations.

Joint Controllership of Personal Data

In the scope of processing personal data for statistical purposes, we act as joint controllers within the meaning of Article 26(1) GDPR together with the operator of the Social Media Platform that provides the statistics feature. We undertake such activities within our legitimate interest (Article 6(1)(f) GDPR) described above.

More information on the processing of data for statistical purposes can be found at the following link:

Data Recipients

Access to your personal data will be granted to:

  • our authorised personnel and entities providing services to us (including marketing services, IT and technical support services), who must have access to the data to perform their duties,
  • other users of the Social Media Platform (because information about persons following the account, about likes, as well as the content of comments, posts and other information provided by users is public),
  • public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for purposes resulting from generally applicable law,
  • the administrator of the Social Media Platform on the terms described in the privacy policies they make available.

Please note that the operators of the Social Media Platforms are separate entities responsible for processing the data of persons using the Social Media Platforms, including data concerning you. These entities process your personal data for their own purposes based on legal bases they themselves determine. In particular, they may, based on their own platform regulations, collect and process information contained in cookies of persons visiting our account. We have limited influence over the processing of data by Social Media Platform operators. We therefore ask you to review their terms of operation and their privacy policies, which can be found here:

Transfer of Data to Third Countries or International Organisations

We do not transfer your personal data to a third country or an international organisation.

Data Retention Period

The data processing period is related to the purposes and legal bases of processing, therefore:

  • data processed on the basis of consent will be processed until the consent is withdrawn,
  • data processed on the basis of statutory requirements will be processed for as long as the law requires the data to be retained,
  • data processed on the basis of the Controller's legitimate interest will be processed until an effective objection is raised or until that interest ceases, i.e.:
    • we typically process your data until we cease to maintain the account on the Social Media Platform,
    • personal data we obtained through ongoing correspondence is stored for the time the message sent to us is handled,
    • data processed for the purpose of establishing, asserting or defending against claims is processed for a period equal to the limitation period for those claims.

Your Rights

  • the right to request access to your personal data, its rectification, erasure or restriction of processing, as well as the right to data portability,
  • the right to object at any time to the processing of your data for direct marketing purposes,
  • the right to object to the processing of data due to your particular situation,
  • where the processing of your data is based on consent — the right to withdraw consent at any time, without affecting the lawfulness of processing carried out on the basis of the consent before its withdrawal.

To exercise your rights, please contact us using the contact details indicated above.

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

Information About the Source of Data and Other Information

  • We receive your personal data directly from you through your interaction with our account on the Social Media Platform and from your public profile.
  • Providing the data is voluntary.
  • Personal data will not be subject to automated decision-making, including profiling.

Date of last update of the Policy: 28 April 2026.

Social Media Privacy Policy | Panoramiqa 2