About this NoticeEffective from 7 September 2023 Meta Platforms, Inc. ("Meta") has certified our participation in the EU-US Data Privacy Framework and the Swiss-US Data Privacy Framework (collectively, the "DPF") with the US Department of Commerce. This certification relates to Meta's processing of personal information received from the European Economic Area ("EEA") and Switzerland under the DPF in connection with our certification. If there is any conflict between the terms in this disclosure and the DPF principles, the principles shall govern. To learn more about the DPF, or to review our certification on the DPF list, visit the DPF website. The Swiss-US Data Privacy Framework will not be relied upon in relation to transfers of any relevant personal information to the US from Switzerland until the date of entry into force of Switzerland's recognition of adequacy (i.e. entry into force of the expected recognition by the Swiss Federal Administration that the Swiss-US DPF ensures data protection consistent with Swiss law). Return to top What this disclosure coversMeta follows the DPF for all personal information received from the EEA or Switzerland under the DPF in relation to the Certified Data Categories[1]. Please see the relevant Privacy Policy and/or other policies associated with the Certified Data Categories[1] for details about: - The types of personal information processed
- The purposes for which personal information is processed
- The types of third parties to which personal information is disclosed
- An individual's right to access personal information
- Any choices and means offered to limit the use and disclosure of personal information
- How personal information is disclosed in response to legal requests when necessary
1 Certified data categories under the EU-US and Swiss-US Data Privacy Frameworks Meta Platforms, Inc.'s certifications to the EU-US Data Privacy Framework and the Swiss-US Data Privacy Framework, as described in the EU-US and Swiss-US Data Privacy Frameworks Disclosure, relate to the following Certified Data Categories: - Facebook: A social networking service you can use to connect with friends, family and people who share the same interests, where Meta Platforms Ireland Limited is the controller and Meta Platforms, Inc. is a processor. You can also communicate with others privately, watch your favourite content, buy and sell items, or spend time with your community. For more information, visit our Privacy Policy.
- Meta Business Tools: Technologies that help website owners, publishers, app developers and partners (including advertisers and others) integrate with Meta, understand and measure their products and services, and better reach and serve people who use or might be interested in their products and services. These Business Tools include Meta pixel, the Conversions API, App Events through Facebook SDK, Offline Conversions and App Events API. We also receive Business Tools data in the form of impression data sent by Facebook social plugins (for example, the Like and Share buttons) and Facebook Login, as well as data from certain APIs and from certain pilot, test, alpha or beta programmes that we may offer. Depending on the service, Meta Platforms Ireland Limited is the controller or processor and Meta Platforms, Inc. is a processor or sub-processor, respectively. For more information, visit our Privacy Policy and our Business Tools page.
- Workplace: A service that allows people to more effectively collaborate and share information at work. Customers (organisations who are the data controllers) may share personal information about their end users to Meta, with Meta Platforms Ireland Limited as the processor and Meta Platforms, Inc. as a sub-processor. While customers and their end users decide what information to share, they typically include things such as business contacts, customer and employee information, user-generated content and communications, and other information under the customer's control. For more information, end users may contact the customer who manages their Workplace account and review Workplace's Privacy Policy.
- Ads and measurement: In addition to Meta Business Tools, Meta offers other ads and measurement products and may receive personal information from unaffiliated partners (the data controllers), where Meta Platforms Ireland Limited is the processor and Meta Platforms, Inc. is a sub-processor. This information includes things such as contact information and information about individuals' experiences or interactions with the partners and their products, services and ads. For more information, visit our About Facebook ads page and our Privacy Policy.
EnforcementMeta's compliance with the DPF is subject to the investigatory and enforcement powers of the US Federal Trade Commission. In accordance with the DPF, Meta is also liable for onward transfers to third parties that process personal information in a way that does not follow the DPF unless Meta was not responsible for the event giving rise to any alleged damage. Return to topQuestions and disputesPlease email us with any questions or concerns about our DPF certification. You can resolve any applicable disputes with us related to our certification free of charge through TRUSTe, an alternative dispute resolution provider based in the United States. You can contact TRUSTe through the TRUSTe feedback and resolution system. In some situations, the DPF framework gives you the right to invoke binding arbitration. You can do this to resolve complaints not resolved by other means, as described in Annex I to the DPF framework. Return to top |
