Data processing through social networks

I maintain publicly accessible profiles on social networks. The social networks I use in detail can be found below.

Social networks such as Facebook, Instagram, Youtube, etc. can usually analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. Like buttons or advertising banners). Visiting our social media presence triggers numerous data protection-related processing operations. In detail:

If you are logged into your social media account and visit my social media presence, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, however, your personal data can also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you both inside and outside of the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are logged in or were logged in.

Please also note that I cannot trace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and data protection regulations of the respective social media portals.

Legal basis

My social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Article 6 (1) (f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 Para. 1 lit. a DSGVO)

Responsible person and assertion of rights

If you visit one of my social media sites (e.g. Facebook), I am jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both vis-à-vis me and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis Facebook).

 Please note that despite the joint responsibility with the social media portal operators, I do not have full influence on the data processing operations of the social media portals. My options are largely determined by the corporate policy of the respective provider.

Storage duration 

The data directly collected by me via the social media presence will be deleted from my systems as soon as the purpose for storing it no longer applies, you request me to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

I have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail

Facebook

a) Joint responsibility for data processing

I run my Facebook fan page on the online platform Facebook of the social network Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Together with Meta Platforms Ireland Limited I am jointly responsible for data processing in connection with this fan page in accordance with the provisions of the GDPR. This includes in particular the data processing of page insights, see bb) Use of insights and cookies. When you visit this fan page, personal data is processed by Meta Platforms Ireland Limited and I as the person responsible.

Meta Platforms Ireland Limited has primary responsibility under GDPR for the processing of Insights data. Facebook therefore also assumes all obligations arising from the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). Meta Platforms Ireland Limited remains solely responsible for the processing of such personal data in connection with Page Insights, which is not covered by the existing Page Insights Supplement.

Due to the existing agreements with Meta Platforms Ireland Limited, also on the joint responsibility of the data agreement, it is advisable to submit requests for information and the assertion of other data subject rights directly to Meta Platforms Ireland Limited. As the operator of the social network and its ability to integrate Facebook fan pages there, only Meta Platforms Ireland Limited is able to access the necessary information via the direct access options and to take any necessary measures and provide information immediately. However, you can also send inquiries to me. Of course, I am willing to support you at any time and to fulfill my duties as the person responsible.

The underlying terms of use of Facebook as part of Meta Platforms Ireland Limited (including the other terms and policies listed therein) are available at:

https://www.facebook.com/legal/terms

supplemented by the page insights supplement regarding the person responsible, available at

https://www.facebook.com/legal/terms/page_controller_addendum

b) Which data do we process for which purpose?

aa) Operation of our fan page
The purpose of operating my Facebook fan page is to get in touch with the users and visitors of the Facebook Ireland social network and to engage in an exchange. Sometimes I provide direct information about my company and related offers, such as events I have held or are currently running, special offers and offers, etc.

With the help of this Facebook fan page, I am also able to obtain statistics on visits and visitors. These are created by Facebook Ireland. This enables me to control the marketing of my activity better and in a more targeted manner. In doing so, I may occasionally gain knowledge of the Facebook profiles of individual users who like my fan page and/or use the site’s applications. This enables me to provide the users concerned with improved content and functions via my Facebook fan page.

In order to further improve my content, I can also use the information collected during the visit to draw on demographic and geographical evaluations based on this. This enables me to place targeted interest-based advertisements without being immediately aware of your identity as a visitor.

If you use multiple end devices when you visit Facebook Ireland, collection and evaluation can also take place across devices, provided you visit my fan page as a registered user logged in with your Facebook profile.

Created visitor statistics are only forwarded to me anonymously. Access to the underlying data is not possible for me.

b) Which data do we process for which purpose?

aa) Operation of our fan page
The purpose of operating my Facebook fan page is to get in touch with the users and visitors of the Facebook Ireland social network and to engage in an exchange. Sometimes I provide direct information about my company and related offers, such as events I have held or are currently running, special offers and offers, etc.

With the help of this Facebook fan page, I am also able to obtain statistics on visits and visitors. These are created by Facebook Ireland. This enables me to control the marketing of my activity better and in a more targeted manner. In doing so, I may occasionally gain knowledge of the Facebook profiles of individual users who like my fan page and/or use the site’s applications. This enables me to provide the users concerned with improved content and functions via my Facebook fan page.

In order to further improve my content, I can also use the information collected during the visit to draw on demographic and geographical evaluations based on this. This enables me to place targeted interest-based advertisements without being immediately aware of your identity as a visitor.

If you use multiple end devices when you visit Facebook Ireland, collection and evaluation can also take place across devices, provided you visit my fan page as a registered user logged in with your Facebook profile.

Created visitor statistics are only forwarded to me anonymously. Access to the underlying data is not possible for me.

bb) Use of insights and cookies

As part of my instagram fan page, I use the „Insights“ service from Meta Platforms Ireland to receive anonymous statistical data on the visitors to my fan page.

When you visit my fan page, Meta Platforms Ireland stores a corresponding data package, a so-called „cookie“, on your end device, which contains an assignable user code. If you are registered as an Instagram user, this user code can be linked to your data. The information stored in this way is processed by Meta Platforms Ireland. It is also possible that third parties can use this information from the Instagram cookies to provide services to the companies advertising on Instagram.

Unless previously deleted, the cookie is active for two years.

For more information on Page Insights please see the Page Insights Addendum between Meta Platforms Ireland and myself on data processing stewardship:

https://www.facebook.com/legal/terms/page_controller_addendum

Further information on the use of cookies by Meta Platforms Ireland can be found in instagram’s cookie policy:

https://help.instagram.com/1896641480634370

c) Legal Basis
The processing of personal data by me is based on my legitimate interest in an effective exchange with the users of my social media presence, the visitors of my profiles and in connection with the communication with the users on my social media profiles including my company presentation acc Article 6 paragraph 1 f) GDPR.

d) Transfer of data and data transfer to the USA
The data recorded when you visit my fan page may be forwarded to Facebook Inc. based in the USA and processed there. There is no adequacy decision by the EU Commission for data transfers to the USA. There is no adequacy decision by the EU Commission for data transfers to the USA. Facebook ensures an appropriate level of data protection via the EU standard contractual clauses.

I do not pass on data as part of the operation of my fan page.

e) Objection options via your Facebook account
As a Facebook user, you have the option of using the settings for advertising preferences in your Facebook account to determine the extent to which your user behavior may be recorded when you visit my fan page. In addition, Facebook provides an objection form:

https://www.facebook.com/help/contact/1994830130782319

Instagram

I have a profile on instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to instagram, the data collected is also transferred to the USA and other third countries.

a) Joint responsibility for data processing

Instagram is a Facebook product provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: „meta“). Together with Meta, we are jointly responsible for data processing in connection with this fan page in accordance with the provisions of the GDPR, Art. 4 No. 7 GDPR. This includes in particular the data processing of page insights, see point b) bb) use of insights and cookies. When you visit our Instagram fan page, personal data is processed by Meta Platforms Ireland and us as the controller.

Meta Platforms Ireland has primary responsibility under GDPR for the processing of Insights data. Facebook Ireland therefore also assumes all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). Meta Platforms Ireland remains solely responsible for the processing of such personal data in connection with Page Insights that are not covered by the existing Page Insights Addendum.

Due to the existing agreements with Meta Platforms Ireland, including the joint responsibility for the data agreement, it is advisable to submit requests for information and the assertion of other data subject rights directly to Meta Platforms Ireland. As the operator of the social network and its ability to integrate instagram fan pages and facebook fan pages there, only Meta Platforms Ireland is able to access the necessary information via the direct access options and to take any necessary measures and provide information immediately. However, you can also send inquiries to me. Of course, I am willing to support you at any time and to fulfill my duties as the person responsible.

The underlying Page Insights supplement regarding the person responsible is available at

https://www.facebook.com/legal/terms/page_controller_addendum

Use of the Service is governed solely by Instagram’s Terms of Use (including any other terms and policies listed therein). These can be accessed at https://help.instagram.com/581066165581870.

Information on data processing by Facebook can be found in the privacy policy of the Instagram service at:

https://privacycenter.instagram.com/policy/

b) Which data do we process for which purpose?

aa) Operation of my Instagram account

The purpose of operating my Instagram account is to get in touch with the users and visitors of the Instagram social network and to engage in an exchange. Sometimes I provide direct information about my company and related offers, such as events I have held or are currently running, special offers and offers, etc.

I’m also able to get statistics about visits and interactions with my account. These are created by Meta Platforms Ireland. This enables me to control the marketing of my activity better and in a more targeted manner. In doing so, I may occasionally gain knowledge of the Instagram profiles of individual users who like my fan page and/or use the site’s applications. This enables me to provide the users concerned with improved content and functions via my Instagram fan page.

In order to further improve my content, I can also access demographic and geographic evaluations based on the information collected when my account is visited. This enables me to place targeted interest-based advertisements without being immediately aware of your identity as a visitor.

If you use multiple end devices when you visit Instagram, collection and evaluation can also take place across devices, provided you visit my fan page as a registered user and logged in with your Instagram profile.

Created visitor statistics are only forwarded to me anonymously. Access to the underlying data is not possible for me.

bb) Use of insights and cookies

As part of my instagram fan page, I use the „Insights“ service from Meta Platforms Ireland to receive anonymous statistical data on the visitors to my fan page.

When you visit my fan page, Meta Platforms Ireland stores a corresponding data package, a so-called „cookie“, on your end device, which contains an assignable user code. If you are registered as an Instagram user, this user code can be linked to your data. The information stored in this way is processed by Meta Platforms Ireland. It is also possible that third parties can use this information from the Instagram cookies to provide services to the companies advertising on Instagram.

Unless previously deleted, the cookie is active for two years.

For more information on Page Insights please see the Page Insights Addendum between Meta Platforms Ireland and myself on data processing stewardship:

https://www.facebook.com/legal/terms/page_controller_addendum

Further information on the use of cookies by Meta Platforms Ireland can be found in instagram’s cookie policy:

https://help.instagram.com/1896641480634370

c) Legal Basis

The processing of personal data by me is based on my legitimate interests in an effective exchange with Instagram users, visitors to my profile and in connection with communication with users on my social media profiles, including my company presentation in accordance with Article 6 Paragraph 1 f) GDPR.

d) Transfer of data and data transfer to the USA

Data collected when you visit my fan page may be forwarded to Meta Platforms Inc based in the USA and processed there. There is no adequacy decision by the EU Commission for data transfers to the USA. Facebook ensures an appropriate level of data protection via the EU standard contractual clauses.

I do not pass on data as part of the operation of my fan pages.

e) Objection option via your Instagram account

As an Instagram user, you can use the advertising preferences settings in your account to set the extent to which your user behavior may be recorded when you visit our fan page. Instagram also provides an objection form:

https://www.facebook.com/help/instagram/2060335334241802

YouTube

I have a social media profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

a) What data do we process and for what purpose?

YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As part of my YouTube channel, no personal data is processed directly by me.

However, if you enter data yourself as a registered user on YouTube, such as your user name and the content published under your own account, this will be processed by me if I share your comments, reply to your comments, or write a post that refers to your profile references. In this case, the data you enter on YouTube, in particular your (user) name and the content published under your account, will be processed insofar as this is included in my offer and made accessible to my fans.

For all further data processing within the scope of using the YouTube service and its functionalities, Google Ireland Limited is responsible within the meaning of Art. 4 No. 7 GDPR. I have no influence on the type and scope of the data processed by Google as part of the YouTube service, the type of processing, the use of the data or the transfer of this data to third parties.

Information about which data is processed by YouTube and for what purposes can be found in Google’s data protection declaration: https://www.google.de/policies/privacy/.

b) Legal Basis

The processing of personal data by me is based on my legitimate interests in an effective exchange with the users of YouTube, the visitors to my profile and in connection with the communication with the users on my social media profiles including my company presentation in accordance with Art. 6 Paragraph 1 f) GDPR.

c) Disclosure of data and data transmission to the USA

Data collected when you visit my YouTube channel may be forwarded to Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, based in the USA, and processed there. There is no adequacy decision by the EU Commission for data transfers to the USA. Google ensures an appropriate level of data protection via the EU standard contractual clauses.

Incidentally, I do not pass on data to third parties as part of the operation of my company profile.