Data protection notice Social Media

Data protection notice Social Media

In the following, we will inform you about the how your personal data is handled. Here, personal data is all data with which you can be personally identified. 

 

The controller responsible for data processing in the sense of the General Data Protection Regulation (GDPR), is EDELRID GmbH & Co. KG, Achener Weg 66, 88316 Isny, Germany, Tel.:  +49 (0) 7562 981 0,  

E-Mail: mail (at) edelrid.de , insofar as we have not processed the data you have transmitted to us over various social media channels exclusively ourselves.

 

Contact Data Protection Officer EDELRID GmbH & Co. KG

Pascal Grommisch

EDELRID GmbH & Co. KG, Achener Weg 66, 88316 Isny, Germany

 

If you have questions about data protection or other matters relating to data protection law, you are welcome to send an email to the following email address: datenschutz (at) edelrid.de 


 

Facebook

Please check what personal data you share with us over Facebook carefully. As long as you are logged into your Facebook account and visiting our Facebook profile, Facebook can attribute this to your Facebook profile. We expressly advise you that Facebook saves its users’ data (E.g., personal information IP address etc.) and may use it for business purposes. You can find more information about Facebooks’ data processing in Facebook’s privacy policy under https://de-de.facebook.com/policy.php.

We have no influence on the collection of data and its further processing by Facebook. Furthermore, we cannot determine to what extent, at what location and for what period Facebook stores its data, to what extent Facebook meets its obligation to erase data, what evaluations and connections are made by Facebook and to whom Facebook passes on data. If you want to avoid Facebook processing the personal data that you send to us, please contact us in a different way.  

To the extent that the data you transmit to us via Facebook is also or exclusively processed by Facebook (insights data), Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is, together with us, the controller responsible for data processing in the sense of the General Data Protection Regulation (GDPR). The data processing takes place on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can see here: https://www.facebook.com/legal/terms/page_controller_addendum. 

Furthermore, the use of certain Facebook products, such as the so-called "Facebook Business Tools", and the data processing thus performed, is subject to a subsidiary agreement between us and Facebook Ireland Ltd. as joint controllers, in accordance with Art. 26 GDPR, which you can see here: https://www.facebook.com/legal/controller_addendum

The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others, determines the purposes and means of the processing of personal data.

Facebook’s Data Protection Officer

Can be contacted using the online contact  form provided by Facebook under https://www.facebook.com/help/contact/540977946302970.



 

Data Processing for statistical and marketing purposes

Page Insights

Facebook provides us with so-called Page Insights for our Facebook pages: https://www.facebook.com/business/a/page/page-insights. This is summarized data from which we can draw conclusions about how people interact with our pages. Page Insights can be based on personal data which is collected in connection with a visit or an interaction by a person with or to our pages and their content. In accordance with Art. 6 para. 1 lit. f GDPR, this serves, in the context of a balancing of interests, the protection of our legitimate interests in optimizing the presentation of our offering and effective communication with clients and interested parties. You can object to the processing of your data for the purposes named at any time by changing your settings for advertisements in your Facebook account accordingly under https://www.facebook.com/settings?tab=ads.

 

Facebook Lead Ads

We use the function “Lead Ads” from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”), to collect and process certain personal data from interested parties – so-called ‘leads’ - using a contact form presented on Facebook’s websites (so-called ‘instant form’). The content and scope of the data requested in this form depends on the focus of the respective lead campaign. The processing of the data is thus strictly connected to the purposes of the respective lead-ad campaign. These purposes are clearly named in the context of the lead-ad or the form, before the data given is transmitted. According to the focus of the lead-ad campaign, the legal basis for the data processing is either your express consent in accordance with Art. 6 par. 1 lit. a GDPR (E.g., measures for direct advertising such as registering for sending an email newsletter) or our legitimate interest in the optimal marketing of our offering in accordance with Art. 6 para. 1 lit. f GDPR. There is no disclosure of data to third parties. In the context of the above-named services, data collected using instant forms can be stored on servers belonging to Facebook Inc., 1601 Willow Rd, Menlo Park, CA 94025, USA. Further information on data processing via Facebook Lead Ads can be found in Facebook’s privacy policy under https://de-de.facebook.com/privacy/explanation


 

Instagram

In respect of the processing of your personal data on this internet presence, we are "joint controllers" together with Instagram Inc. (“Instagram”) in the sense of Art. 26 GDPR, in that in order to use the information service offered by Instagram under …. , we use the technical platform and services of Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.

Instagram is a part of the Facebook group of businesses and shares infrastructure, systems, technology and, if necessary, personal data (E.g., personal data, IP numbers etc.) with Facebook and other Facebook businesses.

We process personal data via our Instagram pages ourselves (see 1.), however, data processing is also carried out at the same time by Facebook as the operator of the Instagram platform (see 2.).

Please check what personal data you share with us over Instagram carefully. As long as you are logged into your Instagram account and visiting our Instagram page, Instagram can attribute this to your Facebook profile. We expressly advise you that Instagram passes this data to Facebook and its connected businesses. Facebook saves its users’ data (E.g., personal information IP address etc.) and may use it for business purposes.

You can find more information about data processing by Instagram and also Facebook under https://www.instagram.com/legal/privacy/ and https://de-de.facebook.com/policy.php.

If your contact leads to a contract being concluded, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be erased when the processing of your enquiry is completed, so long as there is no contradictory legal obligation to retain it. We assume that processing has been completed when the circumstances lead to the conclusion that the respective situation has been finally resolved.

We give your payment information to the authorized credit institution in the context of payment handling, to the extent necessary for payment processing. The legal basis for passing on the data is Art. 6 para. 1 lit. b GDPR.

For contracts for the delivery of goods, we pass the personal data that we have collected in the context of processing the contract to the transport company commissioned with the delivery, to the extent that this is necessary for the delivery of the goods. 

The data that you enter in Instagram, particularly your username and the content published in your account, is also processed by us to the extent that we may link your posts, answer them or create posts which refer to your account. In this way the data that you publish and spread using Instagram will be included in our offering and made accessible to our followers. 

However, the data that you enter or disclose on our Instagram page is also received by Instagram, respectively Facebook, who may use it for their own purposes and be responsible for passing it to third parties. The public also receives the published personal data, E.g., in the context of contributions, therefore potentially everyone is a recipient. 

The period for which personal data is stored depends on the respective legal basis, on the purpose of processing and – to the extent that it is relevant- also the statutory retention period (E.g., retention periods in commercial law and tax law). In the case of personal data processing on the basis of express consent according to Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws his consent. If statutory retention periods exist for data processed in the context of contractual or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely erased on the expiration of the retention period, so long as they are no longer necessary for contractual fulfilment or contract initiation and/or there is no continuing legitimate interest in further storage on our part. 

In the case of personal data processing on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object in accordance with Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. 

In the case of personal data processing for the purpose of direct advertising on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object in accordance with Art. 21 para. 2 GDPR. Unless otherwise indicated by other information in this declaration about specific processing situations, stored personal data will be erased when it is no longer necessary for the purposes for which it was collected or otherwise processed. 

Processing of Personal Data by Instagram and Facebook 

To the extent that the data you transmit to us via Facebook is also or exclusively processed by Facebook (insights data), Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is, together with us, also the controller responsible for data processing in the sense of the General Data Protection Regulation (GDPR). The data processing takes place on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can see here: https://www.facebook.com/legal/terms/page_controller_addendum. 

Facebook’s Data Protection Officer

Can be contacted using the online contact form provided by Facebook under https://www.facebook.com/help/contact/540977946302970.

The Instagram page of EDELRID GmbH & Co. KG is part of the online platform operated by Facebook under https://www.instagram.com/. The purpose of the processing connected to this platform by Instagram (particularly the operation of the platform itself and the placement of advertising on the platform), its legal basis and the legitimate interests pursued in the process, are described in Instagram’s privacy policies under https://www.instagram.com/legal/privacy/ . 

We have no influence on the collection of data and its further processing by Instagram. Furthermore, we cannot determine to what extent, at what location and for what period the data from visiting our Instagram page is stored by Instagram and Facebook, to what extent Facebook meets its obligation to erase data, what evaluations and connections are made by Instagram or Facebook and to whom the data is passed. 

What personal data and therefore information about the users of the platform Instagram and Facebook receive and how it is used, is described in general terms by Instagram itself in its data usage policy under https://help.instagram.com/519522125107875.

If you use Instagram, your personal data will be collected, transmitted, stored, made public, and used, regardless of whether your domicile is in the United States, Ireland or any other country in which Facebook carries on business, transmitted, stored and used. 

For one thing, Instagram and Facebook process the data you have given voluntarily, such as name, username, email address and telephone number. 

For another, Instagram and Facebook also evaluate the content you share, work out what topics you are interested in, store and process private messages that you send directly to other users and can determine your location from GPS data, information about wireless networks or your IP address, in order to send you advertising or other content. 

Finally, Facebook also receives information even when you do not have an account, for example when you view content. This so-called ‘log data’ can include the IP address, browser type, operating system, information about the previously visited website, and the website being visited, your location, your mobile service provider, the end device used (including device ID and application ID), the search terms you used and cookie information. 

Further information about this is available from the following Instagram support pages: www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/.

In addition, the use of certain Facebook products such as the so-called "Facebook Business Tools", and the connected data processing, is carried out subject to a subsidiary agreement between us and Facebook Ireland Ltd. as joint controllers, in accordance with Art. 26 GDPR, which you can see here: https://www.facebook.com/legal/controller_addendum


 

Data Processing for statistical and marketing purposes

Instagram provides us with so-called Page Insights for our Instagram pages. This is summarized data from which we can draw conclusions about how people interact with our pages. Page Insights can be based on personal data which is collected in connection with a visit or an interaction by a person with or to our pages and their content. In accordance with Art. 6 para. 1 lit. f GDPR, this serves, in the context of a balancing of interests, the protection of our legitimate interests in optimizing the presentation of our offering and effective communication with clients and interested parties. You can object to the processing of your data for the purposes named at any time by changing your settings for advertisements in your Instagram account accordingly under https://www.facebook.com/settings?tab=ads.

 

LinkedIn

Please check what personal data you share with us over the social medium LinkedIn carefully. We expressly advise you that LinkedIn saves its users’ data (E.g., personal information IP address etc.) and may use it for business purposes. You can find more information about LinkedIn’s data processing in LinkedIn’s privacy policy under https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv.

We have no influence on the collection of data and its further processing by LinkedIn. Furthermore, we cannot determine to what extent, at what location and for what period LinkedIn stores its data, to what extent LinkedIn meets its obligation to erase data, what evaluations and connections are made by LinkedIn and to whom LinkedIn passes on data. If you want to avoid LinkedIn processing the personal data that you send to us, please contact us in a different way. You can find our complete contact information in our masthead on LinkedIn.

To the extent that the data you transmit to us via LinkedIn is also or exclusively processed by LinkedIn, the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland is, together with us, the controller responsible for data processing in the sense of the General Data Protection Regulation (GDPR) if you reside in a European Union member state, in Iceland, Liechtenstein, Norway or Switzerland. If you reside in another country, the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA is, together with us, the controller responsible for data processing in the sense of the GDPR. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others, determines the purposes and means of the processing of personal data.


 

Contacting the Data Protection Officer of LinkedIn Ireland Unlimited Company

You can contact LinkedIn Ireland Unlimited Company, respectively the LinkedIn Corporation, by using the contact form accessible via the following link: 

https://www.linkedin.com/help/linkedin/ask/TSO-DPO 

 

Twitter

Please check what personal data you share with us over Twitter carefully. We expressly advise you that Twitter saves its users’ data (E.g., personal information IP address etc.) and may use it for business purposes. You can find more information about Twitter’s data processing in Twitter’s privacy policy under https://twitter.com/de/privacy.

 

We have no influence on the collection of data and its further processing by Twitter. Furthermore, we cannot determine to what extent, at what location and for what period the data is stored, to what extent Twitter meets its obligation to erase data, what evaluations and connections are made and to whom the data is passed on. If you want to avoid Twitter processing the personal data that you send to us, please contact us in a different way. You can find our complete contact information in our masthead on Twitter.

 

To the extent that the data you transmit to us via Twitter is also or exclusively processed by Twitter, the Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland is, together with us, the controller responsible for data processing in the sense of the General Data Protection Regulation (GDPR)

 

The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others, determines the purposes and means of the processing of personal data.

 

Contacting the Data Protection Officer of Twitter:

Twitter’s data protection officer can be contacted via the online contact form provided by Twitter under: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp?lang=de 



 

XING

Please check carefully what personal data you share with us over the social medium XING which is operated by XING SE, Dammtorstraße 30, 20354 Hamburg. We expressly advise you that XING saves its users’ data (E.g., personal information IP address etc.) and may use it for business purposes. You can find more information about XING ‘s data processing in XING’s data protection declaration under

https://privacy.xing.com/de/datenschutzerklaerung.

 

We have no influence on the collection of data and its further processing by XING. Furthermore, we cannot determine to what extent, at what location and for what period the data is stored, to what extent XING meets its obligation to erase data, what evaluations and connections are made and to whom the data is passed on. If you want to avoid XING processing the personal data that you send to us, please contact us in a different way. You can find our complete contact information in our masthead on XING.

 

To the extent that the data you transmit to us via XING is also or exclusively processed by XING, XING SE, Dammtorstraße 30, 20354 Hamburg, Germany is, together with us, the controller responsible for data processing in the sense of the General Data Protection Regulation (GDPR). The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others, determines the purposes and means of the processing of personal data.


 

Contact information: Data Protection Officer of XING SE 

Dammtorstraße 30, 20354 Hamburg, Germany

E-Mail: [email protected]


 

Data processing when making contact

We collect personal data ourselves, for example when you contact us using the contact form or messenger contact. What data we collect when you use the contact form to contact us can be seen in the relevant contact form. These data are used and stored exclusively for the purpose of answering your enquiry or for contacting and the related technical administration. The legal basis for processing the data is our legitimate interest in answering your enquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact has the aim of concluding a contract, an additional legal basis is Art. 6 para. 1 lit. b GDPR. Your data will be erased after the processing of your enquiry is complete, so long as no statutory retention obligation contradicts this. We assume that the processing of your enquiry is complete when the circumstances lead to the conclusion that the respective situation has been finally resolved.

 

Rights of the data subject

The data protection law currently in force gives you comprehensive rights against the controller in respect of the processing of your personal data (information and intervention rights). We will inform you about these rights in the following: 

  • Right to information in accordance with Art. 15 GDPR;
  • Right to rectification in accordance with Art. 16 GDPR;
  • Right to erasure in accordance with Art. 17 GDPR;
  • Right to restriction of processing in accordance with Art. 18 GDPR;
  • Right to notification in accordance with Art. 19 GDPR;
  • Right to data portability in accordance with Art. 20 GDPR;
  • Right to withdraw consent in accordance with Art. 20 GDPR

General right to object

If in the context of a balancing of interests, we process your personal data on the basis of our compelling legitimate interest, you have the right to object to this processing at any time for reasons arising from your particular situation and with future effect. If you exercise your right to object, we will stop processing the relevant data. However, further processing is reserved if we can demonstrate compelling legitimate grounds for the processing which override your interests, basic rights and basic freedoms or if the processing is for the establishment, exercise or defense of legal claims. 

 

Duration of storage of personal data 

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and – where relevant – also the respective statutory retention period (E.g., retention periods in commercial law and tax law). 

In the case of personal data processing on the basis of express consent according to Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws his consent. If statutory retention periods exist for data processed in the context of contractual or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely erased on the expiration of the retention period, so long as they are no longer necessary for contractual fulfilment or contract initiation and/or there is no continuing legitimate interest in further storage on our part. 

In the case of personal data processing on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object in accordance with Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or the processing is for the purpose of the establishment, exercise or defense of legal claims. 

In the case of personal data processing for the purpose of direct advertising on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object in accordance with Art. 21 para. 2 GDPR. Unless otherwise indicated by other information in this declaration about specific processing situations, stored personal data will be erased when it is no longer necessary for the purposes for which it was collected or otherwise processed.