24. Social Media

Facebook:

social network:

facebook.com

Please be advised that Facebook is just one of a number of ways of getting in touch with us and receiving information from us.

This fanpage is operated jointly with (‘platform operator’):

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland

An agreement in line with Art. 26 (1) GDPR has been drawn up between those with joint responsibility to determine who is responsible for what in relation to GDPR             

The agreement within the meaning of Art. 26 (1) GDPR can be found using the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

The platform operator will make the main contents of this agreement available to the data subjects.

Data privacy contact information:

Data privacy contact information can be found in our privacy statement linked to here and the platform operator’s data protection officer can be contacted using the following online form:

https://www.facebook.com/help/contact/540977946302970

Categories of data subjects:

fanpage visitors that are registered with the social network and those that are not.

Categories of personal data:

Data that we process from registered visitors to our fanpage:

User name that they have registered with, freely available profile information (e.g. names, occupation, addresses, contact information, and where applicable particular categories of personal data such as religious affiliation, health data etc.), data arising from the sharing of content, exchanging messages and communication, data required as part of processing the contract to become a registered user; in other respects we only process pseudonymized data such as statistics and insights about how users interact with posts, pages, videos and other content made available on the fanpage (page activity, page views, “likes” data, reach, general demographics, location and interest related data by age, gender, state, city, language), evaluations of the success and background of our adverts.

We are unable to match the pseudonymized data with the corresponding identifying features (e.g. name). We are, therefore, unable to identify individual visitors that remain anonymous to us.

Data that we process from non-registered visitors to our fanpage:

pseudonymized data such as statistics and insights about how users interact with posts, pages, videos and other content made available on the fanpage (page activity, page views, “likes” data, reach, general demographics, location and interest related data by age, gender, state, city, language), evaluations of the success and background of our adverts.

We are unable to match the pseudonymized data with the corresponding identifying features (e.g. name). We are, therefore, unable to identify individual visitors that remain anonymous to us.

The following link gives details of the data that the platform operator processes concerning registered and non-registered visitors to our fanpage:

https://www.facebook.com/privacy/explanation

We have no control over the use of any such tools by the platform operator and would not expect to be informed about any potential use of the same. If tools of this kind are used by the platform operator on our fanpage, we have neither commissioned nor condoned them, nor do we support their use in any way. Neither do we have access to the resultant data analysis. Furthermore, it is not possible for us to prevent the use of such tools on our fanpage, turn them off or otherwise effectively control their usage.

Data origins:

We receive data either directly from the data subjects or from the platform operator.

Legal basis for processing data

We process data on the following legal bases:

• Art. 6 (1) a) GDPR: Consent of the data subjects

• where applicable Art. 6 (1) b) GDPR: Performance of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject

• Art. 6 (1) f) GDPR legitimate interest
  • To optimize our fanpage
  • To promote the sales of our products and services or drive demand
  • To simplify communication and the exchange of data

We only process special categories of personal data, if at all, on the following legal bases:

• Art. 9 (2) a) GDPR: Consent of the data subject
• Art. 9 (2) e) GDPR: The data subject has manifestly made the personal data public

The legal bases used by the platform operator for the processing of data can be found using the following link:

https://www.facebook.com/about/privacy/legal_bases If the data subjects can be tracked through the collection of their data, be that through the use of cookies or similar techniques, or through the storing of IP addresses, the platform operator should obtain the prior consent of the data subjects.

In particular, the platform operator is obligated to inform the data subjects for what purpose and on what legal basis the first visit to a fanpage, even by non-registered visitors, is being recorded in so-called local storage and whether the personal data of non-registered visitors (e.g. IP addresses or other such data, that is consolidated as personal data) is used to create profiles.

We have no influence or control over whether the collection of data by the platform operator is lawful.

Purpose of data processing:

The data is being processed for the following purposes:

• Public image and advertising

• Communication and data exchange

• Event management
• Contract initiation and processing, where applicable

We have no influence over the purposes for which the platform operator uses data. We also have no effective methods for controlling this.

Storage period

The storage and deletion of data is the responsibility of the platform operator in line with the agreement within the meaning of Art. 26 (1) GDPR. Information about this can be found using the following link:

https://www.facebook.com/privacy/explanation

We have no influence over whether the platform operator adheres to the legal deletion deadlines nor over the way in which they delete the data. We also have no effective methods for controlling this.

Categories of receiver

Only our employees and service providers that look after our fanpage and require data for the above mentioned purposes have access to data we process. If the data subjects have posted their data publicly on our fanpage, then it will be accessible by our registered and, where applicable, non-registered users.

The categories of receivers that the platform operator discloses information to or that registered users disclose their data to, and information about internal corporate data exchanges can be found using the following link: https://www.facebook.com/privacy/explanation

We have no influence on the disclosure of data to individual receivers (categories) by the platform operator. We also have no effective methods for controlling this.

Data transfer to third countries

If the data subjects have posted their data publicly on our fanpage, then it will be accessible by our registered and, where applicable, non-registered users across the world.

As part of the operation of our fanpage, data will also be transferred to third countries by the platform operator.

Data transfers to third countries related hereto are covered by a European Commission adequacy decision as per Art. 45 GDPR or through appropriate safeguards as per Art. 46 GDPR:

Facebook Inc. is Privacy Shield certified: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

Due to the EU-US Privacy Shield understanding, Facebook must also afford the data subjects different rights, which are then asserted directly towards Facebook.

We have no influence over data transfers to third countries undertaken by the platform operator. We also have no effective methods for controlling this.

Logic involved and significance of profiling and/or automated decision-making based on the collected data

If the data subjects can be tracked through the collection of their data, be that through the use of cookies or similar techniques, or through the storing of IP addresses, the platform operator is obligated to inform them of this, as per the agreement within the meaning of Art. 26 (1) GDPR. In particular, the platform operator is obligated to advise the data subjects of the purposes and legal bases, if, after visiting a subpage of our fanpage, a session cookie and three cookies with a length of between four months and two years have been stored.

Information about this can be found using the following link:

https://www.facebook.com/privacy/explanation

https://www.facebook.com/policies/cookies/

We have no control over the use of any such tools by the platform operator and would not expect to be informed about any potential use of the same. If tools of this kind are used by the platform operator on our fanpage, we have neither commissioned nor condoned them, nor do we support their use in any way. Neither do we have access to the resultant data analysis. Furthermore, it is not possible for us to prevent the use of such tools on our fanpage, turn them off or otherwise effectively control their usage.

Rights of the data subjects:

Those with joint responsibility must afford the data subjects different rights with regards to the processing of their data, which are, based on the agreement within in the meaning of Art. 26 (1) GDPR asserted directly towards the platform operator:

https://www.facebook.com/privacy/explanation

As per Art. 15 to Art. 18 GDPR, in certain circumstances, the data subject has the right to access, correction or deletion of their respective personal data or the right to restrict data processing by controllers. Data subjects also have the right to withdraw any consent they have given relating to the processing of their personal data at any time with effect for the future (Art. 7 (3) GDPR). They can object (Art. 21 (1) GDPR) to the further processing of their data, with the exception of in the legitimate interests of the controller as per Art. 6 (1) f) GDPR, if there are compelling legitimate grounds relating to their particular personal situation and the controller has no compelling legitimate grounds for processing the data. If personal data is processed for the purpose of direct marketing, the data subject has the right to object to this processing at any time with effect for the future (Art. 21 (2) GDPR). If data is processed with the consent of the data subject in accordance with Art. 6 (1) a), Art. 9 (1) a) GDPR or in accordance with Art. 6 (1) b) GDPR based on a contract with the data subject, and is processed with the assistance of automated systems, the data subject can, as per Art. 20 (1) GDPR, request to receive the personal data concerning them in a structured, commonly used and machine-readable format and to have said data transmitted to a third party nominated by the data subject.

In principle, data subjects have the right not to be subject to a decision based solely on automated processing as per Art. 22 (1) GDPR. If such an automated decision is permitted as per Art. 22 (2) a) to c) GDPR, the data subject is afforded the following rights as per Art. 22 (3) GDPR: the right to express their point of view, the right to obtain human intervention on the part of the controller, the right to contest the automated decision (right of appeal).

Furthermore, the data subject has the right to lodge a complaint with a supervisory authority if they are of the view that the processing of their personal data violates the General Data Protection Act, Art. 77 GDPR. The supervisory authority responsible for the platform operator is:

Data Protection Commission

21 Fitzwilliam Square, Dublin 2
D02 RD28, Ireland

Website: http://gdprandyou.ie/contact-us/

Instagram: 

social network:

Instagram

Please be advised that Instagram is just one of a number of ways of getting in touch with us and receiving information from us.

This fanpage is operated jointly with (‘platform operator’):

Facebook Inc.
Menlo Park
CA 512374
USA

Responsible for the processing of data for persons resident in the European Union:

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland

An agreement in line with Art. 26 (1) GDPR has been drawn up between those with joint responsibility to determine who is responsible for what in relation to GDPR             

The agreement within the meaning of Art. 26 (1) GDPR can be found using the following link

Currently no link available!

The platform operator will make the main contents of this agreement available to the data subjects.

Data privacy contact information:

Data privacy contact information can be found in our privacy statement linked to here and the platform operator’s data protection officer can be contacted here:

https://www.facebook.com/help/contact/540977946302970

Categories of data subjects:

fanpage visitors that are registered with the social network and those that are not

Categories of personal data:

Data that we process from registered visitors to our fanpage:

User name that they have registered with, freely available profile information (gender, selected country, preferences, interests), data arising from the sharing of content, exchanging messages and communication, data required as part of processing the contract to become a registered user; in other respects we only process pseudonymized data such as statistics and insights about how users interact with posts, pages, videos and other content made available on the fanpage (page activity, page views, “likes” data, reach, general demographics, location and interest related data by age, gender, state, city, language), evaluations of the success and background of our adverts.

We are unable to match the pseudonymized data with the corresponding identifying features (e.g. name). We are, therefore, unable to identify individual visitors that remain anonymous to us.

Data that we process from non-registered visitors to our fanpage:

pseudonymized data such as statistics and insights about how users interact with posts, pages, videos and other content made available on the fanpage (page activity, page views, “likes” data, reach, general demographics, location and interest related data by age, gender, state, city, language), evaluations of the success and background of our adverts.

We are unable to match the pseudonymized data with the corresponding identifying features (e.g. name). We are, therefore, unable to identify individual visitors that remain anonymous to us.

The following link gives details of the data that the platform operator processes concerning registered and non-registered visitors to our fanpage:

https://help.instagram.com/519522125107875

Data origins

We receive data either directly from the data subjects or from the platform operator.

We have no influence or control over whether the collection of data by the platform operator is lawful.

Legal basis for processing data

We process data on the following legal bases:

• Art. 6 (1) a) GDPR: Consent of the data subjects

• where applicable Art. 6 (1) b) GDPR: Performance of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject

• Art. 6 (1) f) GDPR legitimate interest
  • To optimize our fanpage
  • To promote the sales of our products and services or drive demand
  • To simplify communication and the exchange of data

We only process special categories of personal data, if at all, on the following legal bases:

• Art. 9 (2) a) GDPR: Consent of the data subject
• Art. 9 (2) e) GDPR: The data subject has manifestly made the personal data public

The legal bases used by the platform operator for the processing of data can be found using the following link:

https://help.instagram.com/519522125107875 If the data subjects can be tracked through the collection of their data, be that through the use of cookies or similar techniques, or through the storing of IP addresses, the platform operator should obtain the prior consent of the data subjects.

In particular, the platform operator is obligated to inform the data subjects for what purpose and on what legal basis the first visit to a fanpage, even by non-registered visitors, is being recorded in so-called local storage and whether the personal data of non-registered visitors (e.g. IP addresses or other such data, that is consolidated as personal data) is used to create profiles.

We have no influence or control over whether the collection of data by the platform operator is lawful.

Purpose of data processing

The data is being processed for the following purposes:

• Public image and advertising
• Communication and data exchange
• Event management
• Contract initiation and processing, where applicable

We have no influence over the purposes for which the platform operator uses data. We also have no effective methods for controlling this.

Storage period:

The storage and deletion of data is the responsibility of the platform operator in line with the agreement within the meaning of Art. 26 (1) GDPR. Information about this can be found using the following link:

https://help.instagram.com/519522125107875

We have no influence over whether the platform operator adheres to the legal deletion deadlines nor over the way in which they delete the data. We also have no effective methods for controlling this.

Categories of receiver

Only our employees and service providers that look after our fanpage and require data for the above mentioned purposes have access to data we process. If the data subjects have posted their data publicly on our fanpage, then it will be accessible by our registered and, where applicable, non-registered users.

The categories of receivers that the platform operator discloses information to or that registered users disclose their data to, and information about internal corporate data exchanges can be found using the following link:https://help.instagram.com/519522125107875

We have no influence on the disclosure of data to individual receivers (categories) by the platform operator. We also have no effective methods for controlling this.

Data transfer to third countries

If the data subjects have posted their data publicly on our fanpage, then it will be accessible by our registered and, where applicable, non-registered users across the world.

As part of the operation of our fanpage, data will also be transferred to third countries by the platform operator.

Data transfers to third countries related hereto are covered by a European Commission adequacy decision as per Art. 45 GDPR or through appropriate safeguards as per Art. 46 GDPR:

Facebook Inc. is Privacy Shield certified: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

Due to the EU-US Privacy Shield understanding, Facebook must also grant the persons concerned other rights, which are then asserted directly towards Facebook.

Due to the EU-US Privacy Shield understanding, Facebook must also grant the persons concerned other rights, which are then asserted directly towards Facebook.

Logic involved and significance of profiling and/or automated decision-making based on the collected data

If the persons concerned can be tracked through the collection of their data, be that through the use of cookies or similar techniques, or through the storing of IP addresses, the platform operated is obligated to inform them of this, as per the agreement within the meaning of Art. 26 (1) GDPR. In particular, the platform operator is obligated to advise the data subjects of the purposes and legal bases, if, after visiting a subpage of our fanpage, a session cookie and three cookies with a length of between four months and two years have been stored.

Information about this can be found using the following link:

https://help.instagram.com/1896641480634370?ref=ig

We have no control over the use of any such tools by the platform operator and would not expect to be informed about any potential use of the same. If tools of this kind are used by the platform operator on our fanpage, we have neither commissioned nor condoned them, nor do we support their use in any way. Neither do we have access to the resultant data analysis. Furthermore, it is not possible for us to prevent the use of such tools on our fanpage, turn them off or otherwise effectively control their usage.

Rights of the data subjects:

Those with joint responsibility must afford the data subjects different rights with regards to the processing of their data, which are, based on the agreement within in the meaning of Art. 26 (1) GDPR asserted directly towards the platform operator:

https://help.instagram.com/519522125107875

As per Art. 15 to Art. 18 GDPR, in certain circumstances, the data subject has the right to access, correction or deletion of their respective personal data or the right to restrict data processing by controllers. Data subjects also have the right to withdraw any consent they have given relating to the processing of their personal data at any time with effect for the future (Art. 7 (3) GDPR). They can object (Art. 21 (1) GDPR) to the further processing of their data, with the exception of in the legitimate interests of the controller as per Art. 6 (1) f) GDPR, if there are compelling legitimate grounds relating to their particular personal situation and the controller has no compelling legitimate grounds for processing the data. If personal data is processed for the purpose of direct marketing, the data subject has the right to object to this processing at any time with effect for the future (Art. 21 (2) GDPR). If data is processed with the consent of the data subject in accordance with Art. 6 (1) a), Art. 9 (1) a) GDPR or in accordance with Art. 6 (1) b) GDPR based on a contract with the data subject, and is processed with the assistance of automated systems, the data subject can, as per Art. 20 (1) GDPR, request to receive the personal data concerning them in a structured, commonly used and machine-readable format and to have said data transmitted to a third party nominated by the data subject.

In principle, data subjects have the right not to be subject to a decision based solely on automated processing as per Art. 22 (1) GDPR. If such an automated decision is permitted as per Art. 22 (2) a) to c) GDPR, the data subject is afforded the following rights as per Art. 22 (3) GDPR: the right to express their point of view, the right to obtain human intervention on the part of the controller, the right to contest the automated decision (right of appeal).

Furthermore, the data subject has the right to lodge a complaint with a supervisory authority if they are of the view that the processing of their personal data violates the General Data Protection Act, Art. 77 GDPR. The supervisory authority responsible for the platform operator is:

Data Protection Commission

21 Fitzwilliam Square, Dublin 2
D02 RD28, Ireland

Webadresse: http://gdprandyou.ie/contact-us/

Twitter:

social network:

Twitter

Please be advised that our Twitter channel is just one of a number of ways of getting in touch with us and receiving information from us.

Our Twitter account (‘fanpage’) is operated jointly with (‘platform operator’):

Twitter Inc..
1355 Market Street #900
San Francisco
CA 94103, USA

Responsible for the processing of data for persons resident outside of the United States:

Twitter International Company
One Cumberland Place
Fenian Street
Dublin 2 D02 AX07
Irland

An agreement in line with Art. 26 (1) GDPR has been drawn up between those with joint responsibility to determine who is responsible for what in relation to GDPR

The platform operator will make the main contents of this agreement available to the data subjects: Not currently available.

Data privacy contact information:

Data privacy contact information can be found in our privacy statement linked to here.

The platform operator’s data protection officer can be contacted using the following online form

https://support.twitter.com/forms/privacy

https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp

or at the following address:

Twitter International Company
Attn: Data Protection Officer
One Cumberland Place, Fenian Street
Dublin 2, D02 AX07 IRLAND　

Twitter, Inc.
Attn: Privacy Policy Inquiry
1355 Market Street, Suite 900
San Francisco, CA 94103

Furthermore, the data subjects can find more information here:

https://support.twitter.com/articles/20170320#

Categories of data subjects:

fanpage visitors that are registered with the social network and those that are not

Data subjects’ are hereby notified that they are responsible for their own use of Twitter’s short message service and its related functions. This applies, in particular, to the use of interactive functions (e.g. sharing, rating).

Categories of personal data:

Data that we process from registered visitors to our fanpage:

User ID or user name that the data subject has registered with, freely available profile information (name, email address, telephone number), data arising from the sharing of content, from re-tweeting tweets, from writing tweets linked to the data subject’s Twitter account, from exchanging messages and communication, data required as part of processing the contract to become a registered user, any data and content freely published and disseminated by the data subject on Twitter or via their Twitter account;

Apart from this we can only access specific, non-personal or pseudonymized data about Tweet activity, such as the number of profile and link clicks generated by a specific Tweet. We are unable to match the non-personal or pseudonymized data with the corresponding identifying features (e.g. name). We are, therefore, unable to identify individual visitors that remain anonymous to us.

Data that we process from non-registered visitors to our fanpage:

We can only access specific, non-personal or pseudonymized data about Tweet activity, such as the number of profile and link clicks generated by a specific Tweet. We are unable to match the non-personal or pseudonymized data with the corresponding identifying features (e.g. IP address, name). We are, therefore, unable to identify individual visitors that remain anonymous to us.

Data that we process from visitors to our website:
The IP addresses of our website visitors are not transmitted to the platform operator via the embedded Twitter buttons (hard link) or Tweets on our webpage.

Data that the platform operator processes concerning registered and non-registered visitors to our fanpage:

Data submitted voluntarily such as user ID or user name that the visitor has registered with, freely available profile information (name, email address, telephone number), address book contacts if the data subject uploads or synchronizes their address book, payment information where applicable;

In addition, the platform operator analyses content shared by registered visitors, what subjects they are interested in, stores and processes private messages that are sent directly to other users and can determine their location from GPS data, information from wireless networks or via their IP address, in order to target their adverts and content.

Finally, the platform operator also receives information if visitors, for example, view content, even if they do not have a Twitter account. This so-called “log data” can include IP address, browser type, operating system, information about previously visited websites and pages, their location, their mobile phone provider, the device they are using (incl. device ID and application ID), search terms used and cookie information.

Through the use of Twitter buttons or widgets embedded in websites and the use of cookies, the platform operator can collect data about the websites that registered users visit and link this back to their Twitter profile. This data can be used to offer tailored content or adverts.

Further information about what data the platform operator processes can be found using the following link: https://twitter.com/de/privacy

The platform operator potentially uses analysis tools such as Twitter or Google Analytics to evaluate the data. We have no control over the use of any such tools by the platform operator and would not expect to be informed about any potential use of the same. If tools of this kind are used by the platform operator on our fanpage, we have neither commissioned nor condoned them, nor do we support their use in any way. Neither do we have access to the resultant data analysis. Furthermore, it is not possible for us to prevent the use of such tools on our fanpage, turn them off or otherwise effectively control their usage.

Data origins

We receive data either directly from the data subjects or from the platform operator.

The following link provides information on where the platform operator obtains data subject’s information: https://twitter.com/de/privacy

We have no influence or control over whether the collection of data by the platform operator is lawful.

Legal basis for processing data

We process data on the following legal bases:

• Art. 6 (1) a) GDPR: Consent of the data subjects

• where applicable Art. 6 (1) b) GDPR: Performance of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject

• where applicable Art. 6 (1) b) GDPR: Performance of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject
  • To simplify communication and the exchange of data, whereby the existing communication channels, such as web presence, press releases, print media and events, are usefully supplemented by the fanpage
  • To promote the sales of our products and services, drive demand or to recruit in a transparent way
  • To optimize our fanpage

We only process special categories of personal data, if at all, on the following legal bases:

• Art. 9 (2) a) GDPR: Consent of the data subject
• Art. 9 (2) e) GDPR: The data subject has manifestly made the personal data public

The legal bases used by the platform operator for the processing of data can be found using the following link:

https://twitter.com/de/privacy

We have no influence or control over whether the collection of data by the platform operator is lawful.

Purpose of data processing

We process data for the following purposes:

• Public image and advertising
• Communication and data exchange
• Event management
• Contract initiation and processing, where applicable

Information about the platform operator’s purposes for processing data can be found using the following link: https://twitter.com/de/privacy

We have no influence over the purposes for which the platform operator uses data. We also have no effective methods for controlling this.

Storage period

The storage and deletion of data is the responsibility of the platform operator. Information about this can be found using the following link: https://twitter.com/de/privacy

We have no influence over whether the platform operator adheres to the legal deletion deadlines nor over the way in which they delete the data. We also have no effective methods for controlling this.

Categories of receiver

Only our employees and service providers that look after our fanpage and require data for the above mentioned purposes have access to data we process. If the data subjects have posted their data publicly on our fanpage, freely published and disseminated via Twitter, then this data will be included in our fanpage offering and it will be accessible by our followers, other registered and, where applicable, non-registered users.

The categories of receivers that the platform operator discloses information to or that registered users disclose their data to, and information about internal corporate data exchanges can be found using the following link: https://twitter.com/de/privacy

We have no influence on the disclosure of data to individual receivers

(categories) by the platform operator. We also have no effective methods for controlling this.

Data transfer to third countries

If the data subjects have posted their data publicly on our fanpage, freely published and disseminated via Twitter, then it will be accessible by our followers, other registered and, where applicable, non-registered users across the world.

Data from Twitter, Inc. will be processed as part of the operation of our fanpage.

The related transfer of data to the USA as a third country without an adequate level of data privacy protection is safeguarded by Twitter, Inc.’s EU-US Privacy Shield certification: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

Regardless of where the data subject resides, the platform operator will transfer data to the United states, Ireland and any other country where Twitter Inc. does business, store it there and process it in other ways.

Data transfers to third countries related hereto are covered by a European Commission adequacy decision as per Art. 45 GDPR or through appropriate safeguards as per Art. 46 GDPR: https://twitter.com/de/privacy

We have no influence over data transfers to third countries undertaken by the platform operator. We also have no effective methods for controlling this.

We have no influence over data transfers to third countries undertaken by the platform operator. We also have no effective methods for controlling this.

Logic involved and significance of profiling and/or automated decision-making based on the collected data

If the data subjects can be tracked through the collection of their data, be that through the use of cookies or similar techniques, or through the storing of IP addresses, the platform operator is obligated to inform them of this. Information about this can be found using the following link: https://twitter.com/de/privacy

The platform operator potentially uses analysis tools such as Twitter or Google Analytics to evaluate the data. We have no control over the use of any such tools by the platform operator and would not expect to be informed about any potential use of the same. If tools of this kind are used by the platform operator on our fanpage, we have neither commissioned nor condoned them, nor do we support their use in any way. Neither do we have access to the resultant data analysis. Furthermore, it is not possible for us to prevent the use of such tools on our fanpage, turn them off or otherwise effectively control their usage.

Rights of the data subjects

Those with joint responsibility must afford the data subjects different rights with regards to the processing of their data, which are then asserted directly towards the platform operator:

As per Art. 15 to Art. 18 GDPR, in certain circumstances, the data subject has the right to access, correction or deletion of their respective personal data or the right to restrict data processing by controllers. Data subjects also have the right to withdraw any consent they have given relating to the processing of their personal data at any time with effect for the future (Art. 7 (3) GDPR). They can object (Art. 21 (1) GDPR) to the further processing of their data, with the exception of in the legitimate interests of the controller as per Art. 6 (1) f) GDPR, if there are compelling legitimate grounds relating to their particular personal situation and the controller has no compelling legitimate grounds for processing the data. If personal data is processed for the purpose of direct marketing, the data subject has the right to object to this processing at any time with effect for the future (Art. 21 (2) GDPR). If data is processed with the consent of the data subject in accordance with Art. 6 (1) a), Art. 9 (1) a) GDPR or in accordance with Art. 6 (1) b) GDPR based on a contract with the data subject, and is processed with the assistance of automated systems, the data subject can, as per Art. 20 (1) GDPR, request to receive the personal data concerning them in a structured, commonly used and machine-readable format and to have said data transmitted to a third party nominated by the data subject.

In principle, data subjects have the right not to be subject to a decision based solely on automated processing as per Art. 22 (1) GDPR. If such an automated decision is permitted as per Art. 22 (2) a) to c) GDPR, the data subject is afforded the following rights as per Art. 22 (3) GDPR: the right to express their point of view, the right to obtain human intervention on the part of the controller, the right to contest the automated decision (right of appeal).

Data subjects have the option to restrict the processing of their data in the general settings of their Twitter account, in the ‘data protection and security’ section. Furthermore, the settings options on mobile devices (smartphones, tablets) can be used to restrict the platform operator’s access to contact and calendar information, photos, location data etc. This does, however, depend on the operating system being used.

Data subjects can obtain more information about what data platform operators can see here:

https://support.twitter.com/articles/20172711#

Data subjects can obtain information about the conclusions drawn by the platform operator here: https://twitter.com/your_twitter_data

Data subjects can find information about existing personalization and data protection settings options here (with additional references):  https://twitter.com/personalization

As Twitter Inc. is a non-European provider with a sole European subsidiary in Ireland, one interpretation is that it is not bound by German data protection regulations. This applies to, for example, the right to access, block or delete data or the option to object to the use of usage data for advertising purposes.

Due to the EU-US Privacy Shield understanding Twitter, Inc. must also afford the data subjects different rights, which are then asserted directly towards https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp

Further information about this can be found using the following link: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp

Further information about this social network and other social network and how data subjects can protect their data, can be found here: https://www.youngdata.de/.

Furthermore, the data subject has the right to lodge a complaint with a supervisory authority if they are of the view that the processing of their personal data violates the General Data Protection Act, Art. 77 GDPR. The supervisory authority responsible for the platform operator is:

Data Protection Commission

21 Fitzwilliam Square, Dublin 2
D02 RD28, Ireland

https://www.dataprotection.ie/docs/Contact-us/b/11.htm

Webadresse: http://gdprandyou.ie/contact-us/

Youtube:

social network:

Youtube

Please be advised that Youtube is just one of a number of ways of getting in touch with us and receiving information from us.

This fanpage is operated jointly with (‘platform operator’):

Google LLC
1600 Amphitheatre Pkwy

Mountain View

CA, 94043 USA

An agreement in line with Art. 26 (1) GDPR has been drawn up between those with joint responsibility to determine who is responsible for what in relation to GDPR

The agreement within the meaning of Art. 26 (1) GDPR can be found using the following link:

Not available yet!

The platform operator will make the main contents of this agreement available to the data subjects.

Data privacy contact information:

Data privacy contact information can be found in our privacy statement linked to here and the platform operator’s data protection officer can be contacted using the following online form:

https://policies.google.com/privacy?hl=de&gl=de

Categories of data subjects:

fanpage visitors that are registered with the social network and those that are not

Categories of personal data:

Data that we process from registered visitors to our fanpage:

https://policies.google.com/privacy?hl=de&gl=de

User name that they have registered with, freely available profile information (e.g. names, occupation, addresses, contact information, and where applicable particular categories of personal data such as religious affiliation, health data etc.), data arising from the sharing of content, exchanging messages and communication, data required as part of processing the contract to become a registered user; in other respects we only process pseudonymized data such as statistics and insights about how users interact with posts, pages, videos and other content made available on the fanpage (page activity, page views, “likes” data, reach, general demographics, location and interest related data by age, gender, state, city, language), evaluations of the success and background of our adverts.

We are unable to match the pseudonymized data with the corresponding identifying features (e.g. name). We are, therefore, unable to identify individual visitors that remain anonymous to us.

                Data that we process from non-registered visitors to our fanpage:

pseudonymized data such as statistics and insights about how users interact with posts, pages, videos and other content made available on the fanpage (page activity, page views, “likes” data, reach, general demographics, location and interest related data by age, gender, state, city, language), evaluations of the success and background of our adverts.

We are unable to match the pseudonymized data with the corresponding identifying features (e.g. name). We are, therefore, unable to identify individual visitors that remain anonymous to us.

                The following link gives details of the data that the platform operator processes concerning registered and non-registered visitors to our fanpage:

https://policies.google.com/privacy?hl=de&gl=de

Data origins

We receive data either directly from the data subjects or from the platform operator.

We have no influence or control over whether the collection of data by the platform operator is lawful.

Legal basis for processing data 

We process data on the following legal bases:

• Art. 6 (1) a) GDPR: Consent of the data subjects

• where applicable Art. 6 (1) b) GDPR: Performance of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject

• Art. 6 (1) f) GDPR legitimate interest
  • To optimize our fanpage
  • To promote the sales of our products and services or drive demand
  • To simplify communication and the exchange of data

We only process special categories of personal data, if at all, on the following legal bases:

• Art. 9 (2) a) GDPR: Consent of the data subject
• Art. 9 (2) e) GDPR: The data subject has manifestly made the personal data public

The legal bases used by the platform operator for the processing of data can be found using the following link:

https://policies.google.com/privacy?hl=de&gl=de

If the data subjects can be tracked through the collection of their data, be that through the use of cookies or similar techniques, or through the storing of IP addresses, the platform operator should obtain the prior consent of the data subjects.

In particular, the platform operator is obligated to inform the data subjects for what purpose and on what legal basis the first visit to a fanpage, even by non-registered visitors, is being recorded in so-called local storage and whether the personal data of non-registered visitors (e.g. IP addresses or other such data, that is consolidated as personal data) is used to create profiles.

We have no influence or control over whether the collection of data by the platform operator is lawful.

Purpose of data processing

The data is being processed for the following purposes:

• Public image and advertising
• Communication and data exchange
• Event management
• Contract initiation and processing, where applicable

We have no influence over the purposes for which the platform operator uses data. We also have no effective methods for controlling this

Storage period

The storage and deletion of data is the responsibility of the platform operator in line with the agreement within the meaning of Art. 26 (1) GDPR. Information about this can be found using the following link:

https://policies.google.com/privacy?hl=de&gl=de

We have no influence over whether the platform operator adheres to the legal deletion deadlines nor over the way in which they delete the data. We also have no effective methods for controlling this.

Categories of receiver

Only our employees and service providers that look after our fanpage and require data for the above mentioned purposes have access to data we process. If the data subjects have posted their data publicly on our fanpage, then it will be accessible by our registered and, where applicable, non-registered users.

The categories of receivers that the platform operator discloses information to or that registered users disclose their data to, and information about internal corporate data exchanges can be found using the following link: https://policies.google.com/privacy?hl=de&gl=de

We have no influence on the disclosure of data to individual receivers (categories) by the platform operator. We also have no effective methods for controlling this.

Data transfer to third countries

If the data subjects have posted their data publicly on our fanpage, then it will be accessible by our registered and, where applicable, non-registered users across the world.

As part of the operation of our fanpage, data will also be transferred to third countries by the platform operator.

Data transfers to third countries related hereto are covered by a European Commission adequacy decision as per Art. 45 GDPR or through appropriate safeguards as per Art. 46 GDPR:

https://policies.google.com/privacy?hl=de&gl=de

Google Inc. is Privacy Shield certified: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

Due to the EU-US Privacy Shield understanding, Google must also afford the data subjects different rights, which are then asserted directly towards Google.

We have no influence over data transfers to third countries undertaken by the platform operator. We also have no effective methods for controlling this.

Logic involved and significance of profiling and/or automated decision-making based on the collected data

If the persons concerned can be tracked through the collection of their data, be that through the use of cookies or similar techniques, or through the storing of IP addresses, the platform operated is obligated to inform them of this, as per the agreement within the meaning of Art. 26 (1) GDPR. In particular, the platform operator is obligated to advise the data subjects of the purposes and legal bases, if, after visiting a subpage of our fanpage, a session cookie and three cookies with a length of between four months and two years have been stored.

Information about this can be found using the following link:

https://policies.google.com/privacy?hl=de&gl=de

We have no control over the use of any such tools by the platform operator and would not expect to be informed about any potential use of the same. If tools of this kind are used by the platform operator on our fanpage, we have neither commissioned nor condoned them, nor do we support their use in any way. Neither do we have access to the resultant data analysis. Furthermore, it is not possible for us to prevent the use of such tools on our fanpage, turn them off or otherwise effectively control their usage.

Rights of the data subjects

Those with joint responsibility must grant the persons concerned different rights with regards to the processing of their data, which are, based on the agreement within in the meaning of Art. 26 (1) GDPR asserted directly towards the platform operator:

https://policies.google.com/privacy?hl=de&gl=de

As per Art. 15 to Art. 18 GDPR, in certain circumstances, the data subject has the right to access, correction or deletion of their respective personal data or the right to restrict data processing by controllers. Data subjects also have the right to withdraw any consent they have given relating to the processing of their personal data at any time with effect for the future (Art. 7 (3) GDPR). They can object (Art. 21 (1) GDPR) to the further processing of their data, with the exception of in the legitimate interests of the controller as per Art. 6 (1) f) GDPR, if there are compelling legitimate grounds relating to their particular personal situation and the controller has no compelling legitimate grounds for processing the data. If personal data is processed for the purpose of direct marketing, the data subject has the right to object to this processing at any time with effect for the future (Art. 21 (2) GDPR). If data is processed with the consent of the data subject in accordance with Art. 6 (1) a), Art. 9 (1) a) GDPR or in accordance with Art. 6 (1) b) GDPR based on a contract with the data subject, and is processed with the assistance of automated systems, the data subject can, as per Art. 20 (1) GDPR, request to receive the personal data concerning them in a structured, commonly used and machine-readable format and to have said data transmitted to a third party nominated by the data subject.

In principle, data subjects have the right not to be subject to a decision based solely on automated processing as per Art. 22 (1) GDPR. If such an automated decision is permitted as per Art. 22 (2) a) to c) GDPR, the data subject is afforded the following rights as per Art. 22 (3) GDPR: the right to express their point of view, the right to obtain human intervention on the part of the controller, the right to contest the automated decision (right of appeal).

Furthermore, the data subject has the right to lodge a complaint with a supervisory authority if they are of the view that the processing of their personal data violates the General Data Protection Act, Art. 77 GDPR. The supervisory authority responsible for the platform operator is:

Data Protection Commission

21 Fitzwilliam Square, Dublin 2
D02 RD28, Ireland

https://www.dataprotection.ie/docs/Contact-us/b/11.htm

Webadresse: http://gdprandyou.ie/contact-us/

LinkedIn:

social network:

LinkedIn: https://de.linkedin.com/

Please be advised that LinkedIn is just one of a number of ways of getting in touch with us and receiving information from us.

Our LinkedIn account (‘fanpage’) is operated jointly with (‘platform operator’):

LinkedIn Corporation, 1000 W. Maude Avenue Sunnyvale, CA 94085 USA

Controller for processing the data of subjects living in the European Union (EU), the European Economic Area (EEA) and in Switzerland:

LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland

An agreement in line with Art. 26 (1) GDPR has been drawn up between those with joint responsibility to determine who is responsible for what in relation to GDPR

The platform operator will make the main contents of this agreement available to the data subjects: Not currently available

Data privacy contact information:

Data privacy contact information can be found in our privacy statement linked to here.

The platform operator’s data protection officer can be contacted using the following online form https://www.linkedin.com/help/linkedin/ask/TSO-DPO or at the following address:

Jonathan Adams
Senior Privacy Counsel

LinkedIn Corporation
Legal Department - Privacy
1000 W. Maude Ave.
Sunnyvale, California 94085

Categories of data subjects:

fanpage visitors that are registered with the social network and those that are not

Data subjects’ are hereby notified that they are responsible for their own use of LinkedIn and its related functions. This applies, in particular, to the use of interactive functions (e.g. sharing, rating).

Categories of personal data:

Data that we process from registered visitors to our fanpage:

User ID or user name that the data subject has registered with, freely available profile information (name, email address, telephone number), ProFinder profile information, education, professional experience, salary expectations, photos, location data, skills and related certification, professional achievements (e.g. granting of a patent, professional recognition, projects), where applicable particular categories of personal data such as religious affiliation, health data etc., data arising from the sharing of content, exchanging messages and communication, data required as part of initiating and processing a contract requested by the registered user, any other freely available data or content published, made available, circulated, posted or uploaded by the data subject on LinkedIn or via their LinkedIn account.

Apart from this we only process pseudonymized data such as statistics and insights about how users interact with posts, pages, videos and other content made available on the fanpage (page activity, page views, “likes” data, reach, general demographics, location and interest related data by age, gender, state, city, language), evaluations of the success and background of our adverts as well as evaluations of the number of applications submitted via LinkedIn. 

We are unable to match the pseudonymized data with the corresponding identifying features (e.g. name). We are, therefore, unable to identify individual visitors that remain anonymous to us.

                Data that we process from non-registered visitors to our fanpage:

pseudonymized data such as statistics and insights about how users interact with posts, pages, videos and other content made available on the fanpage (page activity, page views, “likes” data, reach, general demographics, location and interest related data by age, gender, state, city, language), evaluations of the success and background of our adverts.

We are unable to match the pseudonymized data with the corresponding identifying features (e.g. name). We are, therefore, unable to identify individual visitors that remain anonymous to us.

                Data that we process from visitors to our website:

The IP addresses of our website visitors are not transmitted to the platform operator via the LinkedIn buttons (hard link) on our webpage.

                The following link gives details of the data that the platform operator processes concerning registered and non-registered visitors to our fanpage:

https://www.linkedin.com/legal/privacy-policy

The platform operator potentially uses various analysis tools.

We have no control over the use of any such tools by the platform operator and would not expect to be informed about any potential use of the same. If tools of this kind are used by the platform operator on our fanpage, we have neither commissioned nor condoned them, nor do we support their use in any way. Neither do we have access to the resultant data analysis. Furthermore, it is not possible for us to prevent the use of such tools on our fanpage, turn them off or otherwise effectively control their usage.

Data origins

We receive data either directly from the data subjects or from the platform operator.

The following link provides information on where the platform operator obtains data subject’s information: https://www.linkedin.com/legal/privacy-policy

We have no influence or control over whether the collection of data by the platform operator is lawful.

Legal basis for processing data

We process data on the following legal bases:

• Art. 6 (1) a) GDPR: Consent of the data subjects

• where applicable Art. 6 (1) b) GDPR: Performance of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject
• Art. 6 (1) f) GDPR legitimate interest
  • To simplify communication and the exchange of data, whereby the existing communication channels, such as web presence, press releases, print media and events, are usefully supplemented by the fanpage
  • To promote the sales of our products and services, drive demand, to recruit in a transparent way and regular contributions
  • To optimize our fanpage

We only process special categories of personal data, if at all, on the following legal bases:

• Art. 9 (2) a) GDPR: Consent of the data subject
• Art. 9 (2) e) GDPR: The data subject has manifestly made the personal data public

The legal bases used by the platform operator for the processing of data can be found using the following link:

https://www.linkedin.com/legal/privacy-policy

We have no influence or control over whether the collection of data by the platform operator is lawful.

Purpose of data processing

We process data for the following purposes:

• Public image and advertising
• Communication and data exchange
• Event management
• Contract initiation and processing, where applicable

Information about the platform operator’s purposes for processing data can be found using the following link: https://www.linkedin.com/legal/privacy-policy

We have no influence over the purposes for which the platform operator actually uses data. We also have no effective methods for controlling this.

Storage period

The storage and deletion of data is the responsibility of the platform operator. Information about this can be found using the following link: https://www.linkedin.com/legal/privacy-policy

We have no influence over whether the platform operator adheres to the legal deletion deadlines nor over the way in which they delete the data. We also have no effective methods for controlling this.

Categories of receiver

Only our employees and service providers that look after our fanpage and require data for the above mentioned purposes have access to data we process. If the data subjects have posted their data publicly on our fanpage, then it will be accessible by our registered and, where applicable, non-registered users

The categories of receivers that the platform operator discloses information to or that registered users disclose their data to, and information about internal corporate data exchanges can be found using the following link: https://www.linkedin.com/legal/privacy-policy

We have no influence on the disclosure of data to individual receivers (categories) by the platform operator. We also have no effective methods for controlling this.

Data transfer to third countries

If the data subjects have posted their data publicly on our fanpage, then it will be accessible by our registered and, where applicable, non-registered users across the world.

Data from the LinkedIn Corporation will be processed as part of the operation of our fanpage. The related transfer of data to the USA as a third country without an adequate level of data privacy protection is safeguarded by LinkedIn Corporation’s EU-US Privacy Shield certification:

https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

Regardless of where the data subject resides, the platform operator will transfer data to the United states, Ireland and any other country where the platform operator does business, store it there and process it in other ways.

Data transfers to third countries related hereto are covered by a European Commission adequacy decision as per Art. 45 GDPR or through appropriate safeguards as per Art. 46 GDPR:

https://www.linkedin.com/legal/privacy-policy

https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de

https://privacy.linkedin.com/de-de/dsgvo

We have no influence over data transfers to third countries undertaken by the platform operator. We also have no effective methods for controlling this.

Logic involved and significance of profiling and/or automated decision-making based on the collected data

If the data subjects can be tracked through the collection of their data, be that through the use of cookies or similar techniques, or through the storing of IP addresses, the platform operator is obligated to inform them of this. Information about this can be found using the following links:

https://www.linkedin.com/legal/privacy-policy

https://www.linkedin.com/legal/cookie-policy

https://www.linkedin.com/help/linkedin/answer/3566?trk=microsites-frontend_legal_privacy-policy&lang=de

https://www.linkedin.com/help/linkedin/answer/68763?trk=microsites-frontend_legal_privacy-policy&lang=de

The platform operator potentially uses various analysis tools.

We have no control over the use of any such tools by the platform operator and would not expect to be informed about any potential use of the same. If tools of this kind are used by the platform operator on our fanpage, we have neither commissioned nor condoned them, nor do we support their use in any way. Neither do we have access to the resultant data analysis. Furthermore, it is not possible for us to prevent the use of such tools on our fanpage, turn them off or otherwise effectively control their usage.

Rights of the data subjects

Those with joint responsibility must grant the persons concerned different rights with regards to the processing of their data, which are then asserted directly towards the platform operator:

As per Art. 15 to Art. 18 GDPR, in certain circumstances, the data subject has the right to access, correction or deletion of their respective personal data or the right to restrict data processing by controllers. Data subjects also have the right to withdraw any consent they have given relating to the processing of their personal data at any time with effect for the future (Art. 7 (3) GDPR). They can object (Art. 21 (1) GDPR) to the further processing of their data, with the exception of in the legitimate interests of the controller as per Art. 6 (1) f) GDPR, if there are compelling legitimate grounds relating to their particular personal situation and the controller has no compelling legitimate grounds for processing the data. If personal data is processed for the purpose of direct marketing, the data subject has the right to object to this processing at any time with effect for the future (Art. 21 (2) GDPR). If data is processed with the consent of the data subject in accordance with Art. 6 (1) a), Art. 9 (1) a) GDPR or in accordance with Art. 6 (1) b) GDPR based on a contract with the data subject, and is processed with the assistance of automated systems, the data subject can, as per Art. 20 (1) GDPR, request to receive the personal data concerning them in a structured, commonly used and machine-readable format and to have said data transmitted to a third party nominated by the data subject.

In principle, data subjects have the right not to be subject to a decision based solely on automated processing as per Art. 22 (1) GDPR. If such an automated decision is permitted as per Art. 22 (2) a) to c) GDPR, the data subject is afforded the following rights as per Art. 22 (3) GDPR: the right to express their point of view, the right to obtain human intervention on the part of the controller, the right to contest the automated decision (right of appeal).

• Data subjects can find information about existing personalization and data protection settings options here (with additional references):

https://privacy.linkedin.com/de-de/faq

https://privacy.linkedin.com/de-de/einstellungen

• Due to the EU-US Privacy Shield understanding LinkedIn Corporation Inc. must also afford the data subjects different rights, which are then asserted directly towards LinkedIn Corporation: privacyshield@linkedin.com
• Further information about this social network and other social network and how data subjects can protect their data, can be found here: https://www.youngdata.de/.

Furthermore, the data subject has the right to lodge a complaint with a supervisory authority if they are of the view that the processing of their personal data violates the General Data Protection Act, Art. 77 GDPR. The supervisory authority responsible for the platform operator is:

Data Protection Commission

21 Fitzwilliam Square, Dublin 2
D02 RD28, Ireland

Webadresse: https://www.dataprotection.ie/docs/Contact-us/b/11.htm

Webadresse: http://gdprandyou.ie/contact-us/