Our Social Media Presence
This privacy policy applies to the following social media presences.
Data Processing by Social Networks
We operate publicly accessible profiles on social media platforms. The specific social media platforms we use are listed below.
As a rule, social networks such as Facebook, X, and others can extensively analyze your user behavior when you visit their websites or websites that integrate social media content (e.g. like buttons or advertising banners). When you visit our social media presences, numerous data protection–relevant processing activities are triggered, in particular:
If you are logged into your social media account and visit our social media presence, the operator of the social media platform may associate this visit with your user account. However, your personal data may also be collected even if you are not logged in or do not have an account with the respective social media platform. In this case, such data collection may take place, for example, through cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media platforms can create user profiles in which your preferences and interests are stored. This enables interest-based advertising to be displayed to you both within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising may be displayed on all devices on which you are or have been logged in.
Please also note that we cannot trace all processing operations on the social media platforms. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media platforms. For details, please refer to the terms of use and privacy policies of the respective social media platforms.
Legal Basis
“Our social media presences are intended to ensure the most comprehensive presence possible on the internet. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on different legal grounds, which must be specified by the operators of the social networks (e.g. consent within the meaning of Article 6(1)(a) GDPR).
Controller and Assertion of Rights
When you visit one of our social media presences (e.g. Facebook), we and the operator of the social media platform are jointly responsible for the data processing operations triggered by such a visit. In principle, you may assert your rights (access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint) both against us and against the operator of the respective social media platform (e.g. Facebook).
Please note that, despite the joint controllership with the operators of the social media platforms, we do not have full influence over the data processing operations carried out by the social media platforms. Our options are largely determined by the corporate policies of the respective provider.
Storage period
The data collected directly by us via our social media presence will be deleted from our systems as soon as you request deletion, withdraw your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions—particularly statutory retention periods—remain unaffected.
We have no influence on the retention period of your data that is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the respective social networks directly (e.g. in their privacy policies; see below).
Your Rights
“You have the right at any time to obtain information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to object, the right to data portability, and the right to lodge a complaint with the competent supervisory authority. Furthermore, you may request the rectification, blocking, erasure, and, under certain circumstances, the restriction of the processing of your personal data.
Social Networks in Detail
We operate a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter ‘Meta’). According to Meta, the data collected is also transferred to the United States and other third countries.
We have entered into an agreement with Meta regarding joint processing (Controller Addendum). This agreement defines which data processing operations we or Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings independently in your user account. To do so, please click the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. Further details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum
https://www.facebook.com/help/566994660333381.
For further details, please refer to Facebook’s privacy policy:
https://www.facebook.com/about/privacy/.
The company is certified under the EU–U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/4452.