The company operates online presence on various Social Media marketplaces in order to inform interested parties about the company and its products and services. Many of the Social Media-related data processing operations take place outside the EU in third countries, where the enforcement of the rights of data subjects may be difficult. The processing for Facebook is based on the so-called EU standard contractual clauses.
The processing of users' personal data takes place based on our legitimate interests in targeted information for users and communication with users in accordance with Art. 6 Para. 1 (f) GDPR. The following types of data are used in connection with the Facebook fan page:
a. Data Categories of the Page Insights
When visiting the Facebook fan page, user data is collected, so-called page insights (https://www.facebook.com/business/a/page/page-insights). Details on the data categories collected on the fan page can be found here:
b. Basics of data processing:
A possibility of opting out from data collection can be found here: https://www.facebook.com/settings?tab=ads.
c. Cookies and Tracking
Cookies and tracking technologies (e.g. so-called pixel tags (also from third parties)) are used to create unique user codes. These serve to assign the collected user data to a user and to link them with each other. Profiles are created from this data and, if necessary, enriched with further data from other sources. Whether this also affects persons who do not have a profile on Facebook themselves may have to be clarified directly with Facebook.
If content is accessed beyond the mere start page of a fan page, Facebook also sets cookies with "identifiers" for non-registered users. Detailed information on the use of these cookies and other storage technologies by Facebook can be found here: https://de-de.facebook.com/policies/cookies/. For Instagram, it can be found here: https://de-de.facebook.com/help/instagram/1896641480634370. The exact lifetime of cookies and when they are deleted as a result can be obtained directly from Facebook.
d. Storage within the local storage of the browser
Facebook may store data and information on user behavior in the so-called local storage of the browser on the legal basis of Art. 6 Para. 1 (f) GDPR. The Facebook pages can be granted access to this memory by calling up the page in order to call up information already collected about the visitor. Technically, the local Storage property allows access to a local storage object. The local Storage property is identical to session Storage with one exception: In contrast to the latter, data stored in local Storage has no expiration date, while in session Storage it is deleted when the visit session expires, usually when the browser is closed. The advantage of Local Storage over cookies is that more data can be stored in the browser on the terminal device without an expiration date.
e. Deletion of data
Facebook stores data until it is no longer needed to provide its services and Facebook products, or until the underlying user account is deleted, whichever occurs first. This is a case-by-case determination and depends on such things as the nature of the data, why it is collected and processed, and the relevant legal or operational storage needs.
Weighing of interests pursuant to Art. 6 para. 1 (f) GDPR
The data collected and processed in connection with the Fan page is collected at the specified locations due to a legitimate, predominant interest of the company. The interest of the company is based on the objective to advertise its services and products, as well as the control of the marketing of these services and products and the promotion of the business objectives through information, service offers and contact to interested parties. The data collected for this purpose serves the purpose of optimizing the company and service presentation and is provided by the responsible person in anonymous or pseudonymized form.
For this purpose, the individual case is decisive for the operator. In most cases, however, this will be personal data for advertising, controlling the marketing of the respective activity and promoting the business objectives. In principle, the legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR can be cited here as the legal basis. This can be justified at least for the purpose of optimizing the company and product presentation.
Which personal data is stored in Insights by the fan page may also depend on the Insights settings. The Facebook and Instagram data protection guideline at least indicates which data is generally collected and stored when using Facebook or Facebook products. This includes data provided by the person concerned (e.g. uploads, communications, contributions, activities, payment transactions, etc.); device information (e.g. operating system, hardware and software versions, browser type, mouse movements, GPS location, etc.); and information from partners (e.g. about social plug-ins, Facebook login, Facebook pixels, etc.). Which of these data are stored by the fan page in Insights cannot be answered securely for the fan page operator.
Right of objection
You may object at any time to the future processing of your data in accordance with the statutory provisions. You may object to the processing of your data for the purposes of direct marketing.
In order to exercise the data protection rights granted under applicable data protection law, such as. the right to information, the right to rectification, the right to erasure or restriction of personal data, the right to object and the right to data portability, you can make a request to the available contact details or to email@example.com.
If you believe that we are processing your personal data in breach of applicable law, you can also lodge a complaint with a supervisory authority.
Tel.: +49 9132 6430 000
Fax: +49 9132 9024 430
Data protection officer contact details
Dr. Jörn Voßbein
UIMC DR. VOSSBEIN GmbH & Co KG