DATAGROUP takes the protection of personal data very seriously. We ensure that your personal data is treated confidentially and according to the relevant data protection regulations and this Privacy Policy
The use of our website is generally possible without providing any personal data. If personal data (e.g. name, address or email address) is collected on our pages, this is always done on a voluntary basis. This data will not be disclosed to any third parties unless we have your express consent to do so.
We would like to point out that the transfer of data on the internet (e.g. during communication by email) may have security gaps. We cannot guarantee complete protection of your data against access by any third parties.
The data controller in the sense of Article 4 (7) of the General Data Protection Regulation (GDPR) is:
DATAGROUP SE
Wilhelm-Schickard-Straße 7
72124 Pliezhausen
T +49 711 49005 00
E-Mail: kontakt@datagroup.de
The DATAGROUP Group currently comprises the following additional companies:
DATAGROUP SE
Wilhelm-Schickard-Straße 7
72124 Pliezhausen
DATAGROUP BIT Düsseldorf GmbH
Georg-Glock-Str. 18
40474 Düsseldorf
DATAGROUP BIT Hamburg GmbH
Wendenstraße 21B
20097 Hamburg
DATAGROUP BIT Oldenburg GmbH
Stau 123
26122 Oldenburg
DATAGROUP Berlin
Ein Geschäftsbereich der DATAGROUP Business Solutions GmbH
Sonnenallee 221 F
12059 Berlin
DATAGROUP Business Solutions GmbH
Auf den Tongruben 3
53721 Siegburg
DATAGROUP Bremen GmbH
Mary-Somerville-Straße 8
28359 Bremen
DATAGROUP Consulting Services GmbH
Genfer Allee 2
55129 Mainz
DATAGROUP Cyber Security GmbH
Wilhelm-Schickard-Str. 7
72124 Pliezhausen
DATAGROUP Defense IT Services
Ein Geschäftsbereich der DATAGROUP Business Solutions GmbH
Auf den Tongruben 3
53721 Siegburg
DATAGROUP Enterprise Services GmbH
Auf den Tongruben 3
53721 Siegburg
DATAGROUP Frankfurt GmbH
Siemensstraße 10a
63263 Neu-Isenburg
DATAGROUP Hamburg GmbH
Brandshofer Deich 68
20539 Hamburg
DATAGROUP Inshore Services GmbH
Lange Straße 1a
18055 Rostock
DATAGROUP Köln GmbH
Gebäude Wickelei 2.12
Schanzenstraße 6-20
51063 Köln
DATAGROUP Ludwigsburg GmbH
Steiermärker Straße 3-5
70469 Stuttgart
DATAGROUP München
Ein Geschäftsbereich der DATAGROUP Business Solutions GmbH
Lise-Meitner-Straße 9
85737 Ismaning
DATAGROUP Operate IT GmbH
Brandshofer Deich 68
20539 Hamburg
DATAGROUP Operations GmbH
Hanauer Landstraße 310
60314 Frankfurt am Main
DATAGROUP Rhein-Main GmbH
Nikolaus-Otto-Straße 8
55543 Bad Kreuznach
DATAGROUP Service Desk GmbH
Wilhelm-Schickard-Straße 7
72124 Pliezhausen
DATAGROUP Stuttgart GmbH
Wilhelm-Schickard-Straße 7
72124 Pliezhausen
DATAGROUP Ulm GmbH
Magirus-Deutz-Straße 17
89077 Ulm
DATAGROUP IT Solutions GmbH
Wilhelm-Schickard-Straße 7
72124 Pliezhausen
Almato AG
Theodor-Heuss-Straße 9
70174 Stuttgart
Almato AI GmbH
Theodor-Heuss-Straße 9
70174 Stuttgart
CLOUDETEER GmbH
Brandshofer Deich 68
20539 Hamburg
CONPLUS Mittelstandslösungen GmbH
Konrad-Zuse-Ring 16A
41179 Mönchengladbach
Cplus Informationssysteme und-beratung GmbH
An der Strubek 18
22926 Ahrensburg
Hövermann IT-Gruppe GmbH
Wilhelmstraße 80
49477 Ibbenbüren
ISC Innovative Systems Consulting AG
Staatsstraße 13
83059 Kolbermoor
Inn2 GmbH
Sonnenstraße 3
83022 Rosenheim
iT Total GmbH
Vor dem Lauch 19
70567 Stuttgart
Mercoline GmbH
Wittestr. 30 L
13509 Berlin
systemzwo GmbH
Pfarrer-Weiß-Weg 10
89077 Ulm
TARADOR GmbH
Am Bürohochhaus 2
14478 Potsdam
CONSYS ERP GmbH & Co. KG
Konrad-Zuse-Ring 16a
41179 Mönchengladbach
Almato Iberia S.L.U
Edificio @mar
C/ Pallars 193-205,6ª izq..
08005 Barcelona
Almato Logistics Software S.L.
Edificio @mar
C/ Pallars 193-205, 6a izq.
08005 Barcelona
Datagroup Banking Operations Center
Moldavska Cesta 10/B,
04011, Košice / Slovakia
DATAGROUP Enterprise Service Kft
1095 Budapest, Soroksári út 44. II.
emelet
DATAGROUP Operations Lithuania UAB
Europos Pr. 23A,
46329 Kaunas,
Republik Lithuania
DATAGROUP Polska Sp. z o.o.
Straszewskiego 10/2
31-101 Kraków
Purpose of data processing/ lawful basis:
Personal data that you provide to us by email, telephone, mail or contact form will of course be treated confidentially. We will use your data exclusively for the purpose of dealing with the enquiry. The lawful basis for the data processing is Article 6 (1f) of the GDPR. The legitimate interest of DATAGROUP arises from the interest to respond to the enquiries of our customers, business partners and stakeholders with the aim of maintaining and promoting customer satisfaction.
Recipient/ categories of recipients:
As a basic principle, we do not disclose data to any third parties. Data may be processed on our behalf by data processors in exceptional cases. These data processors have been carefully selected, are audited by us and are bound by contract in accordance with Article 28 of the GDPR.
We may also be required to pass on enquiries to other companies within DATAGROUP where this is necessary for processing.
Storage period/ criteria to determine the storage period:
All personal data provided by you in the context of enquiries will be deleted or safely anonymised no later than 90 days after the final response on your enquiry has been given. The storage period of 90 days is explained by the fact that you may contact us again on the same subject after having received a response. We would then be able to refer to the earlier correspondence. Experience has shown that there are usually no further questions to our response after a period of 90 days.
Purpose of data processing/ lawful basis:
The companies of DATAGROUP process the contact details of customers, stakeholders, suppliers and other business partners for communication by email, telephone, fax or mail. The lawful basis for the data processing is Article 6 (1f) of the GDPR. The legitimate interest of DATAGROUP arises from the interest to establish or conduct business relationships with customers, stakeholders, suppliers and other business partners by maintaining personal contact with contact persons.
Recipient/ categories of recipients:
As a basic principle, we do not disclose personal data to any third parties outside of DATAGROUP. Within DATAGROUP, data is shared, amongst others, to establish or conduct business relationships. Data may be processed on our behalf by data processors in exceptional cases. These processors have been carefully selected, are audited by us and are bound by contract in accordance with Article 28 of the GDPR.
Storage period/ criteria to determine the storage period:
Personal data for the purpose of conducting business relationships is stored as long as there is a legitimate interest.
Purpose of data processing/ lawful basis:
You have the possibility to order our newsletter through different channels (this website, at fairs). The lawful basis for data processing in order to send out newsletters is your consent under Article 6 (1a) of the GDPR as well as § 7 (2) of the Unfair Competition Law. The purpose of data processing within the context of an order of the DATAGROUP newsletter is to inform newsletter subscribers about offers, initiatives, products, events and services of the companies of DATAGROUP.
Provided that you register for the free DATAGROUP newsletter, we would need your email address as compulsory information. Provided that you voluntarily provide any further personal details (name, surname, company, job title and selection of themes) we will use this data exclusively for the purpose of analysing the target group and for an internal analysis.
You will receive an email with a confirmation link after sending the registration form. Provided that you click on this link you are subscribed to the newsletter. You will be informed accordingly by another email. By confirming the registration, you give your consent to process your email address and your optional data for the purposes stated herein. We will store the time and the IP address used for ordering the newsletter for evidence purposes.
Your consent to order the DATAGROUP newsletter can be revoked at any time with effect for the future by confirming the relevant unsubscribe link in a newsletter or by sending an email to marketing@datagroup.de
Recipient/ categories of recipients:
As a basic principle, we do not disclose data to any third parties outside of DATAGROUP. We have commissioned service provider CleverReach GmbH & Co. KG to send out newsletters. This service provider has been carefully selected and audited by us and is bound by contract in accordance with Article 28 of the GDPR. Within the DATAGROUP group of companies, data is passed on by DATAGROUP SE to other companies to ensure that they can provide you with information as well.
Storage period/ criteria to determine the storage period
Provided you revoke your consent to receive the DATAGROUP newsletter, the data collected for this purpose will be deleted immediately unless they are also needed for another purpose.
Purpose of data processing/ lawful basis:
The companies of DATAGROUP use personal data for marketing purposes, especially for advertising sent by email, telephone and mail. The purpose of the data processing for marketing campaigns is to inform the data subjects about products and services of the DATAGROUP companies. The lawful basis for sending advertising by mail is Article 6 (1f) of the GDPR. The legitimate interest of DATAGROUP arises from the interest to provide customers and stakeholders with information on products and services. The lawful basis for marketing campaigns by email or telephone generally is the declaration of consent given by you, while § 7 of the Unfair Competition Law can apply for marketing campaigns as well.
You can object to the receipt of advertising at any time with effect for the future, without incurring any costs other than the transmission costs according to the basic tariffs, by sending a message to marketing@datagroup.de
If you declare an objection to the receipt of advertising, we store your data in an advertising blocking file on the basis of Art. 6 para. 1 f) GDPR. The legitimate interest of DATAGROUP arises in this case from the interest in ensuring compliance with the asserted opposition.
Recipient/ categories of recipients:
As a basic principle, we do not disclose your data to any external third parties. Provided that external data processors will be used to send advertising, they are contractually obligated under Article 28 of the GDPR and have been controlled to verify that appropriate organisational and technical security measures are in place. Within DATAGROUP, your data may be passed on to other companies for marketing purposes.
Storage period/ criteria to determine the storage period:
Provided that you object to the receipt of advertising, your data will be blocked immediately and subsequently deleted unless they have been stored for other purposes as well.
Purpose of data processing/ lawful basis:
In addition to sending us your application by mail, you can also forward your application documents by email or via an application form for a quick and comfortable application. The application documents sent to us will only be used for the application process. Please note that applications sent to us by email will be transferred unencrypted and the data may possibly be noticed by unauthorised persons or may also be modified. You are welcome to also send us your documents by mail.
The purpose of processing your personal data is to deal with the application process in our company and therefore the possible establishment of a new employment relationship.
The lawful basis for the processing is Article 88 (1) of the GDPR, in connection with § 26 (1) of the new Federal Data Protection Act.
Recipient/ categories of recipients:
As a basic principle, we do not disclose your data to any third parties. Within the company where you are applying for the job, your personal data is only made available to those persons, who are involved in the decision-making process. Within the DATAGROUP group, your data is passed on to the relevant company exclusively by DATAGROUP SE as the operator of this website. A disclosure to other companies within DATAGROUP is only possible with your consent.
Storage period/ criteria to determine the storage period:
In case of a successful application, your personal data will be stored for the duration of your employment. After termination of the employment relationship, your tax-relevant data will be archived for a period of up to 10 years in line with the legal retention periods under § 257 (1) point 1 and § 257 (4) of the German Commercial Code, § 147 of the German Fiscal Code. In case of an unsuccessful application, your personal data will be deleted three months after the negative message. A longer storage period despite the negative message is only possible with your consent.
Purpose of data processing/ lawful basis:
If you wish to book seminars on our website or registrate for events, we would need the information marked as required fields in the booking screen. The input fields that are not specifically marked are optional for you to fill in. As part of the booking you will receive an email from us to confirm your registration. The booking process will not be completed before you activate the link in this email. Your data submitted in the context of the booking will be processed by us for the purpose of carrying out the booking and the seminar or for the registration for an event. The lawful basis for this data processing is Article 6 (1b) of the GDPR.
Provided that you have given us your consent to do so, we will also use your data to provide you with marketing information on the seminar/event in question by email, mail or telephone as a follow-up to the seminar/event. Your consent can be revoked at any time with effect for the future by confirming the relevant unsubscribe link in one of our emails or by sending an email to marketing@datagroup.de. The lawful basis for data processing for the purpose of providing information is your consent under Article 6 (1a) of the GDPR as well as §7 (2) of the Unfair Competition Law.
Recipient/ categories of recipients:
We may disclose the names of the persons who register for a seminar on our website to our training partner who conducts the training. This partner needs the data for the organisational handling of his training and will also report the data to the relevant testing institute. The forwarded data will be stored in a database which will generate the examination papers and finally the eventual certificate. Data provided by applicants for events will not be disclosed.
Storage period/ criteria to determine the storage period:
Where required, we will store the data of participants in seminars and events for the duration of the legal retention periods. Subsequently, and apart from that, the data will generally be deleted. Provided that you have given your consent to receive information, we will store your data for this purpose until you revoke your consent
Some of the webpages use so-called cookies. Cookies do not cause damages to your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, more efficient and more secure. Cookies are small text files that are stored by your browser on your computer.
Most of the cookies used by us are so-called “session cookies”. They will be deleted automatically after the end of your visit. Other cookies remain on your terminal device until they are deleted by you. These cookies enable us to recognise your browser on your next visit.
You can adjust your browser to be informed when cookies are placed, to individually allow cookies, accept cookies in certain cases or to generally exclude them as well as to activate an automatic deletion of cookies when the browser is closed. The deactivation of cookies may restrict the functionality of this website.
Cookie settings can be edited here: Activate/deactivate cookies
The legal basis for data processing by so-called “necessary cookies” is Art. 6 Para. 1 lit. f GDPR. Necessary cookies enable basic functions and are necessary for the proper functioning of the website. We have a legitimate interest in making the website as user-friendly as possible.
The following cookies, which are set by this website, are necessary for the operation of the website:
cookieconsent_status
354 days
The provider of these websites collects and automatically stores information in so-called server log files that your browser automatically transmits to us. This includes:
This data cannot readily be assigned to specific persons. A combination of this data with other data sources does not take place. We reserve the right to review this data at a later time if we become aware of specific grounds for suspicion of illegal use.
The legal basis for the processing of this data is Art. 6 para. 1 f) GDPR. Our legitimate interest lies in the purposes of data processing listed above. The recipient of this data is Provitex GmbH, Eberhardstraße 1, 72764 Reutlingen, Germany, which hosts the website. There is no other transfer of this data to external parties. The data is stored for a period of 7 days.
This website uses the functions of the Google Analytics web analysis service. The provider is Google LLC. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of the use of websites by you. The data processing is mainly done by Google. The information generated by the cookie about your use of this website is normally transferred to a server of Google in the USA and stored there. Both Google and the state authorities in the USA have access to this data. If IP anonymisation is activated on this website, your IP address is abbreviated beforehand by Google within the Member States of the European Union or in other Treaty States of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and stored there in exceptional cases. Google will use this information on behalf of the operator of this website to evaluate your use of the website in order to create reports about the website activities and to provide additional services to the website operator associated with the website use and internet use. The IP address transmitted by your browser as part of Google Analytics is linked to other data about you, such as search history, personal accounts, use data from other devices and all other data that Google has about you. We store user and event data for a period of 14 months.
You can prevent the storage of cookies with the appropriate setting in your browser software. However, please bear in mind that in this case you may not be able to utilise all function of this website to their full extent. You can also prevent the collection of the data created by the cookie based on your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: Activate/deactivate cookies
For further information about the terms of use and data protection please visit https://www.google.de/intl/de/policies/. On this website, Google Analytics has been extended by the code “gat._anonymizeIp();“ to guarantee an anonymised collection of IP addresses (so-called IP masking).
The legal basis for the use of Google Analytics is the consent granted by you in accordance with Art. 6 Para. 1 lit. a) GDPR. The transfer of personal data to entities outside the EU is based on your consent pursuant to Art. 49 (1) a) GDPR. You can revoke these consents at any time.
The following cookies, which are set by this website, are related to Google Analytics:
IDE
_ga
_gat_gtag_UA_76099499_1
379 days
719 days
719 days
On some of our websites we embed YouTube videos. Opening these websites results in YouTube content being downloaded. In this context, YouTube also receives your IP address, which is technically necessary for retrieving the contents. In principle, we have no influence on further data processing by YouTube, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. However, when embedding the videos, we activated the extended data protection mode offered by YouTube. The use of YouTube and the resulting transmission of your IP address happens on the basis of the consent given by you in accordance with Art. 6 (1) a) GDPR. The transfer of personal data to entities outside the EU is based on Art. 49 (1) a) GDPR. You can revoke these consents at any time. Further information on the handling of user data can be found in YouTube’s privacy
policy: https://policies.google.com/privacy?hl=de&gl=de
Please note: When you play a YouTube video on our site, this is considered consent in the sense described above, even if you have not previously given consent in the Consent Management Tool.
The following cookies that are set by this website are related to YouTube:
APISID
CONSENT
HSID
IDE
LOGIN_INFO
PREF
SAPISID
SID
SIDCC
SSID
VISITOR_INFO1_LIVE
__Secure-3PAPISID
__Secure-3PSID
__Secure-APISID
__Secure-HSID
__Secure-SSID
704 days
6480 days
704 days
269 days
687 days
624 days
704 days
704 days
322 days
704 days
74 days
704 days
704 days
109 days
109 days
109 days
For the protection of our website we also use the reCAPTCHA service of the company Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). This service involves the transmission of your IP address and possibly other data to Google, which is required for the reCAPTCHA service. Google’s privacy policy applies to this data. You can find more information about Google Captcha’s privacy policy here: https://www.google.com/intl/de/policies/privacy/.
The legal basis for data processing in connection with Google reCAPTCHA is Art. 6 para. 1 f) GDPR. Our legitimate interest is the protection of our website and the interest of protection against spam and misuse.
On some subpages of our website we embed a stock chart. Calling up these sub-pages may result in content being loaded from the external provider EQS Group AG, Karlstraße 47,80333 Munich. In this context, EQS also receives your IP address, which is technically required to retrieve the content. We have no influence on the further data processing by EQS. The transmission of your IP address is based on Art. 6 para. 1 f) GDPR. Our legitimate interest lies in the appealing design of our website.
General:
If you participate in an online meeting as an external participant, you will receive an access link by e-mail from the meeting host. When registering for the online meeting, you must then enter your name and, if required, your e-mail address.
If you do not wish to exchange data with us via Microsoft Teams in accordance with Art. 9 GDPR, we ask you to black out this data in advance or otherwise make it unrecognizable.
Microsoft Teams is a service of Microsoft Corporation. For more information about the processing of your data when using “Teams”, please visit: https://privacy.microsoft.com/de-de/privacystatement and https://news.microsoft.com/de-de/datenschutz-und-sicherheit-in-microsoft-teams-nutzer/.
Purpose of data processing/ lawful basis:
We use the tool “Microsoft Teams” to perform online meetings, video conferences and/or webinars and, if necessary, also to exchange documents with the participants.
The legal basis for data processing regarding contact persons at external offices is 6 para. 1 lit. f) GDPR. Our interest lies in an improved organization and communication with our contact persons as well as the reduction of previously used tools. If our contact person is a direct contractual partner and a natural person, Art. 6 para. 1 lit. b) GDPR is the legal basis.
If special categories of personal data within the meaning of Art. 9 (1) GDPR are processed, e.g. within documents provided, the legal basis is Art. 9 (2) a) GDPR. You expressly give your consent for this.
Furthermore, in accordance with Art. 49 (1) a) of the GDPR, you expressly consent to the fact that, under certain circumstances, data may also be transferred to locations outside the EU/EEA where there is no adequate level of data protection within the meaning of the GDPR. You are aware of the risks associated with this, such as the lack of enforcement of data subject rights and possible access by government authorities.
You can revoke these consents at any time with effect for the future. In the event of a revocation, the documents will be deleted from Microsoft Teams.
Recipient/ categories of recipients:
Personal data that is processed in connection with the storage of documents in Microsoft Teams is generally not disclosed to third parties unless it is intended for disclosure. Please note that content from the stored documents, as well as from personal meetings, is often used to communicate information with customers, prospects or third parties and is therefore intended for disclosure. Other recipients: The provider of “Microsoft Teams” necessarily receives knowledge of the above-mentioned data, insofar as this is provided for in the context of our order processing agreement with “Microsoft Teams”.
Data processing outside the European Union
Data processing outside the European Union (EU) does not occur as a matter of principle, as we have limited our storage location to data centers in the European Union. However, we cannot exclude the routing of data via Internet servers located outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without informing you or allowing you to seek redress. We have agreed to EU standard contractual clauses with the provider of “Microsoft Teams”.
You are not required to communicate with us via Microsoft Teams. If you wish, communication may take place by other means (such as email or telephone).
Storage period/ criteria to determine the storage period:
As a matter of principle, we delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or ward off warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion will only be considered after expiry of the respective retention obligation.
According to Article 15 (1) of the GDPR you have the right to have access to your personal data that has been collected and stored by DATAGROUP free of charge upon request.
If the statutory requirements are given, you also have the right to be informed (Article 16 GDPR) about your personal data, to have your personal data erased (Article 17 GDPR) or to restrict the processing of your personal data (Article 18 GDPR).
Provided that the data processing is based on Article 6 (1e or f) of the GDPR you have the right to object under Article 21 of the GDPR. Provided that you object to the data processing, it will be stopped in the future unless the responsible person can provide compelling legitimate grounds for a further processing that override the data subject’s interest in the conflict.
Provided that you have given us the processed data yourself, you have the right to data portability under Article 20 of the GDPR.
Provided that the data processing is based on a consent in accordance with Article 6 (1a) or Article 9 (2a) of the GDPR you can revoke the consent at any time with effect for the future without affecting the lawfulness of the previous processing.
In any of the cases above, for further questions or in the event of a complaint, please contact our data protection officer in writing or by email.
Additionally, you have the right to complain to the data protection supervisory authority. The competent data protection supervisory authority is determined by the federal state in which you reside or in which the data controller has its head office.
In the case of joint controllers, you will receive the relevant information from the controller with whom you are initiating or conducting a business relationship.
Unless otherwise specified in the previous chapters, the provision of personal data is not required by law or by contract or necessary for signing a contract. You are not obligated to provide any personal data, if no contrary information has been given before. If you do not provide your personal data, this may possibly mean that we cannot answer your contact request or that a participation in the application procedure or a participation in an event is not possible.
For further information or any suggestions on the topic of data protection please contact our internal data protection officer:
Dr. iur. Christian Borchers
Datenschutz Süd GmbH
Wörthstrasse 15
97082 Würzburg
office@datenschutz-sued.de
The data protection officer does not apply to the following companies whose DPO can be contacted at the contact details given in each case:
DATAGROUP BIT Hamburg GmbH:
Claudia Kramer
T: +49 40 53007 186
Datenschutz.DGBITHH@datagroup.de
Privacy Policy for Social Media Pages
DATAGROUP SE takes compliance with data protection regulations very seriously. We would like to inform about how we process your personal data when you interact with us on our social media pages.
Data Controller
We, DATAGROUP SE, in addition to the provider of the social media platform (platform provider) are jointly responsible as data controllers for the processing activities concerning your data. The platform provider in this respect primarily determines the purposes and means of the processing activities, which we can influence only to a limited extent. To the extent that we can exert influence over or set parameters regarding the processing of your data, we will, within our means, take actions to ensure that the platform provider processes your data in compliance with applicable data protection regulations. However, the platform provider will inform you about this in his respective data protection declaration.
Please see our imprint for our contact details and further information on our Company
We operate the following social media sites:
Our Data Processing
The data you provide directly on our social media pages such as comments, videos, pictures, likes, tweets etc. are published by the social media platform. The processing by us is based on Art. 6 (1) (f) GDPR which refers to processing which is done in the interest of public relations and communication. As part of this processing we may:
On our Facebook page, we use the Insights feature. Insights is aggregated information that can help us understand how people interact with our Facebook Page. Insights may be based on personal information collected in connection with a visit to or interaction of people on or with our Facebook Page and its contents. The legal basis is Art. 6 (1) (f) GDPR. Data processing is carried out in the interest of our public relations work and communication.
At no time is your data used or processed by us for any undisclosed purposes. To the extent that the platform provider leaves us room to exert influence over or set parameters regarding the processing of your data, we will design our social media pages to be as compliant as possible with applicable data protection rules. We therefore do not make use of demographic, interest-based, behavior-based or location-based target group classifications for the purposes of advertising, notwithstanding that such services may (by default) be provided to us by the social media platform Providers.
With regards to the receipt of the statistics provided by the platform provider, this may only be influenced by us to a limited extent and we do not possess the means to deactivate them completely. However, we make sure that no additional optional statistics are made available to us.
If you wish to object to a particular data processing, please contact us via the contact information provided in our imprint . Following our examination of your request, we will determine whether we are able to respond to your request. If we are unable to fulfill your request using our own means, we will forward it to the appropriate service provider.
If you send us an inquiry through the social media platform, we may also, depending on your request, refer to other secure communication channels that guarantee confidentiality. You always have the option to send us confidential inquiries to the address given in the imprint.
Data processing by the provider of the social media platform
The provider of the social media platform uses web tracking methods. Web tracking may also take place independently of whether or not you are logged in or registered on the social media platform. Unfortunately, we cannot influence or restrict the web tracking methods of the social media platform.
Please be aware that the platform provider may use your profile and behavioral data to evaluate, among other things, your habits, personal relationships and preferences. We have no influence on the processing of your data by the platform provider.
Further information on the data processing conducted by the platform provider, including information concerning your rights as a user, can be found in the provider’s data protection policy:
In the cases in which we are jointly responsible with the Social Media Platform for the processing, you will find the essential contents of the joint processing of your data here:
Your rights as a user
In light of the processing of your personal data, the GDPR grants you as a user of social media pages the following rights:
1.) Right of access to your data (Art. 15 GDPR):
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, obtain access to the personal data and the information as specified in Art. 15 GDPR.
2.) Right to rectification and erasure (Articles 16 and 17 GDPR):
You have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed.
You also have the right to obtain an erasure of the personal data concerning you without undue delay, if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer necessary for the intended purpose.
3.) Right to restriction of processing (Art. 18 GDPR)
You have the right to request restriction of the processing of your data if one of the conditions set out in Article 18 GDPR is met, for instance if you have objected to the processing of your data, for the duration of a possible evaluation.
4.) Right to data portability (Art. 20 GDPR):
In certain situations, listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or demand a transmission of the data to another third party.
5.) Right to object (Art. 21 GDPR):
If the data is processed pursuant to Art. 6 para. 1 lit. f GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process your personal data, unless there are demonstrably compelling legitimate grounds for processing, which override the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defending legal claims.
Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes applicable data protection regulations. Your right to lodge a complaint may be enforced in the Member State of your habitual residence, place of work or the place of the alleged infringement.