With this privacy policy, we inform you about the scope of the processing of your personal data (hereinafter "data") within the scope of our social media presences.
Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:
Local Brand X GmbH (LBX)
Mombacher Straße 4
55122 Mainz
Tel.: +49 6131 63571 00
Web: www.local-brand-x.com
E-Mail: datenschutz@local-brand-x.com
RMPRIVACY GmbH
Matthias Rosa
Große Langgasse 1A
55116 Mainz
www.rmpriacy.de
E-Mail.: datenschutz@local-brand-x.com
a) What data do we process and for what purpose?
We use the social media service TikTok of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. In doing so, we use the advertising service to promote our offers. Personal data is also processed in this process. Within the scope of our TikTok account/advertising on TikTok, no personal data is directly processed by us.
If you enter data yourself as a registered user on TikTok, such as your username and the content published under your own account, this will be processed by us when we share your comments, reply to your comments, or write a post that links to your profile. In this case, the data you entered at TikTok, in particular your (user) name and the content published under your account, will be processed insofar as they are included in our offer and made available to our fans.
For all further data processing in the context of the use of the TikTok service and its functionalities, TikTok Technology Limited is the responsible party in the sense of Art. 4 No. 7 DSGVO. We have no influence on the type and scope of the data processed by TikTok within the framework of the TikTok service, the type of processing, the use of the data or the transfer of this data to third parties.
You can find more information on data protection at: https://www.tiktok.com/legal/privacy-policy-eea?lang=de
a) Joint responsibility for data processing
We operate our Facebook fan page on the online platform of the social network of Facebook Ireland Limited ("Facebook Ireland"). Together with Facebook Ireland, we are jointly responsible for data processing in connection with this fan page in accordance with the provisions of the GDPR. This includes in particular the data processing of page insights, see bb) Use of insights and cookies. When you visit this Fanpage, personal data is processed by Facebook Ireland and us as the responsible party.
Facebook Ireland has primary responsibility under the GDPR for the processing of Insights Data. Facebook Ireland therefore also assumes all obligations under the GDPR with respect to the processing of Insights Data (including, without limitation, Articles 12 and 13 GDPR, Articles 15 to 22 GDPR, and Articles 32 to 34 GDPR). Facebook Ireland remains solely responsible for the processing of such personal data in connection with Page Insights that are not covered by the existing Page Insights Supplement.
Due to the existing agreements with Facebook Ireland, also regarding the joint responsibility of the data agreement, it is expedient to assert requests for information as well as the assertion of further data subject rights directly with Facebook Ireland. As the operator of the social network and its ability to integrate Facebook fan pages there, Facebook Ireland alone is capable of accessing the necessary information via the direct access options and to take any necessary measures and provide information directly. However, you can also send requests to us. We are of course ready to assist you at any time, as well as to fulfill our obligations as the responsible party.
The underlying Facebook Ireland Terms of Use (including the other terms and policies set forth therein), are available at:
www.facebook.com/legal/terms
supplemented by the Page Insights Supplement regarding the responsible party, available at
https://www.facebook.com/legal/terms/page_controller_addendum
b) What data do we process and for what purpose?
aa) Operation of our fan page
The purpose of operating our Facebook fan page is to get in touch with users and visitors of the social network of Facebook Ireland and to engage in an exchange. Sometimes we inform directly about our company and related offers, such as events held by us or current events, special promotions and offers, etc.
With the help of this Facebook fan page, we are also able to obtain statistics on visits and visitors. This is created by Facebook Ireland. This allows us to better and more targeted control the marketing of our activity. In doing so, we can sometimes gain knowledge of Facebook profiles of individual users who like our Fanpage and/or use the applications on the page. This enables us to provide the users in question with improved content and functions via our Facebook fan page.
In order to further improve our content, we may also use demographic and geographic analyses based on the information collected during visits. This allows us to target interest-based advertisements without directly knowing your identity as a visitor.
If you use multiple devices when visiting Facebook Ireland, data may also be collected and analyzed across devices if you visit our fan page as a registered user who is logged in with your Facebook profile.
Generated visitor statistics are forwarded to us in anonymized form only. Access to the underlying data is not possible for us.
bb) Use of Insights and Cookies
Within the framework of our fan page, we use the "Insights" service from Facebook Ireland to obtain anonymized statistical data on visitors to our fan page.
When you visit our fan page, Facebook Ireland stores a corresponding data package, a so-called "cookie", on your end device, each of which contains an assignable user code. If you are registered as a Facebook user, this user code can be linked to your data. The information stored in the process is processed by Facebook. It is also possible that third parties can use this information from Facebook's cookies to provide services to companies advertising on Facebook.
Unless previously deleted, the cookie is active for two years.
For more information about Page Insights, please see the Page Insights Data Processing Accountability Supplement between Facebook Ireland and us:
https://www.facebook.com/legal/terms/page_controller_addendum
For more information on the use of cookies by Facebook Ireland, please refer to Facebook's Cookie Policy:
https://www.facebook.com/policies/cookies/
c) Legal basis
The processing of personal data by us is based on our legitimate interests in an effective exchange with the users of our social media presences, visitors to our profiles and in connection with communication with users on our social media profiles, including our corporate presentation pursuant to Art. 6 (1) f) GDPR.
d) Data sharing and data transfer to the USA
It is possible that the data collected when visiting our fan page will be forwarded to Facebook Inc. based in the USA and processed there. There is no adequacy decision of the EU Commission for data transfers to the USA. Facebook ensures an adequate level of data protection via the EU standard contractual clauses. You can access a copy of the contractual clauses here: https://www.facebook.com/legal/EU_data_transfer_addendum.
We do not pass on data within the framework of the operation of our fan page.
e) Option to object via your Facebook account
As a Facebook user, you have the option of using the settings for advertising preferences in your Facebook account to set the extent to which your user behavior may be recorded when you visit our fan page. Facebook also provides an objection form.
a) Joint responsibility for data processing
Instagram is a Facebook product provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: "Facebook"). Together with Facebook Ireland, we are jointly responsible for data processing in connection with this Fanpage in accordance with the provisions of the GDPR, Art. 4 No. 7 GDPR. This includes in particular the data processing of page insights, see point b) bb) Use of insights and cookies. When you visit our Instagram company page, personal data is processed by Facebook Ireland and us as the responsible party.
Facebook Ireland has primary responsibility under the GDPR for the processing of Insights Data. Facebook Ireland therefore also assumes all obligations under the GDPR with respect to the processing of Insights Data (including, without limitation, Articles 12 and 13 GDPR, Articles 15 to 22 GDPR, and Articles 32 to 34 GDPR). Facebook Ireland remains solely responsible for the processing of such personal data in connection with Page Insights that are not covered by the existing Page Insights Supplement.
Due to the existing agreements with Facebook Ireland, also regarding the joint responsibility of the data agreement, it is expedient to assert requests for information as well as the assertion of further data subject rights directly with Facebook Ireland. As the operator of the social network and its ability to integrate Facebook fan pages there, Facebook Ireland alone is capable of accessing the necessary information via the direct access options and to take any necessary measures and provide information directly. However, you can also send requests to us. We are of course ready to assist you at any time, as well as to fulfill our obligations as the responsible party.
The underlying Page Insights supplement regarding the responsible party is available at.
https://www.facebook.com/legal/terms/page_controller_addendum
For the use of the service, the terms of use of Instagram (including the other conditions and guidelines listed therein) are solely authoritative. These can be found at help.instagram.com/581066165581870.
For information on data processing by Facebook, please see the privacy policy of the Instagram service.
b) What data do we process and for what purpose?
aa) Operation of our Instagram account
The purpose of operating our Instagram account is to get in touch with users and visitors of the Instagram social network and to engage in an exchange. Sometimes we provide direct information about our company and related offers, such as events we are holding or current events, special promotions and offers, etc.
We are also able to obtain statistics on visits and interactions with our account. These are created by Facebook Ireland. This allows us to better manage the marketing of our activity in a targeted manner. In doing so, we can sometimes gain knowledge of Instagram profiles of individual users who like our fan page and/or use the applications on the page. This enables us to provide improved content and functionality to those users via our Instagram fan page.
In order to further improve our content, we may also use demographic and geographic analyses based on the information collected when you visit our account. This allows us to target interest-based advertisements without directly knowing your identity as a visitor.
If you use multiple devices during your visit to Instagram, a collection and analysis can also take place across devices, provided that you visit our fan page as a registered user who is logged in with your Instagram profile.
Generated visitor statistics are forwarded to us in anonymized form only. Access to the underlying data is not possible for us.
bb) Use of Insights and Cookies
Within the framework of our fan page, we use the "Insights" service from Facebook Ireland to obtain anonymized statistical data on visitors to our fan page.
When you visit our fan page, Facebook Ireland stores a corresponding data package, a so-called "cookie", on your end device, each of which contains an assignable user code. If you are registered as an Instagram user, this user code can be linked to your data. The information stored in the process is processed by Facebook. It is also possible that third parties can use this information from Facebook's cookies to provide services to companies advertising on Facebook.
Unless previously deleted, the cookie is active for two years.
For more information about Page Insights, please see the Page Insights Data Processing Accountability Supplement between Facebook Ireland and us:
https://www.facebook.com/legal/terms/page_controller_addendum
For more information on the use of cookies by Facebook Ireland, please refer to Facebook's Cookie Policy:
https://www.facebook.com/policies/cookies/
c) Legal basis
The processing of personal data by us is based on our legitimate interests in an effective exchange with Instagram users, visitors to our profile and in connection with communication with users on our social media profiles, including our corporate presentation pursuant to Art. 6 (1) f) GDPR.
d) Data sharing and data transfer to the USA
It is possible that data collected during a visit to our fan page will be forwarded to Facebook Inc. with headquarters in the USA and processed there. There is no EU Commission adequacy decision for data transfers to the USA. Facebook ensures an adequate level of data protection via the EU standard contractual clauses. You can access a copy of the contractual clauses here: www.facebook.com/legal/EU_data_transfer_addendum.
We do not pass on data within the framework of the operation of our company website.
e) Option to object via your Instagram account
As an Instagram user, you have the option via the settings for advertising preferences in your account to set the extent to which their user behavior may be recorded when visiting our fan page. Facebook also provides an objection form:
https://www.facebook.com/help/contact/1994830130782319
a) What data do we process and for what purpose?
YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Within the scope of our YouTube channel, no personal data is directly processed by us.
However, if you enter data on YouTube itself as a registered user, such as your username and the content published under your own account, this data will be processed by us when we share your comments, respond to your comments, or write a post that links to your profile. In this case, the data you entered on YouTube, in particular your (user) name and the content published under your account, are processed insofar as they are included in our offer and made available to our fans.
For all further data processing in the context of the use of the YouTube service and its functionalities, Google Ireland Limited is the responsible party within the meaning of Art. 4 No. 7 GDPR. We have no influence on the type and scope of the data processed by Google as part of the YouTube service, the type of processing, the use of the data or the transfer of this data to third parties.
Information on what data is processed by YouTube and for what purposes can be found in Google's privacy policy: https://www.google.de/policies/privacy/.
b) Legal basis
The processing of personal data by us is based on our legitimate interests in an effective exchange with YouTube users, visitors to our profile and in connection with communication with users on our social media profiles, including our corporate presentation pursuant to Art. 6 (1) f) GDPR.
c) Data sharing and data transfer to the USA
It is possible that data collected when visiting our YouTube channel will be forwarded to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, located in the USA, and processed there. There is no EU Commission adequacy decision for data transfers to the USA. Google ensures an adequate level of data protection via the EU standard contractual clauses. You can access a copy of the contractual clauses here: https://policies.google.com/privacy/frameworks?hl=de&gl=de
Incidentally, we do not pass on data to third parties within the framework of the operation of our company profile.
a) Joint responsibility for data processing
LinkedIn is a product provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Together with LinkedIn, we are jointly responsible for data processing in connection with our company profile, in particular in connection with the "Page Insights" function, in accordance with the provisions of the General Data Protection Regulation (GDPR), Art. 4 No. 7 GDPR. When you visit our company profile, personal data is processed by LinkedIn and us as the responsible party.
LinkedIn assumes primary responsibility under the GDPR for the processing of Page Insights Data, see also section b) bb) User Analytics. LinkedIn therefore also assumes all obligations under the GDPR with regard to the processing of Page Insights Data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). LinkedIn remains solely responsible for the processing of such personal data in connection with Page Insights that is not covered by the existing Page Insights Joint Controller Addendum.
The "Page Insights Joint Controller Addendum" can be accessed at: legal.linkedin.com/pages-joint-controller-addendum.
LinkedIn's privacy policy can be found at: https://www.linkedin.com/legal/privacy-policy
b) What data do we process and for what purpose?
aa) Exchange and communication
The purpose of operating our company profile on LinkedIn is first of all to get in touch with the users and visitors of the LinkedIn social network and to engage in an exchange. In doing so, we provide direct information about our company and the associated offers.
As a user of a LinkedIn profile, we may process the data you provide as a LinkedIn member. This includes all information you have stored in your profile, messages you send us, and interaction with our content. In particular, this happens when you share or recommend our content, comment on it, contact us or when you refer to our presence within LinkedIn.
The processing of personal data by us is based on our legitimate interests in an effective exchange with users of LinkedIn, as well as visitors to our profile, and in connection with communication with users on our social media profiles, including our corporate presentation pursuant to Art. 6 (1) f) GDPR.
bb) Applications
If you submit your application to us via LinkedIn, or if you indicate interest in a job offer that we make to you, the data you provide (e.g. name, e-mail address, desired location, data of your LinkedIn profile, etc.), your message, and the application documents submitted will be processed exclusively for the purpose of processing and handling your application request.
We process personal applicant data on the basis of Section 26 (1) BDSG. Accordingly, the processing of data that is required in connection with the decision on the establishment of an employment relationship is permissible.
Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests pursuant to Art. 6 (1) f) GDPR, namely for the assertion and/or defense of claims.
cc) User analysis
LinkedIn provides us with various information on visits and visitors to our company page with the "Page Insights" service. These are created by LinkedIn and enable us to better and more specifically control the marketing of our activity. This is so-called aggregated data, with which no reference to your person can be made. Data processing within the scope of the "Pages-Insights" service takes place exclusively under the responsibility of LinkedIn. We have no access to personal data, except in aggregated form.
The processing of personal data by us is based on our legitimate interests in an effective exchange with users of LinkedIn, as well as visitors to our profile, and in connection with communication with users on our social media profiles, including our corporate presentation pursuant to Art. 6 (1) f) GDPR.
c) Data sharing and data transfer to the USA
It is possible that data collected when visiting our company profile will be forwarded to the LinkedIn Corporation based in the USA and processed there. There is no EU Commission adequacy decision for data transfers to the USA. LinkedIn ensures an adequate level of data protection via the EU standard contractual clauses. You can access a copy of the contractual clauses here: https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de
Incidentally, we do not pass on data to third parties within the framework of the operation of our company profile.
a) What data do we process and for what purpose?
aa) Exchange and communication
We operate a company profile on the online platform of the social network "XING", New Work SE.
Dammtorstraße 30, 20354 Hamburg, Germany ("Xing"), a company profile where personal data is processed. The purpose of operating our company profile on Xing is to get in touch with users and visitors of the social network, to engage in an exchange, and to be able to receive applications from users directly via Xing. In doing so, we provide direct information about our company and the associated offers.
As a user of a Xing company profile, we may process the data you provide as a Xing member on Xing. This includes all information that you have stored in your profile, messages that they send us, as well as interaction with our content. In particular, this happens when you share or recommend our content, comment or when you refer to our presence within LinkedIn.
Information on which data is processed by Xing and for what purposes it is used can be found in Xing's privacy policy:
ttps://privacy.xing.com/de/datenschutzerklaerung
The processing of personal data by us is based on our legitimate interests in an effective exchange with users of Xing, visitors to our profile, to be able to receive applications from users directly via Xing, and in connection with communication with users on our social media profiles, including our corporate presentation pursuant to Art. 6 (1) f) GDPR.
bb) Applications
If you submit your application to us via Xing, or if you indicate interest in a job offer that we make to you, the data you provide (e.g. name, e-mail address, desired job location, data of your Xing profile, etc.), your message, and the application documents submitted will be processed exclusively for the purpose of processing and handling your application request.
We process personal applicant data on the basis of Section 26 (1) BDSG. Accordingly, the processing of data that is required in connection with the decision on the establishment of an employment relationship is permissible.
Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests pursuant to Art. 6 (1) f) GDPR, namely for the assertion and/or defense of claims.
b) Data sharing and data transfer to the USA
We do not pass on data to third parties as part of the operation of our company profile.
We store personal data only as long as it is necessary for the purposes for which it is processed or if you have revoked your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data can be up to 10 years, regardless of the processing purposes.
a) Information
Upon request, you will receive information about all personal data that we have stored about you at any time and free of charge.
b) Correction, deletion, restriction of processing (blocking), objection
If you no longer agree to the storage of your personal data or if this data has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law) in response to a corresponding instruction. The same applies if we are only to process data in a restrictive manner in the future. You have the right to object in particular in cases where your data is required due to the performance of a task that is in the public interest or in our legitimate interest, as well as profiling based on this. You also have such a right of objection in the event of data processing for the purpose of direct advertising.
c) Right of revocation for consents with effect for the future
You can revoke consents granted at any time with effect for the future. Your revocation does not affect the lawfulness of the processing until the time of revocation.
d) Data portability
If data processing takes place on the basis of a contract, pre-contractual negotiations, consent or with the help of automated processes, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another responsible party upon request.
e) Restriction of processing
Data for which we are not able to identify the data subject, e.g. if it has been anonymized for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.
f) Exercise of your data subject rights and right of appeal
If you have any questions regarding the processing of your personal data, if you wish to obtain information, correct, block, object to or delete data, or if you wish to have your data transferred to another company, please contact datenschutz@local-brand-x.com.
You also have the possibility to complain to a supervisory authority about your data protection rights:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.