Privacy policy
Social Media

With this privacy policy, we inform you about the scope of the processing of your personal data (hereinafter referred to as "data") in the context of our social media presence.

1. responsible for data processing

Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is

Local Brand X GmbH (LBX)
Mombacher Straße 4
55122 Mainz

Phone: +49 6131 63571 00
Web: www.local-brand-x.com
E-mail: datenschutz@local-brand-x.com

2. contact details of our data protection officer

RMPRIVACY GmbH
Matthias Rosa
Große Langgasse 1A
55116 Mainz

www.rmprivacy.de
E-mail: datenschutz@local-brand-x.com

3. tikTok

a) What data do we process and for what purpose?

We use the social media service TikTok from TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. We use the advertising service to promote our offers. Personal data is also processed in the process.

We do not process any personal data directly as part of our TikTok account/advertisements on TikTok.

If you enter data yourself as a registered user on TikTok, such as your user name and the content published under your own account, this data will be processed by us when we share your comments, reply to your comments or write a post that refers to your profile. In this case, the data you enter on TikTok, in particular your (user) name and the content published under your account, will be processed to the extent that it is included in our offer and made accessible to our fans.

TikTok Technology Limited is the controller within the meaning of Art. 4 No. 7 GDPR for all other data processing in the context of the use of the TikTok service and its functionalities. We have no influence on the type and scope of the data processed by TikTok as part of the TikTok service, the type of processing, the use of the data or the disclosure of this data to third parties.

Further information on data protection can be found at: https://www.tiktok.com/legal/privacy-policy-eea?lang=de

b) Legal basis

The processing of personal data by us is based on our legitimate interests in an effective exchange with the users of TikTok, the visitors to our profile and in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. 6 Para. 1 f) GDPR.

c) Disclosure of data and data transfer to the USA and China

According to TikTok, your data collected when you visit our TikTok account(s) will be transferred to servers outside the EU or the EEA, including in the USA, Malaysia and Singapore. A transfer to other third countries, in particular to the People's Republic of China, cannot be excluded by us. There is no adequacy decision by the EU Commission for data transfers to the USA, Malaysia and the People's Republic of China. TikTok ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clauses will be provided on request. Please contact datenschutz@local-brand-x.com for this purpose.

4. facebook presence of LBX

a) Joint responsibility for data processing

We operate our Facebook fan page on the online platform of the social network of Facebook Ireland Limited ("Facebook Ireland"). Together with Facebook Ireland, we are jointly responsible for data processing in connection with this fan page in accordance with the provisions of the GDPR. This includes in particular the data processing of Page Insights, see bb) Use of Insights and cookies. When you visit this fan page, personal data is processed by Facebook Ireland and us as the controller.

Facebook Ireland has primary responsibility under the GDPR for the processing of Insights data. Facebook Ireland therefore also assumes all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). Facebook Ireland remains solely responsible for the processing of such personal data in connection with Page Insights that are not covered by the existing Page Insights Addendum.

Due to the existing agreements with Facebook Ireland, including the joint responsibility of the data agreement, it is expedient to assert requests for information and the assertion of other data subject rights directly with Facebook Ireland. As the operator of the social network and its ability to integrate Facebook fan pages there, only Facebook Ireland is able to access the necessary information via the direct access options and to take any necessary measures and provide information immediately. However, you can also send requests to us. We are of course prepared to assist you at any time and to fulfill our obligations as the controller.

The underlying terms of use of Facebook Ireland (including the other conditions and guidelines listed therein) are available at:
www.facebook.com/legal/terms
supplemented by the Page Insights supplement regarding the controller, available at
https://www.facebook.com/legal/terms/page_controller_addendum

b) What data do we process and for what purpose?

aa) Operation of our fan page

The purpose of operating our Facebook fan page is to get in touch with users and visitors of the Facebook Ireland social network and to engage in an exchange. We sometimes provide direct information about our company and related offers, such as events we are organizing or current events, special promotions and offers, etc.

With the help of this Facebook fan page, we are also able to obtain statistics on visits and visitors. These are created by Facebook Ireland. This enables us to manage the marketing of our activities better and in a more targeted manner. In doing so, we can sometimes gain knowledge of Facebook profiles of individual users who like our fan page and/or use the applications on the page. This enables us to provide the users concerned with improved content and functions via our Facebook fan page.

To further improve our content, we can also use the information collected during your visit to access demographic and geographical analyses based on this information. This enables us to place targeted, interest-based advertisements without gaining direct knowledge of your identity as a visitor.

If you use multiple devices during your visit to Facebook Ireland, data may also be collected and analyzed across devices if you visit our fan page as a registered user logged in with your Facebook profile.

The visitor statistics generated are only forwarded to us in anonymized form. We do not have access to the underlying data.

bb) Use of insights and cookies

As part of our fan page, we use the "Insights" service from Facebook Ireland to obtain anonymized statistical data on visitors to our fan page.

When you visit our fan page, Facebook Ireland stores a corresponding data package, a so-called "cookie", on your end device, which contains an assignable user code. If you are registered as a Facebook user, this user code can be linked to your data. The information stored in the process is processed by Facebook. It is also possible that third parties can use this information from Facebook's cookies to provide services to companies advertising on Facebook.

If not deleted beforehand, the cookie is active for two years.

Further information on Page Insights can be found in the Page Insights Addendum between Facebook Ireland and us on the responsibility for data processing:

https://www.facebook.com/legal/terms/page_controller_addendum

Further information on the use of cookies by Facebook Ireland can be found in Facebook's Cookie Policy:

https://www.facebook.com/policies/cookies/

c) Legal basis

The processing of personal data by us is based on our legitimate interests in an effective exchange with the users of our social media presences, the visitors to our profiles and in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. 6 para. 1 f) GDPR.

d) Disclosure of data and data transfer to the USA

The data collected when you visit our fan page may be forwarded to Facebook Inc. based in the USA and processed there. There is no adequacy decision by the EU Commission for data transfers to the USA. Facebook ensures an adequate level of data protection via the EU standard contractual clauses. You can access a copy of the contractual clauses here: https://www.facebook.com/legal/EU_data_transfer_addendum.

We do not pass on any data as part of the operation of our fan page.

e) Possibility to object via your Facebook account

As a Facebook user, you have the option of using the settings for advertising preferences in your Facebook account to set the extent to which your user behavior may be recorded when you visit our fan page. Facebook also provides an objection form.

5th Instagram appearance of LBX

a) Joint responsibility for data processing

Instagram is a Facebook product provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: "Facebook"). Together with Facebook Ireland, we are jointly responsible for data processing in connection with this fan page in accordance with the provisions of the GDPR, Art. 4 No. 7 GDPR. This includes in particular the data processing of page insights, see section b) bb) Use of insights and cookies. When you visit our Instagram company page, personal data is processed by Facebook Ireland and us as the controller.

The underlying Page Insights supplement regarding the controller is available at

https://www.facebook.com/legal/terms/page_controller_addendum

The use of the service is governed solely by Instagram's terms of use (including the other terms and conditions and guidelines listed therein). These can be accessed at help.instagram.com/581066165581870.

Information on data processing by Facebook can be found in the Instagram service privacy policy.

b) What data do we process and for what purpose?

aa) Operation of our Instagram account

The purpose of operating our Instagram account is to get in touch with users and visitors of the Instagram social network and to engage in an exchange. We sometimes provide direct information about our company and related offers, such as events we are organizing or current events, special promotions and offers, etc.

We are also able to obtain statistics on visits and interactions with our account. These are created by Facebook Ireland. This enables us to manage the marketing of our activities better and in a more targeted manner. In doing so, we can sometimes gain knowledge of Instagram profiles of individual users who like our fan page and/or use the page's applications. This enables us to provide the users concerned with improved content and functions via our Instagram fan page.

To further improve our content, we can also use the information collected when you visit our account to access demographic and geographical analyses based on this information. This allows us to place targeted interest-based advertisements without gaining direct knowledge of your identity as a visitor.

If you use multiple devices during your visit to Instagram, data may also be collected and analyzed across devices if you visit our fan page as a registered user logged in with your Instagram profile.

The visitor statistics generated are only forwarded to us in anonymized form. We do not have access to the underlying data.

bb) Use of insights and cookies

As part of our fan page, we use the "Insights" service from Facebook Ireland to obtain anonymized statistical data on visitors to our fan page.

When you visit our fan page, Facebook Ireland stores a corresponding data package, a so-called "cookie", on your end device, which contains an assignable user code. If you are registered as an Instagram user, this user code can be linked to your data. The information stored in the process is processed by Facebook. It is also possible that third parties can use this information from Facebook's cookies to provide services to companies advertising on Facebook.

If not deleted beforehand, the cookie is active for two years.

Further information on Page Insights can be found in the Page Insights Addendum between Facebook Ireland and us on the responsibility for data processing:

https://www.facebook.com/legal/terms/page_controller_addendum

Further information on the use of cookies by Facebook Ireland can be found in Facebook's Cookie Policy:

https://www.facebook.com/policies/cookies/

c) Legal basis

The processing of personal data by us is based on our legitimate interests in an effective exchange with Instagram users, visitors to our profile and in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. 6 (1) f) GDPR.

d) Disclosure of data and data transfer to the USA

Data collected when you visit our fan page may be forwarded to Facebook Inc. based in the USA and processed there. There is no adequacy decision by the EU Commission for data transfers to the USA. Facebook ensures an adequate level of data protection via the EU standard contractual clauses. You can download a copy of the contractual clauses here: www.facebook.com/legal/EU_data_transfer_addendum.

We do not pass on data as part of the operation of our company website.

e) Possibility to object via your Instagram account

As an Instagram user, you have the option of using the settings for advertising preferences in your account to set the extent to which your user behavior may be recorded when you visit our fan page. Facebook also provides an objection form.

6th YouTube channel from LBX

a) What data do we process and for what purpose?

YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We do not directly process any personal data within the scope of our YouTube channel.

However, if you enter data on YouTube yourself as a registered user, such as your user name and the content published under your own account, this data will be processed by us when we share your comments, reply to your comments or write a post that refers to your profile. In this case, the data you enter on YouTube, in particular your (user) name and the content published under your account, will be processed to the extent that it is included in our offer and made accessible to our fans.

Google Ireland Limited is the controller within the meaning of Art. 4 No. 7 GDPR for all other data processing in connection with the use of the YouTube service and its functionalities. We have no influence on the type and scope of the data processed by Google as part of the YouTube service, the type of processing, the use of the data or the disclosure of this data to third parties.

Information on what data is processed by YouTube and for what purposes can be found in Google's privacy policy: https://www.google.de/policies/privacy/.

b) Legal basis

The processing of personal data by us is based on our legitimate interests in an effective exchange with the users of YouTube, the visitors to our profile and in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. 6 Para. 1 f) GDPR.

c) Disclosure of data and data transfer to the USA

Data collected when you visit our YouTube channel may be forwarded to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, based in the USA, and processed there. There is no adequacy decision by the EU Commission for data transfers to the USA. Google ensures an adequate level of data protection via the EU standard contractual clauses. You can download a copy of the contractual clauses here: https://policies.google.com/privacy/frameworks?hl=de&gl=de

We do not pass on data to third parties in the context of operating our company profile.

7th LinkedIn appearance of LBX

a) Joint responsibility for data processing

LinkedIn is a product provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Together with LinkedIn, we are jointly responsible for data processing in connection with our company profile, in particular in connection with the "Page Insights" function, in accordance with the provisions of the General Data Protection Regulation (GDPR), Art. 4 No. 7 GDPR. When you visit our company profile, personal data is processed by LinkedIn and us as the controller.

LinkedIn has primary responsibility under the GDPR for the processing of Page Insights data, see also section b) bb) User analysis. LinkedIn therefore also assumes all obligations under the GDPR with regard to the processing of Page Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). LinkedIn remains solely responsible for the processing of such personal data in connection with Page Insights that is not covered by the existing Page Insights Joint Controller Addendum.

The "Page Insights Joint Controller Addendum" can be accessed at: https://legal.linkedin.com/pages-joint-controller-addendum.

You can find LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy

b) What data do we process and for what purpose?

aa) Exchange and communication

The purpose of operating our company profile on LinkedIn is initially to make contact with users and visitors to the LinkedIn social network and to engage in an exchange. In doing so, we provide direct information about our company and the associated offers.

As a LinkedIn profile user, we may process the data provided by you as a LinkedIn member. This includes all information that you have stored in your profile, messages that you send us and interaction with our content. In particular, this happens when you share or recommend our content, comment on it, contact us or refer to our presence within LinkedIn.

The processing of personal data by us is based on our legitimate interests in an effective exchange with LinkedIn users and visitors to our profile, as well as in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. 6 para. 1 f) GDPR.

bb) Applications

If you send us your application via LinkedIn, or if you signal your interest in a job offer that we submit to you, the data you provide (e.g. name, e-mail address, desired place of employment, data of your LinkedIn profile, etc.), your message and the application documents sent will be processed exclusively for the purpose of processing and handling your application request.

We process personal applicant data on the basis of Section 26 (1) BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted.

Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests in accordance with Art. 6 para. 1 f) GDPR, namely to assert and/or defend against claims.

cc) User analysis

With the "Page Insights" service, LinkedIn provides us with various information about visits and visitors to our company page. This information is generated by LinkedIn and enables us to manage the marketing of our activities in a better and more targeted manner. This is so-called aggregated data that cannot be used to identify you personally. Data processing as part of the "Pages Insights" service is the sole responsibility of LinkedIn. We have no access to personal data, except in aggregated form.

c) Disclosure of data and data transfer to the USA

Data collected when you visit our company profile may be forwarded to the LinkedIn Corporation based in the USA and processed there. There is no adequacy decision by the EU Commission for data transfers to the USA. LinkedIn ensures an adequate level of data protection via the EU standard contractual clauses. You can download a copy of the contractual clauses here: https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de

We do not pass on data to third parties in the context of operating our company profile.

8th Xing presence of LBX

a) What data do we process and for what purpose?

aa) Exchange and communication

We operate a company profile on the online platform of the social network "XING", New Work SE
Dammtorstraße 30, 20354 Hamburg, Germany ("Xing"), where personal data is processed. The purpose of operating our company profile on Xing is to get in touch with users and visitors to the social network, to engage in an exchange and to be able to receive applications from users directly via Xing. In doing so, we provide direct information about our company and the associated offers.

As a user of a Xing company profile, we can process the data provided by you as a Xing member on Xing. This includes all information that you have stored in your profile, messages that you send us and interaction with our content. In particular, this happens when you share or recommend our content, comment on it or when you refer to our presence within LinkedIn.

Information on which data is processed by Xing and for what purposes it is used can be found in Xing's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

The processing of personal data by us is based on our legitimate interests in an effective exchange with the users of Xing, the visitors to our profile, to be able to receive applications from users directly via Xing and in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. 6 Para. 1 f) GDPR.

bb) Applications

If you send us your application via Xing, or if you signal your interest in a job offer that we submit to you, the data you provide (e.g. name, e-mail address, desired location, data of your Xing profile, etc.), your message and the application documents sent will be processed exclusively for the purpose of processing and handling your application request.

b) Disclosure of data and data transfer to the USA

We do not pass on data to third parties as part of the operation of our company profile.

9. duration of data storage

We only store personal data for as long as is necessary for the purposes for which it is processed or for as long as you have withdrawn your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data may be up to 10 years, regardless of the processing purposes.

10. your rights as a data subject

a) Information

On request, you can obtain information about all personal data that we have stored about you at any time and free of charge.

b) Rectification, erasure, restriction of processing (blocking), objection

If you no longer consent to the storage of your personal data or if it has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law). The same applies if we are only to process data to a limited extent in future. You have the right to object in particular in cases where your data is required for the performance of a task carried out in the public interest or in our legitimate interest, as well as profiling based on this. You also have such a right to object in the case of data processing for the purpose of direct advertising.

c) Right to withdraw consent with effect for the future

You can withdraw your consent at any time with effect for the future. Your revocation does not affect the legality of the processing up to the time of revocation.

d) Data portability

If data processing is carried out on the basis of a contract, pre-contractual negotiations, consent or with the aid of automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a commonly used, structured and machine-readable format so that you can transmit the data to another controller if you wish.

e) Restriction of processing

Data for which we are not able to identify the data subject, e.g. if it has been anonymized for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible with regard to this data if you provide us with additional information that allows us to identify you.

f) Exercising your rights as a data subject and right to lodge a complaint

If you have any questions regarding the processing of your personal data, information, correction, blocking, objection or deletion of data or if you wish to transfer the data to another company, please contact datenschutz@local-brand-x.com.

You also have the option of complaining to a supervisory authority about your rights as a data subject:

www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

‍