Privacy statement
social media

With this privacy policy, we inform you about the scope of processing of your personal data (hereinafter “data”) within the framework of our social media presence.

1.Responsible for data processing

Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:

Local Brand X GmbH (LBX)
Mombacher Strasse 4
55122 Mainz

Phone: +49 6131 63571 00
Web: www.local-brand-x.com
email: datenschutz@local-brand-x.com

2. Contact details of our data protection officer

RMPRIVACY GmbH
Matthias Rosa
Große Langgasse 1A
55116 Mainz

www.rmprivacy.de
email.: datenschutz@local-brand-x.com

3rd TikTok

a) Which data do we process and for which purpose?

We use the TikTok social media service from TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. We use the advertising service to promote our offers. Personal data is also processed here.

As part of our TikTok account/ads on TikTok, we do not directly process any personal data.

If you enter data on TikTok yourself as a registered user, such as your username and the content published under your own account, we will process it when we share your comments, respond to your comments, or write a post that links to your profile. In this case, the data you enter on TikTok, in particular your (user) name and the content published under your account, will be processed insofar as it is included in our offer and made available to our fans.

TikTok Technology Limited is responsible for all further data processing as part of the use of the TikTok service and its functionalities within the meaning of Article 4 No. 7 GDPR. We have no influence on the type and scope of data processed by TikTok as part of the TikTok service, the type of processing, the use of the data, or the transfer of this data to third parties.

Further information on data protection can be found at: https://www.tiktok.com/legal/privacy-policy-eea?lang=de

b) Legal basis

The processing of personal data by us is based on our legitimate interests in effective exchange with TikTok users, visitors to our profile and in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. Art. 6 para. 1 f) GDPR.

c) Transfer of data and data transfer to the USA and China

According to TikTok, your data collected when you visit our TikTok account/ads will be transferred to servers outside the EU or ERW, including in the USA; Malaysia and Singapore. We cannot rule out a transfer to other third countries, in particular to the People's Republic of China. There is no adequacy decision by the EU Commission for data transfers to the USA, Malaysia and the People's Republic of China. TikTok ensures an appropriate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clause will be provided upon request. To do so, please contact datenschutz@local-brand-x.com.

4th Facebook appearance by LBX

a) Joint responsibility for data processing

We operate our Facebook fan page on the online platform of the Facebook Ireland Limited social network (“Facebook Ireland”). Together with Facebook Ireland, we are jointly responsible for data processing in connection with this fan page in accordance with the provisions of the GDPR. This includes in particular the processing of page insights, see bb) Use of insights and cookies. When you visit this fan page, personal data is processed by Facebook Ireland and us as the person responsible.

Facebook Ireland has primary responsibility under GDPR for processing insights data. Facebook Ireland therefore also assumes all obligations under the GDPR with regard to the processing of insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). Facebook Ireland remains solely responsible for processing such personal data in connection with page insights that are not covered by the existing Page Insights supplement.

Based on the existing agreements with Facebook Ireland, including on joint responsibility for the data agreement, it is appropriate to assert requests for information and the assertion of further data subject rights directly with Facebook Ireland. As the operator of the social network and its ability to integrate Facebook fan pages there, only Facebook Ireland is able to access the necessary information via the immediate access options and to immediately take any necessary measures and provide information. However, you can also send inquiries to us. We are of course ready to assist you at any time and also to fulfill our duties as the responsible person.

The underlying Facebook Ireland terms of use (including the other terms and guidelines listed therein) are available at:
www.facebook.com/legal/terms
supplemented by the page insights supplement regarding the person responsible, available at
https://www.facebook.com/legal/terms/page_controller_addendum

b) Which data do we process and for which purpose?

aa) Operation of our fan page

The purpose of operating our Facebook fan page is to get in touch with users and visitors of the Facebook Ireland social network and to exchange ideas. Sometimes we provide direct information about our company and related offers, such as events held by us or current events, special promotions and offers, etc.

With the help of this Facebook fan page, we are also able to obtain statistics on visits and visitors. These are created by Facebook Ireland. This enables us to manage the marketing of our activities better and more effectively. In doing so, we can sometimes gain knowledge of the Facebook profiles of individual users who like our fan page and/or use the site's applications. This enables us to provide users with improved content and functions via our Facebook fan page.

In order to further improve our content, we can also draw on demographic and geographical evaluations based on the information collected during visits. This allows us to place targeted interest-based advertisements without immediately knowing your identity as a visitor.

If you use several devices when you visit Facebook Ireland, data can also be collected and evaluated across devices, provided that you visit our fan page as a registered user logged in with your Facebook profile.

Visitor statistics created will only be forwarded to us anonymously. We are unable to access the underlying data.

bb) Use of insights and cookies

As part of our fan page, we use the “Insights” service from Facebook Ireland to obtain anonymized statistical data about visitors to our fan page.

When you visit our fan page, Facebook Ireland stores a corresponding data package, a so-called “cookie”, each of which contains an assignable user code. If you are registered as a Facebook user, this user code can be linked to your data. The information stored in the process is processed by Facebook. It is also possible that third parties can use this information from Facebook cookies to provide services to companies advertising on Facebook.

If not previously deleted, the cookie is active for two years.

For more information on page insights, see the page insights supplement between Facebook Ireland and us on the responsibility for data processing:

https://www.facebook.com/legal/terms/page_controller_addendum

For more information on the use of cookies by Facebook Ireland, please see Facebook's Cookie Policy:

https://www.facebook.com/policies/cookies/

c) Legal basis

The processing of personal data by us is based on our legitimate interests in effective exchange with users of our social media presences, visitors to our profiles and in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. Art. 6 para. 1 f) GDPR.

d) Transfer of data and data transfer to the USA

The data collected when you visit our fan page may be forwarded to Facebook Inc., based in the USA, and processed there. There is no adequacy decision by the EU Commission for data transfers to the USA. Facebook ensures an appropriate level of data protection via the EU standard contractual clauses. A copy of the contract clauses can be downloaded here: https://www.facebook.com/legal/EU_data_transfer_addendum

We do not transfer any data as part of the operation of our fan page.

e) Opt-out option via your Facebook account

As a Facebook user, you can use the advertising preferences settings in your Facebook account to set the extent to which your user behavior may be recorded when you visit our fan page. Facebook also provides an objection form.

5th Instagram presence by LBX

a) Joint responsibility for data processing

Instagram is a Facebook product provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: “Facebook”). Together with Facebook Ireland, we are jointly responsible for data processing in connection with this fan page in accordance with the provisions of the GDPR, Art. 4 No. 7 GDPR. This includes in particular the processing of page insights, see section b) bb) Use of insights and cookies. When you visit our Instagram company page, personal data is processed by Facebook Ireland and us as the person responsible.

The underlying page insights supplement regarding the person responsible is available at

https://www.facebook.com/legal/terms/page_controller_addendum

Only Instagram's terms of use (including the other terms and guidelines listed therein) apply to the use of the service. These can be found under help.instagram.com/581066165581870 be retrieved.

Information about data processing by Facebook can be found in the Instagram service's privacy policy.

b) Which data do we process and for which purpose?

aa) Operating our Instagram account

The purpose of operating our Instagram account is to get in touch with users and visitors of the Instagram social network and to exchange ideas. Sometimes we provide direct information about our company and related offers, such as events held by us or current events, special promotions and offers, etc.

We are also able to obtain statistics on visits and interactions with our account. These are created by Facebook Ireland. This enables us to manage the marketing of our activities better and more effectively. In doing so, we can sometimes gain knowledge of the Instagram profiles of individual users who like our fan page and/or use the site's applications. This enables us to provide users with improved content and functions via our Instagram fan page.

To further improve our content, we can also draw on demographic and geographical evaluations based on the information collected when you visit our account. This allows us to place targeted interest-based advertisements without immediately knowing your identity as a visitor.

If you use several devices when you visit Instagram, data can also be collected and evaluated across devices, provided that you visit our fan page as a registered user logged in with your Instagram profile.

Visitor statistics created will only be forwarded to us anonymously. We are unable to access the underlying data.

bb) Use of insights and cookies

As part of our fan page, we use the “Insights” service from Facebook Ireland to obtain anonymized statistical data about visitors to our fan page.

When you visit our fan page, Facebook Ireland stores a corresponding data package, a so-called “cookie”, each of which contains an assignable user code. If you are registered as an Instagram user, this user code can be linked to your data. The information stored in the process is processed by Facebook. It is also possible that third parties can use this information from Facebook cookies to provide services to companies advertising on Facebook.

If not previously deleted, the cookie is active for two years.

For more information on page insights, see the page insights supplement between Facebook Ireland and us on the responsibility for data processing:

https://www.facebook.com/legal/terms/page_controller_addendum

For more information on the use of cookies by Facebook Ireland, please see Facebook's Cookie Policy:

https://www.facebook.com/policies/cookies/

c) Legal basis

The processing of personal data by us is based on our legitimate interests in effective exchange with users of Instagram, visitors to our profile and in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. 6 Para. 1 f) GDPR.

d) Transfer of data and data transfer to the USA

Data collected when you visit our fan page may be forwarded to Facebook Inc., based in the USA, and processed there. There is no adequacy decision by the EU Commission for data transfers to the USA. Facebook ensures an appropriate level of data protection via the EU standard contractual clauses. A copy of the contract clauses can be downloaded here: www.facebook.com/legal/eu_data_transfer_addendum.

We do not transfer data as part of the operation of our company website.

e) Opt-out option via your Instagram account

As an Instagram user, you have the option to set the advertising preferences settings in your account to what extent your user behavior may be recorded when you visit our fan page. Facebook also provides an objection form.

6. YouTube channel from LBX

a) Which data do we process and for which purpose?

YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As part of our YouTube channel, we do not directly process any personal data.

However, if you enter data on YouTube yourself as a registered user, such as your username and the content published under your own account, we will process it when we share your comments, respond to your comments, or write a post that links to your profile. In this case, the data you enter on YouTube, in particular your (user) name and the content published under your account, will be processed insofar as it is included in our offer and made available to our fans.

Google Ireland Limited is responsible for all further data processing as part of the use of the YouTube service and its functionalities within the meaning of Article 4 No. 7 GDPR. We have no influence on the type and scope of data processed by Google as part of the YouTube service, the type of processing, the use of the data or the transfer of this data to third parties.

Information about which data is processed by YouTube and used for what purposes can be found in Google's privacy policy: https://www.google.de/policies/privacy/

b) Legal basis

The processing of personal data by us is based on our legitimate interests in effective exchange with YouTube users, visitors to our profile and in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. Art. 6 para. 1 f) GDPR.

c) Transfer of data and data transfer to the USA

Data collected when you visit our YouTube channel may be forwarded to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 based in the USA and processed there. There is no adequacy decision by the EU Commission for data transfers to the USA. Google ensures an appropriate level of data protection via the EU standard contractual clauses. A copy of the contract clauses can be downloaded here: https://policies.google.com/privacy/frameworks?hl=de&gl=de

Otherwise, we do not transfer data to third parties as part of the operation of our company profile.

7. LBX's LinkedIn presence

a) Joint responsibility for data processing

LinkedIn is a product provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Together with LinkedIn, we are jointly responsible for data processing in connection with our company profile, in particular in connection with the “Page Insights” function, in accordance with the provisions of the General Data Protection Regulation (GDPR), Art. 4 No. 7 GDPR. When you visit our company profile, personal data is processed by LinkedIn and us as the person responsible.

LinkedIn has primary responsibility under the GDPR for processing Page Insights data, see also section b) bb) User analysis. LinkedIn therefore also assumes all obligations under the GDPR with regard to the processing of Page Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). LinkedIn remains solely responsible for processing such personal data in connection with Page Insights that are not covered by the existing Page Insights Joint Controller Addendum.

The “Page Insights Joint Controller Addendum” can be found at: https://legal.linkedin.com/pages-joint-controller-addendum be retrieved.

LinkedIn's privacy policy can be found at: https://www.linkedin.com/legal/privacy-policy

b) Which data do we process and for which purpose?

aa) Exchange and communication

The purpose of operating our company profile on LinkedIn is initially to get in touch with users and visitors of the LinkedIn social network and to exchange ideas. Here, we provide direct information about our company and the associated offers.

As a user of a LinkedIn profile, we can process the data provided by you as a LinkedIn member. This includes all information that you have stored in your profile, messages that you send us, and interaction with our content. In particular, this happens when you share or recommend our content, comment on it, get in touch with us or when you refer to our website within LinkedIn.

The processing of personal data by us is based on our legitimate interests in effective exchange with LinkedIn users, as well as visitors to our profile, as well as in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. Art. 6 para. 1 f) GDPR.

bb) Applications

If you send us your application via LinkedIn, or if you indicate that we are interested in a job offer, the data you provide (e.g. name, email address, desired place of employment, LinkedIn profile data, etc.), your message and the submitted application documents will be processed exclusively for the purpose of processing and processing your application request.

The processing of personal applicant data by us is based on Section 26 (1) BDSG. Accordingly, the processing of data necessary in connection with the decision to establish an employment relationship is permitted.

Should the data be necessary for legal prosecution after completion of the application process, data processing can be carried out to protect our legitimate interests in accordance with Art. 6 para. 1 f) GDPR take place, namely to assert and/or defend claims.

cc) User analysis

With the “Page Insights” service, LinkedIn provides us with various information about visits and visitors to our company website. These are created by LinkedIn and enable us to better and more effectively manage the marketing of our activities. This is so-called aggregated data, which cannot be used to establish any connection to you personally. Data processing as part of the “Pages Insights” service is carried out exclusively by LinkedIn. We have no access to personal data, except in aggregated form.

c) Transfer of data and data transfer to the USA

Data collected when you visit our company profile may be forwarded to LinkedIn Corporation based in the USA and processed there. There is no adequacy decision by the EU Commission for data transfers to the USA. LinkedIn ensures an appropriate level of data protection via the EU standard contractual clauses. A copy of the contract clauses can be downloaded here: https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de

Otherwise, we do not transfer data to third parties as part of the operation of our company profile.

8. LBX's Xing presence

a) Which data do we process and for which purpose?

aa) Exchange and communication

We operate on the online platform of the social network “XING”, New Work SE
Dammtorstraße 30, 20354 Hamburg, Germany (“Xing”) a company profile that processes personal data. The purpose of operating our company profile on Xing is to get in touch with users and visitors of the social network, to exchange ideas and to be able to receive applications from users directly via Xing. Here, we provide direct information about our company and the associated offers.

As a user of a Xing company profile, we can process the data provided by you as a Xing member on Xing. This includes all information that you have stored in your profile, messages that you send us, and interaction with our content. In particular, this happens when you share or recommend our content, comment on it or when you link to our website within LinkedIn.

Information on which data is processed by Xing and for what purposes it is used can be found in Xing's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

The processing of personal data by us is based on our legitimate interests in effective exchange with users of Xing, visitors to our profile, to be able to receive applications from users directly via Xing and in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. Art. 6 para. 1 f) GDPR.

bb) Applications

If you send us your application via Xing, or if you indicate that we are interested in a job offer, the data you provide (e.g. name, email address, desired place of employment, data from your Xing profile, etc.), your message and the submitted application documents will be processed exclusively for the purpose of processing and processing your application request.

b) Transfer of data and data transfer to the USA

We do not transfer data to third parties as part of the operation of our company profile.

9. Duration of data storage

We only store personal data for as long as is necessary for the purposes for which it is processed or as long as you have withdrawn your consent. Insofar as legal storage obligations must be observed, the storage period for certain data may be up to 10 years regardless of the processing purposes.

10. Your rights as a data subject

a) Information

On request, you will receive information about all personal data that we have stored about you free of charge at any time.

b) Correction, deletion, restriction of processing (blocking), objection

If you no longer agree to the storage of your personal data or if it has become incorrect, we will delete or block your data or make the necessary corrections (insofar as this is possible under applicable law). The same applies if we are only to process data restrictively in the future. In particular, you have the right to object in cases where your data is required due to the performance of a task that is in the public interest or is carried out in our legitimate interest, as well as profiling based on this. You also have such a right of objection in the case of data processing for the purpose of direct marketing.

c) Right of withdrawal in case of consent with effect for the future

You can withdraw your consent at any time with effect for the future. Your revocation does not affect the lawfulness of processing up to the time of revocation.

d) Data portability

If data processing is carried out on the basis of a contract, pre-contractual negotiations, consent or using automated procedures, you have the right to data portability. On request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another person responsible upon request.

e) Restriction of processing

Data for which we are unable to identify the data subject, for example if it has been anonymized for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible with regard to this data if you provide us with additional information that allows us to identify you.

f) Exercising your rights as a data subject and right to lodge a complaint

If you have any questions about the processing of your personal data, information, correction, blocking, objection or deletion of data, or if you wish to transfer the data to another company, please contact datenschutz@local-brand-x.com.

You also have the option to complain to a supervisory authority about your rights as a data subject:

www.bfdi.bund.de/de/infothek/address_links/address_links-node.html.

‍