Our social media presence

This Privacy Policy applies to the following social media sites

Facebook
Instagram
LinkedIn Maler & Akustik
LinkedIn Unternehmensgruppe

 

Data processing by social networks

We maintain publicly accessible profiles on social networks. The specific social networks we use are listed below.

Social networks such as Facebook, X, etc., can generally analyse your user behaviour extensively when you visit their website or a website with integrated social media content (e.g., "like" buttons or advertising banners). Visiting our social media presences triggers numerous data-protection-related processing operations. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Your personal data may also be collected even if you are not logged in or do not have an account with the social media portal in question. In this case, data collection occurs, for example, via cookies stored on your device or by recording your IP address. 

With the help of the data collected in this manner, the operators of the social media portals can create user profiles in which your preferences and interests are stored. This allows interest-based advertising to be shown to you both within and outside the social media presence in question. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or have been logged in. 

Please note that we cannot track all processing activities on social media portals. Depending on the provider, additional processing operations may be carried out by the operators of the social media portals. For more details, please refer to the terms of use and privacy policies of the respective social media portals.

 

Legal basis

Our social media sites are designed to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Article 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on different legal grounds to be specified by the operators of the social networks (e.g. consent in the sense of Article 6 (1) (a) GDPR).

 

Controller and assertion of rights

If you visit one of our social media pages (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can exercise your rights (right of access, rights to rectification, erasure, limitation of processing, data portability and to loge a complaint) both against us and the operator of the social media portal in question (e.g., against Facebook).

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence over the data processing operations of the social media portals. Our ability to act is largely governed by the corporate policies of the respective providers.

 

Retention period

The data we collect directly through our social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – particularly retention periods – remain unaffected.

We have no control over the retention period for data of yours that is stored by the operators of the social networks for their own purposes. For details, please contact the social network operators directly (e.g., via their privacy policies; see below).

 

Your rights

You always have the right to request information about your stored data, its origin, its recipients and the purpose of its collection at no charge. You also have the right to object, a right to data portability and a right to lodge a complaint with the competent supervisory authority. You may also request the rectification, blocking, erasure, and, in certain circumstances, restriction of the processing of your personal data.

Specific social networks

 

Facebook

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter referred to as "Meta"). According to Meta, the data collected is also transferred to the USA and other third countries.

We have concluded an agreement on joint processing with Facebook (Controller Addendum). This agreement determines which data processing operations we or Facebook are responsible for when you visit our Facebook page. This agreement can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising preferences independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.

The data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Please refer to Facebook's privacy policy for details: https://www.facebook.com/about/privacy/

The company is certified according to the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States that is intended to ensure compliance with European data protection standards for data processing in the United States. Each DPF-certified company undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.

 

Instagram

We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter referred to as "Meta"). 

The data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Details on how they handle your personal data can be found in Instagram's privacy policy: https://privacycenter.instagram.com/policy/.

The company is certified according to the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States that is intended to ensure compliance with European data protection standards for data processing in the United States. Each DPF-certified company undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.

 

LinkedIn

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

The data transfer to the USA is based on the EU Commission's standard contractual clauses. You can find details here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For information on how LinkedIn handles your personal data, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

The company is certified according to the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States that is intended to ensure compliance with European data protection standards for data processing in the United States. Each DPF-certified company undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5448.