9. SOCIAL NETWORKS
9.1 Description of the processing
Certain subpages of our website contain so-called social plugins offered by the external social networks Facebook, Twitter, Instagram and Google+. When you access a page that contains such a plugin, your browser establishes a direct connection with the servers of the social network. The content of the respective social plugin is transmitted by the social network directly to your browser and displayed on our website. To prevent this we use the so-called two-click solution. We have integrated the social plugins for this on our website in such a way, that the connection of the social plugins with the servers of the social networks is interrupted by default. If you want to communicate directly with a social network on our website via the social plugin and enable an exchange of data, you must click on the respective desired social plugin and thereby activate it.
After activating a social plugin we no longer have any influence on the scope of the data collected by the respective social network. We therefore inform you according to our state of knowledge.
By activating a social plugin your IP address is transmitted to the respective social network in conjunction with the address of our website. If you are logged into the social network when you visit our website, this information will be assigned to your user account there. If you interact with an activated social plugin, e.g. by "sharing", "liking" or "retweeting" a post by means of the social plugin, this information is also transmitted directly to the respective social network and is also stored there in your user account. The social networks with which you communicate, store your data as user profiles and also use them for advertising purposes, for market research and/or for the needs-based design of their websites. You have the right to object to the creation of these user profiles. To exercise this right, you must contact the social networks directly.
9.2 Purpose
The processing is done in order to provide you with convenient user-friendly communication with the social networks.
9.3 Legal basis
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose named in section 10.2.
9.4 Recipients and transfer to third countries
By activating a social plugin, your data will be transmitted to one of the following social networks:
Facebook: Meta Inc, 1601 S California Ave, Palo Alto, California 94304, USA. Further information on data protection at Facebook can be found at http://www.facebook.com/policy.php; http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo.
The social networks also process your personal data in the USA and have submitted to the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found at https://www.privacyshield.gov/EU-US-Framework.
SAFETY MEASURES
10. SECURITY MEASURES
To protect your personal data from unauthorised access, we have provided our website with an SSL or TLS certificate. SSL stands for "Secure Sockets Layer" and TLS for "Transport Layer Security" and encrypts the communication of data between a website and the user's terminal device. You can recognise active SSL or TLS encryption by a small lock logo displayed on the far left of the browser's address bar.
YOUR RIGHTS
11. DATA SUBJECT RIGHTS
With regard to the data processing by our company described above you are entitled to the following data subject rights:
11.1 Information (Art. 15 DSGVO)
You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have a right of access to this personal data and to the further information listed in Art. 15 DSGVO under the conditions set out in Art. 15 DSGVO.
11.2 Correction (Art. 16 DSGVO)
You have the right to request, that we correct any inaccurate personal data relating to you and, where applicable, complete any incomplete personal data without undue delay.
11.3 Deletion (Art. 17 DSGVO)
You have the right to demand, that we delete personal data concerning you without delay, if one of the reasons listed in detail in Art. 17 of the GDPR applies, e.g. if your data is no longer required for the purposes we pursue.
11.4 Restriction of data processing (Art. 18 DSGVO)
You have the right to request us to restrict processing, if one of the conditions listed in Art. 18 DSGVO applies, e.g. if you dispute the accuracy of your personal data, data processing will be restricted for the period of time, that allows us to verify the accuracy of your data.
11.5 Data portability (Art. 20 GDPR)
You have the right, under the conditions listed in Art. 20 GDPR, to request the return of the data concerning you in a structured, common and machine-readable format.
11.6 Withdrawal of consent (Art. 7 (3) DSGVO)
You have the right to withdraw your consent at any time in the case of processing based on consent. The revocation applies from the time it is asserted. In other words, it is effective for the future. The processing therefore does not become unlawful retroactively as a result of the withdrawal of consent.
11.7 Complaint (Art. 77 GDPR)
If you consider, that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. You may exercise this right before a supervisory authority in the EU Member State of your place of residence, place of work or place of the alleged infringement.
11.8 Prohibition of automated decisions/profiling (Art. 22 GDPR)
Decisions which have legal effects concerning you or which significantly affect you, must not be based solely on automated processing of personal data - including profiling. We inform you, that we do not use automated decision-making including profiling with regard to your personal data.
11.9 Objection (Art. 21 DSGVO)
If we process your personal data on the basis of Art. 6 (1) lit. f DSGVO (for the protection of overriding legitimate interests), you have the right to object to this under the conditions listed in Art. 21 DSGVO. However this only applies insofar as there are reasons arising from your particular situation. After an objection we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for processing, that override your interests, rights and freedoms. We also do not have to stop processing if it serves the assertion, exercise or defence of legal claims. In any case - also irrespective of a specific situation - you have the right to object at any time to the processing of your personal data for direct marketing.
Stand: August 2023
