Social Media Data Protection

Our Social Media Presence 

Form 

Data Processing by Social Networks 

We maintain publicly accessible profiles on social networks. The individual social networks we use are listed below. 
Social networks such as Facebook, X, etc. are generally able to comprehensively analyze your user behavior when you visit their website or a website with integrated social media content (e.g., Like buttons or advertising banners). Visiting our social media presences triggers numerous data protection–relevant processing operations. In detail: 

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection occurs, for example, via cookies that are stored on your device or by recording your IP address. 

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are logged in or have been logged in. 

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policies of the respective social media portals. 

Form 

Legal Basis 

Our social media presences are intended to ensure the widest possible presence on the Internet. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which are to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6(1)(a) GDPR). 

Form 

Controller and Assertion of Rights 

If you visit one of our social media presences (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You may generally assert your rights (information, rectification, erasure, restriction of processing, data portability, and complaint) both against us and against the operator of the respective social media portal (e.g., against Facebook). 

Please note that despite joint responsibility with the operators of the social media portals, we do not have full influence over the data processing operations of the social media portals. Our options depend largely on the corporate policy of the respective provider. 

Form 

Storage Period 

The data collected directly by us via the social media presence will be deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions—particularly retention periods—remain unaffected. 

We have no influence on the storage period of your data that is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g., in their privacy policies; see below). 

Form 

Your Rights 

You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to object, the right to data portability, and the right to lodge a complaint with the competent supervisory authority. Furthermore, you may request the rectification, blocking, erasure, and under certain circumstances the restriction of the processing of your personal data. 

Form 

Social Networks in Detail 

Facebook 

We maintain a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter “Meta”). According to Meta, the collected data is also transferred to the USA and other third countries. 

We have concluded an agreement with Meta on joint processing (Controller Addendum). This agreement specifies which data processing operations we or Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link: 
https://www.facebook.com/legal/terms/page_controller_addendum. 

You can independently adjust your advertising settings in your user account. To do so, click the following link and log in: 
https://www.facebook.com/settings?tab=ads. 

Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: 
https://www.facebook.com/legal/EU_data_transfer_addendum and 
https://de-de.facebook.com/help/566994660333381. 

For details, please refer to Facebook’s privacy policy: 
https://www.facebook.com/about/privacy/. 

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: 
https://www.dataprivacyframework.gov/participant/4452 

Form 

Instagram 

We maintain a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. 

Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: 
https://www.facebook.com/legal/EU_data_transfer_addendum and 
https://de-de.facebook.com/help/566994660333381. 

Details on how your personal data is handled can be found in Instagram’s privacy policy: 
https://privacycenter.instagram.com/policy/. 

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: 
https://www.dataprivacyframework.gov/participant/4452 

Form 

LinkedIn 

We maintain a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. 

If you wish to disable LinkedIn advertising cookies, please use the following link: 
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. 

Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: 
https://www.linkedin.com/legal/l/dpa and 
https://www.linkedin.com/legal/l/eu-sccs. 

Details on how your personal data is handled can be found in LinkedIn’s privacy policy: 
https://www.linkedin.com/legal/privacy-policy. 

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: 
https://www.dataprivacyframework.gov/participant/5448 

Form 

YouTube 

We maintain a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how your personal data is handled can be found in YouTube’s privacy policy: 
https://policies.google.com/privacy?hl=de. 

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: 
https://www.dataprivacyframework.gov/participant/5780