When you visit our social media pages, data concerning you is processed. Therefore we would like to inform you in accordance with Art. 13 of the General Data Protection Regulation (GDPR) about our handling of your data and your rights resulting from this.

 

2.1 Public relations

The data you provide on our social media pages, such as usernames, comments, videos, images, likes, public messages, etc. are published by the social media platform and are not processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. If necessary, we share your content on our site, if this is a function of the social media platform, and communicate with you through the social media platform.

If you send us a request on the social media platform, we may also refer you to other secure communication channels that guarantee confidentiality, depending on the content. For example, you have the option at any time to send us your inquiries to the address given in the legal notice or to info@legamaster.de. The choice of the appropriate communication channel is your own responsibility here.

The legal basis for the aforementioned processing of your data is Art. 6 (1) sentence 1 lit. f) GDPR. The data processing is carried out in the legitimate interest of conducting public relations for our company and being able to communicate with you.

We are jointly responsible for some of the processing activities with the respective operator of the social media platform.

Accordingly, we have entered into the required agreement pursuant to Art. 26 GDPR, provided that the operator of the social media platform allows this.

 

Facebook

Instagram

LinkedIn

Twitter:

YouTube:

The essential components of joint responsibility are found in the following section.

3.1 Statistics (Insights)

The social media platforms used regularly generate statistics (insights) based on usage data that contain information about your interaction with our social media site. We cannot influence the implementation and provision of these statistics, nor can we prevent them.

HINWEIS Bitte prüfen Sie die nachfolgende Formulierung und passen Sie diese gegebenenfalls an!

However, we do not make use of optional statistics from the social media platform.

We process the aforementioned information (statistics) in accordance with Art. 6 (1) sentence 1 lit. f GDPR in the legitimate interest of validating the use of our social media pages and improving our content in a target group-oriented manner.

3.2 Target group-oriented advertising

We also use the social media platforms described to place targeted advertising.

For this purpose, we use target group definitions that are provided to us by the social media operator. We only use anonymous target group definitions - we define characteristics, for example, based on general demographic information, behavior, interests and connections. The operator of the social media platform uses these to place advertisements to its users accordingly. The legal basis for this is the consent that the operator of the social media platform has obtained from its users.

If you intend to revoke this consent, please use the revocation options provided by the operator of the social media platform, as the social media platform operator is responsible for this processing.

We or the operator of the social media platform also use publicly available data for target group definition. The legal basis for this processing is then Art. 6 (1) sentence 1 lit. f GDPR. The legitimate interest on our part here is to define a target group that is as suitable as possible. We never use sensitive categories of personal data mentioned in Art. 9 and 10 GDPR (e.g. political opinions, sexual orientation) for target group definition.

We also use information about visits to or interactions with other websites (so-called remarketing) to define target groups. Among other things, we also use cookies for this purpose. In these cases, however, we obtain the consent of the users on the respective other pages in advance via a consent banner and inform them about the data processing at this point. You can revoke this consent at any time by calling up the consent banner of the corresponding website again.

The operator of the social media platform uses web tracking methods. Web tracking can also take place regardless of whether you are logged in or registered with the social media platform.

We would therefore like to point out that it cannot be ruled out that the operator of the social media platform uses and evaluates your profile and behavioral data for its purposes. We have no influence on the processing of your data by the operator of the social media platform. Please take this into account when using the social media platform.

You can find more information on data processing by the operator of the social media platform, configuration options for protecting your privacy, and further objection options in the operator's privacy policy.

We use the "Lead Ads" function on some of our social media pages to collect and process certain personal data from interested parties via a form displayed on the social media platforms. The content and scope of the data requested in this form depend on the targeting of the respective lead ad campaign.

The processing of the data is strictly linked to the purposes pursued with the respective lead ad campaign. These purposes are specified in the respective form. The legal basis for the data processing is your express consent, which can be revoked at any time, pursuant to Art. 6 (1) lit. a GDPR. If you intend to revoke your consent, please contact the e-mail address stated in the Legal Notice.

We are jointly responsible with Facebook for processing your data as part of the Lead Ads campaigns on Facebook in accordance with the above explanations (see Data processing under joint responsibility).

For the processing of your data in the context of the Lead Ads campaigns on TikTok, TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland supports us as a processor according to Art. 28 GDPR.

In the context of the transmission of the data requested in the registration forms, this may take place by the social media platform operators outside the EU or the EEA (in particular in the USA and Singapore). In this case, an adequate level of data protection cannot be guaranteed. There is a risk that authorities may access the data for security and monitoring purposes without you being informed or being able to appeal. Please keep this in mind if you decide to submit your data via Lead Ads campaigns. The transfer to a third country then takes place based on your consent pursuant to Art. 49 (1) lit. a GDPR.

We also pass on your data to order processors who support us in mailing and the associated processes. These service providers are strictly bound by instructions to us and are contractually obligated accordingly.

If data may be processed outside the EU or EEA in this context, we inform you about this in the following table.

Processor

Purpose

Appropriate Data Protection Level

The Rocket Science

Group LCC (MailChimp)

Mailing service providerProcessing is also possible outside the EU/EEA. The transfer is based on your consent pursuant to Art. 49 (1) lit. a GDPR. In addition, we have concluded the EU standard contractual clauses pursuant to Art. 46 (2) lit. c GDPR with the processor.
Zapier, Inc.Interface between the social media platform operator and MailChimpProcessing is also possible outside the EU/EEA. The transfer is based on your consent pursuant to Art. 49 (1) lit. a GDPR. In addition, we have concluded the EU standard contractual clauses pursuant to Art. 46 (2) lit. c GDPR with the processor.

We store the data collected as part of the Lead Ads campaigns for a period of 180 or until you revoke your consent. In addition, we store further data insofar as this is necessary for the verifiability of lawful data processing. This may include the storage of the full IP address at the time of data transmission as well as a copy of the confirmation e-mail sent by us. The corresponding data processing takes place based on Art. 6 para. 1 sentence 1 lit. f GDPR and in the legitimate interest of being able to account for the lawfulness of the data processing.

 

 

We delete your personal data when they are no longer required for the aforementioned processing purposes and there are no legal retention obligations that prevent deletion.

 

As a user, you have the possibility to assert the following rights against us as well as against the operator of the social media platform if the requirements are met:

7.1 Right of access (Art. 15 GDPR)

You have the right to request confirmation of whether your personal data are being processed; if so, you have a right to access these personal data and the information detailed in Art. 15 GDPR.

7.2 Right of rectification and erasure (Art. 16 and 17 GDPR)

You have the right to request that inaccurate personal data relating to you be corrected without undue delay and, where applicable, that incomplete personal data be completed. You also have the right to request that personal data concerning you be deleted without undue delay if one of the reasons listed in detail in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued.

7.3 Right of restriction (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR applies, for example, if you have objected to the processing, for the duration of any review.

7.4 Right of data portability (Art. 20 GDPR)

In certain cases, which are detailed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.

7.5 Right to object (Art. 21 GDPR)

If data is processed based on our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate reasons for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

If the data is processed based on legitimate interest for direct marketing, you have your right of objection, which you can assert at any time without giving reasons and the exercise of which leads to the termination of processing for direct marketing.

7.6 Right to object (Art. 7 GDPR)

If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Article 7 (3) GDPR. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

7.7 Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you think that the processing of data relating to you violates data protection provisions. The right of complaint can be asserted in particular before a supervisory

authority in the Member State of your residence, your place of work or the place of the alleged infringement.

 

Wenn Sie sich an unsere Datenschutzbeauftragte wenden, geben Sie hierbei bitte auch die verantwortliche Stelle an, die im Impressum genannt wird.

Our external data protection officer is available to provide information on the subject of data privacy and can be contacted at this address:

datenschutz nord GmbH

Sechslingspforte 2

22087 Hamburg Internet: www.datenschutz-nord-gruppe.de Email: office@datenschutz-nord.de

Tel.: +49 40 593 61 60-400

If you contact our data protection officer direct, please also state the responsible organization named in the Legal notice.