1. Facebook Fanpage
We operate a company website (“fan page”) on the professional social media network Facebook. We operate this fan page for self-presentation, branding but also for the purpose of customer communication and recruiting.
According to the judgment of the European Court of Justice (ECJ) of 05.06.2018, Az. C-210/16, is the operator of social media sites – at least on Facebook fan pages – partly responsible within the meaning of Art. 26 GDPR. Although Facebook offers such a declaration at https://www.facebook.com/legal/terms/page_controller_addendum, we do not know whether it now meets the requirements of the GDPR. We only process your data – apart from any further procedures below – if you contact us via the platform. In this case, Facebook collects your data and makes it available to us. Under certain circumstances, your data may also be stored and further processed by us. The processing of your personal data in the event of an enquiry or application is governed by our other relevant data protection declarations.
The legal basis for the processing of personal data is, depending on the case constellation, the processing to initiate and execute a contract with you pursuant to Art. 6 (1) b GDPR or based on our legitimate interest in communication with users and our external presentation for the purpose of advertising pursuant to Art. 6 (1) f GDPR. If you have given the provider of the social network your consent to the aforementioned data processing with effect for us, the legal basis is Art. 6 (1) a GDPR.
Furthermore, we may collect data from visitors to our company website, provided that the advertisement can be defined as visitor processing. Subject to the further procedures listed below, we do not store this data on our own systems, nor do we systematically process it by means of occasional information. For these processing steps, our information regarding the data controller, the data protection officer and the declaration of your rights as a data subject applies.
We would like to point out that the privacy policy of Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA) or Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) applies for any further processing on our fan page. Data transfer to third countries is based on the use of standard contractual clauses according to the European Commission: https://de-de.facebook.com/help/566994660333381.
For more detailed information about Facebook’s data processing and how to opt-out, please visit https://www.facebook.com/about/privacy/. Facebook is the provider of this service and only Facebook can provide complete information about data processing on Facebook.
We draw your attention to the fact that the assertion of data subject rights and requests for information are best addressed to Facebook. Only Facebook has access to your data and can take immediate measures to delete, restrict, etc. the data, or to provide information. Of course, we will support you in asserting your rights if necessary. You will find options for an opt out at: http://www.youronlinechoices.com/uk/your-ad-choices and https://www.facebook.com/settings?tab=ads.
1.1 Additional Information about Facebook Insight
We use the analysis function “Facebook Insight” on our fan page. This function is used for advertising and market research purposes to provide you with more relevant content and to develop new features that may be of interest to you. Facebook uses cookies to help analyze your fan page visits. The information generated by the cookies about your use of the fan pages is usually transferred to Facebook servers in the USA and stored there.
Facebook relies on standard contractual clauses of the European Commission when transferring data to third countries and thus undertakes to comply with the European data protection rules: https://de-de.facebook.com/help/566994660333381.
The processing is based on a legitimate interest according to Art. 6 (1) f GDPR, whereby our legitimate interest consists in the display of targeted advertising and the targeted design of our fan page. If you have given the provider of the social network a consent to the aforementioned data processing with effect for us, the legal basis is Art. 6 (1) a GDPR.
Further information on terms of use and data protection can be found at https://www.facebook.com/about/privacy/. Detailed information on the respective processing operations and the possibilities for objection can be found at http://www.youronlinechoices.com/=ads or https://www.facebook.com/legal/terms/page_controller_addendum.
2. LinkedIn
Our company operates a social media channel on the platform LinkedIn. According to the judgment of the European Court of Justice (ECJ) of 05.06.2018, Az. C-210/16, is the operator of social media sites – at least on Facebook fan pages – partly responsible within the meaning of Art. 26 GDPR. So far, we do not know that LinkedIn offers an agreement that meets the requirements of Art. 26.
We only process your data when you contact our Human Resources department via the LinkedIn platform or when you contact us on LinkedIn for an advertised job. In that case, LinkedIn collects your information and makes it available to us.
The legal basis for the processing of the personal data is depending on the case: The processing for the initiation and execution of a contract with you in accordance with Art. 6 (1) b GDPR or based on our legitimate interest in communicating with users and our external presentation for the purposes of advertising in accordance with Art. 6 (1). f GDPR. If you have given consent to the above-mentioned data processing with effect for us to the provider of the social network, the legal basis Art. 6 (1) a GDPR.
Under certain circumstances, a storage and further processing by us can take place. The processing of your personal data in the case of an application is based on our application privacy policy.
We may also collect data from visitors to our corporate site if the ad as a visitor can be defined as processing. However, we do not store these data on our own systems, nor are they systematically processed through an occasional notice.
For these processing steps, our information regarding the responsible entity, the data protection officer and the declaration of your rights as the data subject apply.
For any processing beyond that, we point out that the LinkedIn Ireland Unlimited Company privacy policy, Wilton Place, Dublin 2, Ireland (LinkedIn), applies to our LinkedIn Company page.
For more information on LinkedIn’s processing of personal information, visit https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.
3. Twitter
We operate a company website on the professional social media network Twitter, especially for self-expression, but also for recruiting.
According to the judgment of the European Court of Justice (ECJ) of 05.06.2018, Az. C-210/16, is the operator of social media sites – at least on Facebook fan pages – partly responsible within the meaning of Art. 26 GDPR. We suspect an analogous applicability of this decision to other social networks, including Twitter. So far, we are not aware that Twitter offers an agreement that meets the requirements of Art. 26.
We would like to point out that you use the offered Twitter short message service and its functions on your own responsibility. This applies also to the use of interactive functions (e.g. sharing, rating).
We only process your data if you contact us via the Twitter platform. In this case, Twitter collects your data and makes it available to us.
Under certain circumstances, your data may also be stored and further processed by us. The processing of your personal data in the case of an application is based on our applicant data protection declaration.
Your data will be processed by us to the extent that we may re-tweet your tweets or reply to them or write tweets that refer to your account. Data freely published and disseminated by you on Twitter are thus included by us and made accessible to third parties.
The legal basis for the processing of personal data is, depending on the case constellation, the processing to initiate and execute a contract with you in accordance with Art. 6 (1) b GDPR (insofar as it concerns concrete requests for quotations or an existing customer relationship with you) or on the basis of our legitimate interest in communication with users and our external presentation for the purpose of advertising pursuant to Art. 6 (1) f GDPR.
If you have given the provider of the social network your consent to the aforementioned data processing with effect for us, the legal basis is Art. 6 (1) a GDPR.
Under certain circumstances, we may also store and further process the data. The processing of your personal data will then be governed by one of our other data protection declarations, depending on which group of affected parties you belong to.
Furthermore, we may collect data from the “Likes” and commentators of our channel if the mere display can be defined as processing. However, we do not store this data on our own systems, nor is it systematically further processed through occasional disclosure.
For these processing steps, our information regarding the data controller, the data protection officer and the declaration of your rights as a data subject applies.
We would like to point out that the Twitter Privacy Policy (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) is applicable to any further processing on or via our Twitter channel. Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland is probably responsible.
We have no control over the nature and extent of the data processed by Twitter, the way the data is processed and used, or the disclosure of such data to third parties. We do not have effective control over this.
Standard contractual clauses serve as a guarantee for the transfer of personal data to third countries. Further information on the processing of personal data can be found here:
https://help.twitter.com/en/safety-and-security/twitter-privacy-settings
https://help.twitter.com/en/search?q=privacy+policy
https://help.twitter.com/en/managing-your-account/accessing-your-twitter-data# (possibility to view your data)
https://twitter.com/personalization (personalization options and opt-out)
https://help.twitter.com/forms/privacy (data processing information)
https://help.twitter.com/en/managing-your-account/how-to-download-your-twitter-archive#
We draw your attention to the fact that the assertion of data subject rights and requests for information are best directed against Twitter Inc. itself.
Only Twitter has access to your data and can take immediate measures to delete, restrict, etc. the data, or to provide information. Of course, we will support you in asserting your rights if necessary.
4. YouTube Channel
We operate one or more company websites on the social media network Youtube, in particular for self-presentation, but also for recruiting.
According to the judgement of the European Court of Justice (ECJ) of 05.06.2018, Az. C-210/16, the operator of social media pages is at least jointly responsible for the data processing of Facebook fanpages within the meaning of Art. 26 GDPR.
We suspect an analogous applicability of this decision to other social networks, including YouTube. So far, we are not aware that YouTube offers an agreement that meets the requirements of Art. 26.
Please note that you use the Youtube channel offered here and its functions under your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, likening, disclicting, commenting).
We only process your data if you contact us via the YouTube platform. In this case YouTube collects your data and makes it available to us.
Under certain circumstances, we may also store and further process your data. The processing of your personal data will then be governed by one of our other data protection declarations, depending on the group to which you belong.
Furthermore, we may collect data from visitors to our company website, provided that the advertisement can be defined as a visitor as processing. However, we do not store these data on our own systems, nor are they systematically further processed by occasional inspection.
The legal basis for the processing of personal data is, depending on the case constellation, the processing to initiate and execute a contract with you in accordance with Art. 6 para. 1 lit. b GDPR (e.g. for questions on products or services).
or on the basis of our justified interest in communication with users and our external presentation for the purpose of advertising pursuant to Art. 6 para. 1 S. 1 lit. f GDPR.
If you have given the provider of the social network your consent to the above data processing with effect for us, the legal basis is Art. 6 para. 1 lit. a GDPR.
For these processing steps, our information regarding the responsible office, the data protection officer and the declaration of your rights as a data subject applies.
We would like to point out that the data protection declaration of Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 or, alternatively, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is applicable to any other processing on our YouTube channel.
We have no lasting knowledge of, and have no influence over, the nature or extent of the data processed by Google, the manner in which such data is processed and used, or the disclosure of such data to third parties. We do not have effective control over this.
Further information on the processing of personal data by YouTube can be found here:
User conditions: http://www.google.com/analytics/terms/de.html
On data protection: http://www.google.com/intl/de/analytics/learn/privacy.html
Privacy policy: http://www.google.de/intl/de/policies/privacy
Standard contractual clauses apply in cases where personal data is transferred to the USA.
5. XING
We operate a company website on the professional social media network XING, in particular for self-presentation, but also for recruiting.
According to the judgment of the European Court of Justice (ECJ) of 05.06.2018, Az. C-210/16, is the operator of social media sites – at least on Facebook fan pages – partly responsible within the meaning of Art. 26 GDPR. We suspect an analogous applicability of this decision to other social networks, including XING. So far, we are not aware that XING offers an agreement that meets the requirements of Art. 26.
We process your data only if you contact our Human Resources department via the XING platform or apply for an advertised position via XING. In this case, XING will collect your data and make it available to us.
Under certain circumstances, a storage and further processing by us can take place. The processing of your personal data in the case of an application is based on our application privacy policy.
The legal basis for the processing of the personal data is depending on the case: The processing for the initiation and execution of a contract with you in accordance with Art. 6 (1) b GDPR or based on our legitimate interest in communicating with users and our external presentation for the purposes of advertising in accordance with Art. 6 (1) f GDPR. If you have given consent to the above-mentioned data processing with effect for us to the provider of the social network, the legal basis Art. 6 (1) a GDPR.
If you have given consent to the above-mentioned data processing with effect for us to the provider of the social network, the legal basis Art. 6 (1) a GDPR.
Under certain circumstances, a storage and further processing by us takes place. The processing of your personal data in the case of an application is based on our application privacy policy.
We may also collect data from visitors to our corporate site if the ad as a visitor can be defined as processing. However, we do not store these data on our own systems, nor are they systematically processed through an occasional notice.
For these processing steps, our information regarding the responsible entity, the data protection officer and the declaration of your rights as the data subject apply.
We would like to point out that the data protection declaration of XING SE, Dammtorstr. 30, DE-20354 Hamburg, Germany, Tel .: +49 40 419 131-0, Fax: +49 40 419 131 applies for any further processing on our XING company website -11, E-Mail: info@xing.com, (hereinafter: XING).
Further information on the processing of personal data by XING can be found here: https://privacy.xing.com/en/your-privacy.
6. StepStone
We operate one or more company websites on the professional social media network StepStone, especially for self-promotion, but also for recruiting.
According to the decision of the European Court of Justice (ECJ) of 05.06.2018, file number C-210/16, the operator of social media sites is at least partially responsible for data processing, at least in the case of Facebook-Fanpages, in terms of Art. 26 GDPR.
We suspect an analogous applicability of this decision to other social networks, including StepStone. So far we are not aware that StepStone offers an agreement that meets the requirements of Art. 26.
We only process your data when you contact our human resources department via the StepStone platform or apply for an advertised job via StepStone. In this case StepStone will collect your data and make it available to us.
Under certain circumstances, we may also store and further process your data. The processing of your personal data in the event of an application is governed by our applicant data protection declaration.
The legal basis for the processing of personal data is, depending on the case constellation, the processing for the initiation and execution of a contract with you in accordance with Art. 6 para. 1 lit. b) GDPR or on the basis of our legitimate interest in communicating with users and our external presentation for the purpose of advertising in accordance with Art. 6 para. 1 lit. f) GDPR.
If you have given your consent to the provider of the social network for the aforementioned data processing with effect for us, the legal basis is Art. 6 para. 1 lit. a) GDPR.
Under certain circumstances, we may also store and further process the data. The processing of your personal data in the case of an application is governed by our applicant data protection declaration.
Furthermore, we may collect data from visitors to our company site, provided that the advertisement as a visitor can be defined as processing. However, we do not store these data on our own systems, nor do we systematically process them by occasionally taking note of them.
For these processing steps, our information regarding the responsible office, the data protection officer and the declaration of your rights as a data subject applies.
We would like to point out that for any further processing on our StepStone company website, the data protection declaration of StepStone Deutschland GmbH, Völklinger Straße 1, DE-40291 Düsseldorf, Germany, Tel: +49 211-93493-0, Fax: +49 211-93493-5900, E-Mail: info@stepstone.de, (hereinafter referred to as StepStone) is applicable. Further information on the processing of personal data by StepStone can be found here: https://www.stepstone.com/privacy-statement/.
7. Indeed
We operate one or more company websites on the professional social media network Indeed, in particular for self-presentation, but also for recruiting.
According to the ruling of the European Court of Justice (ECJ) of 05.06.2018, Ref. C-210/16, the operator of social media pages is at least jointly responsible for the data processing on Facebook fanpages within the meaning of Art. 26 GDPR.
We suspect an analogue applicability of this decision to other social networks, including Indeed. So far, we are not aware that Indeed offers an agreement that meets the requirements of Art. 26.
We only process your data if you contact our HR department via the Indeed platform or apply for an advertised position via Indeed. In this case, Indeed collects your data and makes it available to us.
In the process, we may also store and further process it. The processing of your personal data in the event of an application is governed by our Applicant Privacy Policy.
The legal basis for the processing of personal data is, depending on the case constellation, the processing for the initiation and execution of a contract with you pursuant to Art. 6 para. 1 lit. b) GDPR or on the basis of our legitimate interest in communicating with users and our external presentation for the purpose of advertising pursuant to Art. 6 para 1 lit. f) GDPR.
If you have given your consent to the social network provider for the aforementioned data processing with effect for us, the legal basis is Art. 6 para. 1 lit. a) GDPR.
In this case, storage and further processing by us may also take place. The processing of your personal data in the event of an application is governed by our applicant privacy statement.
Furthermore, we may collect data of visitors to our company website, provided that the advertisement as a visitor can be defined as processing. However, we do not store this data on our own systems, nor are they systematically processed beyond occasional awareness.
For these processing steps, our information regarding the responsible body, the data protection officer and the declaration of your rights as a data subject apply.
Please note that for any further processing on our Indeed company site, the privacy policy of Indeed Ireland Operations Limited, 124 St. Stephen’s Green, Dublin 2, Ireland applies.
Further information on the processing of personal data by Indeed can be found here: https://de.indeed.com/legal?hl=de&redirect=true.