Information on the collection of personal data

In the following, we inform you about the handling of your personal data in connection with our social media pages. Personal data is any data that can be used to identify you personally.

Please check carefully which personal data you share with us via one of the platforms. As long as you are logged into your respective account and visit one of the platforms, the platform operator can assign this to your profile. We expressly point out that the respective provider stores the data of its users (e.g. personal information, IP address, etc.) and may also use it for business purposes.

We have no influence on the data collection and further processing of the platforms. Furthermore, it is not clear to us to what extent, where and for how long the data is stored, to what extent the respective provider complies with the deletion obligations, which evaluations and links are made with the data and to whom the data is passed on.

Data may be transferred to a third country or an international organization. Since July 2023, there has been an adequacy decision by the EU Commission (Data Privacy Framework), which identifies the USA as a third country with a level of data protection comparable to that of the EU. The adequacy decision can now serve as the basis for data transfers to certified organizations in the USA. The providers listed here are certified under the Data Privacy Framework.

Controller for data processing within the meaning of the General Data Protection Regulation (GDPR)

konzepthaus Web Solutions GmbH

Flurstraße 1 a
87527 Sonthofen
Sonthofen, Germany

Phone: +49 8321 60 78 787
E-mail: info@konzepthaus-ws.de

insofar as we process the data you provide to us via our social media channels exclusively ourselves.

Our data protection officer

Sven Lenz
Data protection law firm Lenz GmbH & Co.
Bahnhofstraße 50
87435 Kempten

If you have any questions about data protection or other data protection concerns, you are welcome to send an email to the data protection team: datenschutz@konzepthaus-ws.de

Facebook (Meta)

Insofar as the data you transmit to us via Facebook (Meta) is also or exclusively processed by Facebook (Meta) (Insights data), Facebook (Meta) Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR). In this respect, data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR.

Furthermore, for the use of certain Facebook (Meta) products, such as the so-called "Facebook (Meta) Business Tools", and for data processing carried out in this way, an additional agreement applies between us and Facebook (Meta) Ireland Ltd. as joint controllers in accordance with Art. 26 GDPR.

The controller of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

For more information on Facebook (Meta)'s data processing, please refer to Facebook (Meta)'s privacy policy.

You can contact Facebook (Meta)'s data protection officer using the online contact form provided by Facebook (Meta).

Page Insights

Facebook (Meta) provides us with so-called page insights for our Facebook (Meta) page: https://www.Facebook (Meta).com/business/a/page/page-insights. This is summarized data that allows us to gain insight into how people interact with our page. Page Insights may be based on personal data collected in connection with a visit or interaction of persons on or with our site and its content. According to Art. 6 para. 1 lit. f GDPR, this serves to safeguard our legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties, which predominate in the context of a balancing of interests. You can object to the processing of your data for the aforementioned purposes at any time by changing your settings for advertisements in your Facebook (Meta) user account at https://www.Facebook (Meta).com/settings?tab=ads.

Instagram

Together with Instagram Inc. ("Instagram"), we are "joint controllers" within the meaning of Art. 26 GDPR for the processing of your personal data on this website, as we use the technical platform and services of Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, for the information service offered on Instagram at .....

Instagram is part of the Facebook (Meta) group of companies and shares infrastructure, systems, technology and possibly personal data (e.g. personal data, IP numbers, etc.) with Facebook (Meta) and other Facebook (Meta) companies.

We process personal data ourselves via our Instagram page, but at the same time data processing is also carried out by Facebook (Meta) as the operator of the Instagram platform.

The data you enter on Instagram, in particular your user name and the content published under your account, will also be processed by us to the extent that we may link to your posts or reply to them or write posts from us that refer to your account. The data you freely publish and disseminate on Instagram is thus included by us in our offer and made accessible to our followers.

However, the recipient of the data that you enter or disclose on our Instagram page is also Instagram or Facebook (Meta), who may use it for their own purposes and pass it on to third parties under their responsibility. The recipient of published personal data, e.g. in the context of posts, is also the public, i.e. potentially anyone.

Insofar as the data you transmit to us via Facebook (Meta) is also or exclusively processed by Facebook (Meta) (Insights data), Facebook (Meta) Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR). In this respect, data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR.

By using Instagram, your personal data will be collected, transferred, stored, disclosed and used by Instagram and transferred to, stored and used in the United States, Ireland and any other country in which Facebook (Meta) does business, regardless of your place of residence.

On the one hand, Instagram and Facebook (Meta) process your voluntarily entered data such as name and user name, e-mail address, telephone number.

On the other hand, Instagram and Facebook (Meta) also evaluate the content you share to determine which topics you are interested in, store and process confidential messages that you send directly to other users and can determine your location using GPS data, wireless network information or your IP address in order to send you advertising or other content.

Finally, Facebook (Meta) also receives information when you view content, for example, even if you have not created an account. This so-called "log data" may include the IP address, the browser type, the operating system, information about the previously accessed website and the pages you accessed, your location, your mobile phone provider, the end device you use (including device ID and application ID), the search terms you used and cookie information.

Data processing for statistical and marketing purposes

Instagram provides us with so-called Page Insights for our Instagram page. This is summarized data that allows us to gain insight into how people interact with our page. Page Insights may be based on personal data that is collected in connection with a visit or interaction of people on or with our page and its content. According to Art. 6 para. 1 lit. f GDPR, this serves to safeguard our legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties, which predominate in the context of a balancing of interests. You can object to the processing of your data for the aforementioned purposes at any time by changing your settings for advertisements in your Instagram user account accordingly.

LinkedIn

Insofar as the data you transmit to us via LinkedIn is also or exclusively processed by LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR), provided that you are resident in a country of the European Union, Iceland, Liechtenstein, Norway or Switzerland. If you are based in another country, LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, is also responsible for data processing within the meaning of the GDPR in addition to us. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

You can contact the data protection officer of LinkedIn Ireland Unlimited Company or LinkedIn Corporation via the contact form available at the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO

Kununu

For the operation of our kununu page, we are jointly responsible with the provider of kununu for the processing of your personal data. Kununu is an application of the XING service and is part of: New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

When you visit our kununu page, New Work collects your IP address. In addition, New Work collects further information through the use of cookies, which may allow IP addresses to be assigned to individual kununu users. If you are logged in to kununu when you visit our kununu page, New Work can assign the visit directly to your user account. New Work can use this information to offer you personalized content or advertising. If you interact with content on our kununu page, the corresponding information is transmitted directly to a New Work server and stored there. The information may be published in your kununu user account and displayed to your contacts there. If you do not want New Work to assign the data collected via our kununu page directly to your user account, you must log out of kununu before visiting our kununu page and delete any cookies on your device.

For what purposes and to what extent New Work processes the personal data of users collected when they visit our kununu page for its own purposes, in particular assigns the visit to our kununu page to individual users, how long New Work stores this data and whether this data is passed on to third parties by New Work, is not known to us - in the absence of information from New Work.

You can find kununu's privacy policy here: https://privacy.xing.com/de/datenschutzerklaerung

Data processing when contacting us

We collect personal data ourselves when you contact us (e.g. via a contact form or by liking and commenting on our posts or following our profile). You can see which data we collect when you contact us via the contact form from the relevant contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f) GDPR.

If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your request, provided that there are no legal storage obligations to the contrary. We assume that processing has been completed when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

Rights of the data subject

The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

- Right of access pursuant to Art. 15 GDPR;

- Right to rectification pursuant to Art. 16 GDPR;

- Right to erasure pursuant to Art. 17 GDPR;

- Right to restriction of processing pursuant to Art. 18 GDPR;

- Right to information pursuant to Art. 19 GDPR;

- Right to data portability pursuant to Art. 20 GDPR;

- Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;

- Right to lodge a complaint pursuant to Art. 77 GDPR.

Reference to the right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the competent supervisory authority for data protection if you believe that the processing of your personal data is not lawful.

The address of the supervisory authority responsible for us is

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 27, 91522 Ansbach, Germany

Telephone: +49 981 53-1300

Fax: +49 981 53-981300

You can open the complaint form of the Bavarian State Office for Data Protection Supervision via the following link: https://www.lda.bayern.de/de/beschwerde.html

General right to object

If we process your personal data as part of a balancing of interests on the basis of our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation. If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.