Data protection / privacy notes for Facebook, Instagram and others

  1. Facebook and Instagram

    1. Joint responsibilities

      The responsible parties for our Facebook page and Instagram profile are us,

      Nect GmbH (hereinafter Nect)
      Grosser Burstah 21
      20457 Hamburg, Germany
      Email: hello@nect.com,

      together with

      Facebook Ireland Limited, (hereinafter Facebook)
      4 Grand Canal Square
      Grand Canal Harbour
      Dublin 2, Eire

      Facebook, Instagram and Nect are joint data controllers as defined by Art. 26 General Data Protection Regulation (GDPR).

      Our data protection officer can be contacted at:

      Nect GmbH
      Grosser Burstah 21
      20457 Hamburg, Germany

      privacy@nect.com,

      We have concluded an agreement with Facebook regarding joint data protection law-related duties as specified by Art. 26 GDPR. This agreement, the so-called “Page Insights Controller Addendum”, can be viewed at:

      https://en-gb.facebook.com/legal/terms/page_controller_addendum

      Within the scope of this agreement Facebook accepts material obligations relating to so-called “Facebook Insights data” (hereinafter “Facebook Insights”), in particular as regards data subject information and the protection of data subject rights.

    2. Purpose and legal basis for processing

      Our data processing relating to our Facebook and Instagram presence is carried out as per Art. 6 Para. 1 (f) GDPR and on the basis of our legitimate interest in publicity work and communications.

      Communications

      We use Facebook and Instagram to present our company and our offering as well as to communicate with you. When doing so, we may communicate directly with you via Facebook to answer any enquiries you make via Facebook. Over and above this, we use Facebook and Instagram data to evaluate and improve the reach of our corporate communications. The data generated within the scope of this is erased as soon as its storage is no longer required or, if we have legal archiving obligations, its processing is restricted, both insofar as erasure or restriction of processing is possible. Communications via Facebook are potentially insecure. You can also use other means to contact us at any time.

      Use of “Facebook Insights”

      We use Facebook “Facebook Insights” functions on our Facebook and Instagram pages to obtain anonymised statistical data relating to use of, and visitors to, our Facebook and Instagram pages. The legal basis for this is our legitimate interest in publicity work and communications as per Art. 6 Para. 1 (f) GDPR and, in particular, optimisation of our Facebook and Instagram presences. We use “Facebook Insights” to obtain information relating to use of our Facebook and Instagram pages, in particular anonymised information relating to visitor profiles, including demographic and geographic evaluations. If you use Facebook or Instagram on more than one end device (e.g. via the browser and the app), Facebook Ltd. Will also compile these usage statistics across the multiple devices.

      Data processing within the scope of “Facebook Insights” is carried out by Facebook on the basis of the agreement on joint responsibilities referred to in Item 1 above. All data provided to us by Facebook is anonymised. For more information on Facebook data processing within the scope of “Facebook Insights” visit:

      https://www.facebook.com/legal/terms/information_about_page_insights_data.

      For general information on Facebook data processing visit:

      https://en-gb.facebook.com/about/privacy/

      and for Instagram visit:

      https://help.instagram.com/519522125107875

    3. Cookies

      Facebook also uses cookies and other comparable storage technologies in connection with our Facebook or Instagram page and use of “Facebook Insights”. For more information on this, see Facebook and Instagram cookie policies.

    4. Transmitting of data to Facebook Inc.

      Facebook may, within the scope of its data processing, forward personal data to Facebook Inc., which is headquartered in the USA. Insofar as personal data is forwarded to a country which is not a member state of the European Union or party to the Agreement on the European Economic Area (a ‘third country’) as per these data protection / privacy notes, this will, as far as possible, take place on the basis of EU Commission adequacy decisions or on the basis of appropriate guarantees or under the provisions of standard data protection clauses. When using standard data protection clauses we endeavour, as far as required and possible, to implement additional measures to protect your data.

    5. Data subject rights

      You have the right to object at any time on grounds relating to your personal situation (Art. 21 Para. 1 GDPR) to processing of your personal data which is carried out on the basis of Article 6 Para. 1 (f) GDPR.

      As a registered Facebook user you can click here to select settings regarding the extent to which Facebook can collect data on your user behaviour when visiting Facebook and Instagram pages and as a registered Instagram user here. For further options to manage data processing by Facebook and Instagram, including an objection form visit:

      https://www.facebook.com/help/contact/367438723733209

      Options are also provided under the general settings for Facebook and Instagram.

      If the relevant legal requirements are met, you have the right to information as per Art. 15 GDPR; to rectification as per Art. 16 GDPR; to erasure as per Art. 17 GDPR; to restriction of processing as per Art. 18 GDPR; the right to object as per Art. 21 GDPR and the right to data portability as per Art. 20 GDPR.

      You have the possibility to lodge a complaint with a data protection supervisory authority. The data protection authority which is responsible for us is the City of Hamburg Officer for Data Protection and Freedom of Information.

  2. XING

    New Work SE (Germany/EU) has fundamental sole responsibility for the processing of personal data when you visit our XING profile. For more information on processing of personal data by New Work SE see the data protection / privacy notes at:

    https://privacy.xing.com/en/privacy-policy

  3. TWITTER

    Twitter Inc. (USA) has fundamental sole responsibility for the processing of personal data when you visit our Twitter profile. For more information on processing of personal data by Twitter Inc. visit:

    https://twitter.com/en/privacy

  4. LINKEDIN

    LinkedIn Ireland Unlimited Company (Ireland/EU – “LinkedIn”) has fundamental sole responsibility for the processing of personal data when you visit our LinkedIn page. For more information on processing of personal data by LinkedIn visit:

    https://www.linkedin.com/legal/privacy-policy

    Please note that LinkedIn also processes personal data in the USA or other third countries as per LinkedIn data protection / privacy guidelines. When doing so, LinkedIn only transmits, as far as possible, personal data to countries on the basis of EU Commission adequacy decisions or on the basis of appropriate guarantees or under the provisions of standard data protection clauses. When using standard data protection clauses we endeavour, as far as required and possible, to implement additional measures to protect your data.

  5. YouTube

    Where applicable, our online presence includes embedded YouTube videos which are saved at http://www.YouTube.com and can be directly accessed from our website. In this context no YouTube plugins are used when you visit the YouTube platform from our website.

    Please note that the YouTube platform is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is, in turn, represented by Google Inc., headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

    All videos are embedded using the “enhanced data protection mode”. In other words, no personal data regarding you as the user will be transmitted to YouTube if you do not watch the videos. Data will only be transmitted if you watch the videos. We have no influence over the transmission of this data.

    When you visit our website YouTube will receive the information that you have called up the corresponding Internet page in our online offering. Personal data will be forwarded. This will take place independent of whether you use a user account provided by YouTube and which you are logged onto or there is no user account. If you are logged on to Google your data will be directly assigned to your account. If you do not wish assignment using your YouTube profile you must log off your account before activating the button. YouTube will store your data as a usage profile and use this profile for advertising purposes, market research and/or the needs-based design of its website. Such evaluation is carried out in particular (also for users who are not logged on) to carry out needs-based advertising and to inform other social network users about your activities on our website.

    You can object to the creation of these user profiles, whereby you must contact YouTube to do so.

    Our use of this service within the scope our online presence is based on our legitimate interest. This legitimate interest applies to the analysis, optimisation and efficient operation of our online presence. The legal basis for this is Art. 6 Para. 1 (f) GDPR.

    For more information about the purpose and scope of data and its processing by YouTube visit:

    https://www.google.de/intl/en/policies/privacy

  6. Vimeo

    We also use Vimeo services to embed videos. Vimeo is operated by Vimeo, LLC, headquartered at 555 West 18th Street, New York, New York 10011.

    1. Plugins

      When doing so we use Vimeo plugins on our website. This means that if you retrieve an Internet page with a corresponding plugin when visiting our website, a connection will be created to Vimeo’s servers to show the plugin. Within the scope of this the Vimeo server will receive the information that you have visited our website. If, when doing this, you are logged on as a Vimeo member, Vimeo will assign this information to your personal user account. If you use the plugin, for example when clicking a video start button, this information will also be assigned to your user account. You can block this assignment by logging off from your Vimeo user account before using our Internet page and deleting the corresponding Vimeo cookies.

    2. Further notes

      Our use of this service within the scope of our online presence is based on our legitimate interest. This legitimate interest applies to the analysis, optimisation and efficient operation of our online presence. The legal basis for this is Art. 6 Para. 1 (f) GDPR.

      For more information on the purpose and scope of data collection and the further processing and use of the data by Vimeo as well as on your corresponding rights and settings options to protect your privacy as well as Vimeo notes on data protection/ privacy, please visit:

      https://vimeo.com/privacy

      In addition to this, when you retrieve the video Vimeo will use an iFrame to initiate the Google Analytics tracker. This tracking is a Vimeo procedure over which we have no control. You can prevent Google Analytics tracking by using the deactivation tool offered by Google for some Internet browsers. Over and above this, users can block the collection of data generated by Google Analytics and relating to their use of the website (incl. their IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link. For information on this, please visit:

      http://tools.google.com/dlpage/gaoptout?hl=en

Current as of: June 2022