Privacy careers

Data protection information of the company Gronbach.

Data protection information for applicants

You are our top priority, which is why we attach great importance to the protection of your personal data.

With this data protection notice, we would like to provide you with a transparent explanation of how we process your personal information as part of the application process. We are aware that data protection is a fundamental human right and plays a central role in our corporate culture.

Your security and trust are important to us and we want to make sure that you feel comfortable throughout the application process. In the following sections, we explain GRONBACH’s privacy policies and procedures to ensure that your data is handled in accordance with applicable data protection laws.

We generally collect your data directly from you as part of the application process and on the basis of the General Data Protection Regulation (GDPR) and national Data Protection Acts .

 

The controller responsible for data processing on this website is

Gronbach Inventive Sales & Marketing GmbH & Co KG

Innstraße 2, 6342 Niederndorf

info-niederndorf∂gronbach.com

Further information can be found in the imprint.

 

Contact the data protection officer

Austria: datenschutz.gronbach∂dataprotection-scaleline.com

Germany:        dpa-wasserburg∂gronbach.com

atenschutzbeauftragter∂gronbach.com">Datenschutzbeauftragter∂gronbach.com

Italy:  privacy-laag∂gronbach.com

Slovakia:  alica.mikitovicova∂gronbach.com

 

  1. Data processing on this website

 

  1. COLLECTION OF ACCESS AND LOG DATA

This website automatically collects and stores server log file information that your browser transmits to us.

These are

  • IP address of the user,
  • Date and time of access,
  • Type of enquiry,
  • Customer information such as type and version,
  • Operating system of the user (device, OS version of the device),
  • Referrer information (i.e. the source of the access)

The legal basis for this data processing is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. The legitimate interest lies in being able to identify indications of unlawful use of our website (e.g. defence against hacker attacks) and to ensure a smooth connection setup.

We have concluded an order processing contract with the provider of this website noris network AG , based in Nuremberg, Germany, in accordance with Art. 28 GDPR. This is a contract prescribed by data protection law, which ensures that noris network AG processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

The data collected is stored in server log files that your browser automatically transmits to us in encrypted form. We only store the server log files in the event of attacks on our server infrastructure or other legal violations. This longer storage period is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR and serves only to preserve evidence.

BOOTSTRAP CDN

We use the content delivery network (CDN) of BootstrapCDN (maxcdn.bootstrapcdn.com) from StackPath, LCC, based in Texas, USA. The purpose is a modern design and presentation of the content offered on different end devices and to increase the loading speed of our websites. This involves establishing a connection to a server in the USA. The legal basis for the integration is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. For data transfers to StackPath, there is a valid certification according to the Data Privacy Framework as an adequacy decision for the USA, which you can check here.

 

  1. ENQUIRIES VIA THE CONTACT FORM, E-MAIL AND TELEPHONE

Any personal information that you provide to us on a voluntary basis will of course be treated confidentially. We will only use the personal data you provide to process and respond to your enquiry via the contact form, email or telephone. The legal basis for data processing is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. This arises from our interest in responding to enquiries from our applicants, customers, business partners and interested parties and in promoting and maintaining satisfaction. Another legal basis for natural persons is the initiation or fulfilment of a contract in accordance with Art. 6 para. 1 lit. b) GDPR.

 

Insofar as the purpose of the processing is not directly attributable to Gronbach Inventive Sales & Marketing GmbH & Co KG, but allows or suggests an alternative assignment to a specific affiliated partner company in the Gronbach network, e.g. due to manufacturing or service competences, it will be forwarded to the corresponding companies in the Gronbach network (Gronbach Inventive Sales & Marketing GmbH & Co KG, Wilhelm Gronbach GmbH, Gronbach GmbH, Gronbach k.s.). There, further processing takes place depending on the enquiry you have made on the basis of Art. 28 para. 1 GDPR. This personal data will not be passed on to third parties outside the Gronbach network.

 

All personal data that you send to us with your enquiry will be deleted or anonymised by us no later than one year after the final response has been given, unless a contract is concluded. The retention period of one year is due to the fact that you may occasionally contact us again about the same matter after a reply and refer to the previous correspondence. In our experience, we have found that after one year there are no more queries following our replies.

 

  1. USE OF COOKIES

We use cookies to facilitate and improve the use of our website. Cookies are small pieces of text information that can be stored on your computer or smartphone via the browser when you visit a website. We use cookies for technically necessary purposes.  Technically necessary cookies are those without which you cannot use our services, for example to display our website correctly or to use functions you have requested. The data processed by necessary cookies are necessary for the purposes listed below to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR. For all other data processing, we require your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

 management 

We use cookie consent technology to obtain your consent under data protection law to the storage of certain cookies on your end device or to the use of certain technologies and to document this in a data protection-compliant manner.  A technically necessary cookie is set:

Cookie name Provider Period of validity Category of the cookie Purpose
cookieconsent_status Careers.gronbach.com Meeting Technically necessary Saving the cookie settings

Cookies are used to obtain the legally required consent for the use of cookies. The legal basis for this is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the legally compliant documentation and verifiability of consents (Art. 6 para. 1 lit. c) GDPR) to fulfil our accountability obligation pursuant to Art. 5 para. 2 GDPR.

MATOMO

If you give your consent in accordance with Art. 6 para. 1 lit. a) GDPR, we use the web tracking service “Matomo” (www.matomo.org) to analyse the surfing behaviour of users such as information on the use of the individual components of the website.

 

The hosting itself is carried out by our processor, Piwik PRO GmbH, based in Germany. The data is not passed on to third parties beyond this.

Once you have given your consent, the “Matomo” software places cookies (text files) on your computer, which can be used to recognise your browser. By anonymising the IP address, we take account of users’ interest in the protection of personal data.

 

The following personal data may be stored:

– the IP address of the user, shortened by the last two bytes (anonymised)

– the subpage called up and the time of the call

– the page from which the user reached our website (referrer)

– which browser with which plugins, which operating system and which screen resolution is used,

– the time spent on the website

– the pages that are accessed from the accessed subpage

 

We further protect your data by anonymising your IP address. The data is not used to personally identify the user of the website and is not merged with other data or sold to third parties.

 

Specifically, the following cookies are set:

 

Cookie name Provider Period of validity Category of the cookie Purpose
_pk_id* careers.gronbach.com 13 months Statistics Saves a unique user ID.
_pk_ses* careers.gronbach.com Session Statistics Saves a unique user ID.

 

 

 

Integration of YouTube videos

We embed videos on our websites that are not stored on our servers. To ensure that accessing our websites with embedded videos does not automatically result in the third-party provider’s content being loaded, we only display locally stored preview images of the videos in a first step. This means that the third-party provider does not receive any information.

Only after you click on the preview image or give your consent via the cookie consent banner will content from the third-party provider be reloaded. As a result, the third-party provider receives the information that you have accessed our site and the usage data technically required in this context. We have no influence on further data processing by the third-party provider. By clicking on the preview image, you give us your consent to load content from the third-party provider. The embedding takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR, provided that you have previously given your consent by clicking on the preview image. There is an adequacy decision for the USA, so that the data transfer can take place without further measures. You can view the certification of Google (YouTube) here.

Provider of the video service:

Google Ireland Limited/Google LLC (USA) – (“YouTube”)

Revocation of consent

If you have clicked on a preview image, the content of the third-party provider will be reloaded immediately. If you do not want such reloading on other pages, please do not click on the preview images or revoke your consent for reloading via the cookie consent banner.

These third-party cookies are set when YouTube is reloaded with your consent in accordance with Art. 6 para. 1 lit. a) GDPR:

Cookie name Provider Period of validity Category of the cookie Purpose
1P_JAR Google 1 month Marketing This cookie is used to support Google’s advertising services
APISID Google 2 years Marketing Used for targeting purposes to create a profile of website visitors’ interests in order to display relevant and personalised Google advertising.
CONSENT Google 2 years Marketing This cookie is used to support Google’s advertising services
HSID Google 2 years Functional cookie Contains encrypted entries of your Google account and the last login time to protect against attacks and data theft from form entries.
NID Google 6 months Marketing This cookie is used by Google in the context of the use of Google Maps. The NID cookie contains a unique ID that Google uses to store your preferred settings and other information.
SAPISID Google 2 years Marketing Used for targeting purposes to create a profile of website visitors’ interests in order to display relevant and personalised Google advertising.
SID Google 2 years Marketing Google uses cookies such as the NID and SID cookies to customise advertising in Google products such as Google Search. With the help of such cookies, Google records, for example, your most recent search queries, your previous interactions with an advertiser’s adverts or search results and your visits to an advertiser’s website. This allows Google to display customised advertising on Google. Other Google products such as YouTube or Doubleclick also use these cookies to select more relevant adverts.
OGPC Google 2 months Marketing Google uses this cookie on pages for Google Translate or Google Maps activities.
__Secure-3PAPISID Google 2 years Marketing Used by for targeting purposes to create a profile of the website visitor’s interests and display relevant and personalised Google advertising.
__Secure-3PSID Google 2 years Marketing Used for targeting purposes to create a profile of website visitors’ interests in order to display relevant and personalised Google advertising.
__Secure-3PSIDTS Google 2 years Marketing The “__Secure-3PSIDTS” cookie from Google collects information about your interactions with Google services and adverts. It is used to measure the effectiveness of advertising and deliver personalised content based on your interests. The cookie contains a unique identifier
__Secure-1PSIDTS Google 1 year Marketing Used for targeting purposes to create a profile of the website visitor’s interests so that relevant and personalised Google advertising can be displayed.
__Secure-1PSIDCC Google 1 year Marketing Used for targeting purposes to create a profile of the website visitor’s interests so that relevant and personalised Google advertising can be displayed.
SIDCC Google 1 year Functional cookie Security cookie to protect user data from unauthorised access.
__Secure-1PAPISID Google 2 years Marketing Used by Google for targeting purposes to create a profile of the website visitor’s interests so that relevant and personalised Google advertising can be displayed.
__Secure-1PSID Google 1 year Marketing Used by Google for targeting purposes to create a profile of the website visitor’s interests and to display relevant and personalised Google advertising.
AEC Google 6 months Marketing Ensures that the requests within a browser session are made by the user and not by other websites.
SOCS Google 13 months Marketing Saves the status of the user in relation to their cookie choice.
ADS_VISITOR_ID Google 1 month Marketing Collects information about visitors to a website in order to display relevant adverts.
__Secure-ENID Google 2 years Marketing Google allows you to customise the way ads are displayed outside of Google or to save information such as your preferred language when displaying search results.
SSID Google 2 years Marketing Targeting cookie. Used by Google for targeting purposes to create a profile of the website visitor’s interests so that relevant and personalised Google advertising can be displayed.
__SECURE-3PSIDCC Google 2 years Marketing Used to create a user profile and display relevant and personalised Google Ads to the user.
_ga_* .play.google.com 2 years Marketing Used by Google Analytics to collect data on the number of visits a user makes to the website and the dates of the first and last visit.
_ga .play.google.com 2 years Marketing Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
__Secure-OSID .youtube.com 2 years Marketing Advertising cookie from Google
OSID .youtube.com 2 years Marketing Advertising cookie from Google
VISITOR_PRIVACY_METADATA .youtube.com 180 days Marketing Saves the user’s cookie consent status for the current domain
DV .youtube.com 2 years Marketing These cookies track how you use our website to show you adverts that may be of interest to you.
OTZ .youtube.com 8 months Marketing How often the video is displayed and which settings are used for playback.
ID .doubleclick.net 13 months Marketing Advertising cookie
DSID .doubleclick.net 2 weeks Marketing Saves user preferences.
ar_debug .doubleclick.net Session Marketing Checks whether a technical debugger cookie is present.
__SECURE-YEC .youtube.com 13 months Marketing Saves the user’s settings for the video player with embedded YouTube video.
VISITOR_INFO1_LIVE .youtube.com 6 months Marketing To enable ad placement or retargeting, store and track a visitor’s identity, store and track interactions.
PREF .youtube.com 8 months Marketing Tracks the number of views for a specific video.
LOGIN_INFO .youtube.com 2 years Marketing This cookie is used to play embedded YouTube videos on the website.

 

 

 

  1. Data processing as part of the application process

 

  1. Joint controllor

Wilhelm Gronbach GmbH (Austria) together with the company (legal entity) for whose position you are applying is responsible for data processing as part of the application process.

Wilhelm Gronbach GmbH is conducting the application procedure together with the following companies

Society address Contact us Country
Gronbach Inventive Sales & Marketing GmbH & Co. KG Innstr. 2, 6342 Niederndorf info-niederndorf∂gronbach.com Austria
LIGRE GmbH & Co. KG Innstr. 2, 6342 Niederndorf  ligre∂ligre.com Austria
Gronbach Forschungs- & Entwicklungs-GmbH & Co. KG Innstr. 2, 6342 Niederndorf info-niederndorf∂gronbach.com Austria
Wilhelm Gronbach GmbH Am Burgfrieden 2, 83512 Wasserburg am Inn info-wasserburg∂gronbach.com Germany
Gronbach Inventive Sales & Marketing GmbH & Co. KG Innstr. 2, 6342 Niederndorf info-niederndorf∂gronbach.com Italy

 

Your application relates to the position explicitly described in the job advertisement at one of the above-mentioned companies.

For applications for a vacancy at Wilhelm Gronbach GmbH (Austria), the company itself is the responsible body.

Information on joint responsibility

What does joint responsibility mean?

Joint controllership under the GDPR means that several organisations work together to carry out a specific process. If personal data is also processed jointly in the organisations, this constitutes joint controllership. In the case of GRONBACH, the GRONBACH companies work together in certain steps of the application process.

Agreement on joint responsibility

The GDPR stipulates that a joint controllership agreement must be concluded in such a case. This regulates which company fulfils which obligations under the GDPR. We have created the following overview so that you know which company you can contact with questions:

Process section of data processing/obligation Fulfilment of obligations by
Definition of purposes and means all
Information obligations pursuant to Art. 13, 14 in conjunction with. Art. 26 para. 2 sentence 2 GDPR Gronbach Inventive Sales & Marketing GmbH & Co. KG
Survey all
Storage all
Transmission all
Utilisation all
Amendment all
Blocking all
Cancellation all
Duty to provide information pursuant to Art. 15 GDPR all
Processing of rectification requests pursuant to Art. 16 GDPR all
Processing of erasure requests pursuant to Art. 17 GDPR all
Processing the rights of data subjects in accordance with Art. 18 and 19 GDPR all
Processing of requests for surrender in accordance with Art. 20 GDPR all
Responding to objections in accordance with Art. 21 GDPR all
Determination of technical and organisational measures in accordance with Art. 24, 25 and 32 GDPR all
Commissioning of processors in accordance with Art. 28 GDPR Wilhelm Gronbach GmbH & Co KG (Niederndorf)
Keeping the processing register of this processing in accordance with Art. 30 GDPR all
Notification of data protection incidents in accordance with Art. 33 f. GDPR all
Carrying out the data protection impact assessment, if necessary (Art. 35 f. GDPR) all

 

Note: Even if there is joint responsibility, the rights under the GDPR (data subject rights) can be exercised against all of the above-mentioned companies.

  1. Implementation of the application procedure

You can send us your application documents via the online application system to receive and manage your application and thus for the purpose of (possibly) establishing an employment relationship. As part of the application process, only collects the data from you that is required to establish an employment relationship with us.

You can also send us your application documents via job advertisements on career platforms. Where necessary, there are data protection agreements in place with the providers of the platforms regarding the handling of personal data.

The legal basis for this data processing is the initiation of an employment contract in accordance with Art. 6 para. 1 lit. b) GDPR. For Germany, Section 26 BDSG also applies as the legal basis for data collection.

If your application is successful, your personal data will be stored for the duration of the employment relationship. In addition, after its termination, tax-relevant data will be archived within the framework of the statutory retention periods and stored for 30 years for the preparation of a simple reference. In the event of an unsuccessful application, your personal data will be deleted 7 months after the rejection, unless you give us your consent for further storage.

Upload your CV to the application system

You can upload your CV directly from your computer or the device you are using via an upload button encrypted . Your master data will be automatically assigned to the correct form fields.  This allows us to store your data in our online application system for you and speed up your application process with us.

 

Apply via “with finest-jobs- profile” or “with LinkedIn profile” or directly via finest-jobs.com or LinkedIn

You also have the option of applying either with your finest-jobs or LinkedIn profile or directly via the job portals of the two platforms mentioned. This allows us to store your data in our online application system for you and speed up your application process with us

 

Finest-jobs.com is operated by rexx systems GmbH, based in Hamburg

 

LinkedIn is operated within the European Union by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

 

To apply via finest-jobs.com or LinkedIn, you give your consent to transmit the data you have stored in your professional profile. To do this, use the button “Apply with finest-jobs profile” or “Apply with LinkedIn profile”. After clicking on the button, you will be redirected to the operator’s website and must log in to your finest-jobs profile or LinkedIn profile. You can then grant permission to allow the respective platform provider to send us data from your profile that we also request in our online application system, such as your first name and surname, the URL of your platform profile, the email address you have provided and information about your professional background. Your data will be used to enter the mandatory information in your applicant profile. Before you submit the data to us, you can check its accuracy and amend it if necessary.

 

rexx systems GmbH is responsible for the provision of your data and for the transmission via www.finest-jobs.com. Further information on data protection at www.finest-jobs.com can be found here.

 

LinkedIn Ireland Unlimited Company is responsible for the provision of the data and for the transmission via LinkedIn. Further information on data protection at LinkedIn can be found here.

 

  1. Talent pool

We are happy to keep your application documents on file at your express request and ask you to give us your express consent so that we can store your applicant data in our applicant tool rexx for longer and consider and contact you for future vacancies. In this case, we will store your data for a maximum of 1.5 years from the date of your consent or until you withdraw your consent

The legal basis for data processing in the context of the talent pool is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. We only process the data that you have entered in your profile or provided via finest-jobs.com or LinkedIn as described above. Consent for inclusion in our talent pool is voluntary and failure to give it will have no effect on your ongoing application process.

You can revoke your consent at any time. You can send your revocation to the following e-mail:  recruiting∂gronbach.com The revocation does not affect the legality of the data processing up to the time of revocation. Your data will be automatically deleted after 1.5 years, unless you consent to further storage of your data. In the event that you wish to be included in the talent pool, all the companies listed above are jointly responsible for data processing.

Once you have been added to our talent pool, you can access your applicant profile for all the companies listed above. Please note: Only the relevant companies have access to current applications.

  1. Employees recruit employees

As part of the “Employees recruit employees” programme, employees of the above-mentioned companies have the opportunity to recruit new employees and receive a bonus under certain conditions in the event of successful recruitment. If you are referred by an employee of one of the above-mentioned companies, you can indicate this in our application form when you submit your online application.

The legal basis for this data processing is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the implementation of the “Employees recruit employees” programme for the purposes of personnel marketing and the recruitment of new employees.

 

  1. Active Sourcing

For the purpose of recruitment, we also actively search for interesting candidates in social networks, forums or other freely available sources on the Internet. In the context of this active candidate search, we only process publicly accessible data from these persons (name data, profile data, contact data if applicable).

We may contact candidates via the existing messaging function of the relevant social network. We offer candidates the opportunity to enter into a personal dialogue in which we present our companies and possible positions. The candidates contacted are free to decide whether they would like to enter into a counselling interview with us and apply

 

If there is no response from the selected candidates, the personal information will be deleted by us after four months at the latest.

 

  1. Recipients or categories of recipients

If you apply for an advertised position, only those persons who make the decision about filling the position will have access to your personal data to the extent absolutely necessary.

 

If a works council  at a relevant company, works council members will also receive access to your data to the extent required by law as part of the application process.

 

We generally exclude the transfer of data to other third parties. In exceptional cases, data is processed on our behalf by processors. One such processor is rexx systems GmbH, based in Hamburg. We manage the applicant portal  via rexx.

  1. Provision

You are neither contractually nor legally obliged to provide us with your personal data. Without your data, however, we cannot contact you or carry out the application process. Your data is also required in the event of a contract being concluded as part of the recruitment process.

 

  • Rights of data subjects

You have the right to receive information about the personal data stored about you free of charge upon request in accordance with Art. 15 para. 1 GDPR.

 

In addition, if the legal requirements are met, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR) of your personal data.

If you have provided the processed data yourself, you have a right to data portability in accordance with Art. 20 GDPR.

If the data processing is based on Art. 6 para. 1 e) or f) GDPR, you have the right to object in accordance with Art. 21 GDPR. If you object to data processing, this will not take place in future unless the controller can demonstrate compelling legitimate grounds for further processing which override the interests of the data subject in objecting.

  1. Right to lodge a complaint with a data protection supervisory authority:

You also have the right to lodge a complaint with a data protection supervisory authority. The complaint may in particular be lodged with a supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

Contact details of the competent data protection authority

Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna, dsb∂dsb.gv.at

Bavarian State Office for Data Protection Supervision

Postal address

P.O. Box 1349
91504 Ansbach

Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
e-mail: poststelle∂lda.bayern.de

 

Garante per la Protezione dei Dati Personali

Piazza Venezia n. 11, 00187 Roma

Phone: + 39 06 69 6771

E-mail: protocollo∂gpdp.it

Homepage: https:

  1. No automated decision-making

We do not carry out automated decision-making or profiling.

  1. Operation of social media presences

We maintain the following social media presences:

LinkedIn: https://www.linkedin.com/company/gronbach/

Facebook:

https://www.facebook.com/GronbachIT

https://www.facebook.com/gronbachslovensko

https://www.facebook.com/GronbachDE

https://www.facebook.com/GronbachAT

YouTube: https://www.youtube.com/channel/UCJWrGbPiG4AYHZewlALkACA

Instagram: https:

Instagram and Facebook are products of Meta Platforms Inc. (formerly Facebook Inc.): facebook.com/help/1561485474074139/?helpref=related

Data processing by us:

  1. Maintaining the above-mentioned social media pages and placing ads (“adverts”)

The personal data entered on social media pages, such as comments, videos, images, likes, public messages, etc. are published by the respective social media platform. We reserve the right to delete content if necessary. We may share content on our site and contact you via the social media platform, for example via the messengers offered. In addition, we regularly place adverts via our social media pages. The legal basis for this data processing is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR, which is in the interest of our public relations and communication.

  1. Page Insights

The social media platforms provide anonymised statistics and insights that help us gain knowledge about the types of actions people take on our site (so-called “page insights”). These Page Insights are created based on certain information about people who have visited our site.

 

The legal basis for this data processing is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR, which is based on obtaining information about the actions and visitors to our website.

 

This processing of personal data is carried out by the social media platform and us as so-called joint controllers in accordance with Art. 26 GDPR. In the case of joint controllership, a separate agreement must be concluded.

 

LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum

 

Instagram and Facebook: https://www.facebook.com/legal/terms/page_controller_addendum

 

YouTube: https:

 

If you wish to object to certain data processing over which we have an influence (e.g. deletion of comments), please contact us using the contact details given above.

 

Note: The provision of your data is neither legally nor contractually required or necessary for the conclusion of a contract. You are not obliged to provide your personal data. The consequence of not providing your data is that you will not be able to communicate with us via our social media pages, interact with us or take part in the competition. To contact us, please use the email address provided above.

 

Data processing by the operator of the social media platform:

In addition to us, there is also the operator of the social media platforms themselves. From a data protection perspective, this is also regarded as another controller that carries out its own data processing. This means that the operator is also a separate controller under the GDPR. However, we only have limited influence on data processing by the operator. Where we can exert influence (e.g. through parameterisation), we work within the scope of our possibilities to ensure that the operator of the social media platform handles data in compliance with data protection regulations. In many places, however, we cannot influence the data processing by the operator of the social media platform and do not know exactly what data they process. The respective operator will inform you about the processing of personal data in its own privacy policy:

Facebook: www.facebook.com/help/568137493302217

Instagram: help.instagram.com/519522125107875

YouTube: www.policies.google.com/privacy?hl=de

LinkedIn: https://de.linkedin.com/legal/privacy-policy

When using the platform, your personal data is generally also processed by the respective platform operator on servers in third countries, in particular in the USA. Certain third countries are certified by the European Commission with a so-called adequacy decision. This means that the legal situation for the protection of privacy in these countries is comparable to that in the EU or the EEA. You can find more information on the current countries with an adequacy decision here. Certifications in accordance with the adequacy decision for the USA, the Data Privacy Framework, exist for Meta Platforms Inc (Facebook, Instagram) and Google (YouTube). In all other cases, we conclude so-called standard contractual clauses with the platform operators for the transfer of personal data to third countries.

 

Note: The operator of the social media platform uses web tracking methods. Web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we unfortunately have little influence on the web tracking methods of the social media platform. For example, we cannot switch this off. Please be aware of this: It cannot be ruled out that the provider of the social media platform uses your profile and behavioural data, for example to evaluate your habits or personal relationships and preferences etc. We have no influence on the processing of your data by the provider of the social media platform.

 

This data protection information was created in cooperation with the consulting firm SCALELINE Datenschutz. The legal texts are subject to copyright.