Our Social Media Presence
Data Processing by Social Networks
We maintain publicly accessible profiles on social networks. The specific social networks we use are listed below.
Social networks such as Facebook, Google+, etc., can generally analyze your user behavior in detail when you visit their website or a website with integrated social media content (e.g., “Like” buttons or advertising banners). Visiting our social media profiles triggers numerous data processing operations relevant to data protection. Specifically:
If you are logged into your social media account and visit our social media profile, the operator of the social media portal can associate this visit with your user account. However, your personal data may also be collected even if you are not logged in or do not have an account with the respective social media platform. In this case, data collection occurs, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of social media platforms can create user profiles that store your preferences and interests. This allows them to display interest-based advertising to you both on and off the respective social media platform. If you have an account on the respective social network, interest-based advertising may be displayed on all devices on which you are currently logged in or have been logged in.
Please also note that we cannot track all processing activities on the social media platforms. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media platforms. For details, please refer to the terms of use and privacy policies of the respective social media platforms.
Legal Basis
Our social media presence is intended to ensure the most comprehensive online presence possible. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. The analysis processes initiated by the social networks may be based on different legal grounds, which must be specified by the operators of the social networks (e.g., consent within the meaning of Article 6(1)(a) of the GDPR).
Data Controller and Exercising Rights
When you visit one of our social media pages (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by that visit. You may generally exercise your rights (right of access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint) both with us and with the operator of the respective social media platform (e.g., Facebook). However, if your request (also) pertains to processes controlled by the respective providers, we will have to forward this request to those platforms.Please note that, despite our joint responsibility with the social media platform operators, we do not have full control over—or even access to—the data processing activities of the social media platforms. Our options depend largely on the corporate policies of the respective provider. However, we have done our best to ensure that our presence on these platforms complies with data protection regulations.
Retention Period
The data collected directly by us through our social media presence is deleted from our systems as soon as the purpose for its storage no longer applies, you request its deletion, you revoke your consent to its storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions—in particular retention periods—remain unaffected.We have no influence over the retention period of your data that is stored by the operators of social networks for their own purposes. For details on this, please contact the operators of the social networks directly (e.g., in their privacy policy, see below).
Social Network: Facebook
We maintain a profile on Facebook. The provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.The company’s headquarters is located at Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified under the EU-U.S. Privacy Shield.
We have entered into a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
Exercising Your Right to Access, Information, Objection, and Data Portability
Information Regarding Page Insights Data
For business Pages, Facebook provides Page administrators with statistics and summaries (known as “Insights”) that help them gain insights into the types of actions people take on their Pages (“Page Insights”).
Facebook Ireland assumes primary responsibility under the GDPR for the processing of Insights data and agrees to fulfill all obligations under the GDPR with respect to the processing of Insights data (including Articles 12 and 13 of the GDPR, Articles 15 through 22 of the GDPR, and Articles 32 through 34 of the GDPR). In addition, Facebook Ireland will make the key points of this Page Insights Supplement available to data subjects.
For information about the Page Insights data collected by Facebook, please contact Facebook directly at: https://www.facebook.com/legal/terms/information_about_page_insights_data
Right of Access and Data Portability
Facebook Ireland and the Page Administrator have agreed that Facebook is primarily responsible for providing you with information about the joint processing and for enabling you to exercise your rights under the GDPR.
Facebook offers its users the option to access their own data, download it, and transfer it to another service. For instructions on how to do this in your account, see: https://www.facebook.com/help/contact/2032834846972583
You can adjust your ad settings yourself in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Right to File a Complaint
Facebook Ireland and the page administrator have agreed that the Irish Data Protection Commission is the authority primarily responsible for overseeing the processing under joint responsibility. You have the right to file a complaint with the Irish Data Protection Commission (see www.dataprotection.ie) or with your local supervisory authority.
For further details, please refer to Facebook’s Privacy Policy: https://www.facebook.com/about/privacy/.
Our full Privacy Policy can be found at: https://www.leading-medicine-guide.de/Datenschutzerklaerung
Last updated: February 22, 2019
