Preamble
With the following privacy policy, we aim to inform you about the types of your personal data (hereinafter also referred to as “data”) that we process, for what purposes, and to what extent. This privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on our websites, in mobile applications, and within external online presences, such as our social media profiles (collectively referred to as “online offering”).
The terms used are not gender-specific.
Effective Date: May 17, 2025
Table of Contents
- Preamble
- Data Controller
- Overview of Processing Activities
- Relevant Legal Bases
- General Information on Data Retention and Deletion
- Rights of Data Subjects
- Business Services
- Payment Procedures
- Use of Cookies
- Registration, Login, and User Account
- Contact and Inquiry Management
- Communication via Messenger
- Advertising Communication via Email, Post, Fax, or Phone
- Competitions and Contests
- Social Media Presence
Data Controller
Sarah Shakir
Mahrweg 105
35440 Linden
Email Address: info@made-unique.eu
Phone: +4917630476468
Overview of Processing Activities
The following overview summarizes the types of data processed, the purposes of their processing, and the categories of affected persons.
Types of Data Processed
- Inventory data
- Payment data
- Contact data
- Content data
- Contract data
- Usage data
- Meta, communication, and procedural data
- Log data
Categories of Affected Persons
- Service recipients and clients
- Prospective customers
- Communication partners
- Users
- Competition and contest participants
- Business and contractual partners
Purposes of Processing
- Provision of contractual services and fulfillment of contractual obligations
- Communication
- Security measures
- Direct marketing
- Office and organizational procedures
- Organizational and administrative procedures
- Conducting competitions and contests
- Feedback
- Marketing
- Providing our online offering and user-friendliness
- Public relations
- Sales promotion
- Business processes and economic procedures
Relevant Legal Bases
Relevant Legal Bases under the GDPR: Below is an overview of the legal bases of the GDPR upon which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations in your or our country of residence may also apply. If specific legal bases are applicable in individual cases, we will inform you of them in the privacy policy.
- Consent (Art. 6 para. 1 sentence 1 lit. a GDPR): The data subject has given their consent to the processing of personal data for one or more specific purposes.
- Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR): Processing is necessary for the performance of a contract to which the data subject is a party or to carry out pre-contractual measures requested by the data subject.
- Legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR): Processing is necessary for compliance with a legal obligation to which the controller is subject.
- Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, provided that the interests, rights, and freedoms of the data subject do not override such interests.
National Data Protection Regulations in Germany: In addition to the GDPR, national data protection regulations in Germany apply. This includes, in particular, the Federal Data Protection Act (BDSG), which contains specific provisions on the right to access, the right to deletion, the right to object, the processing of special categories of personal data, processing for other purposes, and automated decision-making in individual cases, including profiling. State data protection laws of individual German federal states may also apply.
Note on Applicability of GDPR and Swiss DSG: These privacy notices serve to provide information under both the Swiss Data Protection Act (DSG) and the General Data Protection Regulation (GDPR). Therefore, please note that the terminology of the GDPR is used due to its broader scope and comprehensibility. Instead of the terms “processing” of “personal data,” “overriding interest,” and “special categories of data” used in the Swiss DSG, the GDPR terms “processing” of “personal data,” “legitimate interest,” and “special categories of data” are employed. However, the legal meaning of the terms remains determined by the Swiss DSG where applicable.
General Information on Data Storage and Deletion
We delete personal data processed by us in accordance with legal requirements as soon as the underlying consent is revoked or there are no further legal grounds for processing. This applies to cases where the original purpose of processing ceases to exist or the data is no longer required. Exceptions to this rule exist where legal obligations or special interests necessitate longer retention or archiving of data.
In particular, data that must be retained for commercial or tax law reasons, or whose storage is necessary for legal prosecution or to protect the rights of other natural or legal persons, will be archived accordingly.
Our privacy notices include additional information on data retention and deletion specific to certain processing activities.
If multiple retention or deletion periods are specified for a particular datum, the longest period is always decisive.
If a period does not expressly begin on a specific date and lasts at least one year, it will automatically start at the end of the calendar year in which the event triggering the period occurred. In the case of ongoing contractual relationships involving stored data, the triggering event is the effective date of termination or other cessation of the legal relationship.
Data no longer required for its originally intended purpose but retained due to legal requirements or other reasons will be processed solely for the purposes justifying its retention.
Further Notes on Processing Activities, Procedures, and Services:
Retention and Deletion of Data:
The following general periods apply to retention and archiving under German law:
- 10 years – Retention period for books and records, annual financial statements, inventories, management reports, opening balances, and the working instructions and other organizational documents required to understand them, booking records, and invoices (§ 147 (3) in conjunction with (1) Nos. 1, 4, and 4a AO, § 14b (1) UStG, § 257 (1) Nos. 1 and 4, (4) HGB).
- 6 years – Other business documents: received commercial or business correspondence, copies of sent commercial or business correspondence, other documents relevant for taxation, e.g., hourly wage records, operational accounting sheets, calculation documents, price tags, as well as payroll records unless they are already booking records and cash register receipts (§ 147 (3) in conjunction with (1) Nos. 2, 3, and 5 AO, § 257 (1) Nos. 2 and 3, (4) HGB).
- 3 years – Data necessary to consider potential warranty and compensation claims or similar contractual claims and rights, as well as associated inquiries, based on past business experiences and usual industry practices, will be stored for the duration of the regular statutory limitation period of three years (§§ 195, 199 BGB).
Rights of Data Subjects
Rights of data subjects under the GDPR: As a data subject, you are entitled to various rights under the GDPR, particularly as outlined in Articles 15 to 21 GDPR:
- Right to Object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you that is carried out pursuant to Article 6 (1)(e) or (f) GDPR; this also applies to profiling based on these provisions. If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing.
- Right to Withdraw Consent: You have the right to withdraw consents granted at any time.
- Right of Access: You have the right to request confirmation as to whether data concerning you is being processed and to access information about this data as well as further information and a copy of the data in accordance with legal requirements.
- Right to Rectification: You have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you in accordance with legal requirements.
- Right to Erasure and Restriction of Processing: You have the right, under the provisions of the law, to request the immediate deletion of data concerning you or, alternatively, to request a restriction on the processing of your data in accordance with legal requirements.
- Right to Data Portability: You have the right to receive data concerning you that you have provided to us in a structured, commonly used, and machine-readable format or to request its transmission to another controller, as provided by law.
- Right to Lodge a Complaint with a Supervisory Authority: You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or the location of the alleged infringement, if you believe that the processing of your personal data violates the GDPR, without prejudice to other administrative or judicial remedies.
Business Services
We process data from our contractual and business partners, such as customers and interested parties (collectively referred to as “contractual partners”), as part of contractual and similar legal relationships and associated measures and for communication with the contractual partners (or pre-contractually), for example, to respond to inquiries.
We use this data to fulfill our contractual obligations. This includes obligations to provide agreed services, any update obligations, and remedies for warranty and other performance issues. Furthermore, we use the data to protect our rights and for purposes of administrative tasks and business organization associated with these obligations. Additionally, we process data based on our legitimate interests in proper and economical business management and security measures to protect our contractual partners and business operations from misuse, threats to their data, secrets, information, and rights (e.g., involvement of telecommunications, transport, and other assistance services, as well as subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities).
Where permitted by law, we only disclose the data of contractual partners to third parties as necessary for the aforementioned purposes or to fulfill legal obligations. Contractual partners are informed about other forms of processing, such as for marketing purposes, within this privacy policy.
Data required for the aforementioned purposes is indicated to the contractual partners before or during the data collection process, for example, in online forms, through specific markings (e.g., colors) or symbols (e.g., asterisks), or in person.
We delete the data after the expiration of statutory warranty and comparable obligations, i.e., generally after four years unless the data is stored in a customer account, for example, as long as they must be retained for legal reasons (e.g., for tax purposes, typically ten years). Data disclosed to us as part of an order by the contractual partner is deleted according to the specifications and generally after the order ends.
- Processed Data Types: Inventory data (e.g., full name, residential address, contact information, customer number, etc.); payment data (e.g., bank details, invoices, payment history); contact data (e.g., postal and email addresses or phone numbers); contract data (e.g., subject matter of the contract, duration, customer category); usage data (e.g., page views and dwell times, click paths, usage intensity and frequency, types of devices and operating systems used, interactions with content and features). Meta-, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons).
- Data Subjects: Recipients of services and contractors; interested parties. Business and contractual partners.
- Purposes of Processing: Provision of contractual services and fulfillment of contractual obligations; security measures; communication; office and organizational procedures; organizational and administrative procedures. Business processes and economic procedures.
- Retention and Deletion: Deletion according to the information provided in the section “General Information on Data Storage and Deletion.”
- Legal Bases: Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR); legal obligation (Art. 6(1)(c) GDPR); legitimate interests (Art. 6(1)(f) GDPR).
Payment Procedures
As part of contractual and other legal relationships, due to legal obligations, or based on our legitimate interests, we offer affected individuals efficient and secure payment options. To achieve this, we utilize payment service providers in addition to banks and credit institutions (collectively referred to as “payment service providers”).
The data processed by the payment service providers includes inventory data, such as the name and address, bank data, such as account numbers or credit card numbers, passwords, TANs (transaction authentication numbers), and checksums, as well as contract-related, amount-related, and recipient-related information. This information is required to carry out the transactions. However, the entered data is only processed and stored by the payment service providers. That is, we do not receive any account or credit card-related information, but only confirmation or rejection information regarding the payment. In some cases, the data may be transmitted by the payment service providers to credit reporting agencies. This transmission serves the purpose of identity and creditworthiness checks. For further information, we refer to the terms and conditions and privacy notices of the payment service providers.
For payment transactions, the terms and conditions and privacy notices of the respective payment service providers apply, which are available on their respective websites or transaction applications. We refer to these for further information and for asserting withdrawal, information, and other data subject rights.
Processed Data Types:
- Inventory data (e.g., full name, home address, contact information, customer number, etc.);
- Payment data (e.g., bank details, invoices, payment history);
- Contract data (e.g., subject matter of the contract, duration, customer category);
- Usage data (e.g., page views and duration, click paths, usage intensity and frequency, types of devices and operating systems used, interactions with content and functions);
- Meta, communication, and procedural data (e.g., IP addresses, time stamps, identification numbers, involved individuals).
Affected Individuals:
- Service recipients and clients;
- Business and contractual partners;
- Interested parties.
Purposes of Processing:
- Provision of contractual services and fulfillment of contractual obligations;
- Business processes and operational procedures.
Storage and Deletion:
- Deletion in accordance with the information in the section “General Information on Data Storage and Deletion”.
Legal Bases:
- Contract fulfillment and pre-contractual inquiries (Art. 6 (1) sentence 1 lit. b) GDPR);
- Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).
Further Information on Processing Procedures, Processes, and Services:
- Giropay: Payment services (technical integration of online payment methods); Service provider: giropay GmbH, An der Welle 4, 60322 Frankfurt, Germany; Legal bases: Contract fulfillment and pre-contractual inquiries (Art. 6 (1) sentence 1 lit. b) GDPR); Website: https://www.giropay.de. Privacy policy: https://www.giropay.de/rechtliches/datenschutzerklaerung/.
- Mastercard: Payment services (technical integration of online payment methods); Service provider: Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium; Legal bases: Contract fulfillment and pre-contractual inquiries (Art. 6 (1) sentence 1 lit. b) GDPR); Website: https://www.mastercard.de/de-de.html. Privacy policy: https://www.mastercard.de/de-de/datenschutz.html.
- PayPal: Payment services (technical integration of online payment methods) (e.g., PayPal, PayPal Plus, Braintree); Service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg; Legal bases: Contract fulfillment and pre-contractual inquiries (Art. 6 (1) sentence 1 lit. b) GDPR); Website: https://www.paypal.com/de. Privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Cookies
Cookies are small text files or other storage markers that store and read information on devices. For example, to store login status in a user account, shopping cart contents in an online shop, the content viewed, or functions used within an online service. Cookies can also be used for different purposes, such as functionality, security, and user comfort of online services, as well as for creating analyses of visitor traffic.
Consent Notice:
We use cookies in accordance with legal regulations. Therefore, we obtain prior consent from users unless it is not required by law. Consent is particularly not necessary if storing and reading the information, including cookies, is strictly required to provide a telemedia service (i.e., our online offering) explicitly requested by the user. The revocable consent is clearly communicated to the users and contains information about the use of cookies.
Privacy Legal Basis Notice:
The legal basis for processing personal data of users through cookies depends on whether we request consent. If users accept, the legal basis for the use of their data is the given consent. Otherwise, the data processed through cookies is based on our legitimate interests (e.g., for the business operation of our online service and improving its usability) or, if necessary for fulfilling our contractual obligations, when cookies are required to fulfill these obligations. The purposes for which we use cookies are explained in this privacy policy or during our consent and processing procedures.
Storage Duration:
With regard to storage duration, the following types of cookies are distinguished:
- Temporary cookies (also: session or session cookies): These cookies are deleted as soon as a user leaves the online service and closes their device (e.g., browser or mobile application).
- Permanent cookies: Permanent cookies remain stored even after the device is closed. For example, the login status can be saved, and preferred content can be displayed directly when the user revisits a website. The user data collected through cookies may also be used for measuring reach. Unless we provide explicit information about the type and storage duration of cookies (e.g., during consent collection), users should assume that these cookies are permanent and the storage duration can be up to two years.
General Information on Withdrawal and Objection (Opt-out):
Users can withdraw their given consent at any time and also object to the processing in accordance with legal requirements, including through the privacy settings of their browser.
Processed Data Types:
Meta, communication, and procedural data (e.g., IP addresses, time stamps, identification numbers, involved individuals).
Affected Individuals:
Users (e.g., website visitors, online service users).
Legal Bases:
Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR); Consent (Art. 6 (1) sentence 1 lit. a) GDPR).
Further Information on Processing Procedures, Processes, and Services:
Processing of Cookie Data Based on Consent:
We use a consent management solution in which user consent for the use of cookies or for the procedures and providers mentioned in the consent management solution is obtained. This process serves the purpose of obtaining, logging, managing, and revoking consents, particularly regarding the use of cookies and similar technologies used to store, read, and process information on users’ devices. As part of this process, user consents for cookie usage and associated information processing are collected. Users also have the option to manage and revoke their consents. The consent declarations are stored to avoid repeated queries and to meet legal requirements for proof of consent. Storage is done server-side and/or in a cookie (the so-called opt-in cookie) or using comparable technologies to assign the consent to a specific user or device. If no specific details about the providers of consent management services are available, the following general information applies: The duration of consent storage is up to two years. A pseudonymous user identifier is created and stored with the consent time, details of the consent scope (e.g., related categories of cookies and/or service providers), and information about the browser, system, and device used.
Legal Bases:
Consent (Art. 6 (1) sentence 1 lit. a) GDPR).
Registration, Login, and User Account
Users can create a user account. During registration, the required mandatory fields are provided to the users and processed for the purpose of providing the user account based on contractual obligation. The data processed includes, in particular, login information (username, password, and email address).
When using our registration and login functions, as well as the user account, we store the IP address and the time of each user action. The storage is based on our legitimate interests as well as those of the users in protecting against abuse and unauthorized use. This data is generally not shared with third parties unless it is necessary to assert our claims or there is a legal obligation to do so.
Users can be informed via email about actions relevant to their user account, such as technical changes.
Processed data types:
- Personal data (e.g., full name, home address, contact information, customer number, etc.)
- Contact data (e.g., postal and email addresses or phone numbers)
- Content data (e.g., textual or image-based messages and posts, and related information such as author details or creation time)
- Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, types of devices and operating systems used, interactions with content and features)
- Log data (e.g., login logs or data retrieval/access times)
Affected persons:
Users (e.g., website visitors, online service users)
Processing purposes:
- Provision of contractual services and fulfillment of contractual obligations
- Security measures
- Organizational and administrative procedures
- Provision of our online offering and user-friendliness
Retention and deletion:
Deletion as per the details in the section “General Information on Data Storage and Deletion.” Deletion after termination.
Legal basis:
- Contract performance and pre-contractual inquiries (Art. 6(1) lit. b GDPR)
- Legitimate interests (Art. 6(1) lit. f GDPR)
Additional notes on processing processes, procedures, and services:
- Registration with real names: Due to the nature of our community, we ask users to use their real names. The use of pseudonyms is not allowed.
Legal basis: Contract performance and pre-contractual inquiries (Art. 6(1) lit. b GDPR). - User profiles are not public: User profiles are not visible or accessible to the public.
Contact and Inquiry Management
When contacting us (e.g., by post, contact form, email, phone, or via social media) or within the scope of existing user and business relationships, the details of the inquiring persons are processed as necessary to respond to the contact inquiries and any requested actions.
Processed data types:
- Personal data (e.g., full name, home address, contact information, customer number, etc.)
- Contact data (e.g., postal and email addresses or phone numbers)
- Content data (e.g., textual or image-based messages and posts, and related information such as author details or creation time)
- Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, types of devices and operating systems used, interactions with content and features)
- Meta-, communication-, and procedural data (e.g., IP addresses, time stamps, identification numbers, involved persons)
Affected persons:
Communication partners
Processing purposes:
- Communication
- Organizational and administrative procedures
- Feedback (e.g., collecting feedback via online forms)
- Provision of our online offering and user-friendliness
Retention and deletion:
Deletion as per the details in the section “General Information on Data Storage and Deletion.”
Legal basis:
- Legitimate interests (Art. 6(1) lit. f GDPR)
- Contract performance and pre-contractual inquiries (Art. 6(1) lit. b GDPR)
Additional notes on processing processes, procedures, and services:
- Contact form: When contacting us via our contact form, email, or other communication channels, we process the personal data provided to answer and process the respective concern. This typically includes details such as name, contact information, and any additional information provided that is necessary for proper handling. We use this data exclusively for the specified purpose of contacting and communicating.
Legal basis: Contract performance and pre-contractual inquiries (Art. 6(1) lit. b GDPR), Legitimate interests (Art. 6(1) lit. f GDPR).
Communication via Messenger
We use messengers for communication purposes and kindly ask that you observe the following information regarding the functionality of the messengers, encryption, use of communication metadata, and your rights to object.
You can also contact us through alternative means, such as by phone or email. Please use the contact options provided to you or those listed in our online services.
In the case of end-to-end encryption of content (i.e., the content of your message and attachments), we would like to point out that communication contents (i.e., the message content and attached images) are encrypted from end to end. This means that the content of the messages cannot be viewed, not even by the messenger providers themselves. You should always use the latest version of the messenger with activated encryption to ensure the encryption of message content.
However, we also inform our communication partners that while the messenger providers cannot view the content, they can know if and when communication partners are communicating with us and may process technical information about the devices used by the communication partners and, depending on the settings of their devices, location data (so-called metadata).
Legal basis information:
If we ask communication partners for permission before communicating with them via a messenger, the legal basis for processing their data is their consent. Otherwise, if we do not ask for consent and, for example, they contact us on their own initiative, we use messengers in relation to our contractual partners and for contract initiation as a contractual measure. In the case of other interested parties and communication partners, we base the use on our legitimate interest in quick and efficient communication and fulfilling the communication needs of our partners via the messenger. Furthermore, we point out that we do not transmit contact details to the messenger for the first time without your consent.
Revocation, Objection, and Deletion:
See the Revocation Notice.
Processed Data Types:
- Contact data (e.g., postal and email addresses, or – This text section must be unlocked with a premium license – premiumtext premiumtext premiumtext).
- Content data (e.g., textual or visual messages and posts, as well as related information such as authorship or creation time – This text section must be unlocked with a premium license – premiumtext premiumtext premiumtext premiumtext premiumtext premiumtext).
Affected Persons:
Communication partners.
Processing Purposes:
Communication.
Storage and Deletion:
Deletion as per the information in the section “General Information on Data Storage and Deletion.”
Legal Basis:
- Consent (Art. 6(1) lit. a GDPR)
- Contract performance and pre-contractual inquiries (Art. 6(1) lit. b GDPR)
- Legitimate interests (Art. 6(1) lit. f GDPR)
Promotional Communication via Email, Mail, Fax, or Phone
We process personal data for promotional communication purposes, which can occur through various channels such as email, phone, mail, or fax in accordance with legal requirements.
Recipients have the right to revoke any given consent at any time or object to promotional communication at any time.
After a revocation or objection, we store the data required to prove the previous legitimacy for contact or mailing for up to three years after the end of the year in which the revocation or objection occurred, based on our legitimate interests. The processing of this data is limited to the purpose of defending against potential claims. Based on our legitimate interest in permanently considering the revocation or objection of users, we also store the data necessary to prevent further contact (e.g., depending on the communication channel, the email address, phone number, name).
Processed Data Types:
- Inventory data (e.g., full name, home address, contact information, customer number, etc.)
- Contact data (e.g., postal and email addresses, or phone numbers).
- Content data (e.g., textual or visual messages and posts, as well as related information such as authorship or creation time).
Affected Persons:
Communication partners.
Processing Purposes:
Direct marketing (e.g., via email or mail); Marketing, sales promotion.
Storage and Deletion:
Deletion as per the information in the section “General Information on Data Storage and Deletion.”
Legal Basis:
- Consent (Art. 6(1) lit. a GDPR)
- Legitimate interests (Art. 6(1) lit. f GDPR)
Sweepstakes and Competitions
We process personal data of participants in sweepstakes and competitions only in compliance with the relevant data protection regulations, to the extent necessary for the provision, execution, and processing of the sweepstake, the participant has consented to the processing, or the processing serves our legitimate interests (e.g., ensuring the security of the sweepstakes or protecting our interests from misuse, such as recording IP addresses when submitting sweepstake entries).
If entries are published as part of the sweepstakes (e.g., in the context of voting, presenting sweepstake entries or winners, or reporting on the sweepstake), we would like to point out that the names of the participants may also be published in this context. Participants can object to this at any time.
If the sweepstakes take place on an online platform or a social network (e.g., Facebook or Instagram, hereinafter referred to as “online platform”), the terms of use and privacy policies of the respective platforms also apply. In such cases, we would like to point out that we are responsible for the data provided by participants in connection with the sweepstakes and that inquiries regarding the sweepstakes should be directed to us.
Participant data is deleted as soon as the sweepstake or competition ends, and the data is no longer required to inform the winners or because no further inquiries are expected regarding the sweepstake. In general, participant data is deleted no later than six months after the end of the sweepstake. Data of the winners may be retained longer, for example, to answer any questions about the prizes or to fulfill the prize services; in this case, the retention period depends on the nature of the prize and is, for example, up to three years to handle warranty cases. Additionally, participant data may be retained longer, for example, in the form of reporting on the sweepstake in online and offline media.
If data was collected for other purposes within the sweepstake, the processing and retention periods are governed by the privacy notices for that use (e.g., if a newsletter sign-up was part of a sweepstake).
Processed Data Types:
- Inventory data (e.g., full name, home address, contact information, customer number, etc.)
- Contact data (e.g., postal and email addresses, or phone numbers).
- Content data (e.g., textual or visual messages and posts, as well as related information such as authorship or creation time).
Affected Persons:
Sweepstakes and competition participants.
Processing Purposes:
Execution of sweepstakes and competitions.
Storage and Deletion:
Deletion as per the information in the section “General Information on Data Storage and Deletion.”
Legal Basis:
- Contract performance and pre-contractual inquiries (Art. 6(1) lit. b GDPR)
- Legitimate interests (Art. 6(1) lit. f GDPR)
Presence on Social Networks (Social Media)
We maintain an online presence within social networks and process user data in this context to communicate with users active there or to offer information about us.
We would like to point out that user data may be processed outside of the European Union. This could pose risks for users, as it might make the enforcement of user rights more difficult.
Furthermore, user data within social networks is typically processed for market research and advertising purposes. For example, usage behavior and resulting interests of users can be analyzed to create user profiles. These profiles may then be used to display advertisements both within and outside the networks that are presumed to match the users’ interests. As a result, cookies are generally stored on users’ devices, where their usage behavior and interests are saved. In addition, data can be stored in the user profiles independently of the devices used by the users (especially if they are members of the respective platforms and logged in).
For a detailed explanation of the respective processing methods and options for objection (opt-out), we refer to the privacy policies and information provided by the operators of the respective networks.
Even in the case of information requests and the exercise of rights by affected individuals, we would like to point out that these can be most effectively asserted with the providers. Only they have access to user data and can directly take appropriate actions and provide information. If you still need assistance, please feel free to contact us.
Processed Data Types:
- Contact data (e.g., postal and email addresses or phone numbers)
- Content data (e.g., textual or visual messages and posts, and related information, such as authorship or creation time)
- Usage data (e.g., page views and time spent, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions)
Affected Persons:
Users (e.g., website visitors, online service users)
Processing Purposes:
- Communication
- Feedback (e.g., collecting feedback via online forms)
- Public relations
Storage and Deletion:
Deletion according to the information in the section “General Information on Data Storage and Deletion.”
Legal Basis:
Legitimate interests (Art. 6(1) lit. f GDPR)
Additional Information on Processing Processes, Procedures, and Services:
Instagram:
Social network, allows sharing photos and videos, commenting and favoriting posts, sending messages, subscribing to profiles and pages
- Service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
- Legal basis: Legitimate interests (Art. 6(1) lit. f GDPR)
- Website: https://www.instagram.com
- Privacy policy: https://privacycenter.instagram.com/policy/
- Basis for third-country transfers: Data Privacy Framework (DPF)
