Toggle navigation

Privacy Policy for Social Media Platforms Used by Univention

When you visit our social media pages, it may be necessary to process your personal data. We want to inform you of the following details relating to how your data is handled and the rights you have resulting from this, in accordance with Article 13 of the General Data Protection Regulation (GDPR).

Controller

We, Univention GmbH, operate the following social media pages:

You can find our contact data in the imprint.

Data Processing We Undertake

Public Relations

The data you provide on our social media pages, such as usernames, comments, videos, images, likes, public messages, etc., are published by the social media platform and are not processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. If applicable, we share your content on our site if this is a function of the social media platform and communicate with you via the social media platform.

If you submit a request to us on the social media platform, depending on the content, we may also refer you to other secure communication channels that guarantee confidentiality. For example, you have the option at any time to send us your inquiries to the address or e-mail address listed in the imprint. The choice of the appropriate communication channel is your own responsibility in this regard.

The legal basis for processing your data is Art. 6 (1) S. 1 (f) of the GDPR. The data is processed in the legitimate interest of our public relations and to communicate with you.

Data Processing Activities Under Joint Responsibility

For some of the processing activities, we are jointly responsible with the respective operator of the social media platform.

Accordingly, we have concluded the mandatory agreement pursuant to Art. 26 DSGVO as far as possible.

The key components of shared accountability can be found in the section below.

Targeted Advertising

We also use the described social media platforms to play out targeted advertising.

For this purpose, we use target group definitions provided to us by the social media operator. We only use anonymous target group definitions – that is, we define characteristics based on general demographic information, behavior, interests and connections, for example. The operator of the social media platform uses these to play advertisements to its users accordingly. The legal basis for this is the consent that the operator of the social media platform has obtained from its users.

If you wish to revoke this consent, please use the revocation options provided by the operator of the social media platform, as the social media platform operator is responsible for this processing.

We or the operator of the social media platform also use publicly available data for target group definition. The legal basis for this processing is then Art. 6 (1) p. 1 lit. f DSGVO. The legitimate interest on our part here is to define a target group that is as suitable as possible. We never use sensitive categories of personal data mentioned in Art. 9 and 10 DSGVO (e.g. political opinions, sexual orientation) for target group definition.

We do not use target group definition based on location data. We do not pass on any personal data to the operator of the social media platform as part of the target group definition.

Data Processing by the Operator of the Social Media Platform

The operator of the social media platform uses web tracking methods. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform.

We would therefore like to point out that it cannot be ruled out that the operator of the social media platform uses and evaluates your profile and behavioral data for its own purposes. We have no influence on the processing of your data by the operator of the social media platform. Please take this into account when using the social media platform.

You can find more information on data processing by the operator of the social media platform, configuration options for protecting your privacy, and further objection options in the operator’s privacy policy.

Mastodon Profile

Under the profile domain https://univention.social/@univention, you can also find us on the short message service Mastodon. Mastodon is a decentralized microblogging service, which can be operated decentrally on your own servers.

When you call up and use our company profile, an encrypted connection is established to the web server on which the instance is operated. In order to be able to display the content correctly in your end device, the following data, among others, is processed in accordance with the HTTP and TCP/IP protocol:

  • Your IP address of your internet connection,
  • the operating system and operating system version of your end device, the display resolution of your device,
  • the Internet browser and browser version you use, and
  • the time of your access to our web profile.

This technical data is processed so that this website can be transmitted from the web server to the end device used and can be processed and displayed correctly by your browser. After each page visit, some of these data are stored in logs of the web hoster. The web hoster processes this data for server maintenance and security purposes, but deletes IP addresses after 14 days at the latest, usually sooner.

As a hosting provider, we use the company Weingärtner IT, Großzschachwitzer Strasse 14, 01259 Dresden, Germany, with headquarters and server location in the European Union. The company is subject to our instructions as a processor and has contractually agreed to comply with technical and organizational security measures.

Use of Cookies

Mastodon uses cookies (small text files that make your browser uniquely distinguishable from others) to provide core and convenience features to you. Among other things, these cookies allow the instance to recognize your browser and, if you have a registered account, to link it to your registered account.

We would like to point out that you use Mastodon and its functionalities under your own responsibility.

Duration of Storage

We delete personal data once is no longer required for the aforementioned processing purposes and there are no legal storage obligations preventing their deletion.

Your Rights as a User

As a user of a website, you have the option to exercise the following rights, both towards us and towards the provider of the social media platform, if the preconditions apply:

Right to Access (Art. 15 of the GDPR):

You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the information listed in Art. 15 of the GDPR.

Right to Rectification and Erasure (Art. 16 and 17 of the GDPR):

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if applicable, to have incomplete personal data completed.

You have the right to obtain the erasure of personal data concerning you without undue delay, in so far as one of the grounds listed in Art. 17 of the GDPR applies, for example should the data no longer be needed for the aims being pursued.

Right to Restriction of Processing (Art. 18 of the GDPR):

You have the right to obtain restriction of processing where one of the requirements listed in Art. 18 of the GDPR applies, for example if you have objected to the processing, for the duration of a necessary investigation.

Right to Data Portability (Art. 20 of the GDPR):

In certain cases, listed individually in Art. 20 of the GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format and have the right to have these data transmitted to a third party.

Right to Object (Art. 21 of the GDPR):

If data are processed for the purposes of our legitimate interests in accordance with point (f) of Art. 6 (1) of the GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. We will then not process your personal data any further, unless there are demonstrably compelling reasons for processing which are worthy of protection and outweigh your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

If the data is processed on the basis of the legitimate interest for the purpose of direct advertising, you have a right to object at any time without giving grounds, leading to the end of the processing for the purpose of direct marketing.

Right of Withdrawal (Art. 7 DSGVO)

If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 (3) DSGVO. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

Right to Lodge a Complaint With a Supervisory Authority

In accordance with Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes data protection provisions. The right to lodge a complaint can be asserted in particular with a supervisory authority in the Member State of your residence, place of work, or place of the alleged infringement.

Contact Details of the Data Protection Officer

Our external data protection officer will be happy to provide you with information regarding all aspects of data protection and can be contacted here:

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: www.datenschutz-nord-gruppe.de
E-Mail: office@datenschutz-nord.de

If you do contact our data protection officer, please also specify the controller as named in the imprint.