Privacy Policy for Social Media Platforms Used by Univention

When you visit our social media pages, it may be necessary to process your personal data. We want to inform you of the following details relating to how your data is handled and the rights you have resulting from this, in accordance with Article 13 of the General Data Protection Regulation (GDPR).

Controller

We, Univention GmbH, operate the following social media pages:

You can find our contact data in the imprint.

Alongside ourselves, the relevant operators of the social media platforms are also controllers, responsible for the processing of your personal data. Where we can influence and parameterize the data processing, we work within the scope of the options available to us to ensure the operators of the social media platforms handle the data in compliance with the data protection regulations. In connection with this, please also heed the data protection policy of the relevant social media platform.

Data processing we undertake

The data you enter on our social media pages, such as usernames, comments, videos, images, likes, public messages etc. are published by the social media platform, and are never processed by us for other purposes. We merely reserve the right to delete content in so far as this should prove necessary. We may share your content on our page, should this be a function of the social media platform, and communicate with you via the social media platform.

If you send an inquiry via the social media platform, we may, depending on the content, also refer you to other secure communication channels that guarantee confidentiality. You may, for example, always send us confidential inquiries via our postal or email addresses given in the imprint. The choice of suitable method of communication is yours.

The legal basis for processing your data is Art. 6 (1) S. 1 (f) of the GDPR. The data is processed in the legitimate interest of our public relations and to communicate with you.

Some social media platforms create statistics on the basis of usage data which contain information on your interaction with our social media pages. We cannot influence or prohibit the creation or provision of these statistics. We avail ourselves of optional statistics from the social media platform.

We process this information in accordance with Art. 6 (1) S. 1 (f) of the GDPR in the legitimate interest of validating our handling of our social media pages and improving our content for our target groups.

On occasion, we use the social media platforms described to place targeted advertisements.

To do this, we use target group definitions which are made available to us by the social media providers. Within this, we only use anonymous target group definitions – defining, for example characteristics such as demographic details, behaviors, interests, or connections. The operator of the social media platform uses these to place the advertisements with its users. The legal basis for this is the consent which the operator of the social media platform has obtained from its users. If you wish to withdraw this consent, please use the options provided by the operators of the social media platforms (Facebook, Xing, LinkedIn, Instagram, Twitter, YouTube), as the operator of the social media platform is responsible for this data processing. On occasion, we or the provider of the social media platform use publicly available data for defining target groups. The legal basis for this processing is then Art. 6 (1) S. 1 (f) of the GDPR. Our legitimate interest here is to define target groups as suitably as possible. We never use the special categories of personal data named in Art. 9 and 10 of the GDPR when defining target groups.

We do not use target group definitions using location data. We do not transfer personal data to the operator of the social media platform as part of target group definition.

On occasion, we also use information about visits to or interaction with other sites in our target group definition (called remarketing). To do this, we use, among other things, cookies. In such cases, however, we obtain the consent of the user via a consent manager on the particular site in question, and give information about this data processing there. This consent can be withdrawn at any time by calling up the consent manager.

Should you wish to object to a particular part of the data processing which we can influence, please contact us. Out contact data is given in the imprint.

Carrying out performance recruiting campaigns

We carry out performance recruiting campaigns. For this purpose we use the tool Perspective (https://perspective.co/), which generates “mobile funnels”. Using this tool, we create applicant quizzes. At the end of such quizzes you can leave your contact information (name, email address, telephone number). The data entered there is encrypted and saved in a database.

We use this information solely for contacting people as part of the selection of applicants. The data is not processed for any other reason. The data is processed on the basis of § 26 of the federal data protection act (BDSG).

In connection with this, we have concluded a contract with the service provider Perspective Software GmbH. Please note that the use of Perspective results in your data being processed by service providers outside of the EU/EEA. In some countries, there is the risk that authorities access the data for security and surveillance purposes without your being informed or having the right to appeal. If we use providers in unsafe third countries and you give your consent, the transfer to an unsafe third country is performed on the basis of point (a) of Art. 49 (1) of the GDPR.

Subcontractor Perspective Software GmbH Appropriate data protection level Withdrawal of consent
Amazon Web Services, Inc.
410 Terry Avenue North Seattle, WA 98109-5210, USA)
No appropriate data protection level. The transfer is performed on the basis of point (a) of Art. 49 (1) of the GDPR.

If you no longer wish this processing to take place, please discontinue using the function.

DigitalOcean, LLC
(101 Avenue of the Americas, 10th Floor New York, NY 10013, USA)
Heroku, Inc.
(part of Salesforce.com, Inc.) (Salesforce Tower, 415 Mission Street, 3rd Floor, an Francisco, CA 94105, USA)
Imgix – Zebrafish Labs, Inc.
(423 Tehama St, San Francisco, CA 94103, USA)
Mailgun Technologies, Inc.
(112 E Pecan St. #1135. San Antonio, TX 78205, USA)
mLAB – ObjectLabs Corporation
(660 York St. Suite 101 San Francisco, CA 94110, USA)
MongoDB, Inc.
(1633 Broadway, 38th Floor, New York, NY 10019, USA)
PartnerStack Inc.
(129 Spadina Ave #502, Toronto, ON M5V 2L3, Kanada)
Redis Labs UK Ltd.
(Tower 42 25 Old Broad St London EC2N 1HN, UK)
Redis Labs Inc.
(700 E. EL Camino Real, Mountain View, CA 94040, USA)
Redis Labs Ltd.
(Alon 2 Tower, 32nd Floor, Tel-Aviv 6789140, Israel)
Vercel, Inc.
(1046 Kearny Street, San Francisco, CA 94133, USA)

 

In addition, Perspective Software GmbH processes further data so as to perform its services, in particular to operate the mobile funnel. Perspective Software GmbH provides further information about this here.

Duration of storage

We delete personal data once is no longer required for the aforementioned processing purposes and there are no legal storage obligations preventing their deletion.

Data processing by the operator of the social media platform

The operator of the social media platform uses web tracking methods. Web tracking can take place whether or not you are registered with or logged in to the social media platform.

We wish to note that it cannot be excluded that the provider of the social media platform uses your profile and behavioral data to evaluate your habits, personal relationships, preferences etc. We have no influence on the processing of your data undertaken by the social media platform, so your use of the social media platform is at your own responsibility.

Further information on data processing undertaken by the operator of the social media platform, configuration options for protecting your privacy, further alternatives for objection, and, in so far as they are available and have been concluded, the arrangement made in accordance with Art. 26 of the GDPR can be found in the provider’s data protection statement.

Your rights as a user

As a user of a website, you have the option to exercise the following rights, both towards us and towards the provider of the social media platform, if the preconditions apply:

Right to access (Art. 15 of the GDPR):

You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the information listed in Art. 15 of the GDPR.

Right to rectification and erasure (Art. 16 and 17 of the GDPR):

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if applicable, to have incomplete personal data completed.

You have the right to obtain the erasure of personal data concerning you without undue delay, in so far as one of the grounds listed in Art. 17 of the GDPR applies, for example should the data no longer be needed for the aims being pursued.

Right to restriction of processing (Art. 18 of the GDPR):

You have the right to obtain restriction of processing where one of the requirements listed in Art. 18 of the GDPR applies, for example if you have objected to the processing, for the duration of a necessary investigation.

Right to data portability (Art. 20 of the GDPR):

In certain cases, listed individually in Art. 20 of the GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format and have the right to have these data transmitted to a third party.

Right to object (Art. 21 of the GDPR):

If data are processed for the purposes of our legitimate interests in accordance with point (f) of Art. 6 (1) of the GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. We will then not process your personal data any further, unless there are demonstrably compelling reasons for processing which are worthy of protection and outweigh your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

If the data is processed on the basis of the legitimate interest for the purpose of direct advertising, you have a right to object at any time without giving grounds, leading to the end of the processing for the purpose of direct marketing.

Right to lodge a complaint with a supervisory authority

In accordance with Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes data protection provisions. The right to lodge a complaint can be asserted in particular with a supervisory authority in the Member State of your residence, place of work, or place of the alleged infringement.

Contact details of the data protection officer

Our external data protection officer will be happy to provide you with information regarding all aspects of data protection and can be contacted here:

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: www.datenschutz-nord-gruppe.de
E-Mail: office@datenschutz-nord.de

If you do contact our data protection officer, please also specify the controller as named in the imprint.