Data protection Facebook
Privacy policy for the Facebook fan page
This privacy policy applies to the processing of personal data in the context of accessing and using our Facebook fan page.
- General information and area of application
- Accessing and using the fan page, purposes and legal basis
- Right of access, rectification, erasure, restriction, objection and data portability
- Revocation of your consent
- Right of appeal
- Receiver
- Links to third party sites
1. general information and scope of application
This fan page is our user account, which is made available to us by Facebook Ireland Ltd (hereinafter "Facebook"). This platform gives us the opportunity to present ourselves to Facebook users and other people who visit the Facebook fan page and to get in touch with them.
Insights data is collected when our fan page is accessed. This is anonymized data that enables us as the operator to view statistical evaluations of the use of our fan page.
When this Insights data is collected, personal data is also processed. Facebook and we are jointly responsible for this processing within the meaning of Art. 26 GDPR. The main content of the agreement concluded between Facebook and us is explained below.
1.1 Personal data (Art. 4 No. 1 GDPR)
The subject of data protection is personal data (hereinafter also referred to as data). This is all information that relates to an identified or identifiable natural person. This includes, for example, information such as name, address, profession, e-mail address, marital status, telephone number and, where applicable, user data such as IP address.
1.2 Controller (Art. 4 No. 7 GDPR, Art. 26 GDPR)
cadocare GmbH (hereinafter referred to as cadocare, we, operator or controller) together with Facebook is responsible for the processing of your personal data in the context of the use of the Facebook fan page (hereinafter referred to as fan page).
Our contact details are:
cadocare GmbH
Boschstrasse 22
D-52531 Übach-Palenberg (Germany)
represented by the managing directors Patrick Gerards, Markus Ritter and Stefan Adam
Phone: +49 (0) 2451/94349-0
Fax: +49 (0) 2451/94349-99
E-mail: info@cadocare.com
Register court: Aachen Local Court, register number: HRB 14109
Sales tax identification number according to § 27a sales tax law: DE 253283975
The contact details for Facebook are:
Facebook Ireland Limited
Management Board: Gareth Lambe, Shane Crehan
4 Grand Canal Square
Dublin 2, Ireland
Commercial register number 462932
Registered in Ireland (Companies Registration Office)
1.3 Data protection officer
cadocare has appointed a data protection officer. This officer can be contacted at rgoetz@datenschutzservice.nrw.
Facebook has appointed a data protection officer. This can be reached via the following link: https://www.facebook.com/help/contact/540977946302970.
1.4 Degree of responsibility
Facebook assumes primary responsibility for the processing of Insights data on the fan page: https://www.facebook.com/legal/terms/page_controller_addendum
Facebook alone decides on the purposes and means of data processing.
Further information can be found here: https://www.facebook.com/about/privacy/update/printable
We are responsible for data processing, apart from the Insights data.
1.5 Possibility of objection
If you wish to object to the processing of your data by us on the fan page as a whole or for individual measures, you can do so using the contact details given above.
You can also object to the processing of Insights data by Facebook.
You can also object to data processing by Facebook by contacting us. We will forward your objection immediately.
Please note that in the event of such an objection, the use of the fan page and the retrieval of the services and information offered here may only be possible to a limited extent or not at all.
2. access and use of the fan page, purposes and legal basis
2.1 Facebook Insights
When the fan page is accessed and used, Facebook Insights data (statistics on access to our fan page) is made available and processed by us with the help of the Facebook Insights function. It is not possible for us to identify you personally or assign you to your account.
This function is a component of the user agreement with Facebook that cannot be waived by us. This means that we cannot unilaterally decide whether the Insights data is collected or not.
Personal data is collected with the help of cookies. These are small data packets, usually consisting of letters and numbers, which are stored on your browser when you visit the Fanpage. Cookies do not contain any data that identifies you personally, but the information about you stored by the operator can be assigned to the data obtained from and stored in the cookies. Through the use of cookies, information about users who do not have a Facebook account can also be stored.
Further information on the "Facebook Insights" function and the use of cookies as well as the setting options can be found at:
https://www.facebook.com/business/a/page/page-insights
https://de-de.facebook.com/policies/cookies/
You can also restrict or completely prevent the setting of cookies in your browser settings. In addition, you can also arrange for cookies to be deleted automatically when you close the browser window.
If you use the Facebook app, you can change the settings for setting cookies by apps in the settings of your mobile device.
Information on the legal basis and the purpose of the processing by Facebook as well as the respective storage period can be viewed as follows:
https://www.facebook.com/about/privacy/legal_bases
https://de-de.facebook.com/policy.php
Insofar as your personal data is processed by us when you visit the Facebook fan page, the permissibility of this processing for us is based on Art. 6 para. 1 f) GDPR.
According to this, processing is permitted if it is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail. The legitimate interest lies in evaluating the anonymized Insights data in order to understand the usage behavior on our fan page and, as a result, to optimize the fan page's range of services.
The Insights data collected via the fan page is made available to us in anonymized form. This means that the personal data collected is modified in such a way that it can no longer be assigned to a specific or identifiable natural person or can only be assigned to an identified or identifiable natural person with a disproportionate amount of time, cost and labor.
The provision of your personal data by Facebook is contractually required for registered users. The provision of your data is therefore mandatory. The consequence of not providing your data is that you will not be able to use your Facebook account.
Non-registered users are not obliged to provide this data. However, failure to provide the data may mean that you will not be able to access our fan page properly.
2.2 Communications via the fan page function
You can also contact us via the fan page using the message function, the Like buttons and the option to comment on posts on our fan page.
When you contact the operator, the name that is stored as the user name in your Facebook profile will be displayed.
The permissibility of this processing is governed by Art. 6 para. 1 f) GDPR, according to which processing is lawful if it is necessary to safeguard the legitimate interests of the controller or a third party and unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail. The use of data for the purpose of communicating with the users of the fan page in the context of fan page use constitutes a legitimate interest of the operator within the meaning of Art. 6 para. 1 f) GDPR.
The provision of your data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide this data. However, the provision of the data is necessary so that you can contact the operator in the manner described above.
The processed personal data will be deleted after expiry of the statutory retention obligations, unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.
2.3 Competitions
We organize competitions on the fan page at irregular intervals. Data processed in this way is used to determine the winner and to communicate with them. The permissibility of the processing is based on Art. 6 para. 1 f) GDPR (legitimate interest).
The provision of your data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide this data. You cannot take part in the competition without the required information.
The processed personal data will be deleted after the end of the competition, provided that there are no legal obligations to retain the data.
3. right of access, rectification, erasure, restriction, objection and data portability
When using the Fan Page, you have the right to assert all the rights described in this section against both Facebook and us. As part of the agreement that exists between us as the operator of the fan page and Facebook, we will forward your request to Facebook immediately if Facebook alone has to comply with your rights as a data subject.
3.1 Right to information (Art. 15 GDPR)
Upon request, the operator will provide you with information as to whether it processes data relating to you. The operator will endeavor to process requests for information quickly.
3.2 Right to rectification (Art. 16 GDPR)
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you.
3.3 Right to erasure (Art. 17 GDPR)
You have the right to demand from the operator that personal data concerning you be deleted immediately and the operator is obliged to delete personal data immediately if one of the reasons stated in Art. 17 para. 1 a)-f) GDPR applies.
3.4 Right to restriction (Art. 18 GDPR)
You have the right to request the operator to restrict processing if one of the requirements of Art. 18 (1) a)-d) GDPR is met.
3.5 Right to object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. The operator will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Please use the contact address given above for your message.
3.6 Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to the operator, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from the operator to which the personal data have been provided, where the processing is based on consent pursuant to Art. 6 (1) a) GDPR, Art. 9 (2) a) GDPR or on a contract pursuant to Art. 6 (1) b) GDPR and the processing is carried out by automated means.
4. revocation of your consent
If you have given your consent to the processing of your personal data and revoke it, the processing carried out up to the time of this revocation remains unaffected.
5. right of appeal
You have the right to lodge a complaint with the competent supervisory authority at any time.
6. Receiver
The data collected when you access and use the fan page and the information you provide when contacting us will be transmitted to Facebook and stored there. Your data may also be passed on to the following categories of recipients:
Persons at the controller who are involved in the processing (e.g. marketing department, personnel administration, customer service, secretariat)
Processors (e.g. computer center, IT service provider, software support)
Contractual partners of those responsible (e.g. shipping service providers)
Public bodies (e.g. authorities)
Some of your personal data collected via the website is transmitted to Facebook Inc. in the USA and stored there.
If a further data transfer to third countries takes place, we ensure that, with the exception of the cases specified by law, according to which a third country transfer is permitted, the recipient or the country in which it is located offers an adequate level of data protection or that adequate data protection rules exist between the controller and the recipient by means of so-called standard contractual clauses of the European Union.
7. links to third party sites
When visiting the fan page, content may be displayed that is linked to third-party websites. The operator has no access to the cookies or other functions used by third-party sites, nor can the operator control them. Such third-party sites are not subject to the operator's data protection provisions.
