Social Media - Data privacy notice
Josef Wiegand GmbH & Co. KG - Social Media Privacy Policy
I. Registration on social media platforms
On the social media platforms on which we present our company, users have the option of registering by providing their personal data. The data is entered into an input mask and transmitted to the provider of the platform and stored there. User registration on the respective social media platforms is on a voluntary basis. We would like to point out that every user uses our pages on social media platforms and their functions under their own responsibility. This applies in particular to the use of interactive functions, such as commenting, sharing or rating. When visiting our pages on social media platforms, the provider of the platform collects user information, such as the IP address, via the device used by the user. Our company is not involved in the processing of personal data for the use of the interactive functions and for the registration process on the social media platforms. Information about the legal basis for the data processing, purpose of the data processing, duration of storage, requests for information, options for objection and removal can be found in the data protection information of the respective platform providers.
For all further processing of personal data, joint responsibility applies in accordance with Article 26 of the EU General Data Protection Regulation (GDPR). The data privacy declaration concerning our company can be found in points II to VI.
II. Data privacy declaration of the companies
1. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is:
Josef Wiegand GmbH & Co. KG
Represented by the personally liable partner,
in turn represented by: Hendrik Wiegand
Landstraße 12
36169 Rasdorf
Germany
Telephone: +49 6651 9800
Fax: +49 0 6651 379
Email: info@wiegandslide.de
Website: www.wiegandslide.com
2. Name and address of the data protection officer
The controller’s data protection officer is:
BerIsDa GmbH
Rangstraße 9
36037 Fulda
Germany
Tel.: +49 661 29698096
Email: datenschutz@berisda.de
Website: www.berisda.de
III. General information on data processing
1. Scope of processing of personal data
In principle, we collect and use personal data of our users only when it is provided by the user and is necessary for an interaction that is required of us.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 (a) GDPR serves as the legal basis for the processing of personal data.
For the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 (b) GDPR serves as the legal basis. This also applies for processing which is necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 (c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person make the processing of personal data essential, Art. 6 para. 1 (d) GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or of a third party and where the interests, fundamental rights and freedoms of the data subject do not outweigh this first-mentioned interest, Art. 6 para. 1 (f) GDPR serves as the legal basis for the processing.
3. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may continue if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Data is also deleted or blocked when a retention period prescribed by the specified norms expires, unless further retention of the data is required for the conclusion or fulfilment of a contract.
IV. Rights of the data subject
If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
1. Right to information
You have the right to obtain confirmation from the controller as to whether or not personal data about you is being processed by us.
If your data is being processed, you can request the following information from the controller:
(1) the purposes for which the personal data is being processed;
(2) the categories of personal data being processed;
(3) the recipients to whom the personal data concerning you has been or will be disclosed;
(4) the planned duration of the storage of the personal data pertaining to you:
(5) the existence of your rights;
(6) all available information on the origin of the data;
(7) the existence of automated decision-making, including profiling, in accordance with Article 22 para. (1) and (4)
You have the right to request information as to whether or not the personal data pertaining to you is transferred to a third country or to an international organisation. In this context, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.
2. Right to rectification
You have the right to correction and/or completion vis-à-vis the controller when the processed personal data pertaining to you is incorrect or incomplete. The controller must undertake the corrections without delay.
3. Right to restriction of processing
Under the following conditions, you can request the restriction of the processing of the personal data pertaining to you:
(1) if you contest the accuracy of the personal data pertaining to you, for a period of time that enables the controller to verify the accuracy of the personal data;
(2) if the processing is unlawful and you reject the erasure of the personal data and instead request the restriction of the use of the personal data;
(3) if the controller no longer needs the personal data for the purposes of the processing, but you require it to assert, exercise or defend legal claims; or
(4) if you have objected to the processing pursuant to Article 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.
If the processing of your personal data has been restricted, this personal data – apart from storage – will be processed only with your consent, or for the assertion, exercise or defence of legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the EU or of a Member State.
If the processing has been restricted in accordance with the above requirements, you will be informed by the controller before the restriction is lifted.
4. Right to deletion
a) Obligation to delete
You have the right to demand of the controller that the personal data pertaining to you is deleted immediately, and the controller is obligated to delete this personal data, provided one of the following reasons applies:
(1) The personal data pertaining to you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent on which the processing was based in accordance with Art. 6 para. 1 (a) or Art. 9 para. 2 (a) GDPR and there are no other legal grounds for the processing.
(3) You object to the processing pursuant to Article 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 para. 2 GDPR.
(4) The personal data concerning you has been processed unlawfully.
(5) The deletion of the personal data pertaining to you is necessary to fulfil a legal obligation under EU law or the law of the Member States to which the controller is subject.
(6) The personal data pertaining to you was collected in relation to information society services offered in accordance with Article 8 para. 1 GDPR.
b) Information to third parties
Where the controller has disclosed the personal data pertaining to you and is obliged pursuant to Article 17 para. 1 GDPR to erase this data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested the deletion by such controllers of any links to this personal data or have requested copies or replications of this personal data.
c) Exceptions
The right to deletion does not exist if the processing is necessary:
(1) to exercise the right to freedom of expression and information;
(2) to comply with a legal obligation requiring processing under EU or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 (h) and (i) as well as Art. 9 para. 3 GDPR;
(4) for public-interest archiving purposes, scientific or historical research purposes or for statistical purposes pursuant to Article 89 para. 1 GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
(5) to assert, exercise or defend legal claims.
5. Right to instruction
If you have asserted your right to rectification, deletion or restriction of the processing against the controller, the controller is obliged to instruct all recipients to whom the personal data pertaining to you has been disclosed of this rectification or deletion of the data or restriction of the processing, unless this proves impossible or involves a disproportionate effort.
You have the right vis-à-vis the controller to be informed of these recipients.
6. Right to data portability
You have the right to receive the personal data pertaining to you that you have provided to the controller in a structured, commonly used and machine-readable format. In addition, you have the right to transfer this data to another controller without hindrance from the controller to whom the personal data have been provided, insofar as
(1) the processing is based on consent pursuant to Art. 6 para. 1 (a) GDPR or Art. 9 para. 2 (a) GDPR or on a contract pursuant to Art. 6 para. 1 (b) GDPR, and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to insist that the personal data pertaining to you is transferred directly from one data controller to another, to the extent that this is technically feasible. The freedoms and rights of other persons may not be impacted by this.
The right to data portability does not apply if processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. Right of objection
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data pertaining to you on the basis of Art. 6 para. 1 (e) or (f ) GDPR; this also applies to profiling based on these provisions.
The controller no longer processes the personal data pertaining to you, unless it can prove compelling, protection-worthy reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
If your personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for these purposes; the same applies to profiling, provided it is also connected to such direct marketing.
If you object to the processing of your personal data for the purposes of direct marketing, the personal data pertaining to you will no longer be processed for these purposes.
In connection with the use of services of the information society and notwithstanding Regulation 2002/58/EC, you are also free to exercise your right of objection by means of automated procedure in which technical specifications are used.
8. Right to revoke the declaration of consent under data protection law
You have the right to revoke your consent under data protection law at any time. The lawfulness of the processing carried out on the basis of the consent up to the point of the revocation is not affected by the withdrawal of consent. You can submit your revocation to the controller either by post or by email.
9. Automated decision-making in the individual case, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects against you or significantly affects you in a similar way. This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and the controller,
(2) is permitted under EU or Member State law to which the controller is subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests; or
(3) is made with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Article 9 para. 1 GDPR, unless Article 9 para. 2 (a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
With regard to the cases referred to in (1) and (3), the controller shall take appropriate measures to safeguard the rights and freedoms as well as your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your own point of view and to contest the decision.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to another administrative or judicial remedy, you also have the right to appeal to a supervisory authority, in particular in the Member State of your residence, workplace or where the alleged violation took place, if your are of the opinion that the processing of the personal data pertaining to you violates the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.
V. Email contact
1. Description and scope of data processing
Email addresses are provided on the social media pages we use and in our signatures; we can be contacted at these addresses. In this case, the personal data of the user transmitted with the email will be saved.
In this context, the data will not be passed on to third parties. The data is used exclusively for the processing of the communication.
2. Legal basis for the data processing
The legal basis for the processing of the data that is transferred in the course of the sending of an email is Art. 6 paragraph 1 (f) GDPR. If the email contact aims at concluding a contract, the legal basis for the processing is Art. 6 para. 1 (b) GDPR.
3. Purpose of the data processing
The processing of the personal data serves us solely to process the contact communication. Hence the necessary legitimate interest in the processing of the data.
4. Duration of data storage
The data is deleted as soon as it is no longer needed for the purpose for which it is collected. For the personal data that is sent via email, this is the case when the respective communication with the user is ended. The communication is ended when it can be inferred from the circumstances that the issue at hand has been clarified.
5. Objection and removal options
If a user contacts us by email, they can object to the storage of their personal data at any time. In this case, the communication cannot be continued.
All personal data that has been saved in the course of the contact will be deleted in this case.
VI. Contact via a social media platform (contact form, chat)
On some of the social media platforms, it is possible to contact us internally via the service (for example, via a contact form or chat). If a user utilises this option, the data entered in the input mask will be processed in the systems of the respective service, transmitted to us and stored on the systems of the provider of the respective platform. The use of a social media platform to contact us is based on the user’s voluntary consent. For the processing of personal data that takes place in the course of contacting us via the systems of a social media platform, the data protection regulations of the respective service apply in principle.
1. Description and scope of data processing
In order to process your enquiry, it may be necessary for your personal data to be processed internally at Josef Wiegand GmbH & Co. KG. The following regulations apply to the internal processing of your message at Josef Wiegand GmbH & Co. KG:
2. Legal basis for the data processing
The legal basis for the processing of the data to process an enquiry from the user is Art. 6 para. 1 (f) GDPR. If the contact aims at concluding a contract, the legal basis for the processing is Art. 6 para. 1 (b) GDPR.
3. Purpose of the data processing
The internal processing of personal data that we have received through the contact options of the social media platforms serves us solely to process the contact communication.
4. Duration of data storage
The data is deleted as soon as it is no longer needed for the purpose for which it is collected. For the personal data from the input mask of the contact form, this is the case when the respective conversation with the user has ended. The communication is ended when it can be inferred from the circumstances that the issue at hand has been clarified.
5. Objection and removal options
If a user’s personal data is processed internally to process the enquiry, they can object to the storage of their personal data at Josef Wiegand GmbH & Co. KG at any time. In this case, the communication cannot be continued.
All personal data stored internally at the company in the course of contacting us will be deleted in this case.
VII. Facebook (a product of Meta)
Name and address of the controllers:
Jointly responsible for the operation of this Facebook page within the meaning of the EU GDPR are:
Meta Platforms Ireland Limited (hereinafter “Facebook” or “Meta”)
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
and
our company (see II – 1.)
1. Information about our Facebook page
We operate this page to draw attention to our services, jobs and products and to get in touch with you. Further information about us as well as about our activities, companies, etc. can be found on our website www.wiegandslide.com.
As the operator of the Facebook page, we have no interest in the collection and further processing of your personal data for analysis or marketing purposes.
The operation of this Facebook page, including the processing of users’ personal data, is based on our legitimate interests in a modern and supportive information and interaction option for and with our users and visitors in accordance with Art. 6 para. 1 (f) GDPR.
2. Processing of personal data by Meta
Meta Platforms, Inc. is the US parent company of Meta Platforms Ireland Limited, so the transfer of your personal data to a third country is not excluded. The transfer and further processing of users’ personal data to/in third countries, such as the USA, as well as the associated possible risks for the users cannot be excluded by us as the operator of the page. In the USA, there is no level of data protection comparable to the requirements of the GDPR. Effective enforcement of your rights is unlikely to be possible. It is also possible for government agencies to access the personal data provided without us or you being aware of it.
Meta processes user data for the following purposes, among others: Advertising (analysis, creation of personalised advertising), creation of user profiles and market research. Meta uses cookies, i.e. small text files that are stored on users’ end devices, to store and further process this information. If the user has a Facebook profile and is logged in to it, the storage and analysis also takes place across devices.
If you have any questions about your rights vis-à-vis Facebook, please contact Facebook directly. Your general rights, which exist within the framework of the GDPR, can be found in this data protection declaration under point IV.
If requests for information are submitted to us as the page operator, we are obliged by the supplementary agreement with Meta to forward these requests – whether from private individuals or authorities – to Meta within 7 days. This also results from the above-mentioned Controller Addendum www.facebook.com/legal/terms/page_controller_addendum
If you no longer wish to be subject of the data processing described here in the future, please cancel the connection of your user profile to our page by using the “I no longer like this page” function.
Meta’s privacy policy contains further information on data processing
3. Statistical data (Insights)
Facebook “Insights” are statistical data of different categories that are available to us. These statistics are generated and provided by Facebook. As the operator of the page, we have no influence on their generation and presentation. This function cannot be deactivated to prevent the generation and processing of data. For a selectable period of time, the following data on our Facebook page is provided to us by Facebook: Total number of page views, “Likes”, page activities, post interactions, reach, video views, post reach, comments, shared content, responses, proportion of men and women, origin related to country and city, language, views and clicks in the shop, clicks on route planners, clicks on telephone numbers, data on linked Facebook groups.
We use this available data to make our Facebook page more attractive to users (e.g. distributions by age and gender for an adapted approach, scheduling of our posts, visual optimisation for end devices. In accordance with the Facebook Terms of Service, which each user has agreed to in the context of the creation of a Facebook profile, we can identify the subscribers and fans of the page and view their profiles and other information shared by them.
VIII. Instagram (a product of Meta)
Name and address of the controllers:
Jointly responsible for the operation of this Instagram page within the meaning of the EU General Data Protection Regulation and other data protection regulations are:
Meta Platforms Ireland Limited (hereinafter “Instagram” or “Meta”)
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
and
our company (see II – 1.)
1. Information about our Instagram page
We operate this page to draw attention to our services, jobs and products and to get in touch with you. Further information about us as well as about our activities, companies, etc. can be found on our website www.wiegandslide.com.
As the operator of the Instagram page, we have no interest in collecting and further processing your personal data for analysis or marketing purposes.
The operation of this Instagram page, including the processing of users’ personal data, is based on our legitimate interests in a modern and supportive information and interaction option for and with our users and visitors in accordance with Art. 6 para. 1 (f) GDPR.
2. Processing of personal data by Meta
Meta Platforms, Inc. is the US parent company of Meta Platforms Ireland Limited, so the transfer of your personal data to a third country is not excluded. The transfer and further processing of users’ personal data to/in third countries, such as the USA, as well as the associated possible risks for the users cannot be excluded by us as the operator of the page. In the USA, there is no level of data protection comparable to the requirements of the GDPR. Effective enforcement of your rights is unlikely to be possible. It is also possible for government agencies to access the personal data provided without us or you being aware of it.
If you have any questions about your rights, please contact Meta directly. Your general rights, which exist within the framework of the GDPR, can be found in this data protection declaration under point IV.
Further information can be found in Meta’s privacy policy at: https://instagram.com/about/legal/privacy/
IX. YouTube
Name and address of the controllers:
Jointly responsible for the operation of this YouTube page within the meaning of the EU General Data Protection Regulation and other data protection regulations are:
YouTube, LLC, 901 Cherry Ave., (hereinafter “YouTube”)
San Bruno,
CA 94066, USA
and
our company (see II – 1.)
1. Information about our use of YouTube
We operate this page to draw attention to our services, jobs and products and to get in touch with you. Further information about us as well as about our activities, companies, etc. can be found on our website www.wiegandslide.com.
As the operator of the YouTube page, we have no interest in collecting and further processing your personal data for analysis or marketing purposes.
The operation of this YouTube page, including the processing of users’ personal data, is based on our legitimate interests in a modern and supportive information and interaction option for and with our users and visitors in accordance with Art. 6 para. 1 (f) GDPR.
2. Processing of personal data by YouTube
Google, LLC. is the US parent company of YouTube, LLC., so the transfer of your personal data to a third country is not excluded. The transfer and further processing of users’ personal data to/in third countries, such as the USA, as well as the associated possible risks for the users cannot be excluded by us as the operator of the page. In the USA, there is no level of data protection comparable to the requirements of the GDPR. Effective enforcement of your rights is unlikely to be possible. It is also possible for government agencies to access the personal data provided without us or you being aware of it.
If you are logged in to your YouTube account, you allow YouTube to associate your browsing habits directly with your personal profile. You can prevent this by logging out of your YouTube account.
If you have any questions about your rights, please contact YouTube directly. Your general rights, which exist within the framework of the GDPR, can be found in this data protection declaration under point IV.
Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy
