1. Providers
1.1. Facebook fan page
1.1.1. Responsible body
In the event that the data you have transmitted to us is also or exclusively processed by Facebook, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland, is responsible for data processing in addition to or on our behalf Meaning of the GDPR. For this purpose, we have concluded an agreement with Facebook in accordance with Art. 26 GDPR on joint responsibility for the processing of data (controller addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook fan page. You can view this agreement under the following link:
https://www.facebook.com/legal/terms/page_controller_addendum .
Since a transfer of personal data by Facebook Ltd. in the USA to Facebook Inc., among others, further protective mechanisms are required to ensure the data protection level of the GDPR. For this purpose, the provider uses standard data protection clauses in accordance with Art. 46 Paragraph 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe.
If you would like to exercise your rights as a visitor to the site (information, correction, deletion, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact both Facebook and us.
You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in:
https://www.facebook.com/settings?tab=ads or http://www.youronlinechoices.com
For more details, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/
1.1.2. Facebook’s data protection officer
To contact the Facebook data protection officer, you can use the online contact form provided by Facebook under the following link:
https://www.facebook.com/help/contact/540977946302970.
1.1.3. Data processing for statistical purposes using page insights
Facebook provides so-called page insights for our Facebook fan page:
https://www.facebook.com/business/a/page/page-insights.
This is aggregated data that provides information about how people interact with our site. Page insights can be based on personal data that is recorded in connection with a visit or interaction of people on or with our site and in connection with the content provided. Please note which personal data you share with us via Facebook. Your data can be processed for market research and advertising purposes, even if you are not logged into Facebook or do not have a Facebook account. So z. B. from the usage behavior and the resulting interests of the user user profiles are created. The user profiles can in turn be used to e.g. B. To place advertisements inside and outside the platforms that presumably correspond to the interests of the users. This data collection takes place via cookies, which are stored on your end device. Furthermore, data that is independent of the devices used by the users can also be stored in the user profiles; especially if the users are members of the respective platforms and are logged in to them. The legal basis for processing is Article 6 (1) (f) GDPR. Our legitimate interest lies in the optimized presentation of our offer, effective information and communication with customers and interested parties as well as in the targeted placement of advertisements. Please note that we have no influence on data collection and further processing by Facebook. As a result, we cannot provide any information about the extent, location and duration of the data stored by Facebook. Furthermore, we cannot make any statements about the extent to which Facebook complies with existing deletion obligations, which evaluations and links with the data are made by Facebook and to whom the data is passed on by Facebook. If you want to avoid the processing of your personal data by Facebook, please contact us in another way.
1.2. Other social media providers
1.2.1. Responsible body
If your personal data is processed by a provider listed below, this provider is responsible for data processing within the meaning of the GDPR. For the assertion We point out your data subject rights that these can most effectively be asserted with the respective providers. Only they have access to the data collected from you. If you still need help, please do not hesitate to contact us.
We have an online presence on the social media platforms of the following providers:
1 - 1.2.2. Data protection officer
You can find information on how to contact the data protection officer of the other social media providers here:
Twitter Inc.: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp
Instagram Inc.: https://de-de.facebook.com/help/instagram/155833707900388
LinkedIn Ireland Unlimited Company: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
XING SE: data protection officer@xing.com
Pinterest: https://help.pinterest.com/de/data-protection-officer-contact-form
2 - General information on social media platforms
2.1. Responsible body
The person responsible for data processing within the meaning of the GDPR is the body named at the beginning of this data protection declaration, insofar as we process data transmitted by you via one of the social media platforms.
2.2. Our data protection officer
If you have any concerns about data processing that is carried out by us as the person responsible, you can contact our data protection officer using the contact details given at the beginning of this data protection declaration.
3 - General data processing on the social media platforms
3.1. Data processing for market research and advertising
As a rule, personal data is processed on the company website for market research and advertising purposes. For this purpose, a cookie is set in your browser, which enables the respective provider to recognize you when you visit a website. Using the collected data, usage profiles can be created. These are used to place advertisements inside and outside the platform that presumably correspond to your interests. Furthermore, data can be saved in the usage profiles regardless of the devices you are using. This is regularly the case if you are a member of the respective platforms and logged in to them.
3.2. Data processing when contacting us
We collect personal data ourselves when you e.g. You can contact us using the contact form or a messenger service such as Facebook Messenger. Which data is collected depends on the information you provide and the contact details you have provided or released. These are stored by us for the purpose of processing the request and in the event of follow-up questions. We will never pass the data on to third parties without your consent. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Paragraph 1 lit. f GDPR and, if applicable, Art. 6 Paragraph 1 lit. b GDPR, if your request is aimed at concluding a contract. Your data will be deleted after your request has been processed, provided that there are no statutory retention requirements. We assume final processing if it can be inferred from the circumstances that the matter in question has been finally clarified.
3.3. Data processing for contract processing
If your contact via a social network or other platform is aimed at concluding a contract for the delivery of goods or for the provision of services with us, we will process your data to fulfill the contract or to carry out pre-contractual measures or to provide the desired services. In this case, the legal basis for processing your data is Article 6 (1) (b) GDPR. Your data will be deleted when it is no longer required for the execution of the contract or it is certain that the pre-contractual measures do not lead to a contract that corresponds to the purpose of making contact. Please note that even after the contract has been concluded, it may be necessary to save personal data of our contractual partners in order to meet contractual or legal obligations.
3.4. Data processing based on consent
If you are asked by the respective providers of the platforms for your consent to the processing for a specific purpose, the legal basis for the processing is Art. 6 Para. 1 lit. a., Art. 7 GDPR. A given consent can be revoked at any time with effect for the future.
4 - Data transfer and recipient
When visiting and using the platforms listed above, personal data may be transferred to the USA or other third countries outside the EU, which is why further protective mechanisms are required in these cases to ensure the data protection level of the GDPR. Further information on whether and which suitable guarantees the providers can provide for this can be found in the list below.
We have no influence on the processing of your personal data by the provider and how it is handled. We also have no information on this. For further information, please check the data protection declaration of the respective provider and, if necessary, use the options for opt-out / personalization with regard to data processing by the provider:
- Twitter
Data protection declaration: https://twitter.com/de/privacy
Opt-out: https://twitter.com/personalization
According to the data protection declaration, Twitter uses standard data protection clauses to ensure an appropriate level of data protection in baccordance with the provisions of the GDPR for data transmission to the USA or other third countries outside the EU:
https://twitter.com/de/privacy
– Instagram
Data protection declaration / opt-out: http://instagram.com/about/legal/privacy/
According to the data protection declaration, Instagram (Facebook) uses standard data protection clauses to ensure an appropriate level of data protection in accordance with the provisions of the GDPR for data transmission to the USA or other third countries outside the EU:
http://instagram.com/about/legal/privacy/
– Google
Data protection declaration: https://policies.google.com/privacy?hl=de&gl=de
Opt-out: https://adssettings.google.com/authenticated
– LinkedIn
Data protection declaration: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
According to the data protection declaration, LinkedIn uses standard data protection clauses to ensure an appropriate level of data protection in accordance with the provisions of the GDPR for data transmission to the USA or other third countries outside the EU:
https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de
– XING
Data protection declaration: https://privacy.xing.com/de/datenschutzerklaerung
Opt-out: https://nats.xing.com/optout.html?popup=1&locale=de_DE
According to the data protection declaration, XING uses standard data protection clauses to ensure an appropriate level of data protection in accordance with the provisions of the GDPR for data transmission to the USA or other third countries outside the EU:
https://privacy.xing.com/de/datenschutzerklaerung/wer-erhaelt-daten-zu-ihrer-person/drittlaender
– Pinterest
Data protection declaration / opt-out: https://about.pinterest.com/de/privacy-policy
According to the data protection declaration, Pinterest uses standard data protection clauses to ensure an appropriate level of data protection in accordance with the provisions of the GDPR for data transmission to the USA or other third countries outside the EU:
https://policy.pinterest.com/de/privacy-policy
External links
Social networks are only included on our website as a link to the corresponding services. After clicking on the integrated text / image link, you will be redirected to the website of the respective provider. User information is only transmitted to the respective provider after it has been forwarded. For information on how your personal data is handled when using these websites, please refer to the respective data protection provisions of the providers you use.
Data transfer and recipient
Your personal data will not be transmitted to third parties unless we have explicitly pointed this out in the description of the respective data processing. – if you have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, – disclosure is necessary in accordance with Art. 6 Para. 1 S. 1 lit.f DSGVO for the establishment, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data – in the event that there is a legal obligation for the disclosure in accordance with Art. 6 Para. 1 S. 1 lit. c GDPR and – as far as this according to Art. 6 Para. 1 S. 1 lit.b DSGVO is necessary for the processing of contractual relationships with you. We also use external service providers that we have carefully selected and commissioned in writing to process our services. They are bound by our instructions and are regularly checked by us. With whom we have concluded order processing contracts in accordance with Art. 28 GDPR, if necessary. These are service providers for web hosting, sending e-mails as well as maintenance and servicing of our IT systems etc. The service providers will not pass this data on to third parties.
Data security
In accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of processing as well as the different probability of occurrence and severity of the risk for the rights and freedoms of natural persons, we make suitable technical and organizational measures to ensure a level of protection appropriate to the risk. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.
Duration of storage of personal data
The duration of the storage of personal data is based on the relevant statutory retention periods (e.g. from commercial law and tax law). After the respective period has expired, the relevant data is routinely deleted. If data is required for contract fulfillment or contract initiation or if we have a legitimate interest in further storage, the data will be deleted if they are no longer required for these purposes or if you exercise your right of revocation or objection.
Your rights
In the following you will find information on the data subject rights that the applicable data protection law grants you to the person responsible with regard to the processing of your personal data:
The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right of appeal, the origin of your data, if we have not collected it, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details.
The right, in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us.
The right, in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless processing to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or Defense of legal claims is necessary.
The right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you do Need to assert, exercise or defend legal claims or you have objected to processing in accordance with Art. 21 GDPR
The right, in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.
The right to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our above-mentioned registered office or, if applicable, that of your usual place of residence or work.
The right to revoke consent given in accordance with Art. 7 Paragraph 3 GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation.
Right to object
If your personal data are processed by us on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is applicable Reasons that arise from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct mail, you have a general right of objection without the requirement to state a particular situation.
If you would like to make use of your right of withdrawal or objection, an email to dataprivacy@bax-group.com is sufficient.
Legal Obligations
The provision of personal data for the decision on the conclusion of a contract, the fulfillment of the contract or the implementation of pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide such personal data that are necessary for the conclusion of the contract, the fulfillment of the contract or pre-contractual measures.
Automated decision making
Automated decision-making or profiling in accordance with Art. 22 GDPR does not take place.
Subject to change
We reserve the right to adapt or update this data protection declaration if necessary, taking into account the applicable data protection regulations. In this way, we can adapt them to current legal requirements and take changes to our services into account, e.g. B. when introducing new services. The most recent version applies to your visit.
