Social Media

Information on Data Protection When Using Our Social Media Channels in Accordance with Articles 13 and 14 of the GDPR

We would like to inform you about the processing of your personal data by our company when visiting and using our social media channels on Facebook, Instagram, LinkedIn, Xing, and Pinterest (hereinafter referred to as “social media platforms”) and about the rights you are entitled to under data protection laws.

i. Principles

  1. Please carefully review which personal data you exchange and share with us through the social media platforms. If you wish to avoid the operator of a social media platform processing personal data transmitted by you to us, please contact us via an alternative method, such as the address listed below..
  2. You can also learn about us and our offers and services through our website at https://www.youmawo.com/. In this case, the service providers do not have any information.

i.Responsible Parties

Verantwortlicher“ gemäß Art. 4 Abs. 7 DSGVO sind:

  1. YOU MAWO GMBH, 3, 78467 Konstanz, Telefon: +49 7531 9 45 45 35, E-Mail: hello@youmawo.com
  2. und der jeweilige Dienste-Anbieter
  1. Facebook & Instagram: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
    LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland
    Xing: New Work SE, Am Strandkai 1, 20457 Hamburg
    Pinterest: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
  2.  

When users visit our social media channels, the service providers collect personal data and information, which is primarily used for data analysis and evaluation, and provided to us as aggregated statistics (so-called Page Insights). For these cases, and in the context of providing and using our social media channels, we have entered into an agreement with the service provider as joint controllers in accordance with Article 26 of the GDPR.

Facebook & Instagram: https://www.facebook.com/legal/terms/page_controller_addendum
LinkedIn:  https://legal.linkedin.com/pages-joint-controller-addendum
Xing : https://privacy.xing.com/de
Pinterest: https://business.pinterest.com/de/pinterest-advertising-services-agreement/rest-of-apac/ unter “Exhibit B”

i.Data Protection Officer

Unseren Datenschutzbeauftragten erreichen Sie unter Herr Matthias Herkert, reichert & reichert steuer- und rechtsberatungsgesellschaft mbH, Max-Porzig-Straße 1, 78224 Singen, E-Mail: datenschutz@reichert-reichert.de.

Facebook & Instagram: https://www.facebook.com/help/contact/540977946302970
LinkedIn: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
Xing : https://privacy.xing.com/de/ihre-ansprechpartner
Pinterest: https://help.pinterest.com/de/data-protection-officer-contact-form

i.Cookies

During the operation of social media platforms, service providers regularly use services with data processing technologies that allow them to store and process personal data of users for various purposes. These technologies include, among others, cookies, small text files that are stored on your device by the web browser.

“All information about the cookies used by the service provider, the integration of cookies by other websites, and your options to withdraw, object, and delete can be found in the cookie information of the respective provider.”

Facebook & Instagram:  https://de-de.facebook.com/help/336858938174917 und https://www.facebook.com/policies/cookies/
LinkedIn: https://de.linkedin.com/legal/cookie-policy
Xing : https://privacy.xing.com/de/datenschutzerklaerung/informationen-die-wir-auf-grund-ihrer-nutzung-von-xing-automatisch-erhalten
Pinterest: https://policy.pinterest.com/de/cookies

You can also configure your browser settings according to your preferences and make a general prior decision regarding the use of cookies. Further information on this can be found in the help function of the browser you are using.

If you want to limit or avoid the processing by the service providers, you should log out of your accounts or deactivate the ‘stay logged in’ function, delete the cookies stored on your device, and close and restart your browser or app.

Additionally, on mobile devices (smartphones, tablets, laptops), you can restrict the access of service providers to contact and calendar data, photos, location data, etc. This, however, depends on the operating system used.

We have no influence on the data processing carried out by the service provider in connection with cookies. We also do not have access to personal data, except for the aforementioned insights data.

i.Processing of Personal Data

Category of Data Subjects: Visitors and Users of Our Social Media Pages

Categories of Data: Interaction data from likes, dislikes, story views, follows, unfollows, comments, tweets, @-mentions, tags, ratings, photographs, other content shared by you, personal data that you disclose in the public section of your profile, health data, insights data.”

Page-Insights are aggregated statistics created based on specific events.

As page operators, we receive these aggregated events in the form of anonymized or pseudonymized data in the Page-Insights, which help us gain insights into the types of actions people take on our page. The Page-Insights do not allow any conclusions to be drawn about you as an identifiable person. Events are set exclusively by the service provider. We cannot create, modify, or otherwise influence events, nor can we access the individual data. For us, only your public social media profile is visible. The information visible here depends on the settings in your profile.

We do not merge the data with any personal data that may be stored with us, even if it would be possible. However, it is not clear to us which and to what extent service providers, regardless of whether you are logged into or registered with the social media platform, use web tracking tools and use your profile and behavioral data to analyze your habits, personal relationships, or preferences, and merge them with your existing Facebook profile. However, you should assume that service providers will combine and evaluate your visit to and interactions with our social media channels.

All information regarding the insights data can be found in the privacy policy of the respective service provider:

Facebook & Instagram Seiten-Insights: https://www.facebook.com/legal/terms/information_about_page_insights_data
LinkedIn Analysedaten: https://www.linkedin.com/help/linkedin/answer/a547077
Xing Profilbesucher-Analyse (nur Premium-Mitgliedschaft): im Nutzerkonto

Purposes of Processing: Provision of the social media channels, presentation of the company, execution of marketing activities, user engagement through communication on the social media platforms, processing and responding to inquiries and applications, interaction through direct messages/comments/recommendations/sharing and similar activities, recruitment, advertising activities, performance of pre-contractual measures, deletion of inappropriate content, analysis and statistical evaluation of user behavior based on insights data provided by the platform, optimization of our content and advertising activities.

All information about the purposes of processing by the service providers can be found in the privacy information of the respective service provider:

Facebook & Instagram: https://www.facebook.com/privacy/center/
LinkedIn: https://de.linkedin.com/legal/privacy-policy
Xing:https://privacy.xing.com/de/datenschutzerklaerunghttps://privacy.xing.com/de
Pinterest: https://policy.pinterest.com/de/privacy-policy

Legal basis: Article 6(1)(b) GDPR for pre-contractual measures in the context of the application process and to carry out pre-contractual measures, Article 6(1)(f) GDPR for communication via the social media platforms, for answering contact inquiries, for carrying out advertising activities, and for analyzing and statistically evaluating user behavior based on the insights data provided by the platform for the promotion of our company and with a profit-making intent, Article 9(2)(e) GDPR in case of transmitted health data.

All information regarding the legal basis for the processing by the service providers can be found in the privacy policy of the respective service provider.

Facebook & Instagram: https://www.facebook.com/privacy/center/
LinkedIn: https://de.linkedin.com/legal/privacy-policy
Xing:https://privacy.xing.com/de/datenschutzerklaerunghttps://privacy.xing.com/de,
Pinterest: https://policy.pinterest.com/de/privacy-policy

Recipient Categories: Within our company, access to personal data is granted to those individuals who are responsible for managing the social media pages, as well as to individuals for whom the data is relevant, e.g., in the recruitment process. We do not share or otherwise distribute the data to third parties unless you have consented to the data transfer or the transfer is required by law.

Partially, we rely on the support of external service providers to carry out the processing of personal data. These service providers act as processors on our behalf. According to Article 28 of the GDPR, processors are contractually bound to follow our instructions and are regularly monitored. A data processing agreement has been signed with all of them to ensure the protection of your personal data. If the service providers are not processors, they have been carefully selected and commissioned by us.

Partially, we rely on the support of external service providers to process personal data. These service providers act as processors for us. According to Article 28 of the GDPR, processors are contractually bound to follow our instructions and are regularly monitored. A data processing agreement has been concluded with all of them to ensure the protection of your personal data. If the service providers are not processors, they have been carefully selected and contracted by us.

Data sources: We process the personal data that you provide to us through the respective social media platform or that we receive from the respective social media provider.

Transfer to third countries: A transfer of personal data to countries outside the EU or the EEA by us only takes place if it is necessary for the operation of the social media channel or for communication with you, if it is legally required, if the user has given consent, or as part of data processing agreements. A transfer is only permitted in these cases if the European Commission has determined an adequate level of data protection for the affected third country or if suitable guarantees are in place and the data subject has enforceable rights and effective legal remedies available.

Information on data recipients, data transfers, data sources used by service providers, and in particular the merging of your personal data by these providers can be found in the privacy policy of the respective service provider:

Facebook & Instagram: https://www.facebook.com/privacy/center/
LinkedIn: https://de.linkedin.com/legal/privacy-policy
Xing:https://privacy.xing.com/de/datenschutzerklaerunghttps://privacy.xing.com/de,
Pinterest: https://policy.pinterest.com/de/privacy-policy

If personal data is transferred within the service provider’s corporate group, it may be transmitted to servers of the parent company in the USA and processed there. In cases where personal data is transferred to the USA, the service providers are certified under the EU-US Transatlantic Data Privacy Framework, https://www.dataprivacyframework.gov. The certification confirms an adequate level of data protection in accordance with the EU Commission’s adequacy decision.

Retention period: In principle, we delete personal data on social media platforms once the storage is no longer required. For personal data from communication, we assume that further storage on the social media platforms is not necessary when it can be inferred from the circumstances that the matter in question has been conclusively clarified or our legitimate interest in processing has ceased. Exceptions to the deletion obligation exist if legal retention obligations prevent deletion or if the storage remains necessary, e.g., for the enforcement and defense of legal claims.

Information on the management and deletion of processed data by the service providers can be found in the privacy policy of the respective service provider:

Facebook & Instagram: https://www.facebook.com/privacy/center/
LinkedIn: https://de.linkedin.com/legal/privacy-policy
Xing:https://privacy.xing.com/de/datenschutzerklaerunghttps://privacy.xing.com/de,
Pinterest: https://policy.pinterest.com/de/privacy-policy

i.Data Subject Rights

You have the right to access the personal data stored about you, as well as the right to correct incorrect data or to delete it, provided one of the reasons outlined in Article 17 of the GDPR applies, such as when the data is no longer needed for the intended purposes. You also have the right to restrict processing if one of the conditions in Article 18 of the GDPR applies, and in the cases of Article 20 of the GDPR, the right to data portability. According to Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing – including profiling – that has legal effects on you or similarly significantly affects you.

If you believe that the processing of your personal data violates data protection regulations, you have the right to file a complaint with a supervisory authority according to Article 77 of the GDPR. The complaint can be made to the supervisory authority in the member state where you reside or where the alleged violation occurred. In Baden-Württemberg, the responsible supervisory authority is the State Commissioner for Data Protection and Freedom of Information in Stuttgart.

Your Right to Object to Processing Based on Legitimate Interests

You have the right, under Article 21 of the GDPR, to object at any time to the processing of your personal data based on legitimate interests, as outlined in Article 6(1)(f) of the GDPR, for reasons related to your particular situation. We will no longer process your personal data unless there are demonstrably compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

You can exercise your rights as a data subject at any time both with us and with the respective service provider.

If you wish to exercise your rights with regard to us, you can reach us and our data protection officer using the contact details provided above.

We are obligated to forward your request to the relevant service providers. They will inform you and ensure that your rights can be enforced (including information obligations under Articles 12-13 GDPR, rights of the data subject under Articles 15-22 GDPR, and data security and reporting of data breaches under Articles 32-34 GDPR). We have no influence over how the service providers fulfill their obligations and implement decisions.

You can find the data protection officer of the respective service provider or a contact form to exercise your rights as a data subject in the privacy information provided by the respective service provider:

Facebook & Instagram: https://www.facebook.com/help/contact/540977946302970/
LinkedIn: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
Xing:https://www.xing.com/support/contact/security/data_protectionhttps://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen/auskunftsrechthttps://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen/recht-auf-loeschung
Pinterest: https://help.pinterest.com/de/contact unter “Datenschutz”