Data Privacy – Instagram
INFORMATION ABOUT DATA PRIVACY
1) INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER
1.1 In the following, we will inform you about how we handle your personal data. In this context, personal data refers to all data through which you can be personally identified.
Please carefully consider the personal data you share with us via Instagram. Instagram is a part of the Meta company group and shares information with Meta as well as other Meta companies (https://www.facebook.com
We have no influence on the data collection and further processing carried out by Meta. Furthermore, it is not apparent to us to what extent, in which location, and for how long the data is stored by Meta, to what extent Meta fulfills existing deletion obligations, what evaluations and linkages are made with the data, and to whom the data is passed on. If you wish to avoid Meta processing personal data that you transmit to us, please contact us through alternative means. You can find our complete contact information in our Instagram imprint.
1.2 The controller for data processing within the meaning of the General Data Protection Regulation (GDPR) is Ilka Matthiessen, erbsünde, Karlsbader Str. 8, 80937 Munich, Germany, Tel .: 0049 – (0)89 121 33 176, Email: info@erbsuende.com, to the extent that we process the data transmitted to us by you via Instagram exclusively ourselves. To the extent that the data transmitted to us by you via Instagram is also or exclusively processed by Meta, the Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also the controller for data processing within the meaning of the General Data Protection Regulation (GDPR).
The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data Protection Officer
You can contact the Data Protection Officer of Meta through the provided online contact form at https://www.facebook.com
3) Processing of the data entered into the contact form
We collect personal data when you contact us, for example, through a contact form or messenger. The data that we collect when you contact us via the contact form can be found in the respective contact form itself. These data are stored and used solely for the purpose of responding to your inquiry or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request according to Art. 6(1)(f) of the General Data Protection Regulation (GDPR). 1 lit. f DSGVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 1 lit. b DSGVO. Your data will be deleted after the final processing of your inquiry, provided that there are no legal retention obligations. We consider processing to be completed when it can be inferred from the circumstances that the relevant matter has been conclusively resolved.
4) Online-Marketing
Use of affiliate programs
– Own affiliate program
In connection with the product presentations on our website, we operate our own affiliate program through which we provide interested third-party website operators with partner links to be placed on their websites, leading to our offers. Cookies are used for the affiliate program, which are generally set on the partner site after clicking on a corresponding partner link, and we are not responsible for the data protection aspects in this regard. Cookies are small text files that are stored on your device in order to track the origin of transactions (such as “sales leads”) that were generated through such links. In this process, we can, among other things, recognize that you have clicked on the partner link and were redirected to our website. This information is needed for the payment processing between us and the affiliate partners. If the information also includes personal data, the processing described is based on our legitimate financial interest in processing commission payments according to Art. 6 para. 1 lit. f GDPR. 1 lit. f DSGVO.
If you wish to block the evaluation of user behavior via cookies, you can adjust your browser settings to be notified when cookies are being set and decide whether to accept them individually, or you can exclude the acceptance of cookies for specific cases or in general.
5) Rights of the Data Subject
5.1 The applicable data protection law grants you comprehensive rights as a data subject in relation to the processing of your personal data by the controller. We would like to inform you about these data subject rights (rights to information and intervention) below:
- Right to information according to Art. 15 DSGVO;
- Right to rectification according to Art. 16 DSGVO;
- Right to erasure (Right to be forgotten) according to Art. 17 DSGVO;
- Right to restriction of processing according to Art. 18 DSGVO;
- Right to information according to Art. 19 DSGVO;
- Right to data portability according to Art. 20 DSGVO;
- Right to withdraw consent according to Art. 7 Abs. 3 DSGVO;
- Right to lodge a complaint according to Art. 77 DSGVO.
5.2 Right to object according to
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS IN THE COURSE OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS STILL PERMISSIBLE IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.
6) THE DURATION OF STORAGE OF PERSONAL DATA
The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing, and, if applicable, additional legal retention periods (such as commercial and tax retention periods).
When processing personal data based on explicit consent according to Art. 6 1 lit. a DSGVO the data will be stored as long as the data subject does not revoke their consent.
If there are statutory retention periods for data processed within the scope of legal or legal-like obligations based on Article 6 1 lit. b DSGVO, after the expiration of these retention periods, the data will be routinely deleted if they are no longer necessary for the fulfillment of the contract or for initiating a contract and/or if we do not have a legitimate interest in continuing to store them.
When processing personal data based on explicit consent according to Art. 6 1 lit. f DSGVO these data will be stored until the data subject exercises their right to object pursuant to Art. 21 Abs. 1 DSGVO unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing based on Article 6 1 lit. f DSGVO these data will be stored until the data subject exercises their right to object pursuant to Art. 21 Abs. Art. 21 Abs. 2 DSGVO
Unless otherwise specified in the other information provided in this statement regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.