Social Media Privacy Policy

I General
We maintain publicly accessible social media profiles. Whenever you visit these profiles, you trigger a multitude of data processing operations. Below, we give you an overview of which of your personal data is collected, used, and stored by us when you visit our profiles. Personal data is information that can be attributed to you as a specific person (e.g. name, age, address, photos, e-mail addresses, possibly also IP addresses). We furthermore inform you about your rights with regard to the processing of your personal data. You are not obliged to give us your personal data. However, this may be necessary for individual functions of our social media profiles. Unless you provide us with your personal data, these functions are not available to you, or only to a limited extent.

When you visit our profiles, your personal data is not only collected, used, and stored by us, but also by the operator of the respective social media network. This also happens if you do not have a profile on the respective social media platform yourself. In this case, we and the operator of the respective social media network are responsible for the data processing operations within the meaning of Art. 26 GDPR, provided that we actually make a joint decision with the operator of the social media network about data processing and we exert an influence on the data processing as well. As far as possible, we have concluded agreements on shared responsibility with the operators of the social media networks in accordance with Art. 26 GDPR.

The individual data processing operations and their scope differ depending on the operator of the respective social media network, and they are not necessarily transparent for us. For details about the collection and storage of your personal data as well as the type, scope, and purpose of their use by the operator of the respective social media network, please refer to the privacy policies of the respective operator:

• The privacy policy for the social media network Facebook, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, can be reviewed under https://www.facebook.com/about/privacy/update?ref=old_policy;
• The privacy policy for the social media network Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA, can be reviewed under https://help.instagram.com/155833707900388;

II. Information on the collection of personal data
1) Data controller in compliance with Article 4(7) GDPR:
AVA Velsen GmbH
Alte Grube Velsen 16
66127 Saarbrücken
+49 (0)6898/9460
+49 (0)6898/946111
info@ava-velsen.de

2) The data protection officer's contact details are:
SICON GmbH
Zeppelinstr. 4
66740 Saarlouis
Germany
Phone: +49(0)6831/ 22411
Fax: +49(0)6831/122370
datenschutz@sicon-it.de

3) Facebook data processing
On our Facebook fan page, you can use various fan page functions (e.g. Messenger, comment function, "Like button", "Subscribe button", etc.) to interact with our fan page. We use your personal data for the purpose of reacting to your interaction with our Facebook fan page (Art. 6(1) point (f) sentence 1GDPR). These can be: User name, profile picture, date of interaction, age, gender, language, relationship status, information about occupation and education, parental status, events, information you have saved about your interests and hobbies as well as other data visible to us or content from your comments or messages.

If you use Facebook functions to give us feedback (e.g. by liking posts or by subscribing to our fan page), we process your personal data on the basis of Art. 6(1) point (f) sentence 1 GDPR, insofar as the processing is necessary in order to safeguard our legitimate interests or the interests of third parties, and your interests, which require the protection of personal data, do not outweigh them.

Our legitimate interest is in particular in the interaction with our fan page visitors as well as our marketing measures and brand development.

4) Instagram data processing
You can interact with us via our Instagram profile (e.g. communicate publicly and privately, comment on posts, like posts, and follow us). Whenever you interact with our Instagram profile, we use your personal data (user name, profile picture, date and time of interaction, your message, as well as any other of your data visible to us or content from user comments or private messages) for the purpose of reacting to your interaction with our Instagram profile (Art. 6(1) point (f) sentence 1 GDPR), insofar as the processing is necessary in order to safeguard our legitimate interests or the interests of third parties, and your interests and fundamental freedoms, which require the protection of personal data, do not not outweigh them. Our legitimate interest is in particular in the interaction with visitors of our profile as well as our marketing measures and brand development.

5) Further data processing by Facebook and Instagram
If you are not registered with Facebook or Instagram, we do not receive any information from Facebook about your visit or use of our fan page. This also applies to any Facebook or Instagram users as long as they only visit our fan page to obtain information. If you follow our fan page as a fan or like it, Facebook will add your profile to the list of all fans and make it available to us. We can only see the public information on your profile. In your Facebook settings, you decide which personal data specifically you want to make public. The same applies if you follow our Instagram account. In this case, your profile will also be added to a list of all followers. You are the only one to decide which public information you want to share on your profile. When you visit or interact with our fan page or our Instagram account, we receive statistics from Facebook about our fans and followers.

For us, this data is anonymous. This can be for example: Age, gender, place of residence, country (depending on which information you have shared in your Facebook settings) as well as time of your visit, type, duration and frequency of interaction, page entry point or length of stay. We cannot link the statistical data with the profile data of our fans or followers. We use these statistics to safeguard our legitimate interests or those of third parties, because we want to make our offer more user friendly and tailored, and want to improve our marketing measures and brand development.

How Facebook and Instagram use your data from your visit for their own purposes, to what extent activities on the Facebook or Instagram page are attributed to individual users, how long Facebook stores this data and whether data from a visit to the Facebook or Instagram page is passed on to third parties, is not conclusively and clearly specified by Facebook or Instagram and is not known to us.

On our fan pages and Instagram profiles, we do not actively use cookies, pixels or similar technologies. Information on whether and - if any - what technologies are used can be found under Facebook's Cookie Policy https://www.facebook.com/policies/cookies/ and under Instagram's Cookie Policy https://help.instagram.com/1896641480634370?ref=ig.

Facebook Ltd. might potentially transfer the data collected about you in this context to countries outside the European Union.

The legal basis for the setting of cookies is your consent, which you give by using the website of the respective provider.

III. Your rights as the data subject
As a matter of principle, you can assert your rights both against us and against the operator of the respective social media network (e.g. Facebook).

Please note that despite the shared responsibility according to Art. 26 GDPR with the operators of social media networks, we do not have full influence on the data processing of the individual social media networks. The company policy of the respective provider has a significant impact on what options we have. If data subject rights were asserted, we could only forward these inquiries to the operator of the social media network.

• You have the right to receive information from us about the processing of your personal data within the scope of Art. 15 GDPR;
• You have the right - within the scope of Art. 16 GDPR - to request from us immediate correction of incorrect personal data concerning you and / or the completion of incomplete personal data;
• You have the right to request the immediate deletion of your personal data within the scope of Art. 17 GDPR;
• You have the right to request the restriction of any data processing concerning you within the scope of Art. 18 GDPR;
• You have the right - within the scope of Art. 20 GDPR - to receive the personal data concerning you that you have provided to us in a structured and machine-readable format and to transfer this data to another controller;
• You have the right to object to the processing of your personal data at any time within the scope of Art. 21 GDPR, for reasons that arise from your particular situation, provided that the processing is based on an overriding interest or your data is used for direct advertising;
• You have the right to withdraw your consent to data processing at any time, without this affecting the legality of the data processing carried out on the basis of the consent up to the time of withdrawal;
• You have the right to complain to a supervisory authority about our processing of your data.