Data Protection – Social Media
Who We Are
Stadtmarketing Holzminden GmbH
Obere Straße 45, 37603 Holzminden, Germany
Telephone: +49 5531/990 5320
kontakt@sensoria-holzminden.de
The address of our website is: https://sensoria-holzminden.de.
Data Processing Through Social Networks
We maintain publicly accessible profiles on social networks. The specific social networks we use are listed further below.
Social networks such as Facebook, X, etc., are generally able to analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media presences, numerous data protection–relevant processing operations are triggered. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not hold an account with the respective social media portal. In such cases, data collection takes place, for example, via cookies stored on your device or by recording your IP address.
With the help of such collected data, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising may be displayed to you within and outside the respective social media presence. If you hold an account with the respective social network, this interest-based advertising can be displayed on all devices on which you are or were logged in.
Please also note that we cannot trace all processing operations on social media portals. Depending on the provider, further processing operations may be carried out by the operators of the social media portal. Details can be found in the terms of use and privacy policies of the respective social media portals.
Legal Basis
Our social media presences are intended to ensure the widest possible visibility on the internet. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on differing legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Article 6(1)(a) GDPR).
Controller and Exercise of Rights
When you visit one of our social media presences (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by this visit. You may, in principle, exercise your rights (access, rectification, erasure, restriction of processing, data portability, and complaint) both vis-à-vis ourselves and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis Facebook).
Please note that, despite the joint responsibility with the social media portal operators, we do not have full influence over the data processing operations of the social media portals. Our possibilities are determined primarily by the corporate policies of the respective provider.
Storage Period
The data we directly collect via the social media presence will be deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – in particular, retention periods – remain unaffected.
We have no influence over the storage duration of your data as retained by the operators of the social networks for their own purposes. For details, please consult the operators of the social networks directly (e.g. in their privacy policies, see below).
Your Rights
You have the right, at any time, to receive free information regarding the origin, recipients, and purpose of your stored personal data. You are also entitled to the rights of objection, data portability, and complaint to the competent supervisory authority. Furthermore, you may request the rectification, blocking, erasure, and, under certain circumstances, the restriction of processing of your personal data.
Social Networks in Detail
We maintain a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter “Meta”). According to Meta, the collected data are also transferred to the USA and other third countries.
We have entered into an agreement with Meta regarding joint processing (Controller Addendum). This agreement specifies which data processing operations are our responsibility and which are Meta’s responsibility when you visit our Facebook Page. You may view this agreement at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
You can independently adjust your advertising settings in your user account. To do so, click the following link and sign in to your account:
https://www.facebook.com/settings?tab=ads
The transfer of data to the USA is based on the Standard Contractual Clauses of the European Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum
and
https://de-de.facebook.com/help/566994660333381
Further details can be found in Facebook’s Privacy Policy:
https://www.facebook.com/about/privacy/
The company is certified under the “EU–US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Any company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/4452
We maintain a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
The transfer of data to the USA is based on the Standard Contractual Clauses of the European Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum
and
https://de-de.facebook.com/help/566994660333381
Details regarding the handling of your personal data can be found in Instagram’s Privacy Policy:
https://privacycenter.instagram.com/policy/
The company is certified under the “EU–US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Any company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/445
Last updated: 24/09/04