Social Media Privacy Policy by Katrin Neuffer

Data processing by social networks

I maintain publicly accessible profiles on social networks. The specific social networks I use are listed below. Social networks such as Facebook, Twitter, etc. can generally analyse your user behaviour in detail when you visit their website or a website featuring integrated social media content (e.g. ‘Like’ buttons or advertising banners). Visiting my social media profiles triggers numerous data processing operations relevant to data protection. Specifically:

​

If you are logged into your social media account and visit my social media presence, the operator of the social media portal can link this visit to your user account. However, your personal data may also be collected even if you are not logged in or do not have an account with the relevant social media portal. In this case, data is collected, for example, via cookies stored on your device or by recording your IP address.

 

Using the data collected in this way, the operators of social media platforms can create user profiles that record your preferences and interests. This enables them to display interest-based advertising to you both on and off the respective social media platform. If you have an account with the relevant social network, interest-based advertising may be displayed on all devices on which you are currently logged in or have previously been logged in.

​

Please also note that we are not able to track all data processing activities on social media platforms. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media platforms. For details, please refer to the terms of use and privacy policies of the respective social media platforms.

 

Legal basis

My social media accounts are intended to ensure the most comprehensive online presence possible. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. The analytics processes initiated by the social media platforms may be based on different legal grounds, which must be specified by the operators of those platforms (e.g. consent within the meaning of Article 6(1)(a) of the GDPR).

 

Data controller and exercising your rights

When you visit one of my social media pages (e.g. Facebook), I am jointly responsible with the operator of the social media platform for the data processing operations triggered by that visit. You may, in principle, exercise your rights (right of access, rectification, erasure, restriction of processing, data portability and the right to lodge a complaint) both against me and against the operator of the relevant social media platform (e.g. against Facebook).

​

Please note that, despite sharing responsibility with the social media platform operators, I do not have full control over the data processing operations carried out by the social media platforms. My options are largely determined by the corporate policy of the respective provider.

 

Retention period

Data collected directly by me via my social media presence will be deleted from my systems as soon as you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected. I have no influence over the retention period of your data stored by the operators of social networks for their own purposes. For further details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

​

Your rights

You have the right at any time to obtain, free of charge, information about the origin, recipients and purpose of your stored personal data. You also have the right to object, the right to data portability and the right to lodge a complaint with the relevant supervisory authority. Furthermore, you may request the rectification, restriction, erasure and, under certain circumstances, the restriction of the processing of your personal data.