The protection of your personal data is very important to us. Below you will find information on how your data is handled when you use our social media presences on social networks and platforms. Your data is processed in accordance with the statutory regulations.
Penta GmbH, Hans-Fischer-Straße 10-12, 80339 Munich, hereinafter: “we/us”) operates presences or “fan pages” on various social media platforms. For the processing of your personal data in connection with your visit to our presence or our “fan page” on the Meta and LinkedIn platforms, we are jointly responsible with the operators of the respective platform mentioned here under 1, provided that they provide us with aggregated information on visitors to our fan page or our presence (“Insights”). Detailed information on the scope of processing under joint responsibility in relation to the respective providers can be found in the second section of this data privacy statement.
The platform operators are for Facebook and Instagram: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour Dublin 2, a subsidiary of Meta Platforms, Inc., 1601 Willow Rd Menlo Park, CA 94025-1452, USA. The operator of the LinkedIn platform is: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W Maude Ave Sunnyvale, CA, 94085-2810 USA.
We have concluded an agreement with the operators in accordance with Art. 26 GDPR on joint responsibility for the processing of your personal data (Controller Addendum) regarding Facebook. This agreement sets out which data processing operations we or the respective operator are responsible for when you visit our fan page or our presence on the platform of the respective operator. You can view this agreement under the following link:
Facebook: https://www.facebook.com/legal/terms/page_controller_addendum
LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum
If your personal data is processed by one of the social media platform providers listed below, this processing is carried out under the platform operator’s own responsibility within the meaning of Art. 7 No. 4 GDPR. To assert your data subject rights, we would like to point out that these can be asserted most effectively against the respective providers. Only they have access to the data collected from you. Should you nevertheless require assistance, please do not hesitate to contact us at any time.
We are solely responsible for the processing of your personal data in the cases mentioned under 1.4. to 1.7, which is not carried out by the operators mentioned under 1.1.2.
If we pass on personal data to the providers of social media platforms, the latter are recipients of the data within the meaning of Art. 4 No. 9 GDPR. As personal data is transferred to countries outside the EU and the EEA (including the USA) when visiting and interacting with the social media platforms used by us, further protection mechanisms are required to ensure the level of data protection of the GDPR.
In cases in which providers process your personal data under their own responsibility (1.1.2.), we have no influence on the processing of this data by the provider and its handling of this data (at least after the data has been transmitted). For further information, please check the privacy policy of the respective provider and, if necessary, use the options for opting out / for personalization with regard to data processing by the provider:
When you access our Facebook fan page or our other social media presences, one or more cookies are set on your end device by the platform provider. Cookies are small text files that are either temporarily stored on your end device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.
Cookies have various functions. Numerous cookies are technically necessary as certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behavior or display advertising.
By interacting with our Facebook fan page or our other social media presences, information (e.g. your IP address) can be accessed or information (e.g. cookies) can be stored in your end devices. This access or storage may be associated with further processing of personal data within the meaning of the GDPR.
The activity or validity period of cookies can vary greatly, but you can delete them manually at any time using your web browser settings. If you have any technical questions about this, please contact the manufacturer of your web browser. Further information on the use of cookies and its legal basis can be found in the respective privacy policy of the provider. Links to the respective privacy policies can be found above under the item “Data transfer and recipients”. If you have any further questions about this, please contact the provider of the respective social media platform directly.
As a rule, personal data is processed on the company page for market research and advertising purposes of the social media platform provider. A cookie is set in your browser for this purpose, which enables the respective provider to recognize you when you visit a website. In addition, your interactions on the social media platform are extensively evaluated by the provider. Usage profiles can be created using the data collected. These are used to place advertisements within and outside the platform that are likely to correspond to your interests. Furthermore, data can also be stored in the usage profiles independently of the devices you use. This is regularly the case if you are a member of the respective platforms (Mega and LinkedIn) and are logged in to them. Further information on this can be found in the data privacy information of the respective provider.
When you visit or interact with our social media presence, we may receive personal data from you which, unlike in the cases mentioned in section 2 of this data privacy statement, we also process under our own responsibility in addition to the provider. This may be information that you actively provide (comments, likes, shares and information that you make publicly available, such as your profile picture or name).
Our access to the aforementioned data results from the operation of our social media presence; further processing of this data by us does not take place, except in the cases mentioned in this data privacy statement. We have a legitimate interest within the meaning of Art. 6 Para. 1 S. 1 lit. f GDPR in the operation of our social media presence and the associated processing of personal data that you actively publish or make available to us. Our legitimate interest lies in the advertising approach and in the provision of an effective communication and interaction opportunity with our company.
We ourselves collect personal data when you contact us, e.g. via a contact form or through a messenger service of the respective platform, such as Facebook Messenger. Which data is collected depends on your information and the contact data you provide or release. This data is stored by us for the purpose of processing the request and in the event of follow-up questions. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR and, if applicable, Art. 6 Para. 1 lit. b GDPR, if your request is aimed at concluding a contract. Your data will be deleted after your request has been processed, provided that there are no statutory retention obligations to the contrary. We assume that processing is complete when the circumstances indicate that the matter in question has been conclusively clarified.
1.6. Data processing for contract execution
If your contact via a social network or other platform is aimed at concluding a contract with us for the delivery of goods or the provision of services, we process your data to fulfill the contract or to carry out pre-contractual measures or to provide the desired services. The legal basis for the processing of your data in this case is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it is no longer required for the execution of the contract or it is established that the pre-contractual measures will not lead to a contract being concluded that corresponds to the purpose of the contact. Please note, however, that even after the conclusion of the contract, it may be necessary to store personal data of our contractual partners in order to comply with contractual or statutory obligations.
If you are asked by the respective providers of the platforms for consent to processing for a specific purpose, the legal basis for the processing is Art. 6 Para. 1 lit. a, Art. 7 GDPR. Consent given can be revoked at any time with effect for the future.
When you visit our Facebook fan page, personal data about you is processed by Facebook as the operator of the platform and by us as the operator of the fan page. Insofar as this data processing takes place in connection with the Insights functionality of Facebook (Meta Platforms Ireland Ltd. or Meta Platforms Inc.), we are jointly responsible for this with Facebook (Art. 26 Para. 1 GDPR).
Page Insights (https://www.facebook.com/business/a/page/page-insights) is a function provided by Facebook that allows the operator of a Facebook fan page (us) to receive summarized data about the interaction of visitors.
Page Insights can be based on personal data that is collected in connection with a visit or interaction by individuals on or with our page and in connection with provided content. Please note what personal data you share with us via Facebook. Your data can be processed for market research and advertising purposes, even if you are not logged in to Facebook or do not have a Facebook account. For example, user profiles can be created from the usage behavior and the resulting interests of users. The user profiles can in turn be used to place advertisements within and outside the platforms that are likely to correspond to the interests of the users. This data collection takes place via cookies that are stored on your end device. Furthermore, data that is independent of the devices used by the users can also be stored in the user profiles; in particular, if the users are members of the respective platforms and are logged in to them.
We only receive summarized (aggregated) data from Facebook, which does not allow any conclusions to be drawn about individual persons.
Your personal data is processed by us for advertising and marketing purposes. (e.g. increasing the reach and awareness of our fan page through target group-oriented design of posts, evaluation of the success of marketing campaigns, employee recruitment).
The legal basis for the processing of your personal data in relation to the Insights functionality is your consent given to Facebook or Meta in accordance with Art. 6 Para. 1 lit. a GDPR.
Please refer to Facebook’s privacy policy for information on the purposes that Facebook pursues with the processing of your personal data and on the legal bases for this data processing.
Please note that we have no influence on the data collection and further processing under the responsibility of Facebook. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by Facebook. Furthermore, we cannot make any statements about the extent to which Facebook complies with existing deletion obligations, which evaluations and links with the data are made by Facebook and to whom the data is passed on by Facebook.
Information on the processing of your personal data, which Facebook processes for its own purposes, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/
If you, as a visitor to the site, would like to exercise your rights (information, correction, deletion, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact both Facebook and us. You can independently adjust your advertising settings in your user account. To do this, click on the following link and log in:
https://www.facebook.com/settings?tab=ads or http://www.youronlinechoices.com
You can restrict the visibility of your Facebook account (also) to us via the Facebook settings.
For further details, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/
To contact Facebook’s Data Protection Officer, you can use the online contact form provided by Facebook under the following link https://www.facebook.com/help/contact/540977946302970.
When you visit our LinkedIn page, your personal data will be processed by LinkedIn as the platform operator and by us as the operator of our page within the platform. Insofar as this data processing takes place in connection with the insights functionality of LinkedIn (LinkedIn Ireland Unlimited Company or LinkedIn Corporation), we are jointly responsible with LinkedIn for this (Art. 26 Para. 1 GDPR).
LinkedIn Page Insights (https://legal.linkedin.com/pages-joint-controller-addendum) is a function provided by LinkedIn that allows the operator of a LinkedIn page (us) to obtain aggregated data about visitor interaction.
As part of the Page Insights function, LinkedIn evaluates your interaction with our LinkedIn page and also uses the personal information you provide (professional activity, industry, country, etc.). LinkedIn provides us with the evaluated data, but only in aggregated form (i.e., LinkedIn does not provide us with any specific information on individual users within the scope of this function, but only aggregated information). We use this aggregated data for the target group-oriented presentation of our LinkedIn page and generally for its optimization with regard to the above-mentioned advertising purposes.
We have a legitimate interest in these advertising purposes, and the processing of your data is based on Art. 6 Para. 1 lit. f GDPR.
Please refer to LinkedIn’s privacy policy for information on the purposes for which LinkedIn processes your personal data and the legal bases for this data processing.
Please note that we have no influence on the data collection and further processing under the responsibility of LinkedIn. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by LinkedIn. Furthermore, we cannot make any statements about the extent to which Instagram complies with existing deletion obligations, which evaluations and links are made with the data by LinkedIn and to whom the data is passed on by LinkedIn.
If you, as a visitor to the site, wish to exercise your rights (information, correction, deletion, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact both LinkedIn and us. You can also restrict the visibility of your LinkedIn account to us via the LinkedIn settings.
Further information on data processing by LinkedIn can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy
To contact the Data Protection Officer of LinkedIn, you can use the contact form under the link https://www.linkedin.com/help/linkedin/ask/TSO-DPO.
Hyperlinks [colloquially link, in German approximately: reference or link] represent a cross-reference in a document and correspond in principle to source references in a printed document; however, you can call up these cross-references – unlike in a book – by clicking on the reference. References in a web document like this one are typical. The references can link several documents and also websites of different providers with each other. In their entirety, these references reflect the World Wide Web (WWW).
A distinction is made between internal references and external references. Internal references link several text passages or documents under one domain, external references lead to domains, websites and servers of other providers.
Other data protection regulations may apply on other web servers. Whether there is a reference to an external website can be seen by taking a closer look at the link. You can have the destination of the reference displayed by your browser. Please refer to the instructions of your browser for information on this; in many web browsers it is sufficient to move the mouse over the link without clicking it to display it. With us, external links are marked by an additional symbol immediately after the link.
In the following, you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller. In cases in which we process your data as the controller jointly with another controller as indicated, you can assert your data subject rights both against us and against the other controller. However, in order to speed up the processing of your request, we recommend that you contact us if the focus of the data processing is on our side.
You have the right
to request information about your personal data processed by us; Art. 15 GDPR. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to
rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data, insofar as these were not collected by us, as well as the existence of automated decision-making, including profiling and, where applicable, meaningful information on their details.
to demand the immediate correction of incorrect or completion of your personal data stored by us; Art. 16 GDPR.
to demand the deletion of your personal data stored by us, unless the processing is necessary for
the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims
is required; Art. 17 GDPR.
to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have lodged an objection to the processing pursuant to Art. 21 GDPR; Art. 18 GDPR.
to receive your personal data that you have provided to us in a structured, common and machine-readable
format or to request the transfer to another controller; Art. 20 GDPR.
to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office indicated above or that of your usual place of residence or workplace.
to revoke consent once granted to the processing of data at any time with effect for the future; Art. 7 Para. 3 GDPR. In the event of revocation, we will immediately delete the data concerned, unless further processing cannot be based on a legal basis for processing without consent. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of your personal data, provided that this is done for reasons arising from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement of special reasons.
If you would like to make use of your right of revocation or objection, an e-mail to [email protected] is sufficient.
The personal data collected by us will be deleted from our system if they are no longer required for the purposes specified at the time of collection or if you have made use of your right of revocation or objection. However, after 6 months at the latest. Legal retention periods remain unaffected. We have no influence on the storage period of your data, which is stored by the providers of social media for their own purposes. For details, please contact them directly.
