Data protection information for our Facebook fan page Insights.

OEKOBIT GmbH operates so-called fan pages on Facebook. In this context, Facebook Ireland Ltd (“Facebook”) provides us, as the Facebook fan page operator, with the so-called. “Facebook Insights” (“Insights”) are available to us. The Insights are different statistics. They provide us with information about the use of our Facebook fan page. Detailed information on the statistics can also be found at

In order to compile these statistics, various information provided by you, including personal data (e.g. your IP address), is processed by Facebook. The personal data is processed by Facebook and us as joint controllers within the meaning of Art. 26 DSGVO. In the following, we present the essential information of the agreement concluded between Facebook and us ( pursuant to Art. 26 DSGVO.


    1. Designation of the jointly responsible


Jointly responsible for the processing are

Facebook Ireland Ltd
4 Grand Canal Square
Dublin 2


Europa-Allee 57
D-54343 Föhren


    1. Responsibility with regard to the processing of Insights data


Facebook has assumed primary responsibility (assuming all obligations under the GDPR) for data processing. This means in particular:

    • Facebook assumes the necessary information obligations (e.g. Art. 13 DS-GVO)


    • Data subject rights can be asserted against Facebook (e.g. right to information or deletion, objection to data processing or revocation of any consent given; see also section “V. Data subject rights”)


    • Safeguarding the technical and organisational measures of data processing


Facebook provides comprehensive information with regard to data processing by Facebook at and further subpages (Art. 13 DS-GVO). We refer to the content provided by Facebook for your information within the scope of this privacy notice.

Notwithstanding Facebook’s agreed primary responsibility, you can of course also assert your rights under the GDPR directly against us. We will immediately forward this request to Facebook via a form provided for this purpose.


    1. Legal basis for processing


Facebook has set out its legal basis and purposes for processing at and at

Facebook Inc, the U.S. parent company of Facebook Ireland Ltd, is certified under the EU-U.S. Privacy Shield, providing a commitment to adhere to European data protection guidelines. More information on Facebook’s Privacy Shield status can be found here:

The transfer and further processing of users’ personal data to third countries, such as the USA, as well as the associated possible risks for users cannot be ruled out by us as the operator of the site.

The processing of your personal data by us is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f. DSGVO. We have a legitimate interest in being able to track user behaviour on our Facebook fan page. This consists of the effective information of our users, customers and interested parties and the communication with these persons. The processed statistics enable us in particular to record and evaluate the reach and effectiveness of our website, our marketing measures, reports, postings and our other activities. This enables us to analyse, optimise and economically operate our website and our services on an ongoing basis. We process the data for this purpose.


    1. Data processing on a Facebook fanpage


Facebook may process the following data in particular:

  • User interaction (click behaviour, posts, likes, viewing of videos, page views, etc.)
  • Cookies
  • Demographic characteristics (age, gender, state, etc.)
  • IP address
  • System and device information (e.g. browser type, operating system etc.)

How your data is processed when you visit our Facebook fan page depends on whether or not you have a Facebook account. If you have a Facebook account, Facebook can permanently assign the data to your account in order to learn more about you in this way.

Even if you do not have a Facebook account, Facebook may store your data. This can be done through the use of cookies. Cookies are mostly small text files that are stored on your respective device. Various information is written to this text file, which can be read out again at a later time. This allows Facebook to store and process information about you, even without you having a Facebook account. You can find more detailed information about Facebook’s cookies at

Facebook only provides us with anonymised statistics about the use of our fan page as part of the Insights usage. We can only see from the statistics how many users have carried out certain interactions. In contrast, we cannot see which user has carried out a particular action. We cannot draw any conclusions about a person by means of the statistics of the Insights data.


    1. Affected person’s rights


In principle, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right of rectification (Art. 16 DSGVO)
  • Right to object (Art. 21 DSGVO)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18f. GDPR)
  • Right to data portability (Art. 20 GDPR)

You have the right to revoke consent once given with effect for the future at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

You can assert these rights directly against Facebook or against us (see section “2. Responsibility with regard to the processing of Insights data”). Since only Facebook has full access to the user data, we recommend that you contact Facebook directly if you wish to make requests for information or other questions regarding your rights as a user (e.g. right to deletion). If you wish to assert your rights against us, please contact us at the email address, stating your specific request.