Data protection information for our Facebook fan page Insights.
OEKOBIT GmbH operates so-called fan pages on Facebook. In this context, Facebook Ireland Ltd (“Facebook”) provides us, as the Facebook fan page operator, with the so-called. “Facebook Insights” (“Insights”) are available to us. The Insights are different statistics. They provide us with information about the use of our Facebook fan page. Detailed information on the statistics can also be found at https://www.facebook.com/business/a/page/page-insights.
In order to compile these statistics, various information provided by you, including personal data (e.g. your IP address), is processed by Facebook. The personal data is processed by Facebook and us as joint controllers within the meaning of Art. 26 DSGVO. In the following, we present the essential information of the agreement concluded between Facebook and us (https://www.facebook.com/legal/terms/page_controller_addendum) pursuant to Art. 26 DSGVO.
- Designation of the jointly responsible
Jointly responsible for the processing are
Facebook Ireland Ltd
4 Grand Canal Square
- Responsibility with regard to the processing of Insights data
Facebook has assumed primary responsibility (assuming all obligations under the GDPR) for data processing. This means in particular:
- Facebook assumes the necessary information obligations (e.g. Art. 13 DS-GVO)
- Data subject rights can be asserted against Facebook (e.g. right to information or deletion, objection to data processing or revocation of any consent given; see also section “V. Data subject rights”)
- Safeguarding the technical and organisational measures of data processing
Facebook provides comprehensive information with regard to data processing by Facebook at www.facebook.com and further subpages (Art. 13 DS-GVO). We refer to the content provided by Facebook for your information within the scope of this privacy notice.
Notwithstanding Facebook’s agreed primary responsibility, you can of course also assert your rights under the GDPR directly against us. We will immediately forward this request to Facebook via a form provided for this purpose.
- Legal basis for processing
Facebook has set out its legal basis and purposes for processing at https://www.facebook.com/about/privacy/legal_bases and at https://de-de.facebook.com/policy.php.
Facebook Inc, the U.S. parent company of Facebook Ireland Ltd, is certified under the EU-U.S. Privacy Shield, providing a commitment to adhere to European data protection guidelines. More information on Facebook’s Privacy Shield status can be found here: https://www.facebook.com/about/privacyshield.
The transfer and further processing of users’ personal data to third countries, such as the USA, as well as the associated possible risks for users cannot be ruled out by us as the operator of the site.
The processing of your personal data by us is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f. DSGVO. We have a legitimate interest in being able to track user behaviour on our Facebook fan page. This consists of the effective information of our users, customers and interested parties and the communication with these persons. The processed statistics enable us in particular to record and evaluate the reach and effectiveness of our website, our marketing measures, reports, postings and our other activities. This enables us to analyse, optimise and economically operate our website and our services on an ongoing basis. We process the data for this purpose.
- Data processing on a Facebook fanpage
Facebook may process the following data in particular:
- User interaction (click behaviour, posts, likes, viewing of videos, page views, etc.)
- Demographic characteristics (age, gender, state, etc.)
- IP address
- System and device information (e.g. browser type, operating system etc.)
How your data is processed when you visit our Facebook fan page depends on whether or not you have a Facebook account. If you have a Facebook account, Facebook can permanently assign the data to your account in order to learn more about you in this way.
Facebook only provides us with anonymised statistics about the use of our fan page as part of the Insights usage. We can only see from the statistics how many users have carried out certain interactions. In contrast, we cannot see which user has carried out a particular action. We cannot draw any conclusions about a person by means of the statistics of the Insights data.
- Affected person’s rights
In principle, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right of rectification (Art. 16 DSGVO)
- Right to object (Art. 21 DSGVO)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18f. GDPR)
- Right to data portability (Art. 20 GDPR)
You have the right to revoke consent once given with effect for the future at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
You can assert these rights directly against Facebook or against us (see section “2. Responsibility with regard to the processing of Insights data”). Since only Facebook has full access to the user data, we recommend that you contact Facebook directly if you wish to make requests for information or other questions regarding your rights as a user (e.g. right to deletion). If you wish to assert your rights against us, please contact us at the email address email@example.com, stating your specific request.