PRIVACY STATEMENT

INTRODUCTION

We, Halfar System GmbH, as the operator of the online offer, are the responsible party for the processing of the personal data of the users of the online offer. Our contact details can be found in the imprint of the online offer, the contact persons for questions regarding the processing of personal data are named directly in this privacy statement. 

We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of this privacy statement and the applicable data protection regulations, in particular the European Data Protection Regulation (GDPR) and the national data protection regulations. 

With this privacy statement, we would like to inform you about the extent to which and the purpose for which personal data is processed in connection with the use of the online offer. 

Personal data

Personal data is information about an identified or identifiable natural person. This includes all information about your identity, such as your name, your e-mail address or your postal address. Information that cannot be associated with your identity (such as statistical data, for example on the number of users of the online service) is not considered personal information.

In principle, you can use our online offer without disclosing your identity and without providing personal data. We will then only collect general information about your visit to our online offer. However, for some of the services offered, personal data will be collected from you. This data will then only be processed by us for the purpose of using this online service, in particular for providing the requested information. When collecting personal data, only the data that is absolutely necessary must be provided. In addition, further information may be possible, in which case it is voluntary. We indicate in each case whether the information is mandatory or voluntary. We then provide information on the specific details in the corresponding section of this privacy statement.

No automated decision-making based on your personal data takes place in connection with the use of our online services.

Processing personal data

We store the information provided by you on protected dedicated servers located within the European Union. Technical and organisational measures are taken to protect such servers against loss, destruction, access, modification, or dissemination of your data by unauthorized persons.
Access to your data will be permitted only to a limited number of persons in charge of the technical, commercial, or editorial support of the servers. Notwithstanding regular controls, full protection against all risks cannot be provided.

Your personal data is transmitted over the Internet in encrypted form. We use TLS (Transport Layer Security) encryption for transmission of data. 

Disclosure of personal data to third parties

As a rule, we use your personal information exclusively for providing the services that you have requested from us. Insofar as we use external service providers in performing the service requested, such external service providers will also access the data exclusively for the purpose of performing the service. By taking the necessary technical and organisational measures we ensure compliance with data protection policies and we demand the same of our external partners.

Moreover, we will not disclose the data to any third parties, including without limitation for advertising purposes, without your express consent. We will disclose your personal data only if you have given your consent to disclosure of the data or insofar as we are entitled or obligated to do so under legal provisions and/or administrative or judicial orders. This may include, without being limited to, giving information for purposes of criminal prosecution, in order to avert danger, or in order to enforce intellectual property rights.

If we transfer your personal data ourselves or through service providers to countries outside the European Union, we comply with the special provisions of Article 44 et seq. of the GDPR for this purpose and also oblige our service providers to comply with these regulations. We will therefore only transfer your data to countries outside the European Union subject to the level of protection guaranteed by the GDPR. This level of protection is ensured in particular by an adequacy decision of the EU Commission or by appropriate safeguards pursuant to Article 46 of the GDPR.

Legal basis of data processing

Insofar as we obtain your consent to processing your personal data, Article 6(1)(a) of the GDPR constitutes the legal basis for such data processing.

Insofar as we process your personal data because processing is necessary for the performance of a contract or is necessary under a quasi-contractual relationship with you, the lawfulness of data processing is based on Article 6(1)(b) of the GDPR.

Insofar as we process your personal data because processing is necessary for compliance with a legal obligation, the lawfulness of data processing is based on Article 6(1)(c) of the GDPR.

Furthermore, Article 6(1)(f) of the GDPR may constitute the legal basis for data processing, if processing of your personal data is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by your interests or your fundamental rights and freedoms which require protection of personal data.

Throughout this Privacy Statement, we refer to the legal basis on which we process your personal data.

Deletion of data and duration of storage

We invariably delete or block any personal data provided by you as soon as the purpose of storage of such data has ceased to apply. However, we may continue to store your personal data beyond that, if such storage is governed by legal provisions to which we are subject, including without limitation the legal obligation to retain business records and documentation. In such a case, we will delete or block the personal data after the prescribed period of time has expired.

Use of our online offering

Informationen relating to your computer

Each time you access our online offer, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request of your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this request. We also collect product and version information about the browser used and the computer's operating system. We also record the website from which the online offer was accessed. The IP address of your computer is anonymised immediately after collection by shortening, stored for the time of use of the online offer and then deleted. The remaining data is stored for a limited period of time. 

We use this data for the operation of the online offer, in particular to detect and eliminate errors, to determine the utilisation of the online offer and to make adjustments or improvements. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f) GDPR, which is the legal basis for this processing.

Use of Cookies

Cookies are used for our online offer - as on many websites. Cookies are small text files that are stored on your computer and save certain settings as well as data for exchange with our online offer via your browser. A cookie usually contains the name of the domain from which the cookie file was sent, information about the age of the cookie and an alphanumeric identifier. 

Cookies enable us to recognise your computer and to make any pre-settings and preferences immediately available. The cookies we use are - as far as possible - so-called session cookies, which are automatically deleted at the end of the browser session. Occasionally, cookies with a longer storage period can also be used so that your settings and preferences can also be taken into account the next time you visit our online services. 

Most browsers are set to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser to notify you as soon as cookies are sent. It is also possible to manually delete cookies that have already been saved via the browser settings. Please note that you may only be able to use our online offer to a limited extent or not at all if you reject the storage of cookies or delete necessary cookies. 

If cookies are not necessary for our online offer, we ask you for your consent to the use of cookies when you access the online offer for the first time. With regard to the non-essential cookies of third-party providers, you will find a more detailed description of the services of these third-party providers used by us below. The legal basis for the associated data processing, including any data transfer, is in each case your consent within the meaning of Art. 6 (1) a) GDPR. Once given, consent can be revoked at any time with effect for the future, in particular by changing the selected settings. The legal basis for the use of necessary cookies is our legitimate interest in the proper provision of our online offer within the meaning of Art. 6 para. 1 lit. f) GDPR as well as - insofar as contracts are concluded or fulfilled via our online offer - the fulfilment of the contract within the meaning of Art. 6 para. 1 lit. b) GDPR.

Registration

You can register to use our online services. To do so, you must provide the data requested as part of the registration process, for example name, address and email address. We also record the date and time of registration. The advantage of this is that you do not have to re-enter this data each time you use or place an order. 
In the case of consent, the legal basis for processing the registration data is Art. 6 (1) a) GDPR. If you register with us for the purpose of fulfilling or initiating a contract, the legal basis for processing the data is also Art. 6 para. 1 lit. b) GDPR. 
The information requested as a mandatory field during registration is required for the fulfilment or initiation of a contract with us for certain services. 
With the registration, a customer account is created for you. The data in the customer account will be stored by us for as long as an active customer relationship exists. You can request the deletion of your customer account at any time.

Integration of third-party services

For some functions in our online offer, we use services from third-party providers. The corresponding services are mainly optional functions that must be explicitly selected or used by you. We have concluded contractual agreements with the respective providers for the provision or integration of their services and, within the scope of our possibilities, we are committed to ensuring that the third-party providers also provide transparent information about the scope of the processing of personal data and comply with the provisions of data protection law.

Google Tag Manager

For our online offer, we use the Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter: "Google"). The Google Tag Manager is a tag management system (TMS) that can be used to manage tags, i.e. tracking codes and associated code fragments, on our website. Google services can be integrated into a website via the Google Tag Manager.

When using the Google Tag Manager, a connection to Google's servers is established. As a result, the IP address of the browser of the end device used by the visitor to these Internet pages is stored by Google. It cannot be ruled out that data will be transmitted to Google in the USA in this context and that US security authorities may be able to access the data under certain circumstances. However, cookies are not set in connection with the use of the Google Tag Manager.

More information about the Google Tag Manager and data processing by Google can be found here:

https://support.google.com/tagmanager/answer/6102821

https://www.google.com/policies/privacy/

Our legal basis for the use of the Google Tag Manager is our legitimate interest according to Art. 6(1) (f) of the GDPR. Our legitimate interest is the management of tracking codes in our online offer, which enable us to analyze the use of our online offer and to improve and personalize our services. 

Google Analytics

We use Google Analytics for statistical analysis. Google Analytics is a web analytics service provided by Google.

As part of Google Analytics, Google uses cookies, among other things, for the analyses. The type and scope of the use and analysis of cookies are specified by Google. The information generated by the cookies about your use of the online offer is transmitted to a Google server and stored there. It cannot be ruled out that data will be transmitted to the USA and that government agencies may be able to access this data. However, due to standardised IP anonymisation, your IP address will be shortened by Google beforehand on servers in the European Union.

On our behalf, Google will use this information for the purpose of evaluating your use of the online service, compiling reports on website activity and providing other services relating to website activity and internet usage to us as the operator of the online service. In addition, Google may use the data for its own purposes. Within the scope of these purposes, Google may, for example, create a profile of user behaviour or link the data with other data, for example with an existing Google account. We have no influence on these data processing operations. For more information, please refer to Google's data protection information, which is linked for you below.

We also use the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the following paragraph. You can find more information on the "demographic characteristics" function at Google at https://support.google.com/analytics/answer/12948931

You can prevent the collection of data generated by the cookie and related to your use of the website by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=en. For more information, please visit http://tools.google.com/dlpage/gaoptout?hl=en or http://www.google.com/intl/en/analytics/privacyoverview.html (general information on Google Analytics and data protection). We would like to point out that on our Internet pages Google Analytics has been extended by the code "anonymizeIp();" in order to anonymize the IP addresses, whereby the last octet is deleted.

Legal basis for the data processing is your consent according to Article 6(1)(a) of the GDPR.

LinkedIn Insight Tag We use the LinkedIn Insight Tag from LinkedIn Ireland Un-limited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn") in our online offering. This is a tool for campaign reporting and retargeting. The LinkedIn Insight Tag uses a JavaScript code to collect data on website visits such as the URL, referrer URL, IP address, device and browser characteristics and the timestamp. LinkedIn can use this data to associate your visit to our website with your LinkedIn user account, if you are registered there. We can use the information received for the targeted placement of adverts via LinkedIn. As part of conversion tracking, websites visited and actions performed are recorded after an advert has been viewed or clicked on. We do not receive any personal data from LinkedIn. LinkedIn provides aggregated audience insights about website visitors, which includes information about the website target group and ad performance. The data collected is pseudonymised by LinkedIn within 7 days. IP addresses are truncated or hashed for the cross-device use of functions. The pseudonymised data is deleted within 180 days. The legal basis for the use of the LinkedIn Insight Tag is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. LinkedIn members can control the use of personal data for advertising purposes in their account settings.

Hotjar

We also use Hotjar for statistical analysis. Hotjar is a web analytics service provided by Hotjar Ltd, Level 2, St Julians Business Centre 3, Elia Zammit Street, 3155 St Julians STJ, Malta ("Hotjar"). Hotjar uses cookies that enable an analysis of your use of the website. The information generated by the cookies about your use of this website is usually transmitted to and stored by Hotjar on servers in Ireland. Website visitors receive a unique user ID that can be assigned to them on recurring visits. IP addresses of visitors are suppressed before they are stored. The last octet of the IP addresses is set to 0, so that the full IP address is not recorded. The first three octets of the IP address are only used to determine the geographical location of the visitor. On behalf of the operator of this website, Hotjar will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

If you do not want Hotjar to collect data, you can disable it here: https://www.hotjar.com/legal/compliance/opt-out.

For more information, please visit https://www.hotjar.com/legal/policies/privacy or https://www.hotjar.com/legal/compliance/gdpr-commitment (general information about Hotjar and data protection).

The legal basis for data processing in this case is your consent in accordance with Art. 6(1)(a) of the GDPR.

SalesViewer Für unser Online-Angebot nutzen wir das Tool „SalesViewer“ der SalesViewer GmbH, Huestr. 30, 44787 Bochum. Beim Einsatz von SalesViewer wird ein javascript-basierter Code einge-setzt, der zur Erhebung unternehmensbezogener Daten und der entsprechenden Nutzung dient. Die mit dem Tool SalesViewer erhobenen Daten werden über eine nicht rückrechenbare Einwegfunktion (sog. Hashing) verschlüsselt. Die Daten werden unmittelbar pseudonymisiert und nicht dazu benutzt, den Besucher dieser Webseite persönlich zu identifizieren. Die so er-haltenen Informationen werden zu Marketing-, Marktforschungs- und Optimierungszwecken verarbeitet. Die Rechtsgrundlage für die Datenverarbeitung ist unser berechtigtes Interesse gem. Art. 6 Abs. 1 lit. f) DSGVO an den genannten Zwecken. Der Datenverarbeitung durch das Tool SalesViewer kann jederzeit mit Wirkung für die Zukunft widersprochen werden, indem Sie diesen Link https://www.salesviewer.com/opt-out ankli-cken, um die Erfas-sung durch das Tool SalesViewer innerhalb dieser Webseite zukünftig zu verhindern. Dabei wird ein Opt-out-Cookie für diese Webseite auf Ihrem Gerät abgelegt. Lö-schen Sie Ihre Cookies in diesem Browser, müssen Sie diesen Link erneut anklicken.

Retargeting and remarketing

Retargeting and remarketing are technologies which allow displaying customised advertising to visitors of a certain website even after they have left that website. For this purpose, a service provider needs to recognise Internet users beyond the scope of its own website, using cookies created by the service provider. In addition, the user’s previous usage behaviour is taken into consideration. For example, if a user looks at certain products, these or similar products may later be displayed as advertisements on other websites. This is personalised advertising which is customised to the requirements of the relevant user. Personalised advertising does not require identification of the user beyond such recognition. Therefore, we do not combine data used for retargeting and/or remarketing with other data.

We use such technologies to place advertisements on the Internet. We use the services of third party service providers for placement of advertisements. Among other things, we use Google services which allow the automatic display of products that may be interesting for Internet users. This function is implemented by cookies. For further information on this technology please refer to Google’s privacy policies at https://policies.google.com/privacy?hl=de. Installation of cookies for Google Remarketing and Google AdWords Conversion Tracking can be prevented by settings in the user’s web browser software, by going to http://www.google.com/policies/privacy/ads/ and changing the relevant settings. Regardless of the above options to prevent data processing by means of cookies in connection with Google Remarketing and Google AdWords Conversion Tracking, the use of corresponding cookies or these services by us is subject to your express consent.

The legal basis for data processing is your consent in accordance with Art. 6(1)(a) of the GDPR.

Use of YouTube

YouTube videos are integrated in our online offer, for the playback of which we use a plugin of the YouTube service operated by Google (hereinafter: "YouTube"). The operator of the service is Google.

We use the YouTube service in extended data protection mode in order to protect your privacy as much as possible. If you call up a web page of our online offer on which a YouTube video is embedded, Google initially only receives the information necessary for the integration and no cookies are set for usage analysis. Only when you play the embedded video does Google receive further information; Google may also set cookies to analyse your user behaviour. When you play the video, Google's YouTube servers are informed, for example, which page of our online offering you are using to play the video. As part of the technical process, personal data may be stored on Google servers in the USA. In this context, it cannot be ruled out that US security authorities may access this data.

If you are logged into your Google account, you enable Google or YouTube to assign your surfing behaviour directly to your personal Google profile. We therefore recommend that you only play embedded YouTube videos if you agree to the associated data processing by Google. You can prevent the allocation of data to your Google profile by logging out of your YouTube account. Further information on the handling of user data can be found in Google's privacy statement at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube. 

We use YouTube so that we can show you videos and thus better inform you about us and our services. The legal basis for the integration of the videos is our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR; however, the playing of the videos and the associated further data processing only take place on the basis of your consent within the meaning of Art. 6 para. 1 lit. a) GDPR.

Customer Account

You can create a customer account for our online offer on a voluntary basis. In the customer account, all information about you and your use of the various offers is managed centrally. In this way, you have the possibility to manage, update and, if necessary, also delete all data. The legal basis for the processing of the data for registration is, in the case of consent, Art. 6 (1)(a) of the GDPR. If you register with us for the purpose of fulfilling or initiating a contract, the legal basis for processing the data is also Art. 6 (1)(b) of the GDPR.

Registration for the customer account

You can register online for the customer account. To create your customer account, we collect the following information: title, first name and last name, e-mail address, company name, VAT identification number (only for Germany and EU), full street address, postal code, city, country, telephone number and a password. If no password is requested or entered during registration, we will automatically assign an initial password that you can change later. Further information can be added on a voluntary basis. We reserve the right to offer other registration options in addition to registration via the online offer, for which the regulations then apply accordingly.

In order to use the full range of functions of the customer account, it may be necessary to verify the e-mail address provided during registration. For this purpose, we will send a confirmation link to the e-mail address provided, which must be called up by you. This procedure serves on the one hand to ensure the security of your data, and on the other hand to ensure communication regarding services, delivery status or payment situation to a valid e-mail address.

Collection of data via the customer account

In the customer account, all data relating to the use of the online offers is stored, insofar as you log in with your customer account in each case. This includes, in particular, personal data (name, age, addresses, delivery and payment information), vouchers, wish lists, purchase history, communication history, search and navigation behavior, consents to individual services (such as newsletters), discount affinity and information provided explicitly or implicitly by the customer about areas of interest. We can form segments from this data and assign customers to these segments. Membership in such segments is also stored in the customer account. Location-related data such as your delivery addresses or your location are stored - insofar as you have given your consent for this.

Your current location may be used to provide you with location-based offers. If you do not want the data to be stored in your customer account in individual cases, you can use the respective offers without using your customer account. If you want to stop the storage of data in the customer account altogether, you can have your customer account deleted.

Use of the data from the customer account

We use the stored data to conduct the joint business relationship and - if you have given your consent - to provide you with interesting and relevant offers via all communication channels used by the customer. On the basis of the stored data, we try to determine which offers are relevant to you.

We will contact you within the scope of the business relationship via the contact data provided if you make use of individual services. For example, you will automatically receive order notifications or information about the delivery status; we will inform you according to your selected preferences. Contact can be established via e-mail, messages on your smartphone or other digital communication channels. In addition, you can select optional communication channels and occasions; these include, in particular, special newsletters and app messages.

Storage period and deletion

The data accrued when using the customer account is generally stored for the duration of the existence of the customer account, but can also be deleted prematurely upon request. A large part of the data can be viewed directly online and - with the exception of the e-mail address - changed or deleted. You can delete your customer account at any time by informing us of your wish for deletion, for example also via the general contact form. If you delete your data immediately, it may not be possible to restore it later if you register again.

Applicant portal

You can apply for a job with us via the applicant portal and submit all the necessary information and documents. Use of the applicant portal is voluntary; you can also send us your application by other means, for example by e-mail or post. 

When we receive an application via the applicant portal, your documents will be forwarded electronically to the relevant staff at our company. If you have applied for an advertised position, your documents will be automatically deleted six months after the end of the recruitment process, provided that no other legitimate interests prevent deletion. Such legitimate interests in this sense are, for example, obligations to provide evidence in proceedings under the General Equal Treatment Act (AGG). In the case of an application without reference to an advertised position (unsolicited application), the application will be kept as long as there is a possibility that the application may be of interest. You have the option of requesting the deletion of your application at any time, even before the expiry of the retention periods provided for. In the event of a successful application, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the legal requirements. In all other cases, the legal basis for the storage of your applicant data is your consent in accordance with Art. 6 Para. 1 lit. a) GDPR. 

Communication with us

You can contact us in various ways, for example by using our contact form.

Contact form

If you wish to use the contact form in our online offer, we collect the personal data that you provide in the contact form, in particular name and email address. We also store the IP address and the date and time of the request. We process the data transmitted via the contact form exclusively for the purpose of being able to answer your enquiry or your request.

You can decide for yourself what information you send us via the contact form. The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) a) GDPR. If you use the contact form to initiate or execute a contractual relationship, the legal basis is Art. 6 para. 1 lit. b) GDPR.

After we have processed the matter, the data will initially be stored in case of any queries. A deletion of the data can be requested at any time, otherwise the data will be deleted after the matter has been completely dealt with; statutory retention obligations remain unaffected in each case.

Newsletter

When you register for our newsletter, your e-mail address will be used for our own advertising purposes until you unsubscribe. For this purpose, you will receive regular information by e-mail on current topics as well as e-mails for special occasions, for example special promotions. The e-mails may be personalised and individualised based on the information we have about you.

To register for our newsletter, unless you have given us your consent in writing, we use the so-called double opt-in procedure, i.e. we will only send you a newsletter by e-mail if you have previously expressly confirmed that you want us to activate the newsletter dispatch. We will then send you a notification e-mail and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in this e-mail. 

The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) a) GDPR if you have expressly registered for the newsletter. Within the scope of the legal requirements, it may also be possible that you receive our newsletter from us without express consent because you have ordered goods or services from us, we have received your email address in this context and you have not objected to receiving information by email. In this case, the legal basis is our legitimate interest in sending direct advertising in accordance with Art. 6 (1) f) GDPR. 

If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future or object to further receipt of the newsletter without incurring any costs other than the transmission costs according to the basic rates. Simply use the unsubscribe link contained in every newsletter or send a message to us or our data protection officer.

Comments

You have the possibility to comment on our articles in our online offer. To do so, you must state your name, although you can also use a pseudonym. You must also state your e-mail address. The specification of your e-mail address is necessary so that we can contact you in the event of objections to your comments and ask you to comment on them; we also store the IP address. Without this information, you will not be able to post comments. However, only the name or pseudonym you have selected will be displayed when the comment is published. The legal basis for the processing of your data is your consent according to Art. 6 (1) a) GDPR. 


Social Media

In our online offer you will find links to the social networks Facebook and Instagram, LinkedIn, the video platform YouTube, the career network Xing and the employer rating platform kununu. You can recognise the links by the respective logo of the providers.

Clicking on the links opens the corresponding social media pages, for which this privacy statement does not apply. For details of the provisions applicable there, please refer to the corresponding privacy statements of the individual providers; you will find these at:

Facebook: http://www.facebook.com/policy.php

Instagram: https://help.instagram.com/155833707900388

Xing: https://privacy.xing.com/en

kununu: https://privacy.xing.com/en

LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=en_EN

YouTube: https://policies.google.com/privacy?hl=en

No personal information is transmitted to the respective providers before the corresponding links are called up. Your access to the linked page is also the basis for the data processing by the respective providers.

For our use of the social media channels Facebook, Instagram and our YouTube channel, the following information on the associated processing of your personal data also applies.

Facebook fan page

In addition to our own online offer, we also operate a fan page on the social network Facebook. Via the fan page, we provide information about our activities and offer a channel for communication. The social network Facebook is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: "Meta").

Delimitation of responsibility

Within the scope of the possibilities offered by Facebook, we try to ensure the protection of your privacy and your private data. Insofar as your personal data is processed by us in connection with your visit to the Fanpage, the explanations in this privacy statement apply without restriction. Due to the integration of the Fanpage into the Facebook offer, it should also be noted that personal data is processed by Meta at the same time. We have no influence on the data processing by Meta; in particular, Meta does not act as a processor for us under our responsibility. Meta's data processing is governed - at least according to Meta - by Meta's guidelines, which are available at https://de-de.facebook.com/policy.php.

In terms of data protection law, it can be assumed that Meta and we are jointly responsible for the operation of the fan page and the evaluation of user data when visiting the fan page. In accordance with data protection requirements, we have reached an agreement with Meta on the demarcation of responsibility.

Facebook Insights

Meta offers the operators of Facebook fan pages the possibility of obtaining an overview of the use of the fan page and its users via the Page Insights functions. Page Insights can be used to call up and evaluate statistical data in particular. We use the data from Page Insights to make the Fanpage as attractive and efficient as possible. For this purpose, Meta provides us with data that Meta has generated itself. Meta provides further information on how the Page Insights function works and who is responsible for it at https://www.facebook.com/legal/terms/page_controller_addendum.

Facebook Messenger

Meta offers users who are registered with Facebook the possibility of direct communication via Facebook Messenger. If you contact us via Messenger, the data transmitted will be stored and used by us exclusively for the purpose of responding to your enquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 (1) a) GDPR and our legitimate interest within the meaning of Art. 6 (1) f) GDPR. Our legitimate interest lies in the recording and processing of customer enquiries, in the evaluation of customer enquiries and in the control of misuse. 
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. You have the option to revoke your consent to the processing of personal data at any time; in this case, the data will be deleted by us immediately if there is no basis for further storage. 

Further information about Facebook

If you have any questions about our use of personal data in connection with the use of the fan page on Facebook, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy statement. Insofar as you have questions regarding data protection on Facebook, we would like to ask you to contact Meta directly. General information on the safe use of social networks is also provided by the Federal Office for Information Security (BSI) on its website under https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html. 

Instagram account

In addition to our own online offering, we also operate an account on the social network Instagram. Via the Instagram account, we provide information about our activities and offer a channel for communication. The social network Instagram is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: "Meta").


Responsibility for data protection

Within the scope of the possibilities on Instagram, we try to ensure the protection of your privacy and your private data. Insofar as your personal data is processed by us in connection with your visit to the Instagram account, the explanations in this privacy statement apply without restriction. Due to the integration of the account into the Meta offer, it should also be noted that personal data is processed by Meta at the same time. We have no influence on the data processing by Meta; in particular, Meta does not act as a processor for us under our responsibility. Meta's data processing is governed - at least according to Meta - by Meta's guidelines, which can be found at https://privacycenter.instagram.com/policy/.

In terms of data protection law, two separate responsibilities of Meta and us are to be assumed for the operation of the account on Instagram and the associated communication and evaluation options. Insofar as your personal data is processed by us in connection with your visit to our Instagram account and we alone decide on the purposes and means of this data processing, we are responsible for this data processing. This is usually the case if you communicate directly with us via the "Instagram Direct Messaging" function and transmit your data to us in the process. Insofar as your personal data is processed by Meta and Meta alone decides on the purposes and means of the data processing, Meta alone is responsible for this data processing. This applies in particular to the evaluation of user behaviour by Meta for its own purposes. 

Instagram Insights

Meta offers the operators of Instagram accounts the possibility of obtaining an overview of the use of the account and its users via the "Instagram Insights" function. Via Instagram Insights, mainly statistical data can be accessed and evaluated. We use the data from Instagram Insights to make the Instagram account as attractive and efficient as possible. For this purpose, Meta provides us with data that Meta itself has generated on its own responsibility. The data we receive from Meta is mostly anonymised data and statistics. Insofar as we receive personal data in this context, we are responsible for our further processing of this data to evaluate the use of our Instagram account. 

Meta provides further information on Instagram Insights at https://privacycenter.instagram.com/policy/.

Instagram Direct Messaging

On Instagram, you have the option of communicating directly with us via the "Instagram Direct Messaging" function. If you contact us via the Instagram Direct Messaging function, the data transmitted will be stored and used by us exclusively for the purpose of responding to your enquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 (1) a) GDPR and our legitimate interest within the meaning of Art. 6 (1) f) GDPR. Our legitimate interest lies in the recording and processing of customer enquiries, in the evaluation of customer enquiries and in the control of misuse.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. You have the option to revoke your consent to the processing of personal data at any time; in this case, the data will be deleted by us immediately if there is no basis for further storage. 

Further information on Instagram

If you have any questions about our use of personal data in connection with the use of our Instagram account, please feel free to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy statement. Insofar as you have questions regarding data protection on the social network Instagram offered by Meta, we would like to ask you to contact Meta directly. We would also like to point out at this point that the German Federal Office for Information Security (BSI) provides general information on the safe use of social networks on its website athttps://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html.

YouTube channel

In addition to our own online offering, we also operate a channel on the video platform YouTube. Via the channel, we provide information about our activities and offer a channel for communication. The YouTube video platform is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").

We would like to point out that you use the video platform and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. discussion, comments).

Processing of personal data
The data collected about you when using the service will be processed by Google and may be transferred outside the European Union. The data processed includes, but is not limited to, the data you voluntarily provide, such as your name, username, email address and telephone number, the content you create, upload or receive, such as photos and videos, documents and spreadsheets, and comments, your IP address, details of the terminal device you use, information on websites and content accessed, as well as your location and your mobile phone provider. We have no influence on the type and scope of the data processed by Google, the way in which it is processed and used, or the transfer of this data to third parties. Information on what data is processed by Google and for what purposes can be found in Google's privacy statement at https://policies.google.com/?hl=en&gl=en
We process the data you enter on YouTube, in particular username and the content published under your account, to the extent that we may link or reply to your posts or make posts from us that refer to your account. The data freely published and disseminated by you on YouTube is included by us in our offer in this way and made accessible to our followers.
You have options to restrict the processing of your data in the general settings of your Google account. In addition, you can restrict Google's access to contact and calendar data, photos, location data, etc. on mobile devices in the settings options. However, this depends on the operating system used. In addition to these tools, Google also offers specific privacy settings for YouTube. You can find out more about this at: https://policies.google.com/privacy?hl=en&gl=de#infochoices.
YouTube Analytics

Google offers operators of YouTube channels the possibility of obtaining an overview of the use of the account and its users via the "YouTube Analytics" function. Via YouTube Analytics, mainly statistical data can be accessed and evaluated. We use the data from YouTube Analytics to make the YouTube channel as attractive and efficient as possible. For this purpose, Google provides us with data that Google itself has generated on its own responsibility. The data we receive from Google is mostly anonymised data and statistics. Insofar as we receive personal data in this context, we are responsible for our further processing of this data to evaluate the use of our YouTube channel. Further information on YouTube Analytics is available from Google at https://support.google.com/youtube/answer/9002587?hl=en

Further information on YouTube

If you have any questions about our use of personal data in connection with the use of the YouTube channel, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy statement. Insofar as you have questions regarding data protection at Google, we would like to ask you to contact Google directly.

Your rights and contact

We attach great importance to explaining the processing of your personal data as transparently as possible and also to informing you about the rights you are entitled to. If you would like more detailed information or wish to exercise the rights to which you are entitled, you can contact us at any time so that we can deal with your request.

Rights of persons concerned

You have extensive rights with regard to the processing of your personal data. First of all, you have a comprehensive right to information and, if necessary, you can demand the correction and/or deletion or blocking of your personal data. You can also request a restriction of processing and have a right of objection. You also have the right to data portability with regard to the personal data you have provided to us. 

If you would like to exercise any of your rights and/or receive more information about them, please contact our Customer Service. Alternatively, you can also contact our data protection officer.

Revocation of consent and objection

Once you have given your consent, it can be freely revoked at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. The contact persons for this are also our customer service is our data protection officer.

If the processing of your personal data is not based on consent but on another legal basis, you can object to this data processing. Your objection leads to a review and, if necessary, termination of the data processing. You will be informed of the result of the review and - if the data processing is nevertheless to be continued - you will receive more detailed information from us as to why the data processing is permissible.

Data Protection Officer and Contact

We have appointed an external data protection officer who supports us in data protection issues and whom you can also contact directly. Our data protection officer and his team will be happy to answer any questions regarding our handling of personal data or to provide you with further information on data protection issues:

RA Dr. Sebastian Meyer, LL.M.
c/o BRANDI Rechtsanwälte

Adenauerplatz 1, 33602 Bielefeld
Phone: 0521 / 96535-812
E-mail: datenschutz@halfar.com

If you would like to contact our data protection officer personally by e-mail, you can also reach him at sebastian.meyer@brandi.net.

Complaints

If you believe that the processing of your personal data by us is not in accordance with this privacy statement or the applicable data protection regulations, you can complain to our data protection officer. The data protection officer will then investigate the matter and inform you of the outcome of the investigation. In addition, you also have the right to lodge a complaint with a supervisory authority.

Further information and changes

Links to other websites

Our online offer may contain links to other websites. These links are usually marked as such. We have no influence on the extent to which the applicable data protection regulations are observed on the linked websites. We therefore recommend that you also inform yourself about the respective privacy statements of other websites.

Amendments of this Privacy Statement

The status of this privacy statement is indicated by the date (below). We reserve the right to change this privacy statement at any time with effect for the future. A change is made in particular in the event of technical adjustments to the online offer or in the event of changes to the data protection requirements. The current version of the privacy statement can always be accessed directly via the online offer. We recommend that you regularly inform yourself about changes to this privacy statement. 

This Privacy Statement was last revised in: February 2024