Facebook Privacy Policy

Information on data protection
1) Information on the collection of personal data and contact details of the person responsible.
1.1 In the following, we inform you about the handling of your personal data. Here, personal data is all data with which you can be personally identified.

Please carefully check which personal data you share with us via Facebook. As long as you are logged into your Facebook account and visit our Facebook profile, Facebook can assign this to your Facebook profile. We expressly point out that Meta, as the operator of Facebook, stores the data of its users (e.g. personal information, IP address, etc.) and may also use this data for business purposes. For more information on Facebook's data processing, please refer to Facebook's privacy policy at https://de-de.facebook.com/policy.php.

We have no influence on the data collection and further processing by Facebook. Furthermore, it is not apparent to us to what extent, where and for how long the data is stored by Facebook, to what extent Facebook complies with existing deletion obligations, what evaluations and links are made with the data on the part of Facebook and to whom the data is passed on by Facebook. If you would like to avoid Facebook processing personal data that you have transmitted to us, please contact us by other means. Our full contact details can be found in our imprint on Facebook.

1.2 The data controller within the meaning of the General Data Protection Regulation (DSGVO) is Rabea Saßmannshausen, Schwedenrot Yarns, Kastanienweg 11, 56751 Polch, Germany, Tel.: 016096720186, e-mail: info@schwedenrot-yarns.de, insofar as we exclusively process the data transmitted to us by you via Facebook ourselves.

Insofar as the data you provide to us via Facebook is also or exclusively processed by Meta as the operator of Facebook (Insights data), Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also the data controller within the meaning of the General Data Protection Regulation (DSGVO) in addition to us. In this respect, data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 DSGVO, which you can view here:

https://www.facebook.com/legal/terms/page_controller_addendum.

Furthermore, for the use of certain Facebook products, such as the so-called "Facebook Business Tools", and for data processing carried out as a result thereof, an additional agreement between us and Meta Platforms Ireland Ltd. as joint controller pursuant to Art. 26 DSGVO applies, which can be viewed here:

https://www.facebook.com/legal/controller_addendum

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data protection officer
You can contact the data protection officer of Meta as the operator of Facebook via the online contact form provided at https://www.facebook.com/help/contact/540977946302970.

3) Data processing when contacting us
We ourselves collect personal data when you contact us via contact form or Messenger, for example. You can see which data we collect when you contact us via contact form from the relevant contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f DSGVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after final processing of your request, provided that there are no legal obligations to retain data. We assume final processing when it can be inferred from the circumstances that the relevant facts have been conclusively clarified.

4) Rights of the data subject
4.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:

Right to information pursuant to Art. 15 GDPR;

Right to rectification pursuant to Art. 16 GDPR;

Right to erasure pursuant to Art. 17 DSGVO;

Right to restriction of processing pursuant to Art. 18 DSGVO;

Right to information pursuant to Art. 19 DSGVO;

Right to data portability pursuant to Art. 20 DSGVO;

Right to withdraw consent given pursuant to Art. 7(3) DSGVO;

Right to lodge a complaint pursuant to Art. 77 DSGVO.


 
4.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

5) Duration of the storage of personal data
The duration of the storage of personal data is measured on the basis of the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) a DSGVO, this data is stored until the data subject revokes his or her consent.

If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) DSGVO, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no legitimate interest on our part in continuing to store it.

When processing personal data on the basis of Art. 6(1)(f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21(1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Article 6 (1) (f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Article 21 (2) DSGVO.

Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.