DATA PROTECTION
Everything at a glance
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.
Data protection information on processing activities
We have compiled information on data processing and your rights for the processing activities.
We collect data for (pre-)contractual reasons (Art. 6 para. 1 lit. b GDPR) or legitimate interest (Art. 6 para. 1 lit. f GDPR) in order to be able to provide our services in the best possible way and as easily as possible for you.
We act as a contractor for our public transport authorities (e.g. districts) and carry out the management (issuing, processing, administration) of SSZKs. We are responsible for the management (issuing, processing, administration) of season tickets, new citizen cards, job tickets, etc.
Data we collect from customers, subscribers and students
When collecting data, we differentiate between customers (subscribers) and customers (students) and collect the following data:
- Contact details (first name, surname, address),
- Date of birth,
- Telephone
- Mobile phone number
- E-mail address,
- Purchase history,
- Account details,
- Relation (start and destination, start and destination stop).
For pupils, we also record photos, the school and the class - depending on the specifications of the respective task organiser.
Reasons for our data collection
For (pre-)contractual reasons, we require personal data from you in order to fulfil our obligations, for example from a subscription contract or an order for a student season ticket or other ticket, and to be able to issue tickets (Art. 6 para. 1 lit. b GDPR). This data is required, for example, to process orders, payments, credit checks, delivery to the specified address in the case of postal delivery and, if necessary, to process cancellations and refunds as part of the contractual relationship.
Your postal contact details may be used internally for legitimate interest (Art. 6 para. 1 lit. f GDPR) for sending information (e.g. timetable changes) or advertising for the purpose of customer loyalty and market research. The e-mail address from a business relationship with you can also be used for informational and advertising purposes.
You can object to this use of your data for advertising purposes at any time with effect for the future. Please send your objection by e-mail to: info@cebus-celle.de
Data storage/data deletion
The season ticket contracts are deleted at the end of a subscription or at the end of a school year. This does not apply to data that is categorised as business correspondence within the meaning of the German Commercial Code (HGB) or as accounting-related data. The statutory retention obligations are taken into account here.
In principle, we only store your data for as long as it is necessary to fulfil the purpose for which it was collected or if this is required by law.
Data transfer
Your data will be processed within our group of companies exclusively within the European Economic Area. If the involvement of processors dependent on instructions is necessary for the fulfilment of the contract, these are carefully selected by us and strictly bound by contract.
Rights of data subjects
You can request information about what data is stored about you. You can request authorisation, deletion and restriction of the processing of your personal data as long as this is legally permissible and possible within the framework of an existing contractual relationship. If you have given us your consent to process your data, you can revoke this at any time.
Right of appeal
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR). You can assert this right with a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement. You can contact the competent supervisory authorities of the federal states here view.
We offer you the opportunity to apply to us (e.g. by e-mail, post or online application form). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that your data will be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.
Scope and purpose of data collection
If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-new under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and - if you have given your consent - Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application.
If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG-new and Art. 6 para. 1 lit. b GDPR for the purpose of implementing the employment relationship.
Data retention period
If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. The retention serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies.
Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations prevent deletion.
We offer you the opportunity to send us enquiries or complaints via our contact form; alternatively, you can contact us by email, telephone or fax. In the following, we inform you about the scope, purpose and use of your personal data collected as part of the enquiry process. We assure you that your data will be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.
Scope and purpose of data collection
If you send us enquiries via the contact form, by email, telephone or fax, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested.
Data retention period
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.
Various access options and information may be required for the technical functionality of the bus2gether app and to provide the services offered with the bus2gether app. For example, the bus2gether app can use the "Profile picture" function in the user settings to access the camera system functions of the end device or content stored on the end device, such as photos.
Whether you allow this access depends on your system settings. The bus2gether app can only access the system functions of your end device if you expressly authorise this. If you allow the bus2gether app to do this, the personal data collected (e.g. the content of a photo and metadata) will be processed and used by the bus2gether app exclusively for the function you have requested (e.g. uploading a photo from your end device to the bus2gether app).
Privacy policy
1.
General notes and mandatory information
Data collection on this website
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
Responsible body
CeBus GmbH & Co. KG
Nienburger Street 50
29225 Celle
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
Data protection officer required by law
We have appointed a data protection officer for our company.
Lukas Thurmann
On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.
Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.
The processing of your data is based on our (and your) legitimate interest (Art. 6 para. 1 lit. f GDPR) so that we can operate the website and you can view the content or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. All you need to do is send us an informal email. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)
If data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you lodge an objection, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 para. 2 GDPR)
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to correction or deletion of this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at Imprint contact us at the address provided. The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the review, you have the right to request that the processing of your personal data be restricted.
- If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of erasure.
- If we no longer need your personal data, but you need it for the exercise, defence or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of its erasure.
- If you have lodged an objection in accordance with Art. 21 (1) GDPR, a balance must be struck between you and our interests. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
Objection to advertising e-mails
We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
2.
Hosting and Content Delivery Networks (CDN)
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our hoster will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions with regard to this data.
Conclusion of a contract for order processing
In order to guarantee data protection-compliant processing, we have concluded an order processing contract with our hoster.
3.
Cookies and logs
Our Internet pages use so-called "cookies". Cookies are small text files and do not cause any damage to your end device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your device when you visit our website (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to evaluate user behaviour or display advertising.
Cookies that are required to carry out the electronic communication process or to provide certain functions desired by you (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately as part of this privacy policy and, if necessary, request your consent.
This website uses Usercentrics cookie consent technology to obtain your consent to the storage of certain cookies on your end device and to document this in a data protection-compliant manner. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter referred to as "Usercentrics").
When you visit our website, the following personal data is transmitted to Usercentrics:
- Your consent(s) or the revocation of your consent(s)
- Your IP address
- Information about your browser
- Information about your end device
- Time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consents you have given or revoke them. The data collected in this way will be stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.
Usercentrics is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.
Contract for order processing
We have concluded an order processing contract with Usercentrics. This is a contract required by data protection law, which ensures that Usercentrics processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Contract for order processing
We have concluded an order processing contract with Usercentrics. This is a contract required by data protection law, which ensures that Usercentrics processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website - the server log files must be recorded for this purpose.
4.
Analysis tools and advertising
When you visit this website, your surfing behaviour may be statistically evaluated. This is primarily done using cookies and so-called analysis programmes. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you.
You can object to this analysis or prevent it by not using certain tools. You can find detailed information about these tools and your options to object in the following privacy policy.
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent the collection of your data by Google Analytics by deactivating Google Analytics via the data protection settings (bottom left).
You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Storage duration
Data stored by Google at user and event level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymised or deleted after 14 months. Details can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=de
5.
Social Media
Facebook privacy policy summary
👥 Data subject: Visitors to the website
🤝 Purpose: Optimisation of our service performance
📓 Processed data: Data such as customer data, user behaviour data, information about your device and your IP address. You can find more details below in the privacy policy.
📅 Storage period: until the data is no longer useful for Facebook's purposes
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)
What are Facebook tools?
We use selected tools from Facebook on our website. Facebook is a social media network of the company Meta Platforms Inc. or, for the European region, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. With the help of these tools, we can offer you and people who are interested in our products and services the best possible offer.
If data is collected and forwarded from you via our embedded Facebook elements or via our Facebook page (fan page), both we and Facebook Ireland Ltd. are responsible for this. Facebook is solely responsible for the further processing of this data. Our joint obligations have also been set out in a publicly accessible agreement at https://www.facebook.com/legal/controller_addendum anchored. It states, for example, that we must clearly inform you about the use of Facebook tools on our website. Furthermore, we are also responsible for ensuring that the tools are securely integrated into our website in accordance with data protection law. Facebook, on the other hand, is responsible for the data security of Facebook products, for example. If you have any questions about data collection and data processing by Facebook, you can contact the company directly. If you address the question to us, we are obliged to forward it to Facebook.
Below we provide an overview of the various Facebook tools, what data is sent to Facebook and how you can delete this data.
In addition to many other products, Facebook also offers the so-called "Facebook Business Tools". This is the official term used by Facebook. However, as the term is hardly known, we have decided to simply call them Facebook tools. These include, among others:
- Facebook pixel
- social plug-ins (such as the "Like" or "Share" button)
- Facebook Login
- Account Kit
- APIs (programming interface)
- SDKs (collection of programming tools)
- Platform integrations
- Plugins
- Codes
- Specifications
- Documentations
- Technologies and services
Through these tools, Facebook is expanding its services and has the opportunity to obtain information about user activities outside of Facebook.
Why do we use Facebook tools on our website?
We only want to show our services and products to people who are really interested in them. We can reach precisely these people with the help of adverts (Facebook ads). However, Facebook needs information about people's wishes and needs in order to show users suitable adverts. The company is therefore provided with information about user behaviour (and contact details) on our website. As a result, Facebook collects better user data and can show interested people suitable adverts about our products and services. The tools thus enable customised advertising campaigns on Facebook.
Facebook calls data about your behaviour on our website "event data". This is also used for measurement and analysis services. Facebook can thus create "campaign reports" on our behalf about the impact of our advertising campaigns. Furthermore, analyses give us a better insight into how you use our services, website or products. We use some of these tools to optimise your user experience on our website. For example, you can use the social plug-ins to share content on our site directly on Facebook.
What data is stored by Facebook tools?
By using individual Facebook tools, personal data (customer data) can be sent to Facebook. Depending on the tools used, customer data such as name, address, telephone number and IP address may be sent.
Facebook uses this information to match the data with the data it has about you (if you are a Facebook member). Before customer data is transmitted to Facebook, it is hashed. This means that a data set of any size is transformed into a character string. This also serves to encrypt data.
In addition to the contact data, "event data" is also transmitted. "Event data" refers to the information we receive about you on our website. For example, which subpages you visit or which products you buy from us. Facebook does not share the information it receives with third parties (such as advertisers) unless the company has explicit authorisation or is legally obliged to do so. "Event data" can also be linked to contact details. This allows Facebook to offer better personalised advertising. After the aforementioned matching process, Facebook deletes the contact data again.
In order to optimise the delivery of advertisements, Facebook only uses the event data if it has been combined with other data (collected by Facebook in other ways). Facebook also uses this event data for security, protection, development and research purposes. Much of this data is transferred to Facebook via cookies. Cookies are small text files that are used to store data or information in browsers. Depending on the tools used and whether you are a Facebook member, different numbers of cookies are stored in your browser. We go into more detail about individual Facebook cookies in the descriptions of the individual Facebook tools. You can also find general information about the use of Facebook cookies at https://www.facebook.com/policies/cookies.
How long and where is the data stored?
In principle, Facebook stores data until it is no longer needed for its own services and Facebook products. Facebook has servers all over the world where its data is stored. However, customer data is deleted within 48 hours after it has been compared with the company's own user data.
How can I delete my data or prevent data storage?
In accordance with the General Data Protection Regulation, you have the right to information, correction, transferability and deletion of your data.
The data will only be completely deleted if you delete your Facebook account completely. And this is how deleting your Facebook account works:
1) Click on Settings on the right-hand side of Facebook.
2) Then click on "Your Facebook information" in the left-hand column.
3) Now click on "Deactivation and deletion".
4) Now select "Delete account" and then click on "Continue and delete account"
5) Enter your password, click on "Next" and then on "Delete account"
The data that Facebook receives via our site is stored using cookies (e.g. for social plugins), among other things. You can deactivate, delete or manage individual or all cookies in your browser. Depending on which browser you use, this works in different ways. In the "Cookies" section, you will find the relevant links to the instructions for the most popular browsers.
If you generally do not want to have cookies, you can set up your browser so that it always informs you when a cookie is to be set. This way, you can decide for each individual cookie whether you want to allow it or not.
Legal basis
If you have consented to your data being processed and stored by integrated Facebook tools, this consent is the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). In principle, your data is also processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) We store and process your data for the purpose of fast and good communication with you or other customers and business partners. Nevertheless, we only use these tools if you have given your consent. Most social media platforms also set cookies in your browser to store data. We therefore recommend that you read our privacy policy about cookies carefully and take a look at Facebook's privacy policy or cookie guidelines.
Facebook also processes your data in the USA, among other places. Facebook or Meta Platforms is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
Facebook also uses so-called standard contractual clauses (= Art. 46 (2) and (3) GDPR). Standard Contractual Clauses (SCCs) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the standard contractual clauses, Facebook undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
The Facebook data processing conditions, which refer to the standard contractual clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing.
We hope we have given you the most important information about the use and data processing by Facebook tools. If you want to learn more about how Facebook uses your data, we recommend that you read the data policy on https://www.facebook.com/privacy/policy/.
Facebook social plug-ins privacy policy
Social plug-ins from Meta Platforms Inc. are integrated on our website. You can recognise these buttons by the classic Facebook logo, such as the "Like" button (the hand with a raised thumb) or by a clear "Facebook plug-in" label. A social plug-in is a small part of Facebook that is integrated into our site. Each plug-in has its own function. The most commonly used functions are the familiar "Like" and "Share" buttons.
The following social plug-ins are offered by Facebook:
- "Save" button
- "Like" button, share, send and quote
- Page plug-in
- Comments
- Messenger plug-in
- Embedded contributions and video player
- Group plug-in
On https://developers.facebook.com/docs/plugins for more information on how the individual plug-ins are used. We use the social plug-ins on the one hand to offer you a better user experience on our site and on the other hand because Facebook can use them to optimise our advertisements.
If you have a Facebook account or https://www.facebook.com/ Facebook has already set at least one cookie in your browser. In this case, the browser sends information to Facebook via this cookie as soon as you visit our site or interact with social plug-ins (e.g. the "Like" button).
The information received is deleted or anonymised within 90 days. According to Facebook, this data includes your IP address, which website you visited, the date, time and other information relating to your browser.
To prevent Facebook from collecting a lot of data during your visit to our website and linking it to Facebook data, you must log out of Facebook during your visit to the website.
If you are not logged in to Facebook or do not have a Facebook account, your browser will send less information to Facebook because you have fewer Facebook cookies. Nevertheless, data such as your IP address or which website you visit may be transmitted to Facebook. We would like to expressly point out that we do not know the exact content of the data. However, to the best of our current knowledge, we endeavour to inform you as much as possible about the data processing. You can also find out how Facebook uses the data in the company's data policy at https://www.facebook.com/about/privacy/update read more.
The following cookies are set in your browser as a minimum when you visit a website with Facebook social plug-ins:
Name: dpr
Value: not specified
Intended use: This cookie is used to make the social plug-ins on our website work.
Expiry date: after the end of the meeting
Name: fr
Value: 0jieyh4312757784c2GnlufEJ9..Bde09j…1.0.Bde09j
Intended use: The cookie is also necessary for the plug-ins to function properly.
Expiry date:: after 3 months
Remark: These cookies were set after a test, even if you are not a Facebook member.
If you are logged in to Facebook, you can change your settings for adverts under https://www.facebook.com/adpreferences/advertisers/ change it yourself. If you are not a Facebook user, you can go to https://www.youronlinechoices.com/de/praferenzmanagement/?tid=312757784 to manage your usage-based online advertising. There you have the option of deactivating or activating providers.
If you want to find out more about Facebook's data protection, we recommend that you read the company's own data policy on https://www.facebook.com/privacy/policy/.
Instagram privacy policy summary
👥 Data subject: Visitors to the website
🤝 Purpose: Optimisation of our service performance
📓 Processed data: Data such as user behaviour data, information about your device and your IP address.
You can find more details below in the privacy policy.
📅 Storage period: until Instagram no longer needs the data for its purposes
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)
What is Instagram?
We have integrated Instagram functions on our website. Instagram is a social media platform of the company Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Instagram has been a subsidiary of Meta Platforms Inc. since 2012 and is a Facebook product. Embedding Instagram content on our website is called embedding. This allows us to show you content such as buttons, photos or videos from Instagram directly on our website. When you visit web pages on our website that have an Instagram function integrated, data is transmitted to Instagram, stored and processed. Instagram uses the same systems and technologies as Facebook. Your data is therefore processed across all Facebook companies.
In the following, we want to give you a more detailed insight into why Instagram collects data, what data is involved and how you can largely control data processing. As Instagram belongs to Meta Platforms Inc., we obtain our information from the Instagram guidelines on the one hand, but also from the Meta privacy policy itself on the other.
Instagram is one of the most popular social media networks in the world. Instagram combines the advantages of a blog with the benefits of audiovisual platforms such as YouTube or Vimeo. You can upload photos and short videos to "Insta" (as many users casually call the platform), edit them with various filters and also share them on other social networks. And if you don't want to be active yourself, you can just follow other interesting users.
Why do we use Instagram on our website?
We want you to feel as comfortable as possible on our website. That's why a varied presentation of our content is a matter of course for us. The embedded Instagram functions allow us to enrich our content with helpful, funny or exciting content from the Instagram world. As Instagram is a subsidiary of Facebook, the data collected can also be useful to us for personalised advertising on Facebook. This means that only people who are genuinely interested in our products or services receive our adverts.
Instagram also uses the collected data for measurement and analysis purposes. We receive summarised statistics and thus gain more insight into your wishes and interests. It is important to note that these reports do not identify you personally.
What data is stored by Instagram?
When you visit one of our pages that has Instagram functions (such as Instagram images or plug-ins), your browser automatically connects to Instagram's servers. In the process, data is sent to Instagram, stored and processed. This happens regardless of whether you have an Instagram account or not. This includes information about our website, your computer, purchases made, adverts you see and how you use our services. The date and time of your interaction with Instagram is also stored. If you have an Instagram account or are logged in, Instagram stores significantly more data about you.
Facebook distinguishes between customer data and event data. We assume that this is exactly the case with Instagram. Customer data includes, for example, name, address, telephone number and IP address. This customer data will only be transmitted to Instagram if you have been "hashed" beforehand. Hashing means that a data record is converted into a character string. This allows the contact data to be encrypted. The "event data" mentioned above is also transmitted. By "event data", Facebook - and consequently Instagram - means data about your user behaviour. Contact data may also be combined with event data. The contact data collected is compared with the data that Instagram already has about you.
The collected data is transmitted to Facebook via small text files (cookies), which are usually set in your browser. Depending on the Instagram functions used and whether you have an Instagram account yourself, different amounts of data are stored.
We assume that Instagram processes data in the same way as Facebook. This means that if you have an Instagram account or www.instagram.com Instagram has at least set a cookie. If this is the case, your browser sends information to Instagram via the cookie as soon as you come into contact with an Instagram function. This data is deleted or anonymised after 90 days at the latest (after reconciliation). Although we have intensively analysed Instagram's data processing, we cannot say exactly what data Instagram collects and stores.
Below we will show you the minimum cookies that are set in your browser when you click on an Instagram function (such as a button or an Insta image). In our test, we assume that you do not have an Instagram account. If you are logged in to Instagram, significantly more cookies will of course be set in your browser.
These cookies were used in our test:
Name: csrftoken
Value: ""
Intended use: This cookie is most likely set for security reasons to prevent falsified requests. However, we were unable to find out more about this.
Expiry date: after one year
Name: mid
Value: ""
Intended use: Instagram sets this cookie to optimise its own services and offers within and outside Instagram. The cookie defines a unique user ID.
Expiry date: after the end of the session
Name: fbsr_312757784124024
Value: not specified
Intended use: This cookie stores the log-in request for users of the Instagram app.
Expiry date: after the end of the session
Name: rur
Value: ATN
Intended use: This is an Instagram cookie that ensures functionality on Instagram.
Expiry date: after the end of the session
Name: urlgen
Value: “{”194.96.75.33”: 1901}:1iEtYv:Y833k2_UjKvXgYe312757784”
Intended use: This cookie is used for Instagram's marketing purposes.
Expiry date: after the end of the session
Remark: We cannot claim completeness here. Which cookies are set in individual cases depends on the embedded functions and your use of Instagram.
How long and where is the data stored?
Instagram shares the information received between the Facebook companies with external partners and with people with whom you connect worldwide. Data processing is carried out in compliance with our own data policy. Your data is distributed on Facebook servers around the world, partly for security reasons. Most of these servers are located in the USA.
How can I delete my data or prevent data storage?
Thanks to the General Data Protection Regulation, you have the right to access, portability, rectification and erasure of your data. You can manage your data in the Instagram settings. If you want to completely delete your data on Instagram, you must permanently delete your Instagram account.
And this is how deleting your Instagram account works:
First open the Instagram app. On your profile page, go to the bottom and click on "Help". This will take you to the company's website. On the website, click on "Manage your account" and then on "Delete your account".
If you delete your account completely, Instagram will delete posts such as your photos and status updates. Information that other people have shared about you does not belong to your account and will therefore not be deleted.
As mentioned above, Instagram stores your data primarily via cookies. You can manage, deactivate or delete these cookies in your browser. Depending on your browser, the management always works a little differently. Under the "Cookies" section, you will find the corresponding links to the respective instructions for the most popular browsers.
You can also set up your browser so that you are always informed when a cookie is to be set. Then you can always decide individually whether you want to allow the cookie or not.
Legal basis
If you have consented to your data being processed and stored by integrated social media elements, this consent is the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). In principle, your data is also processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) We store and process your data for the purpose of fast and good communication with you or other customers and business partners. Nevertheless, we only use the integrated social media elements if you have given your consent. Most social media platforms also set cookies in your browser to store data. We therefore recommend that you read our data protection text on cookies carefully and view the privacy policy or cookie guidelines of the respective service provider.
Instagram also processes your data in the USA, among other places. Instagram or Meta Platforms is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
Instagram also uses so-called standard contractual clauses (= Art. 46 (2) and (3) GDPR). Standard Contractual Clauses (SCCs) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the standard contractual clauses, Instagram undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
We have tried to provide you with the most important information about data processing by Instagram. On https://privacycenter.instagram.com/policy/ you can take a closer look at Instagram's data policy.