DATA PROCESSING THROUGH SOCIAL NETWORKS
I maintain publicly available profiles in social networks. The individual social networks I use can be found below.
Social networks such as Facebook, Instagram etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged in to your social media account and visit my social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Please also note that I cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.
LEGAL BASIS
My social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR)
RESPONSIBILITY AND ASSERTION OF RIGHTS
If you visit one of my social media sites (e.g., Facebook), I, together with the operator of the social media platform, am responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis me as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook).
Please note that despite the shared responsibility with the social media portal operators, I do not have full influence on the data processing operations of the social media portals. My options are determined by the company policy of the respective provider.
STORAGE TIME
The data collected directly from me via the social media presence will be deleted from my systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – in particular, retention periods – remain unaffected.
I have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g. in their privacy policy, see below).
INDIVIDUAL SOCIAL NETWORKS
1) INFORMATION ON THE COLLECTION OF PERSONAL DATA UND CONTACT DETAILS OF THE CONTROLLER
1.1 In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
Please check carefully which personal data you share with us via Instagram. Instagram is part of the Meta group of companies and shares the infrastructure, systems and technology with Meta and other Meta companies (https://www.facebook.com/help/111814505650678?ref=dp). We expressly point out that Meta stores the data of its users (e.g. personal information, IP address, etc.) and may also use these for business purposes. For more information about Meta’s data processing regarding Instagram, please view Instagram’s privacy policy at https://help.instagram.com/519522125107875?helpref=page_content.
We have no influence on data collection and further processing by Meta. Furthermore, we do not know to what extent, where and for how long the data is stored, to what extent Meta fulfills existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on. If you do not want Meta to process personal data you provide to us, please contact us by other means. You can find our complete contact details in our imprint on Instagram.
1.2 The controller in charge for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Jana Back, Schlenkenstraße 43, 83395 Freilassing, Deutschland, Tel.: +43 699 10506015, E-Mail: ms.crochetdsgn@gmail.com, as far as we exclusively process the data transmitted by you via Meta. As far as data transmitted by you via Meta is also or exclusively processed by Meta, Meta (Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland) is beside us the controller in charge of the processing of personal data within the meaning of the General Data Protection Regulation (GDPR).
The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) DATA PROTECTION OFFICER
You can contact Meta’s Privacy Officer using the online contact form provided by Meta at https://www.facebook.com/help/contact/540977946302970
3) DATA COLLECTION WHEN CONTACTING
We collect personal data when you contact us via contact form or messenger, for example. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration. The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your inquiry, provided that there are no legal storage obligations to the contrary. We assume a final processing if it can be inferred from the circumstances that the relevant facts have been finally clarified.
4) PROCESSING OF PERSONAL DATA FOR THE EXECUTION OF THE CONTRACT
If your contact via Instagram serves as the basis for a contract for the delivery of goods and/or the provision of services with us, we will additionally process the data you provide us in this connection in the event of a contract being concluded, as follows:
4.1 We will pass on your payment data to the commissioned credit institution if this is necessary for payment processing. The legal basis for the transfer of data is Art. 6 (1) point f GDPR.
4.2 In the case of contracts for the delivery of goods, we pass on the personal data collected by us to the transport company commissioned with the delivery within the framework of contract processing, to the extent necessary for the delivery of the goods.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, email address) provided by you when placing the order in order to inform you personally about upcoming updates within the legally stipulated period within the scope of our statutory duty to inform pursuant to Art. 6 (1) lit. c GDPR by suitable means of communication (e.g. by post or email). Your contact details will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.
5) RIGHT OF THE DATA SUBJECT
5.1 The applicable data protection law grants you comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, about which we inform you below:
Right of access by the data subject pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erase (“right to be forgotten”) pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to be informed pursuant to Art. 19 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to withdraw a given consent pursuant to Art. 7 (3) GDPR
Right to lodge a complaint pursuant to Art. 77 GDPR
5.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
6) DURATION OF STORAGE OF PERSONAL DATA
The duration of the storage of personal data is determined by the respective legal retention period (e.g. commercial and tax retention periods). After expiry of this period, the corresponding data will be routinely deleted, provided they are no longer necessary for the performance or initiation of the contract and/or there is no longer any legitimate interest on our part in the further storage.
I have a profile on Pinterest. The provider is Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA („Pinterest“). For details on how they handle your personal information, see the Pinterest Privacy Policy: https://policy.pinterest.com/en/privacy-policy.
I have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook’s statement the collected data will also be transferred to the USA and to other third-party countries.
I have signed an agreement with Facebook on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations I or Facebook am responsible for when you visit my Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.
TIKTOK
I have a profile on TikTok. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Details on how they handle your personal data can be found in the TiKTok privacy policy: https://www.tiktok.com/legal/privacy-policy?lang=en.
Data transmission to third countries is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.tiktok.com/legal/privacy-policy?lang=en.
YOUTUBE
I have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in the YouTube privacy policy: https://policies.google.com/privacy?hl=en.