Data protection Social Media
Our social media presences
This data protection statement applies to the following social media presences
https://www.facebook.com/malschgmbh/
https://www.xing.com/pages/malsch-gmbh
https://www.linkedin.com/company/malsch-gmbh/
https://www.youtube.com/channel/UCVbJiz5ni4L7NDwkeLSZ4Tg
Data processing by social networks
We maintain profiles on social networks which are accessible to the public. You can find the social networks which we use in the following.
Social networks such as Facebook, X etc. can generally analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (such as "Like" buttons or advertising banners). Visiting our social media presences triggers numerous data protection-related processing operations. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected via cookies which are stored on your device or by recording your IP address, for example.
With the aid of the data that is collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. This makes it possible for interest-based advertising to be displayed to you inside and outside of the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on any device on which you are or were logged into.
Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details concerning this, please refer to the terms of use and data protection provisions of the respective social media portals.
Legal basis
Our social media presences are intended to provide the most comprehensive possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes which are initiated by the social networks may have different legal grounds, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).
Responsible party and assertion of rights
If you visit one of our social media presences (such as Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations which are triggered during this visit. You can basically assert your rights (for information, correction, deletion, restriction of processing, data portability and complaints) against both us and the operator of the respective social media portal (e.g. Facebook).
Please note that despite our joint responsibility with the social media portal operators, we do not have complete control over the data processing procedures of the social media portals. Our options are essentially based on the corporate policy of the respective provider.
Duration of storage
The data which we collect directly via the social media presence will be deleted from our systems as soon as you request deletion, revoke your consent to storage or if the purpose for storing the data no longer applies. Stored cookies will remain on your terminal device until you delete them. Mandatory legal provisions, particularly retention periods, remain unaffected.
We have no control over the storage duration of your data which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Your rights
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to object, to data portability and the right to lodge a complaint with the responsible supervisory authority. You can also request the correction, blocking, deletion and, under certain circumstances, restriction of the processing of your personal data.
Individual social networks
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter referred to as Meta). According to Meta, the data that is collected is also transferred to the USA and other third countries.
We have concluded a joint processing agreement with Meta (Controller Addendum). This agreement specifies which data processing operations we or Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum.
You can change your advertising settings yourself in your user account. To do this, click on the following link and log in:
https://www.facebook.com/settings?tab=ads.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum and
https://de-de.facebook.com/help/566994660333381.
Details can be found in the Facebook data protection statement:
https://www.facebook.com/about/privacy/.
The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA which is intended to ensure compliance with European data protection standards when data is being processed in the USA. Every company that is certified under the DPF undertakes to adhere to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active
We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Details on how your personal data is dealt with can be found in YouTube’s privacy policy:
https://privacy.xing.com/de/datenschutzerklaerung.
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you wish to deactivate LinkedIn advertising cookies, use the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
Details on how your personal data is dealt with can be found in LinkedIn’s privacy policy:
https://www.linkedin.com/legal/privacy-policy.
YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how your personal data is dealt with can be found in YouTube’s privacy policy:
https://policies.google.com/privacy?hl=de.
The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA which is intended to ensure compliance with European data protection standards when data is being processed in the USA. Every company that is certified under the DPF undertakes to adhere to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant- detail?contact=true&id=a2zt000000001L5AAI&status=Active