Privacy Policy Social media

I. Foreword

We are pleased that you have visited the page we operate at facebook.com/gelo.de (hereinafter "Facebook page") or instagram.com/gelo_holzwerke (hereinafter "Instagram page"). In this privacy policy, we would like to inform you about how personal data is processed in connection with visits to or interactions with our Facebook or Instagram page or its content. Personal data is all information that relates to an identified or identifiable natural person (hereinafter "data subject").

II. Responsible Persons

A controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data. If two or more controllers jointly determine the purposes and means of processing, they are joint controllers.

If you transmit personal data to us via our Facebook or Instagram page and we alone decide on the purposes and means of processing, the

GELO Holzwerke GmbH

Sparnecker Straße 1

95163 Weissenstadt

(hereinafter "we", "us", "site manager")

sole controller for processing.

To the extent that personal data is processed in connection with our Facebook or Instagram page and Facebook or Instagram alone decides on the purposes and means of processing,

Meta Platforms Ireland Limited

4 Grand Canal Square

Grand Canal Harbor

Dublin 2

Ireland

(hereinafter " Meta Platforms Ireland ")

sole controller for the processing.

To the extent that personal data is processed by Meta Platforms Ireland and us in connection with our Facebook or Instagram page or with its content and we contribute to the decision on the purposes and means of this processing, Meta Platforms Ireland and we are jointly responsible for the processing within the meaning of Art. 26 Para. 1 Clause 1 of the General Data Protection Regulation (GDPR) and in accordance with the decision of the European Court of Justice of June 5, 2018.

We assume that the scope of joint responsibility extends exclusively to the processing of so-called insights data. Insights data is personal data under the GDPR that is collected and processed in connection with a visit to or interaction with a page and its content, insofar as this is

under the influence and control of the site owner
for the purpose of creating and evaluating page insights

Page insights are statistics that Meta Platforms Ireland makes available to the site manager.

We and Meta Platforms Ireland have in the Information about Page Insights-Dates (hereinafter referred to as "Agreement regarding the Controller") within the meaning of Art. 26 Paragraph 1 Clause 2 GDPR stipulates that Meta Platforms Ireland assumes primary responsibility for the fulfilment of all obligations and in particular for the exercise of the rights of the data subject in relation to the processing of Insights data under the GDPR. The Agreement regarding the Controller supplements the Guidelines for Pages, Groups and Events and the Terms & Conditions respectively Terms & Conditions, which we have agreed to as part of the operation of our Facebook or Instagram page. By operating our Facebook or Instagram page, we implicitly agree to the agreement regarding the responsible party.

III. Data Protection Officer

The external data protection officer of GELO Holzwerke GmbH is

FRT Consult GmbH

Attorney/Tax Advisor Thomas Hesz

Kurt-Schumacher-Str. 23, 95326 Kulmbach

Telephone: 09221 / 900 – 0, fax: 09221 / 900 – 111

Email: edsb@frtconsult.de

You can contact Meta Platforms Ireland’s Data Protection Officer via the contact form provided on the platform. online contact form Contact.

IV. Scope of processing of personal data

1. Information on data processing by Meta Platforms Ireland

The Data policy from Facebook or the Data policy Instagram's privacy policy lists the categories of personal data that are processed when using Facebook products, describes in general terms the purposes for which this data is used and lists the categories of recipients to whom this data can be made available. Under the provided link to the data policy you will also find information about the legal basis for processing this data and information about how you can withdraw your consent to the processing of personal data. The data policy also contains information about how you can exercise your rights to information, rectification, portability and erasure vis-à-vis Meta Platforms Ireland.

You will also find information there about your right to object to certain processing of personal data. The data policy also contains information about the period for which personal data is stored and information about the criteria for determining this period and the possibility of blocking or deleting Facebook or Instagram accounts. The data policy refers to Meta Platforms Ireland's intention to transfer data to third countries where necessary on the basis of the standard contractual clauses approved by the European Commission and the adequacy decisions adopted.

2. Information on the use of cookies by Meta Platforms Ireland

If you visit our Facebook or Instagram page and your browser allows the storage of cookies, Meta Platforms Ireland stores information in the form of small text files in your browser's memory (hereinafter "cookies") and can access this information when you visit the Facebook or Instagram platform or a website that integrates meta technologies. Further information on the purpose of the cookies used, the integration of these cookies by other websites and your control options in this regard can be found in the Cookie Policy from Facebook or in the Cookie Policy from Instagram. A detailed overview of the cookies used by Meta Platforms Ireland is available in the linked cookie policy by clicking on the point “Why do we or Instagram use cookies?”.

We would like to point out that Meta Platforms Ireland is able to track your user behavior (across devices for registered users) on other websites beyond the Facebook or Instagram platform using the cookies used. This applies to both people registered with the Facebook or Instagram platform and people who are not registered there. In particular, information about you is transmitted to Meta Platforms Ireland when you visit websites that include a "Like" button.

We would also like to point out that we have no influence on the data processing carried out by Meta Platforms Ireland in connection with cookies. You can also visit our Facebook or Instagram page if you configure your browser so that no cookies are stored by the Facebook or Instagram platform. Information on how to adjust the settings for cookies in your browser can usually be found in the help section of the browser you use.

If you are registered or logged in to the Facebook or Instagram platform and would like to prevent Meta Platforms Ireland from associating your visit to our Facebook or Instagram page with your user account, you should log out of Facebook or Instagram or deactivate the “stay logged in” function, delete the cookies on your device and close and restart your browser.

3. Data processing during interactions on our Facebook or Instagram page

Our Facebook or Instagram page offers you the opportunity to react to our posts, comment on them, create a post yourself and send us private messages. Please check carefully which personal data you share with us via our Facebook or Instagram page. If you would like to prevent Facebook or Instagram from processing personal data you send to us, please contact us by other means.

a. Scope of data processing

In addition to the content you submit, we may have access to information about your profile, likes, and posts, depending on your privacy settings. You can find out how to change your privacy settings in this help article or this help article.

b. Legal basis for data processing

We process your data when you contact us or interact with our website or its content on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest is to answer your request. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

c. Purpose of data processing

We process the data you provide in this context and which may be accessible to us in order to protect our legitimate interests in communicating with customers and interested parties, which are overriding in the context of a balancing of interests. Our interest lies in offering you a platform on which we can show you current information and with which you can address your concerns to us and we can respond to your concerns as quickly as possible.

This also includes our legitimate interests in data processing pursuant to Art. 6 (1) (f) GDPR.

d. Duration of data storage

Your data will be deleted, as far as possible, when we stop operating our Facebook or Instagram page. If Meta Platforms Ireland stores this data for a longer period, this will be based exclusively on the provisions in the Data policy and Terms & Conditions from Facebook or the Data policy and Terms & Conditions from Instagram.

4. Data processing for statistical purposes

For our Facebook or Instagram page, we use page insights provided by Meta Platforms Ireland, which provide us with insights about the visitors to our Facebook or Instagram page and their interactions with our Facebook or Instagram page and its content.

a. Contribution to the decision on the means and purposes of processing

We have no influence on the creation of page insights and cannot prevent their creation when operating our Facebook or Instagram page. In particular, we do not parameterize or otherwise instruct Meta Platforms Ireland to process personal data in a specific way for the creation of page insights. The agreement regarding the controller stipulates that only Meta Platforms Ireland can make and implement decisions regarding the processing of insights data. Our contribution to the decision on the means and purposes of processing insights data is therefore limited to the objectives of controlling or promoting our activities in connection with the operation of our Facebook or Instagram page, for the purpose of which we can evaluate the page insights provided to us by Meta Platforms Ireland and based on insights data.

b. Scope of data processing

Meta Platforms Ireland explains in the Information about Page Insights-Dateswhich data is used to create the page insights we use. In principle, this data is only made available to us in an anonymized form. However, if you have set your "likes" for pages to "public", we may be able to assign this information to your profile. Meta Platforms Ireland provides us with page insights based on the aforementioned insights data. The exact content of the page insights and the views available can be found in the explanations of the Page Insights According to Meta Platforms Ireland, changing the views listed there does not lead to additional data processing. We only use the page insights within the scope of the functions provided by Meta Platforms Ireland and available to us as mentioned above. There is no transfer or other further processing of this data.

Meta Platforms Ireland has explained to us that Page Insights does not show any information about people who are not registered or logged in to the Facebook platform.

Specific information about Instagram can be found in the information on Instagram Insights.

c. Legal basis for data processing

We assume that the processing of Insights data by Meta Platforms Ireland to provide the Page Insights we use is necessary for the performance of contractual services in connection with the contract concluded between Meta Platforms Ireland and the data subject for the Terms & Conditions the Facebook platform or the Terms & Conditions the Instagram platform in accordance with Art. 6 (1) lit. b GDPR. In the case of persons with limited legal capacity, we assume that Meta Platforms Ireland may carry out the processing to protect a legitimate interest in accordance with Art. 6 (1) lit. f GDPR. An overview of the interests cited by Meta Platforms Ireland in this context and further information on their legal basis can be found here.

We process the page insights provided to us to protect our legitimate interests in improving our information offering, which prevail within the framework of a balancing of interests, in accordance with Art. 6 (1) lit. f GDPR. We only process data from persons who are Data policy and Terms & Conditions from Facebook or the Data policy and Terms & Conditions from Instagram when you registered with the Facebook or Instagram platform. Meta Platforms Ireland's data policy indicates the purpose of this processing under the heading "Partners who use our analysis services".

d. Purpose of data processing

The purpose of processing the aforementioned insights data is to create page insights. We may evaluate these page insights to understand how visitors interact with our Facebook or Instagram page and thus serve to improve the information available to visitors to our Facebook or Instagram page. We use page insights to track trends. We do not use page insights to draw conclusions about individuals. We can only identify people if we can assign "likes" for the page to individual profile pictures; but only if our fan page has been marked with a "like" by the corresponding visitor and the "likes" are set to "public".

For these purposes our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f DSGVO.

e. Duration of data storage

The page insights we use include insights data for a period of two years and are not processed by us after that. If Meta Platforms Ireland stores this data for a longer period, this is based exclusively on the provisions in the Data policy and Terms & Conditions from Facebook or the Data policy and Terms & Conditions from Instagram.

V. Rights of the data subject

The GDPR grants data subjects extensive rights that they can assert against the controller. These rights include:

Right to information according to Art. 15 GDPR
Right to rectification according to Art. 16 GDPR
Right to erasure according to Art. 17 GDPR
Right to restriction of processing according to Art. 18 GDPR
Right to information according to Art. 19 GDPR
Right to data portability according to Art. 20 GDPR
Right to object according to Art. 21 GDPR
Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR
Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

If your aforementioned rights relate to processing that is the subject of our responsibility, you can assert them against us. To assert rights with regard to further processing, please contact Meta Platforms Ireland.

VI. Right of objection

If, as part of a balancing of interests, we process your personal data based on our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.

If you exercise your right to object, we will stop processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If we process your personal data for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. You can exercise your objection as described above.

If you exercise your right to object, we will stop processing the data concerned for direct advertising purposes.

Stand: January 2023