1. General

We maintain publicly accessible profiles on various social networks. Your visit to these profiles triggers a variety of data processing operations. Below we provide you with an overview of which of your personal data is collected, used and stored by us when you visit our profiles. Personal data is data that can be assigned to you as a specific person (e.g. name, age, address, photos, email addresses, including IP addresses). We also inform you about your rights with regard to the processing of your personal data. You are not obliged to provide us with your personal data. However, this may be necessary for individual functionalities of our profiles in social networks. These functionalities will not be available to you, or only to a limited extent, if you do not provide us with your personal data.

When you visit our profiles, your personal data is not only collected, used and stored by us, but also by the operators of the respective social network. This happens even if you yourself do not have a profile on the respective social network. The individual data processing operations and their scope differ depending on the operator of the respective social network and they are not necessarily traceable for us.

2. Responsible body

The person jointly responsible for the operation of a social media page is the operator named in each case and the ibi systems GmbH
Rudolf-Vogt-Str. 6
93053 Regensburg
E-Mail: info@ibi-systems.de
Phone: +49 (0) 941 462939-0

You can reach our data protection officer at
Christian Volkmer
Projekt 29 GmbH & Co KG
Ostengasse 14
93047 Regensburg
E-Mail: c.volkmer@projekt29.de
Phone: 0941-2986930

Further information about us and our handling of personal data can be found in the privacy policy of our website at https://www.ibi-systems.de/en/data-privacy/. For details about the collection and storage of your personal data as well as the type, scope and purpose of its use by the operator of the respective social network, please refer to the data protection declarations of the respective operator.

• Facebook: the joint controller is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. You can view the data protection provisions for Facebook at https://www.facebook.com/about/privacy/update?ref=old_policy.
• X: the joint controller is X Corp., 865 FM 1209, Building 2, Bastrop, TX 78602, USA (for persons living outside the European Union, EFTA States or the United Kingdom), or Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Irland (for persons living within the European Union, EFTA States or the United Kingdom). You can view the data protection provisions for X at https://x.com/en/privacy.
• YouTube: the joint controller is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can view the data protection provisions for YouTube at https://www.gstatic.com/policies/privacy/pdf/20190122/f3294e95/google_privacy_policy_en_eu.pdf.
• LinkedIn: the joint controller is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. You can view the data protection provisions for LinkedIn at https://www.linkedin.com/legal/privacy-policy?_l=en_en
• Xing: the joint controller is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. You can view the data protection provisions for Xing at https://privacy.xing.com/en/privacy-policy.

3. Information on the collection of personal data

3.1 Facebook page

We operate this website as a communication and information channel to provide information about our offers. Personal data is processed in accordance with Article 6(1)(f) of the General Data Protection Regulation on the basis of our legitimate interest in using this contemporary information and interaction opportunity with users and visitors to the site.

We would like to point out that you use this Facebook page and its functions at your own risk. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).

Processing of personal data by Facebook:

When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is stored on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more information on this under the following link: http://de-de.facebook.com/help/pages/insights.

The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union. What information Facebook receives and how it is used is described by Facebook in general terms in its data usage guidelines. There you will also find information on how to contact Facebook and the settings options for advertisements. The data usage guidelines and the information required under Article 13(1)(a) and (b) GDPR are available at the following link: http://de-de.facebook.com/about/privacy.

How Facebook uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties is not conclusively and clearly stated by Facebook and is not known to us.

When you access a Facebook page, the IP address assigned to your end device is transmitted to Facebook. According to Facebook, this IP address is anonymized (for « German » IP addresses) and deleted after 90 days. Facebook also stores information about the end devices of its users (e.g. as part of the « login notification » function); this may enable Facebook to assign IP addresses to individual users.

If you are currently logged in to Facebook as a user, a cookie with your Facebook ID is stored on your device. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. Facebook buttons integrated into websites enable Facebook to record your visits to these websites and assign them to your Facebook profile. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out of Facebook or deactivate the « stay logged in » function, delete the cookies on your device and close and restart your browser. This will delete Facebook information that can be used to directly identify you. This allows you to use our Facebook page without revealing your Facebook ID. If you access interactive functions on the page (like, comment, share, message, etc.), a Facebook login screen will appear. After logging in, you will once again be recognizable to Facebook as a specific user.

As personal data is transferred to the USA, further protective mechanisms are required to ensure the level of data protection under the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases in which this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and assurances from the recipient in the USA. Further information from the third-party provider on data protection, including the legal basis on which Facebook Ireland relies and information on how you can manage or delete existing information about you, can be found on the following Facebook website: https://de-de.facebook.com/about/privacy.

Processing of data by us:

We can access statistical data of various categories via the so-called « Insights » of the Facebook page. These statistics are generated and provided by Facebook. As the operator of the page, we have no influence on the generation and presentation of this data. We cannot deactivate this function or prevent the generation and processing of the data. Facebook provides us with the following data relating to our Facebook page for a selectable period of time and for the categories fans, subscribers, people reached and people interacting:

• Total number of page views and activities, post interactions (« likes », comments, shared content, clicks on links, etc.), (post) reach, video views, replies,
• Proportion of men and women,
• Origin related to country and city,
• Language,
• Views and clicks in the store,
• Click on route planner,
• Clicks on telephone numbers.

Data on the Facebook groups linked to our Facebook page is also provided in this way. Due to the constant development of Facebook, the availability and processing of the data changes, so we refer you to the Facebook privacy policy mentioned above for further details. We use this data, which is available in aggregated form, to make our posts and activities on our Facebook page more attractive to users. For example, we use the distribution by age and gender for a customized approach and the preferred visiting times of the users for a time-optimized planning of our posts. Information about the type of end devices used by visitors helps us to adapt the visual design of our posts accordingly. In accordance with the Facebook terms of use, which every user has agreed to when creating a Facebook profile, we can identify the subscribers and fans of the page and view their profiles and other information shared by them.

Rights of users:

Facebook Ireland assumes primary responsibility under the GDPR for the processing of Insights data as part of the joint responsibility agreement concluded between us and Facebook and fulfills all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). In addition, Facebook Ireland will make the essence of this Page Insights Addendum available to data subjects.

You are welcome to contact both us and Facebook if you have any questions. As part of the agreement that exists between us and Facebook, we will forward your request to Facebook without delay if Facebook alone has to comply with your rights as a data subject. Facebook Ireland will respond to requests in accordance with our obligations under this Page Insights Addendum.

3.2 X“ formerly Twitter page

We operate this website as a communication and information channel to provide information about our offers. Personal data is processed in accordance with Article 6(1)(f) of the General Data Protection Regulation on the basis of our legitimate interest in using this contemporary information and interaction opportunity with users and visitors to the site.

We would like to point out that you use the X short message service offered here and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing or rating). Information on what data is processed by X and for what purposes can be found in X’s privacy policy: https://x.com/en/privacy.

We have no influence on the type and scope of the data processed by X, the type of processing and use or the transfer of this data to third parties. We also have no effective control options in this respect. When you use X, your personal data is collected, transmitted, stored, disclosed and used by X. On the one hand, X processes your voluntarily entered data such as name and user name, e-mail address, telephone number or the contacts in your address book when you upload or synchronize it. On the other hand, X also evaluates the content you share to determine which topics you are interested in, stores and processes confidential messages that you send directly to other users and can determine your location using GPS data, information on wireless networks or your IP address in order to send you advertising or other content.

X may use analysis tools such as X or Google Analytics for evaluation purposes.  We have no influence on the use of such tools by X and have not been informed of such potential use. If tools of this kind are used by X for our account, we have neither commissioned nor approved this nor supported it in any other way. The data obtained from the analysis is also not made available to us at . Only certain, non-personal information about tweet activity, such as the number of profile or link clicks through a particular tweet, can be viewed by us via our account. Furthermore, we have no way of preventing or disabling the use of such tools on your X account.

Finally, X also receives information when you view content, for example, even if you have not created an account. This so-called « log data » may include the IP address, browser type, operating system, information about the previously accessed website and the pages you accessed, your location, your mobile phone provider, the device you are using (including device ID and application ID), the search terms you used and cookie information.

You have the option of restricting the processing of your data in the general settings of your X account and under « Privacy and security ». On mobile devices (smartphones, tablet computers), you can also restrict X’s access to contact and calendar data, photos, location data, etc. in the settings options there. However, this depends on the operating system used.

As personal data is transferred to the USA, further protective mechanisms are required to ensure the level of data protection under the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and assurances from the recipient in the USA.

Further information on these points is available on the following X support pages:

• https://help.x.com/en/safety-and-security/x-privacy-settings
• https://help.x.com/en/search?q=data-protection
• https://help.x.com/en/rules-and-policies/global-operations-and-data-transfer

You can find out more about the possibility of viewing your own data on X here:

https://help.x.com/en/managing-your-account/accessing-your-x-data

You can find information about the conclusions drawn about you by X here:

https://x.com/settings/your_twitter_data

Information on the available personalization and data protection setting options can be found here (with further references): https://x.com/personalization

You also have the option of requesting information via the X data protection form or the archive requests: https://help.x.com/en/forms/privacy and

https://help.x.com/en/managing-your-account/how-to-download-your-x-archive

We also process your data. We do not collect any data ourselves via your X account. However, the data you enter on X, in particular your user name and the content published under your account, will be processed by us to the extent that we may re-tweet your tweets or reply to them or write tweets from us that refer to your account. The data freely published and distributed by you on X can thus be included by us in our offer and made accessible to our followers.

3.3 YouTube page

We operate this website as a communication and information channel to provide information about our offers. Personal data is processed in accordance with Article 6(1)(f) of the General Data Protection Regulation on the basis of our legitimate interest in using this contemporary information and interaction opportunity with users and visitors to the site.

We would like to point out that you use the YouTube channel offered here and its functions on your own responsibility. This applies in particular to the use of the « Discuss » function. Information on what data is processed by Google and for what purposes can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en&gl=en#infocollect.

We have no influence on the type and scope of the data processed by Google, the type of processing and use or the transfer of this data to third parties. We also have no effective control options in this respect. By using Google, your personal data is collected, transferred, stored, disclosed and used by Google. In addition, your data will be transferred to, stored and used in the United States, Ireland and any other country in which Google LCC does business, regardless of your place of residence. Data is transferred to companies affiliated with Google and to other trustworthy companies or persons who process it on behalf of Google. Google processes your voluntarily entered data such as your name and user name, e-mail address and telephone number. Google also processes the content that you create, upload or receive from others when using the services. This includes, for example, photos and videos that you save, documents and spreadsheets that you create and comments that you write on YouTube videos. On the other hand, Google also analyzes the content you share to determine which topics you are interested in, stores and processes confidential messages that you send directly to other users and can determine your location using GPS data, information on wireless networks or your IP address in order to send you advertising or other content.

Google may use analysis tools such as Google Analytics for evaluation purposes. We have no influence on the use of such tools by Google and have not been informed of such potential use. If tools of this type are used by Google for our YouTube channel, we have neither commissioned this nor supported it in any other way. The data obtained during the analysis is also not made available to us. Only the profiles of subscribers can be viewed by us via their account. Furthermore, we have no way of preventing or disabling the use of such tools on your YouTube channel.

Finally, Google also receives information when you view content, for example, even if you have not created an account. This so-called « log data » may include the IP address, the browser type, the operating system, information about the previously accessed website and the pages you accessed, your location, your mobile phone provider, the end device you use (including device ID and application ID), the search terms you used and cookie information.

You have the option of restricting the processing of your data in the general settings of your Google account. In addition to these tools, Google also offers specific data protection settings for YouTube. You can find out more about this in Google’s guide to data protection in Google products:

https://policies.google.com/technologies/product-privacy?hl=en&gl=en.

Further information on these points can be found in Google’s privacy policy under the term « Privacy settings »:

https://policies.google.com/privacy?hl=en&gl=en#infochoices.

We also process your data when you communicate with us via YouTube. We do not collect any data about your YouTube account ourselves. However, the data you enter on YouTube, in particular your user name and the content published under your account, will be processed by us to the extent that we may respond to your comments and your publications under « Discussions ». The data freely published and distributed by you on YouTube can thus be included by us in our offer and made accessible to our followers.

3.4 LinkedIn page

We operate this website as a communication and information channel to provide information about our offers. Personal data is processed in accordance with Article 6(1)(f) of the General Data Protection Regulation on the basis of our legitimate interest in using this contemporary information and interaction opportunity with users and visitors to the site.

We would like to point out that you use this LinkedIn page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (for example, when you leave a comment, click a Like button, share a post, send us a message, access the page or make any other possible interaction on our LinkedIn page).

We have no influence on the type and scope of the data processed by LinkedIn, the type of processing and use or the transfer of this data to third parties. We also have no effective control options in this respect. By using LinkedIn, your personal data is collected, transferred, stored, disclosed and used by LinkedIn.

You have the option of restricting the processing of your data in the general settings of your LinkedIn account. On mobile devices (smartphones, tablet computers), you can also restrict LinkedIn’s access to contact and calendar data, photos, location data, etc. in the settings options there. However, this depends on the operating system used.

As personal data is transferred to the USA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and assurances from the recipient in the USA.

Further information on these points is available on LinkedIn’s privacy policy:

https://www.linkedin.com/legal/privacy-policy?_l=en_en

Information on the available personalization and data protection setting options can be found here:

https://www.linkedin.com/help/linkedin/answer/66?lang=en

We also process your data when you communicate with us via LinkedIn. By analyzing the views and interactions on our LinkedIn page, we obtain usage profiles and statistics. The visitor statistics generated are only transmitted to us in anonymized form.  We do not have access to the underlying data. This information collected by LinkedIn is also used to create demographic and geographical evaluations and made available to us. Based on all this information, companies can better understand which posts interest users in order to better interact with their target group or place better advertising.

LinkedIn Live Events

We use the LinkedIn Live Events function to organize online events and interact with interested parties in real time. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

What data is processed?
When you participate in a LinkedIn Live Event, LinkedIn processes personal data that you have stored in your LinkedIn profile, as well as interaction data, e.g:

• Your name and profile picture
• Your comments, questions and reactions during the event
• Your length of stay and engagement in the event
• Technical data such as your IP address and device information

We ourselves receive access to aggregated statistics on event usage and the data you actively provide (e.g. comments or questions).

Purpose and legal basis of the processing:
The processing is carried out to carry out the online events and to interact with participants on the basis of our legitimate interest in the provision of live events (Art. 6 para. 1 lit. f GDPR). If you actively register for participation or provide data during the event, the processing is based on your consent (Art. 6 para. 1 lit. a GDPR).

Data transfer to third countries:
LinkedIn transfers data to third countries, in particular to the USA. The data transfer takes place on the basis of the EU standard contractual clauses, which LinkedIn uses as a suitable guarantee in accordance with Art. 46 GDPR. Further information can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

Right of objection:
You can object to the processing of your data at any time. You can also adjust your privacy settings directly in your LinkedIn account.

Further information:
The use of LinkedIn Live Events is subject to LinkedIn’s privacy policy. We have no influence on data processing by LinkedIn itself. Further information on the LinkedIn Live Events privacy policy can be found at: https://business.linkedin.com/marketing-solutions/linkedin-events/getting-started.

3.5 Xing page

We operate this website as a communication and information channel to provide information about our offers. Personal data is processed in accordance with Article 6(1)(f) of the General Data Protection Regulation on the basis of our legitimate interest in using this contemporary information and interaction opportunity with users and visitors to the site.

XING is a social network operated by XING SE, based in Hamburg. Members can use it primarily to manage their professional and private contacts and make new ones. Organizations can set up a page with a logo and short profile, post news and initiate discussion groups. To use the network functions, you must be registered as a user. There is a free basic version and a paid version with additional functions. In contrast to other social networks, XING is based more on a combination of personal and electronic contact and is less commercial and less visual. The focus is on professional exchange on specialist topics with people who have the same professional interests. In addition, XING is often used by companies and other organizations to recruit staff and to present themselves as an attractive employer. To this end, XING is linked to the employer rating platform kununu.

We would like to point out that you use this Xing page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (for example, if you leave a comment, click a Like button, share a post, send us a message, call up the page or make any other possible interaction on our Xing page).

We have no influence on the type and scope of the data processed by Xing, the type of processing and use or the transfer of this data to third parties. We also have no effective control options in this respect. When you use Xing, your personal data is collected, transferred, stored, disclosed and used by Xing.

You have the option of restricting the processing of your data in the general settings of your Xing account. On mobile devices (smartphones, tablet computers), you can also restrict Xing’s access to contact and calendar data, photos, location data, etc. in the settings options there. However, this depends on the operating system used.

Further information on these points is available on Xing’s privacy policy:

https://privacy.xing.com/en/privacy-policy/printable-version

We also process your data when you communicate with us via Xing. By analyzing the views and interactions on our Xing page, we obtain usage profiles and statistics. The visitor statistics generated are only transmitted to us in anonymized form.  We do not have access to the underlying data. This information collected by Xing is also used to create demographic and geographical evaluations and made available to us. Based on all this information, companies can better understand which posts interest users in order to better interact with their target group or to be able to place better advertising.

4. Contact via a social media channel

If you use our profiles on social networks to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), the data you provide us with will be processed by us exclusively for the purpose of contacting you. The legal basis for data collection is therefore Art. 6 para. 1 lit. a) and b) GDPR. We delete stored data as soon as its storage is no longer required or you request us to delete it; in the case of statutory retention obligations, we restrict the processing of the stored data accordingly.

5. Your rights as a data subject affected by data processing

As a person affected by data processing, you have the following rights:

• You have the right to receive information from us about the processing of your personal data within the scope of Art. 15 GDPR.
• You have the right, within the scope of Art. 16 GDPR, to obtain from us without undue delay the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data.
• You have the right, within the scope of Art. 17 GDPR, to demand the immediate deletion of personal data concerning you.
• You have the right, within the scope of Art. 18 GDPR, to request the restriction of data processing concerning you.
• You have the right to receive the personal data concerning you, which you have provided to us, in a structured, machine-readable format and to transmit this data to another controller in accordance with Art. 20 GDPR.
• You have the right, within the scope of Art. 21 GDPR, to object to the processing of personal data concerning you at any time for reasons arising from your particular situation, provided that the processing is based on an overriding interest or your data is used for the purpose of direct marketing.
• You have the right to withdraw your consent to data processing at any time without affecting the lawfulness of data processing based on consent before its withdrawal.
• You have the right to complain to a supervisory authority about our processing of your data.