Data protection

This privacy policy applies to the website of Boardinghouse-Nord, which is accessible under the domain www.boardinghouse-nord.de and its various subdomains (“our website”).

 

Data Protection Officer: Dirk Reuker

Am Okerdüker 24
38112 Braunschweig

Phone: +49157 3535572
E-Mail: info@boardinghouse-nord.de

VAT ID:
VAT identification number according to Section 27a of the Sales Tax Law:
DE 311 464 806


The responsible provider of this website in terms of data protection law is:

Boardinghouse Nord
Am Okerdüker 26
38112 Braunschweig
Phone: +49 (0)531-51 44 86
Mobile: +49 (0)171-26 66 768

E-mail: info@boardinghouse-nord.de

General information

SSL/TLS encryption

When you enter your data on websites, submit contact forms, place an order, or send emails, you must always assume that unauthorized third parties may access your data. There is no complete protection against attacks on access to your data. However, the operator makes every effort to protect your data as best as possible.

SSL or TLS encryption is an important security mechanism on our website, ensuring that data you transmit to us cannot be read by third parties. You can recognize this type of encryption on websites by a lock icon in front of the internet address. In addition, a domain always begins with https:// and not http:// when this type of encryption is active.

Data transfer to the USA

We also use tools from companies on our website that transfer your data to the US, where it is stored and, if necessary, further processed. The European Commission has adopted an adequacy decision for the EU-US data protection framework. This establishes that the US ensures an adequate level of protection for personal data from the EU that is transferred to US companies. This decision is based on new safeguards and measures introduced by the US to meet data protection requirements. Among other things, the adequacy decision includes restrictions and safeguards regarding access to the data by US intelligence services. Binding safeguards have been introduced to limit access by US intelligence services to what is necessary and proportionate to protect national security. In addition, enhanced oversight of the activities of US intelligence services has been established to ensure that restrictions on surveillance activities are complied with. In addition, an independent appeals process has been established to handle and resolve complaints from European citizens regarding access to their data. The EU-US data protection framework thus enables European companies to transfer data to certified US companies without having to introduce additional data protection safeguards. A list of all certified companies can be found at the following link: https://www.dataprivacyframework.gov/s/participant-search

A change in the European Commission’s decision cannot be ruled out.

What is it about?

This privacy policy complies with legal requirements for transparency in the processing of personal data. This is all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website. The processing of personal data (e.g., the collection, retrieval, use, storage, or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of processing has been achieved and there are no legitimate grounds for further retention. The operator will inform you about the specific retention periods and criteria for individual processing operations. Irrespective of this, your personal data will be stored in individual cases for the establishment, exercise, or defense of legal claims and in cases where statutory retention obligations apply.

Who gets my data?

The operator will only share your personal data processed on our website with third parties if this is necessary to fulfill the purposes and if the legal basis for doing so is met in the individual case (e.g., consent or the protection of legitimate interests). Furthermore, we will share personal data with third parties in individual cases if this serves the establishment, exercise, or defense of legal claims. Possible recipients in such cases may include law enforcement authorities, lawyers, auditors, courts, etc.

To the extent that we use service providers to operate our website who process personal data on our behalf as part of contract processing in accordance with Art. 28 GDPR, these service providers may be recipients of your personal data. Further information on the use of contract processors and web services can be found in the overview of individual processing operations.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your device when you visit our website and stored there. As an alternative to the use of cookies, information can also be stored in your browser's local storage. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to carry out various analyses so that we are able, for example, to recognize the browser you use when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you by, for example, tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs and do not contain viruses.

We provide information about the services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the Cookie Settings or in the Consent Manager of this website.

Use of cookies

How is your data processed?

Session cookies are stored on your device only for the duration of a session. They disappear automatically as soon as you close your browser. Persistent cookies, on the other hand, remain on your device unless you delete them. This can, for example, lead to your user behavior being continuously analyzed. You can influence how cookies are handled via your browser settings:

    • Would you like to be informed when cookies are set?
    • Do you want to exclude cookies generally or in specific cases?
    • Do you want cookies to be automatically deleted when you close your browser?

If you deactivate or do not allow cookies, the functionality of the website may be limited.
If we use cookies from other companies or for analysis purposes, we will inform you about this in this privacy policy. We will also ask for your consent when you visit our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our online offerings can be used by visitors without technical problems and that all the desired functions are available to them. Necessary and functional cookies are therefore stored on your device on the basis of Art. 6 (1) (f) GDPR. We use all other cookies on the basis of Art. 6 (1) (a) GDPR, provided you give us your consent. You can revoke this consent at any time with effect for the future. If you have consented to the placement of necessary and functional cookies when requested, these cookies will also be stored exclusively on the basis of your consent.

Cookie consent with Borlabs Cookie

How is your data processed?

Borlabs Cookie is used to obtain your consent to store cookies on your device. When you visit our website and close the Borlabs Cookie window requesting your consent, a Borlabs cookie with the following content is stored in your browser:

      • Cookie duration
      • Cookie version
      • Domain and path of the website
      • Consents
      • a randomly generated ID

This data is not transmitted to the provider of Borlabs Cookie.

We store the data until the purpose for storing it no longer applies, you delete the Borlabs cookie, or you request us to delete the data. This only applies if we are legally obligated to retain the data.

On what legal basis do we process your data?

We are legally obligated to obtain the consent of our website visitors for the use of certain cookies. To fulfill this obligation, we use Borlabs Cookie. The legal basis for data processing is therefore Art. 6 (1) (c) GDPR.

What rights do I have?

Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:

      • Information according to Art. 15 GDPR about the data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data.
      • Correction according to Art. 16 GDPR of incorrect or incomplete data stored by us.
      • Deletion according to Art. 17 GDPR of the data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
      • Restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you refuse to delete it because you need it to assert, exercise or defend legal claims or you have objected to processing pursuant to Art. 21 GDPR.
      • Data portability according to Art. 20 GDPR, provided that you have provided us with personal data within the scope of consent in accordance with Art. 6 (1) (a) GDPR or on the basis of a contract in accordance with Art. 6 (1) (b) GDPR and this data has been processed by us using automated procedures. You will receive your data in a structured, common and machine-readable format or we will transmit the data directly to another responsible party, provided this is technically feasible.
      • Objection pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is based on Art. 6 (1) (e) or (f) GDPR and there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding, compelling legitimate reasons for the processing are proven or if the processing is carried out to assert, exercise or defend legal claims. If the right to object does not exist for individual processing operations, this will be stated there.
      • Revocation according to Art. 7 Para. 3 GDPR of your given consent with effect for the future.
      • Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your habitual residence, your place of work or our company headquarters.

How exactly is my data processed?

Below, we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective storage period. Automated decision-making in individual cases, including profiling, does not take place.

Inquiry by email or telephone

Sie können den Betreiber per E-Mail eine Nachricht zukommen lassen oder anrufen.

How is your data processed?

We save your message, as well as your provided contact information or the phone number you provided, in order to process your inquiry, including any follow-up questions. We will not share your data with third parties without your consent.

How long do we store your data?

We will delete your data as soon as one of the following occurs:

      • Your request has been finally processed.
      • You ask us to delete the data.
      • You revoke your consent to storage.

This only does not apply if we are legally obliged to retain the data.

On what legal basis do we process your data?

If your inquiry is related to our contractual relationship or serves to carry out pre-contractual measures, we process your data on the basis of Art. 6 (1) (b) GDPR. In all other cases, it is our legitimate interest to effectively process inquiries addressed to us. The legal basis for data processing is therefore Art. 6 (1) (f) GDPR. If you have consented to the storage of your data, Art. 6 (1) (a) GDPR is the legal basis. In this case, you can revoke your consent at any time with future effect.

Kontaktformular

You can send a message to the operator using the contact form on this website.

How is your data processed?

We save your message and the information you provide in the form so we can process your inquiry, including any follow-up questions. This also applies to the contact information you provide. We will not share your data with third parties without your consent.

How long do we store your data?

We will delete your data as soon as one of the following occurs:

      • Your request has been finally processed.
      • You ask us to delete the data.
      • You revoke your consent to storage.

This only does not apply if we are legally obliged to retain the data.

On what legal basis do we process your data?

If your inquiry is related to our contractual relationship or serves to carry out pre-contractual measures, we process your data on the basis of Art. 6 (1) (b) GDPR. In all other cases, it is our legitimate interest to effectively process inquiries addressed to us. The legal basis for data processing is therefore Art. 6 (1) (f) GDPR. If you have consented to the storage of your data, Art. 6 (1) (a) GDPR is the legal basis. In this case, you can revoke your consent at any time with future effect.

Server data

For technical reasons, particularly to ensure a secure and stable website, data is transmitted to us or our web space provider via your internet browser. These so-called server log files collect, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of each access, and the IP address of the internet connection from which you accessed our website.

The data collected in this way will be stored temporarily, but not together with other data about you.

This storage is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.

The data will be deleted after seven days at the latest, unless further retention is required for evidentiary purposes. Otherwise, the data will be exempt from deletion in whole or in part until the incident has been finally resolved.

Plugins and Tools

Google Maps

What is Google Maps?

A map service from Google Ireland Ltd.

How is your data processed?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Where can I find more information about Google's privacy policy?

https://policies.google.com/privacy?hl=de

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How is your data processed?

Google Maps make the locations listed on the website easier for visitors to find. As a company, we have a legitimate interest in this. Data processing is therefore lawful under Art. 6 (1) (f) GDPR.

If you have consented to data processing, we will process your data exclusively on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time. From the time of revocation, we may no longer process your data.

Google APIs

Type and scope of processing

We use Google APIs from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to access additional services and data from Google Ireland Limited. Your IP address will be transferred to Google Ireland Limited. Please note that a separate section in this privacy policy contains information about each additional service we use from Google Ireland Limited.

Purpose and legal basis

The use of Google APIs is based on our legitimate interests, i.e. interest in optimizing our online offering in accordance with Art. 6 (1) (f) GDPR.

Storage period

We have no control over the specific storage period for the processed data; it is determined by Google Ireland Limited. Further information can be found in the Google API privacy policy: https://policies.google.com/privacy.

Google Ads

Type and scope of processing

We have integrated Google Ads into our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behavior and recognize users.

Google Ads collects information about visitor behavior across various websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identifiers, such as your user agent, are transmitted to the provider.

If you are registered with a Google Ireland Limited service, Google Ads can associate the visit with your account. Even if you are not registered with Google Ireland Limited or are not logged in, it is possible that the provider will find and store your IP address and other identifying information.

In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and legal basis

The use of Google Ads is based on your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision exists from the European Commission (e.g., in the USA), we have agreed on other appropriate safeguards with the data recipients within the meaning of Art. 44 et seq. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of June 4, 2021. A copy of these standard contractual clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, prior to such a third-country transfer, we will obtain your consent in accordance with Art. 49 (1) Sentence 1 (a) GDPR, which you grant via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that transfers to third countries may involve risks that are unknown in detail (e.g., data processing by security authorities in the third country, the exact scope of which and the consequences for you that we do not know, over which we have no influence, and of which you may not be aware).

Storage period

We have no control over the specific storage period for the processed data; it is determined by Google Ireland Limited. Further information can be found in the Google Ads privacy policy: https://policies.google.com/privacy.

Google Analytics

Type and scope of processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for statistical evaluation of our online offering. This includes, for example, the number of visits to our online offering, subpages visited, and the length of time visitors stay on our website.

Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

The use of Google Analytics is based on your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision exists from the European Commission (e.g., in the USA), we have agreed on other appropriate safeguards with the data recipients within the meaning of Art. 44 et seq. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of June 4, 2021. A copy of these standard contractual clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, prior to such a third-country transfer, we will obtain your consent in accordance with Art. 49 (1) Sentence 1 (a) GDPR, which you grant via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that transfers to third countries may involve risks that are unknown in detail (e.g., data processing by security authorities in the third country, the exact scope of which and the consequences for you that we do not know, over which we have no influence, and of which you may not be aware).

Storage period

We have no control over the specific storage period for the processed data; it is determined by Google Ireland Limited. Further information can be found in the Google Analytics privacy policy: https://policies.google.com/privacy.

Google CDN

Type and scope of processing

We use Google CDN to properly deliver the content of our website. Google CDN is a service provided by Google Ireland Limited that acts as a content delivery network (CDN) on our website.

A CDN helps deliver content from our online offering, especially files like graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the purposes stated above and to maintain the security and functionality of Google CDN.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in the secure and efficient provision and optimization of our online offering in accordance with Art. 6 (1) (f) GDPR.

Storage period

We have no control over the specific storage period for the processed data; it is determined by Google Ireland Limited. Further information can be found in the Google CDN privacy policy: https://policies.google.com/privacy.

Google Fonts

Type and scope of processing

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To access these fonts, you establish a connection to Google Ireland Limited's servers, which transmits your IP address.

Purpose and legal basis

The use of Google Fonts is based on your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision exists from the European Commission (e.g., in the USA), we have agreed on other appropriate safeguards with the data recipients within the meaning of Art. 44 et seq. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of June 4, 2021. A copy of these standard contractual clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, prior to such a third-country transfer, we will obtain your consent in accordance with Art. 49 (1) Sentence 1 (a) GDPR, which you grant via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that transfers to third countries may involve risks that are unknown in detail (e.g., data processing by security authorities in the third country, the exact scope of which and the consequences for you that we do not know, over which we have no influence, and of which you may not be aware).

Storage period

We have no control over the specific storage period of the processed data; it is determined by Google Ireland Limited. Further information can be found in the Google Fonts privacy policy: https://policies.google.com/privacy.

Google Tag Manager

Type and scope of processing

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via one interface and allows us to control the precise integration of services on our website.

This allows us to flexibly integrate additional services to evaluate user access to our website.

Purpose and legal basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG.

Storage period

We have no control over the specific storage period for the processed data; it is determined by Google Ireland Limited. Further information can be found in the Google Tag Manager privacy policy: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Google reCAPTCHA

Type and scope of processing

We have integrated Google reCAPTCHA components into our website. Google reCAPTCHA is a service provided by Google Ireland Limited and enables us to distinguish whether a contact request originates from a natural person or is automated using a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address and, if applicable, browser data such as your user agent are transmitted. Google reCAPTCHA also records the user's time spent on the site and mouse movements in order to distinguish automated requests from human requests. This data is processed exclusively for the purposes stated above and to maintain the security and functionality of Google reCAPTCHA.

Purpose and legal basis

The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision exists from the European Commission (e.g., in the USA), we have agreed on other appropriate safeguards with the data recipients within the meaning of Art. 44 et seq. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of June 4, 2021. A copy of these standard contractual clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, prior to such a third-country transfer, we will obtain your consent in accordance with Art. 49 (1) Sentence 1 (a) GDPR, which you grant via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that transfers to third countries may involve risks that are unknown in detail (e.g., data processing by security authorities in the third country, the exact scope of which and the consequences for you that we do not know, over which we have no influence, and of which you may not be aware).

Storage period

We have no control over the specific storage period for the processed data; it is determined by Google Ireland Limited. Further information can be found in the Google reCAPTCHA privacy policy: https://policies.google.com/privacy?hl=en-US.

Presences on social media platforms

We maintain fan pages, accounts, or channels on the networks listed below to provide you with information and offers within social networks and to offer you additional ways to contact us and learn about our offerings. Below, we will inform you about which data we or the respective social network process in connection with your access to and use of our fan pages/accounts.

Data we process from you

If you would like to contact us via messenger or direct message via the respective social network, we will generally process your user name, which you use to contact us, and may store any other data you provide to the extent necessary to process/answer your request.

The legal basis is Art. 6 (1) sentence 1 f) GDPR (processing is necessary to protect the legitimate interests of the controller).

(Static) usage data we receive from social networks

We receive automated statistics about our accounts via Insights functionality. These statistics include, among other things, the total number of page views, likes, information on page activity and post interactions, reach, video views/views, and information on the proportion of men/women among our fans/followers.

The statistics contain only aggregated data that cannot be linked to individual people. You cannot be identified by us.

What data social networks process about you

In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and therefore do not need a user account for the respective social network.

Please note, however, that when you access the respective social network, the social networks collect and store data (e.g., technical data to display the website to you) even from website visitors without a user account and use cookies and similar technologies, over which we have no control. Details can be found in the privacy policies of the respective social network (see the relevant links above).

If you wish to interact with the content on our fan pages/accounts, e.g., comment on, share, or like our postings/contributions and/or contact us via messenger functions, prior registration with the respective social network and the provision of personal data is required.

We have no influence on the data processing by social networks in the context of your use. To the best of our knowledge, your data will be stored and processed primarily in connection with the provision of the services of the respective social network, as well as for the analysis of user behavior (using cookies, pixels/web beacons, and similar technologies) on the basis of which advertising based on your interests is displayed both within and outside the respective social network. It cannot be ruled out that your data will also be stored by the social networks outside the EU/EEA and passed on to third parties.

Information on the exact scope and purposes of processing your personal data, the storage period/deletion, and policies regarding the use of cookies and similar technologies in the context of registration and use of social networks can be found in the social networks' privacy policies/cookie policies. There you will also find information on your rights and options for objection.

Facebook-Page

When you visit our Facebook page, Facebook (Meta) records, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook page, with statistical information about the use of the Facebook page. Facebook provides further information on this at the following link:
https://facebook.com/help/pages/insights.

The statistical information provided does not allow us to draw conclusions about individual users. We only use it to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We collect your data via our fan page solely to enable communication and interaction with us. This data typically includes your name, message content, comment content, and the profile information you have made publicly available.

The processing of your personal data for the purposes stated above is based on our legitimate business and communicative interest in offering an information and communication channel in accordance with Art. 6 (1) (f) GDPR. If you, as a user, have given your consent to data processing to the respective provider of the social network, the legal basis for processing extends to Art. 6 (1) (a) and Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the social network provider, our access to your data is limited. Only the provider of the social network is authorized to have full access to your data. Therefore, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, request for deletion, objection, etc.). The most effective way to assert these rights is therefore to contact the respective provider directly.

We and Facebook are jointly responsible for the personal content of the fan page. Data subjects' rights can be asserted with Meta Platforms Ireland Ltd. and with us.

According to the GDPR, Facebook is primarily responsible for processing Insights data, and Facebook fulfills all obligations under the GDPR with regard to the processing of Insights data. Meta Platforms Ireland Ltd. provides the essence of the Page Insights supplement to the data subjects.

We do not make any decisions regarding the processing of Insights data or the storage period of cookies on user devices.

Further information can be found directly on Facebook (supplementary agreement with Facebook):
https://www.facebook.com/legal/terms/page_controller_addendum.

Further information, including the exact scope and purposes of processing your personal data, storage duration/deletion, and guidelines for the use of cookies and similar technologies during registration and use, can be found in Facebook's privacy policy/cookie policy:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
https://www.facebook.com/policies/cookies

Instagram-PageWhen you visit our Instagram page, Instagram (Meta) records, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides further information on this at the following link (Note: Clicking the following link will take you to the website of the social network Facebook, also part of the Meta Group. However, the information provided via the link applies equally to the social network Instagram):
https://facebook.com/help/pages/insights.

The statistical information provided does not allow us to draw conclusions about individual users. We only use it to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We collect your data via our fan page solely to enable communication and interaction with us. This data typically includes your name, message content, comment content, and the profile information you have made publicly available.

The processing of your personal data for the purposes stated above is based on our legitimate business and communicative interest in offering an information and communication channel in accordance with Art. 6 (1) (f) GDPR. If you, as a user, have given your consent to data processing to the respective provider of the social network, the legal basis for processing extends to Art. 6 (1) (a) and Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the social network provider, our access to your data is limited. Only the provider of the social network is authorized to have full access to your data. Therefore, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, request for deletion, objection, etc.). The most effective way to assert these rights is therefore to contact the respective provider directly.

We and Instagram are jointly responsible for the personal content of the fan page. Data subjects' rights can be asserted with Meta Platforms Ireland Ltd. and with us.

According to the GDPR, Instagram is primarily responsible for processing Insights data, and Instagram fulfills all obligations under the GDPR with regard to the processing of Insights data. Meta Platforms Ireland Ltd. provides the essence of the Page Insights supplement to the data subjects.

We do not make any decisions regarding the processing of Insights data or the storage period of cookies on user devices.

Further information can be found directly on Instagram (supplementary agreement with Facebook):
https://www.facebook.com/legal/terms/page_controller_addendum.

Further information, including the exact scope and purposes of processing your personal data, the storage period/deletion, and guidelines for the use of cookies and similar technologies during registration and use, can be found in Instagram's privacy policy/cookie policy (note: clicking on the following link will take you to the website of the social network Facebook):
https://help.instagram.com/519522125107875/?helpref=uf_share
This information can also be viewed in the help section of the Instagram website via the following link:
https://help.instagram.com/581066165581870