Status July 2020
Table of Contents
1. common responsible for the processing of personal data.
The purposes and means of processing personal data when visiting our Facebook pages
("Facebook page") are carried out by LevlUp GmbH, Hans-Böckler-Str. 10a, 37079 Göttingen, Germany ("LevlUp GmbH")
and Facebook Ireland Ltd. ("Facebook") jointly within the meaning of Article 26 of the EU General Data Protection Regulation (GDPR). This results from the fact that LevlUp GmbH, as the operator of the Facebook page, by setting up such a page gives Facebook the opportunity to place cookies on the computer or any other device of the person visiting the Facebook page ("visitor"), regardless of whether the visitor has a Facebook account.
Facebook assumes primary responsibility under the GDPR for the processing of Insights Data as part of its shared responsibility and complies with all obligations under the GDPR with respect to the processing of Insights Data (including, without limitation, Articles 12 and 13 of the GDPR, Articles 15 to 22 of the GDPR, and Articles 32 to 34 of the GDPR). In addition, Facebook provides the essence of this Page Insights Addendum to data subjects (the corresponding "Page Insights Controller Addendum" can be found here: https://www.facebook.com/legal/terms/page_controller_addendum).
We would like to point out that you use this Facebook page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (in particular commenting, sharing, rating).
2. name and address of the jointly responsible persons
a) The primary responsible party is:
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland
b) Further responsible person is:
3. contact options of the data protection officer of the primary responsible Facebook.
You can contact the data protection officer of the primary controller Facebook at the following link:
4. name and address of the data protection officer of the other controller
You can reach the data protection officer of the additional controller LevlUp GmbH to 2.b) at:
Dachauer Str. 65
+49 89 7400 45840
5. legal basis for the processing of personal data
Insofar as consent of the data subject is obtained for processing operations of personal data, Art. 6 para. 1 p.1 lit. a (DSGVO) serves as the legal basis for the processing of personal data.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 S.1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which LevlUp GmbH or Facebook is subject, Art. 6 para. 1 p.1 lit. c DSGVO serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 para. 1 p.1 lit. d DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of LevlUp GmbH, Facebook or a third party, and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) sentence 1 lit. f DSGVO serves as the legal basis for the processing.
6. possibility of objection and elimination
The visitor has the possibility to revoke his consent to the processing of personal data at any time (see also rights of data subjects). If the visitor contacts us by e-mail, he can object to the storage of his personal data at any time.
The collection of data for the provision of the Facebook page and the storage of the data in log files is mandatory for the operation of the Facebook page. Consequently, there is no possibility of objection on the part of the visitor.
7. rights of the persons concerned
If personal data is processed by you, you are a data subject within the meaning of the DSGVO and you are entitled to the following rights vis-à-vis the persons responsible:
Right to information about the data stored about you by LevlUp GmbH or Facebook;
Right to correction, deletion or restriction of the processing of your personal data;
Right to object to processing which serves the legitimate interests of LevlUp GmbH or Facebook, a public interest or profiling, unless LevlUp GmbH or Facebook can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims;
Right to data portability;
Right to lodge a complaint with a supervisory authority;
Right to revoke your granted consents for the collection, processing and use of your personal data at any time with effect for the future.
If you wish to exercise your rights, you can address your request to both LevlUp GmbH and Facebook. For this purpose, you can use the contact options listed above, for example. If you contact us, we will forward your request, insofar as it concerns questions regarding the processing of Insights data, to Facebook. Facebook will respond to inquiries in accordance with our obligations under the Page Insights Supplement.
II. PROCESSING OF PERSONAL DATA BY LevlUp GmbH.
1. purpose of data processing
LevlUp GmbH maintains online presences within social networks in order to communicate with interested parties and users active there and to be able to inform them there about our products, events and news.
When you access our Facebook page (regardless of whether you are logged into your Facebook account or not), your browser transmits certain data to the web server for which Facebook is responsible for technical reasons. In addition, Facebook uses so-called "cookies". Cookies are small text files that are stored in the memory of your end device via your browser. Cookies set by Facebook are intended, among other things, to enable LevlUp GmbH, as the operator of the Facebook page, to obtain statistics that Facebook compiles on the basis of visits to this page for the purpose of managing the marketing of our activities.
2 Description and scope of data processing
As the operator of the Facebook page, LevlUp GmbH may obtain anonymized statistical data regarding visitors to our Facebook page using the Facebook Page Insights function, which Facebook provides to us free of charge as a non-derogable part of the user relationship. This data is collected using cookies set by Facebook, each of which contains a unique user code that Facebook stores on the visitor's terminal device. The user code, which can be linked to the login data of such users who are registered with Facebook, is collected and processed when the Facebook page is accessed.
In particular, the Fan Page Operator may obtain demographic data provided by Facebook about its target audience - and thus the processing of such data - including. trends in age, gender, relationship status and professional situation, information about the lifestyle and interests of his target audience and information about the purchases and online purchasing behavior of visitors to his page, the categories of goods or services they are most interested in, as well as geographical data that inform him about where to carry out special promotions or organize events and, more generally, allow him to design his information offer in the most targeted way possible.
Although the visitor statistics compiled by Facebook are transmitted to LevlUp GmbH as the operator of the Facebook page exclusively in anonymized form, the compilation of these statistics is based on the prior collection - through the cookies set by Facebook on the end device of the visitors - and the processing of the personal data of these visitors for these statistical purposes. For more information about Facebook Page Insights, please visit:
Likewise, data on the Facebook groups linked to our Facebook page are provided in this way. Due to the constant development of Facebook, the availability and processing of the data changes, so for further details on this we refer to the privacy notices of Facebook mentioned in the previous paragraph and below under "PROCESSING OF PERSONAL DATA BY FACEBOOK" corresponding.
In addition to this automatically collected anonymized data, we also process the data that you have voluntarily provided to us in the context of, for example, comments on posts or contacting us.
If you click on the link https://levlup.de/pages/privacy-policy-facebook (you are currently on this page), which is set on the Facebook fan page of LevlUp GmbH, you will be taken to a sub-page of the LevlUp GmbH website. Personal data is also processed on this page. The data protection declaration applicable to these pages can be found here: https://levlup.de/pages/privacy-policy
3. data deletion and storage period
Personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may still be necessary if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which LevlUp GmbH is subject. Data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.
III. PROCESSING OF PERSONAL DATA BY FACEBOOK
1. purpose of data processing
Facebook processes personal data of visitors according to its own information for the following purposes:
- Providing, personalizing and improving Facebook products;
- Providing measurement, analytics and other Facebook services;
- Promoting privacy, integrity and security;
- Communicating with Facebook users;
- Research and innovation for social purposes.
For more information about Facebook's data processing purposes, please see the Facebook Data Policy: https://de-de.facebook.com/policy.php.
For more information about Facebook's legitimate interests regarding the processing of personal data, please see here: https://www.facebook.com/about/privacy/legal_bases
2. description and scope of data processing
a) What types of information does Facebook process?
In order to provide Facebook products, it is necessary for Facebook to process information about visitors. The types of information collected by Facebook depend on how the visitor uses the Facebook Products. In this regard, the following information may be processed by Facebook:
Things done and provided by Visitors and others, such as information about how the Visitor uses Facebook Products, information about transactions made on Facebook Products, or information about the people, pages, accounts, hashtags, and groups to which the Visitor is connected.
Device information such as device attributes, identifiers, network and connections, and cookie data.
Information from partners, after which advertisers, app developers, and publishers may send information to Facebook through the Facebook business tools they use, including the social plugins (such as the "Like" button), Facebook Login, or the Facebook Pixel. These partners provide Facebook with information about the visitor's activities outside of Facebook.
When you access a Facebook page, the IP address assigned to your terminal device is transmitted to Facebook. According to Facebook, this IP address is anonymized (for "German" IP addresses) and deleted after 90 days. Facebook also stores information about the end devices of its users (in particular as part of the "login notification" function); this may enable Facebook to assign IP addresses to individual users.
If you want to avoid this, you should log out of Facebook or disable the "stay logged in" feature, delete the cookies present on your device, and exit and restart your browser. In this way, Facebook information through which you can be directly identified will be deleted. This will allow you to use our Facebook page without revealing your Facebook identifier. When you access interactive features of the page (Like, Comment, Share, Message, etc.), a Facebook login screen will appear. After any login, you will again be recognizable to Facebook as a specific user.
Information on how to manage or delete information about you can be found on the following Facebook support pages: https://de-de.facebook.com/about/privacy.
For more information about the types of information Facebook processes, please see the Facebook Data Policy: https://de-de.facebook.com/policy.php.
b) How is the information Facebook processes shared with others?
Facebook works with third-party partners who help Facebook provide and improve its products or who use Facebook business tools to help Facebook grow its business. In doing so, information may be shared by Facebook with the following third party partners:
- Partners who use Facebook analytics services;
- Measurement partners;
- Partners who provide goods and services in Facebook products;
- Vendors and service providers;
- Researchers and scientists;
- Law enforcement or enforcement agencies or legal requests.
For more information about the data Facebook may share with third party partners, please see the Facebook Data Policy: https://de-de.facebook.com/policy.php.
c) How does Facebook process and transfer data as part of its global services?
Facebook shares information globally, both internally between Facebook companies and externally with its partners, as well as with those individuals or organizations that the visitor connects with and shares with around the world. In the process, data may also be transferred to and processed in the United States or other third countries that do not have an adequate level of data protection. In this regard, Facebook uses standard contractual clauses approved by the European Commission or relies on adequacy decisions issued by the European Commission regarding certain countries.
Facebook Inc, the U.S. parent company of Facebook is certified under the EU-U.S. Privacy Shield, providing a commitment to adhere to European data protection guidelines. More information on Facebook's Privacy Shield status is available here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Further information on data transfers by Facebook can be found in the Facebook Data Policy: https://de-de.facebook.com/policy.php
3. data deletion and storage duration
Facebook retains data until it is no longer needed to provide its services and Facebook products, or until the user's Facebook account is deleted, whichever comes first. This is a case-by-case determination and depends on things like the type of data, why it is being collected and processed, and relevant legal or operational storage needs.
For more information on data deletion and retention periods, please see the Facebook Data Policy: https://de-de.facebook.com/policy.php