Social media privacy

Social media privacy policy

Information about the collection of personal data in accordance with Art. 13 GDPR Below, we provide information about how we handle your personal data in connection with our social media pages. Personal data refers to all data that can be used to identify you personally.

Please carefully consider what personal data you share with us via any of the platforms. As long as you are logged into your respective account and visit one of the platforms, the platform operator can assign this to your profile. We expressly point out that the respective provider stores the data of its users (e.g., personal information, IP address, etc.) and may also use it for business purposes.

We have no influence on the data collection and further processing of the platforms. Furthermore, we cannot determine the extent to which, where and for how long the data is stored, the extent to which the respective provider complies with deletion obligations, what evaluations and links are made with the data, and to whom the data is passed on.

Data may be transferred to a third country or an international organization. Since July 2023, there has been an adequacy decision by the EU Commission (Data Privacy Framework), which identifies the USA as a third country with a level of data protection comparable to that of the EU. The adequacy decision can now serve as a basis for data transfers to certified organizations in the USA. The providers listed here have been certified under the Data Privacy Framework.

Data controller within the meaning of the General Data Protection Regulation (GDPR) GLW GmbH Steinbeisstr. 2 D-88353 Kisslegg Germany

Managing Directors: Florian Geier, Leonie Schelling, Felix Weiland

Phone: +49 7563 9123-0 Email: info@glw.de

insofar as we process the data you provide to us via our social media channels exclusively ourselves.

Our data protection officer Sven Lenz Datenschutzkanzlei Lenz GmbH & Co. KG Bahnhofstraße 50 87435 Kempten Germany

If you have any questions about data protection or other data protection issues, please feel free to send an email to the data protection team: dsb@glw.de

Facebook (Meta) Insofar as the data you provide to us via Facebook (Meta) is also or exclusively processed by Facebook (Meta) (Insights data), Facebook (Meta) Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) in addition to us. Data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR.

Furthermore, for the use of certain Facebook (Meta) products, such as the so-called “Facebook (Meta) Business Tools,” and for the data processing carried out through them, an additional agreement between us and Facebook (Meta) Ireland Ltd. as joint controllers pursuant to Art. 26 GDPR applies.

The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

For more information on data processing by Facebook (Meta), please refer to Facebook (Meta)'s privacy policy.

You can contact Facebook (Meta)'s data protection officer using the online contact form provided by Facebook (Meta).

Page Insights Facebook (Meta) provides us with so-called Page Insights for our Facebook (Meta) page: https://www.Facebook (Meta).com/business/a/page/page-insights. This is aggregated data that allows us to gain insight into how people interact with our page. Page Insights may be based on personal data collected in connection with a visit to or interaction with our page and its content. Pursuant to Art. 6 (1) (f) GDPR, this serves to safeguard our legitimate interests, which prevail within the context of a balancing of interests, in an optimized presentation of our offering and effective communication with customers and interested parties. You can object to the processing of your data for the aforementioned purposes at any time by changing your ad settings accordingly in your Facebook (Meta) user account at https://www.Facebook (Meta).com/settings?tab=ads.

Instagram We are jointly responsible for the processing of your personal data with Instagram Inc. ("Instagram") within the meaning of Art. 26 GDPR, as we use the technical platform and services of Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.

Instagram is part of the Facebook (Meta) group of companies and shares infrastructure, systems, technology, and, if applicable, personal data (e.g., personal data, IP numbers, etc.) with Facebook (Meta) and other Facebook (Meta) companies.

We process personal data ourselves via our Instagram page, but at the same time, data processing also takes place through Facebook (Meta), the operator of the Instagram platform.

The data you enter on Instagram, in particular your username and the content published under your account, will also be processed by us to the extent that we may link to your posts or respond to them, or even create posts ourselves that refer to your account. The data you freely publish and distribute on Instagram will thus be included in our offering and made accessible to our followers.

Recipients of the data you enter or disclose on our Instagram page also include Instagram or Facebook (Meta), which may use it for their own purposes and pass it on to third parties under their responsibility. Recipients of published personal data, e.g., in the context of posts, also include the public, i.e., potentially everyone.

To the extent that the data you transmit to us via Facebook (Meta) is also or exclusively processed by Facebook (Meta) (Insights data), Facebook (Meta) Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR), in addition to us. Data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR.

By using Instagram, your personal data will be collected, transferred, stored, disclosed, and used by Instagram, and transferred, stored, and used in the United States, Ireland, and any other country in which Facebook (Meta) does business, regardless of your place of residence.

Instagram and Facebook (Meta) process your voluntarily entered data, such as your name and username, email address, and telephone number.

On the other hand, Instagram and Facebook (Meta) also evaluate the content you share to determine which topics interest you, store and process confidential messages you send directly to other users, and can determine your location based on GPS data, wireless network information, or your IP address in order to send you advertising or other content.

Finally, Facebook (Meta) also receives information when you view content, for example, even if you haven't created an account. This so-called "log data" can include your IP address, browser type, operating system, information about the previously visited website and the pages you visited, your location, your mobile provider, the device you use (including device ID and application ID), the search terms you use, and cookie information.

Data processing for statistical and marketing purposes Instagram provides us with so-called Page Insights for our Instagram page. This is aggregated data that helps us understand how people interact with our site. Site Insights may be based on personal information collected in connection with a person's visit to or interaction with our site and its content.

TikTok Data processing on TikTok is based on the TikTok Terms of Use (https://www.tiktok.com/legal/terms-of-use) and TikTok's Privacy Policy (https://www.tiktok.com/legal/privacy-policy).

When you visit our TikTok company page, TikTok collects, among other things, your IP address and other information stored on your device in the form of cookies. This information is used to provide the operator of the TikTok platform with statistical information about the use of the company page (so-called "analytics" or "statistical data").

Further information on data processing by TikTok can be found in its privacy policy: https://www.tiktok.com/legal/privacy-policy.

TikTok may also use the collected data for its own purposes, such as profiling, displaying personalized advertising, or market research.

How we process your data We receive aggregated statistical data on interactions on our TikTok page via TikTok's "Analytics" function (e.g., number of profile views, reach of posts, number of followers, interactions such as likes, comments, and shared content, as well as demographic analyses such as gender, age, country, or language, to the extent this information is available to TikTok).

This data does not allow any conclusions to be drawn about individual users. Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in communicating and interacting with TikTok users and in analyzing the use of our presence on TikTok.

For further information about the processing and protection of your data on TikTok, please refer to TikTok's privacy policy: https://www.tiktok.com/legal/privacy-policy.

LinkedIn Data processing is based on the LinkedIn Terms of Use (https://de.linkedin.com/legal/user-agreement) and the privacy policy (https://de.linkedin.com/legal/privacy-policy).

When you visit our LinkedIn company page, LinkedIn records, among other things, your IP address and other information stored on your device in the form of cookies. This information is used to provide the operator of the LinkedIn platform with statistical information about the use of the company page (so-called "Page Insights").

For more information on data processing by LinkedIn, please see LinkedIn's privacy policy at: https://de.linkedin.com/legal/privacy-policy

LinkedIn may also use this data for its own purposes, such as creating user profiles, displaying personalized advertising, or conducting market research.

How we process your data: We receive anonymized statistical data about user interactions on our LinkedIn page via "Page Insights." This data includes, for example, the number of page views, reach of posts, interactions (e.g., likes, comments, shared content), and demographic analyses (e.g., country, job title).

We cannot trace this data back to individual users. Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in communication and interaction with LinkedIn users and in analyzing the use of our presence on LinkedIn.

To the extent that the data you transmit to us via LinkedIn is also or exclusively processed by LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR), in addition to us, provided you are resident in a country of the European Union, Iceland, Liechtenstein, Norway, or Switzerland. If you are located in another country, LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, is also responsible for data processing within the meaning of the GDPR. The controller of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

YouTube To the extent that the data you transmit to us via YouTube is also or exclusively processed by YouTube, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR).

Further information on data processing by Google Ireland Limited can be found in the Google Ireland Limited privacy policy at: https://policies.google.com/privacy?hl=de&gl=de.

This privacy policy applies to all services offered by Google Ireland Limited and its affiliated companies, including YouTube. Using YouTube may also result in the transmission of personal data to Google LLC's servers in the USA.

The controller of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

Data processing when contacting us We collect personal data when you contact us (e.g., via a contact form, by liking and commenting on our posts, or by following our profile). You can see which data we collect when you contact us via the contact form in the respective contact form. This data is stored and used exclusively for the purpose of answering your inquiry or for the contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your inquiry in accordance with Art. 6 (1) (f) GDPR.

If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after your inquiry has been finally processed, unless there are statutory retention periods to the contrary. We assume that processing has been completed if the circumstances indicate that the matter in question has been conclusively clarified.

Rights of the data subject The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) vis-à-vis the controller regarding the processing of your personal data, which we inform you about below:

• Right to information pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to information pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent granted pursuant to Art. 7 (3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

Reference to the right to lodge a complaint with the supervisory authority You have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your personal data is unlawful.

The address of the supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg Postal address: PO Box 10 29 32, 70025 Stuttgart, Germany Street address: Lautenschlagerstraße 20, 70173 Stuttgart, Germany Telephone +49 711 615541–0 Fax: +49 711 615541–15 Email: poststelle@lfdi.bwl.de Web: https://www.baden-wuerttemberg.datenschutz.de

You can open the complaint form via the following link: https://www.baden-wuerttemberg.datenschutz.de/online-beschwerde

Note: A complaint can also be submitted to any data protection supervisory authority within the EU.

Changes to our Privacy Policy We reserve the right to adapt our privacy policy at short notice to ensure that it always complies with current legal requirements or to implement changes to our services. This may, for example, affect the introduction of new services. The new privacy policy will then apply to your next visit.