Privacy policy social media

I. General information

Aenova (both Aenova Holding GmbH and all its subsidiaries) maintains publicly accessible profiles on various social networks (LinkedIn, XING, Facebook, Instagram and YouTube). Your visit to these profiles triggers a variety of data processing operations. Below we provide an overview of which personal data we collect, use and store when you visit our profiles. Personal data is information that can be assigned to you as a specific person (e.g. name, age, address, photos, email addresses, possibly also IP addresses). We also inform you about the rights you have regarding the processing of your personal data by us. You are not obliged to provide us with your personal data. However, this may be necessary for individual functionalities of our profiles in social networks. Without your consent, these functionalities may not be available to you or only to a limited extent.

When you visit Aenova's social media channels, your personal data is collected, used and stored not only by us, but also by the operators of the respective social network. This happens even if you yourself do not have a profile on the respective social network. The individual data processing operations and their scope differ depending on the operator of the respective social network and they are not necessarily traceable for us. For details on the collection and storage of your personal data as well as the type, scope and purpose of its use by the operator of the respective social network, please refer to the data protection declarations of the respective operator:

• The privacy policy for the social network Facebook, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, can be viewed at https://www.facebook.com/priva...;

• The privacy policy for the social network Instagram, which is operated by Meta Platforms Ireland Limited, can be viewed at https://privacycenter.instagra...;
• The privacy policy for the social network LinkedIn, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, can be viewed at https://www.linkedin.com/legal...;
• The privacy policy for the social network YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, can be viewed at https://policies.google.com/pr...;

II. Information on the collection of personal data

The controller within the meaning of Art. 4 No. 7 GDPR is the:

Aenova Holding GmbH
Berger Street 8-10
82319 Starnberg (Percha)
Germany

(2) The contact details of the data protection officer are: datenschutz@aenova-group.com

(3) Personal data is only processed if you contact us by private message directly via the platform or if you consent to the publication of image and sound files. We process this data for public relations work and for customer and personnel recruitment purposes. The legal basis for the processing of this data is Art. 6 para. 1 lit. f) GDPR.

[Exemplary for a Facebook business page: As the operator of a Facebook business page, we can only view the information stored in your public Facebook profile, and only if you have such a profile and are logged into it while you visit our business page. In addition, Facebook provides us with anonymous usage statistics that we use to improve the user experience when visiting our business page. We do not have access to the usage data that Meta Platforms collects to compile these statistics. Meta Platforms has undertaken to us to assume primary responsibility under the GDPR for the processing of this data, to fulfill all obligations under the GDPR with regard to this data and to make the essentials of this obligation available to those affected. This data processing serves our legitimate interest in improving the user experience when visiting our business page in line with our target group. The legal basis for the data processing is therefore Art. 6para. 1lit. f) GDPR. Meta Platforms also uses cookies, which are stored on your device when you visit our business page, even if you do not have your own Facebook profile or are not logged into it during your visit to our business page. These cookies allow Meta Platforms to create user profiles based on your preferences and interests and to show you customized advertising (inside and outside Facebook). Cookies remain on your device until you delete them. You can find details on this in Facebook's privacy policy].

(4) If you use our profiles on social networks to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), the data you provide us with will be processed by us exclusively for the purpose of contacting you. The legal basis for data collection is therefore Art. 6para. 1lit. a) and b) GDPR. We delete stored data as soon as you ask us to delete it; in the case of statutory retention obligations, we restrict the processing of the stored data accordingly.

III. Your rights as a data subject affected by data processing

As a person affected by data processing, you have the following rights:

You have the right to obtain information from us about the processing of your personal data within the scope of Art. 15 GDPR;

• You have the right, within the scope of Art. 16GDPR, to obtain from us without undue delay the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data;
• You have the right to demand the immediate deletion of personal data concerning you within the scope of Art. 17 GDPR;
• You have the right to request the restriction of data processing concerning you within the scope of Art. 18 GDPR;
• You have the right to receive the personal data concerning you, which you have provided to us, in a structured, machine-readable format and to transmit those data to another controller in accordance with Art. 20 GDPR;
• You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you within the scope of Art. 21GDPR, provided that the processing is based on an overriding interest or your data is used for the purpose of direct marketing;
• You have the right to withdraw your consent to data processing at any time without affecting the lawfulness of data processing based on consent before its withdrawal;
• You have the right to complain to a supervisory authority about our processing of your data.