Data protection information for social media channels

Status: 01.2024

1. information on data protection

We appreciate your visit to one of our social media channels and your interest in our company. Data protection is of a particularly high priority for the management of the Einkaufsbüro Deutscher Eisenhändler GmbH. With this data protection notice, we inform you about how personal data is processed in connection with visits to or interactions with our social media channels or their content.

Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). The legal basis for data protection can be found in the General Data Protection Regulation.

Einkaufsbüro Deutscher Eisenhändler GmbH is present on the following social media platforms:

  • Facebook
  • Instagram
  • YouTube
  • Vimeo
  • X
  • LinkedIn
  • Xing

2. name and address of the controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. In the case of our social media channels, this is a joint responsibility of Einkaufsbüro Deutscher Eisenhändler GmbH and the respective platform operators.

If you transmit personal data to us via our social media channels and we alone decide on the purposes and means of processing, the

Einkaufsbüro Deutscher Eisenhändler GmbH
EDE Platz 1
42389 Wuppertal
Germany

Phone: +49 202 6096-0
E-mail: webkontakt@ede.de
Website: www.ede.de

Controller responsible for the processing.

Please refer to the following sections for information on any joint responsibilities with regard to the respective social media channels.

3. contact details of the data protection officer

Purchasing Office of German Ironmongers GmbH
Attn. of the Data Protection Officer
EDE Platz 1
42389 Wuppertal
Germany

E-mail: datenschutz@ede.de
Website: www.ede.de

Any data subject can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

Please refer to the following sections for contact details of the data protection officers of the respective platform operators.

4. wonderlink

We use Wonderlink technology from Seyffert mit Himmelspach GmbH, Boppstrasse 10, 10967 Berlin, Germany, to create the link tree that takes users of our social media channels to our privacy policy, among other things. The Wonderlink link tree does not use cookies or other technologies to create user profiles or to analyze user data in any way.

The use of this service is in our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR in a legally compliant use of social media platforms.

You can contact Seyffert mit Himmelspach GmbH regarding data protection issues via the e-mail address support(at)wonderlink.de.

Here you can find more information about Wonderlink and the privacy policy of Seyffert mit Himmelspach GmbH.

5. facebook

The operating company of Facebook is Meta Platforms, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

You can contact the Data Protection Officer of Meta Platforms Ireland Ltd. via the Meta Platforms Ireland Ltd. contact form.

The data policy published by Facebook provides information about the collection, processing and use of personal data by Facebook. It also explains what settings options Facebook offers to protect the privacy of the data subject. Various applications are also available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

a) Purpose and scope of the processing of personal data

We use the Facebook Insights statistics service to optimize our Facebook fan page. There is a joint responsibility between us and Meta Platforms Ireland for the processing of personal data via this service. You can find more information on joint responsibility here. When you visit our site, Facebook Insights records your activities and makes the data available to us via anonymized statistics. You can find information about Facebook Insights here.

If you contact us via Facebook, share or comment on our posts, we will receive further data, such as your Facebook account name, date and time of your post or contact. The other data records or information provided by you depend on the content of the comments or the purpose of your contact.

b) Legal basis for the processing of personal data

We process the data provided by you in connection with your interaction with our site or your contacting us and which may be accessible to us in order to safeguard our legitimate interests in contacting and communicating with our interested parties, which predominate in the context of a balancing of interests. This also constitutes our legitimate interests in data processing pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

c) Storage period and deletion of data

The storage period of the data that you transmit to us essentially depends on the reason for your contacting us. If the respective purpose for data processing no longer applies, we delete or block the data concerned.

Information on the storage period on Facebook can be found here.

d) Disclosure of data

We do not pass on data that we have received from you via our Facebook page to third parties.

Facebook may transfer data to the USA or other countries outside the European Union. You can find information on how to restrict this here.

6. instagram

Instagram is an online service of Meta Platforms, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

You can contact the Data Protection Officer of Meta Platforms Ireland Ltd. via the Meta Platforms Ireland Ltd. contact form.

a) Information on data processing by Meta Platforms Ireland

The Instagram Privacy Policy specifies the categories of personal data that are processed when using Meta Platforms products (see I.), describes in general terms the purposes for which this data is used (see II.) and specifies the categories of recipients to whom this data may be disclosed (see III., IV.). You can also find information on the legal basis for the processing of this data (see V.) and information on how you can withdraw your consent to the processing of personal data under the link to the privacy policy.

Further information on the respective legal basis can be found here. Please refer to the Privacy Policy for information on how you can exercise your rights of access, rectification, portability and erasure against Meta Platforms Ireland (see VI.). Under this point you will also find information about your right to object to certain processing of personal data.

You can find more information about your control options in this help article. In the Privacy Policy you will also find information about the duration for which personal data is stored and information about the criteria for determining this duration and the possibility of blocking or deleting Instagram accounts (see VII.). The Privacy Policy refers to Meta Platforms Ireland’s intention to transfer data to third countries on the basis of adequacy decisions or standard contractual clauses issued by the European Commission (see IX.).

We have set up our Instagram page as a business profile and use anonymized page statistics (“Instagram Insights”) provided by Meta Platforms Ireland, which provide us with insights about visitors to our Instagram page and their interactions with our Instagram page and its content. We do not contribute to the decision on the means and purposes of processing event data used to generate site statistics. The statistics contain the following information:

  • Reach, page views, dwell time for video contributions
  • Interactions such as marking a post with “Like”, commenting or sharing posts
  • Demographic data on age, gender and location

We use this data to recognize trends. It is not possible for us to link back to the people who triggered these events.

b) Information on the use of cookies by Meta Platforms Ireland

If you visit our Instagram page and your browser allows cookies to be stored, Meta Platforms Ireland stores information in the form of small text files in your browser’s memory (hereinafter “cookies”) and can access this information when you visit the Facebook platform or a website that integrates Facebook technologies. For more information on the purpose of the cookies used, the integration of these cookies by other websites and your control options in this regard, please refer to the information on Instagram cookies.

We would like to point out that Meta Platforms Ireland is able to track your user behavior (for registered users across devices) on other websites beyond the Instagram platform by means of the cookies used. This applies both to persons registered on the Instagram platform and to persons not registered there.

We would also like to point out that we have no influence on the data processing carried out by Meta Platforms Ireland in connection with cookies. It is also possible to visit our Instagram page if you configure your browser so that no cookies are stored by the Facebook platform. Information on how to adjust the settings for cookies in your browser can usually be found in the help section of the browser you are using.

If you are registered or logged in to the Instagram or Facebook platform and want to prevent Meta Platforms Ireland from linking your visit to our Facebook page to your Instagram or Facebook user account, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies on your device and close and restart your browser.

c) Data processing for interactions on our Instagram page

Our Instagram page offers you the opportunity to react to our posts, comment on them and send us private messages. Please check carefully what personal data you share with us via our Instagram page. If you wish to prevent Meta Platforms Ireland from processing personal data that you have provided to us, please contact us by other means.

In addition to the content you submit, depending on your privacy settings, information about your profile, your likes and your posts will be visible to us. You can find out how to change your privacy settings in this help article.

The processing of your data when contacting or interacting with our site or its content is carried out by us on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in responding to your request. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

We process the data provided by you in this context and which may be accessible to us in order to safeguard our legitimate interests in contacting and communicating with our interested parties, which predominate in the context of a balancing of interests. This also constitutes our legitimate interests in data processing pursuant to Art. 6 para. 1 lit. f GDPR.

Your data will, as far as possible, be deleted when we cease to operate our Instagram page. Any further storage of this data by Meta Platforms Ireland is governed exclusively by the provisions of the Instagram Privacy Policy and Instagram Terms of Use.

7th YouTube

YouTube is an online service of YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for the data processing of persons living outside the United States.

You can contact Google’s data protection department using this contact form.

a) Purpose and scope of the processing of personal data

YouTube collects and processes your personal data as the sole controller when you visit our YouTube channel. This includes, for example, your IP address and other information that can usually be assigned to your device via cookies.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy.

b) Legal basis for the processing of personal data

We process the data provided by you in connection with your interaction with our YouTube channel or your contacting us and which may be accessible to us in order to safeguard our legitimate interests in contacting and communicating with our interested parties, which predominate in the context of a balancing of interests. This also constitutes our legitimate interests in data processing pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

c) Storage period and deletion of data

The storage period of the data that you transmit to us essentially depends on the reason for your contacting us. If the respective purpose for data processing no longer applies, we delete or block the data concerned.

Information on the storage duration of data by YouTube or Google can be found here.

Information on opt-out options can be found here.

d) Disclosure of data

We do not pass on data that we have received from you via our YouTube channel to third parties.

YouTube or Google may transfer data to the USA or other countries outside the European Union. You can find information on how to restrict this here.

8th Vimeo

Vimeo is an online service of Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA.

You can contact Vimeo’s data protection department at the e-mail address privacy(at)vimeo.com.

a) Purpose and scope of the processing of personal data

Vimeo collects and processes your personal data as the sole controller when you access our Vimeo channel. This includes, for example, your IP address and other information that can usually be assigned to your device via cookies.

Further information on the purpose and scope of data collection and its processing by Vimeo can be found in the privacy policy and the cookie policy.

b) Legal basis for the processing of personal data

We process the data provided by you in connection with your interaction with our Vimeo channel or your contacting us and which may be accessible to us in order to safeguard our legitimate interests in contacting and communicating with our interested parties, which predominate in the context of a balancing of interests. This also constitutes our legitimate interests in data processing pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

c) Storage period and deletion of data

The storage period of the data that you transmit to us essentially depends on the reason for your contacting us. If the respective purpose for data processing no longer applies, we delete or block the data concerned.

Information on how long Vimeo stores data can be found here.

Information on opt-out options can be found here.

d) Disclosure of data

We do not pass on data that we have received from you via our Vimeo channel to third parties.

Vimeo may transfer data to the USA or other countries outside the European Union. You can find information on how to restrict this here.

9. X

X is an online service of X Corp, 1355 Market Street, Suite 900, San Francisco, CA 94103 USA. X International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, is responsible for the data processing of persons living outside the United States.

You can contact X’s Data Protection Officer via this contact form or by post at X International Company, Attn. Data Protection Officer, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland.

We would like to point out that you use the X short messaging service offered here and its functions under your own responsibility. This applies in particular to the use of interactive functions (e.g. sharing, rating).

a) Purpose and scope of the processing of personal data

The data collected about you when you use the service is processed by X Inc. processed. This includes your IP address, the application used, information about the end device you are using (including device ID and application ID), information about websites accessed, your location and your mobile phone provider.

This data is assigned to the data of your X account or your X profile. We have no influence on the type and scope of the data processed by X, the type of processing and use or the disclosure of this data to third parties. Information about which data is processed by X and for what purposes it is used can be found in X’s privacy policy and via the option to view your own data at X. You also have the option of requesting information via the X data protection form or the archive requests.

Via X buttons or widgets integrated into websites and the use of cookies, X is able to record your visits to these websites and assign them to your X profile. This data can be used to tailor content or advertising to you. Information on this and the available setting options can be found on X Support pages here and here.

Finally, X also receives information when you view content, for example, even if you have not created an account. This so-called “log data” can be the IP address, the browser type, the operating system, information about the previously accessed website and the pages you have accessed, your location, your mobile phone provider, the end device you are using (including device ID and application ID), the search terms you have used and cookie information.

You have the option of restricting the processing of your data in the general settings of your X account and under “Data protection and security”. In addition, you can restrict X’s access to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in the settings options there. However, this depends on the operating system used. Further information on these points can be found on this X support page.

The data you enter at X, in particular your user name and the content published under your account, will be processed by us to the extent that we may retweet your tweets or reply to them or write tweets from us that refer to your account. The data freely published and disseminated by you on X is thus included in our offer by Einkaufsbüro Deutscher Eisenhändler GmbH and made accessible to our followers.

The aforementioned data is processed by us for customer loyalty and advertising purposes.

b) Legal basis for the processing of personal data

We process the data provided by you in connection with your interaction with our X-channel or your contacting us and which may be accessible to us in order to safeguard our legitimate interests in contacting and communicating with our interested parties, which predominate in the context of a balancing of interests. This also constitutes our legitimate interests in data processing pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

c) Storage period and deletion of data

The storage period of the data that you transmit to us essentially depends on the reason for your contacting us. If the respective purpose for data processing no longer applies, we delete or block the data concerned.

Information on the storage duration of data by X can be found here.

d) Disclosure of data

We do not pass on data that we have received from you via our X-account to third parties.

X may transfer data to the USA or other countries outside the European Union. You can find information on how to restrict this here.

10th LinkedIn

LinkedIn is an online service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

You can contact LinkedIn’s data protection officer using this contact form.

a) Purpose and scope of the processing of personal data

We use LinkedIn to communicate with you and other interested parties and to inform you about Einkaufsbüro Deutscher Eisenhändler GmbH, among other things. As a rule, cookies are stored on your computer in which the usage behavior is stored. This user data is anonymized and aggregated by LinkedIn and made available to us for analysis. In addition, we only process the data records that you make available to us via LinkedIn. When processing personal data via LinkedIn, there is a joint responsibility between us and LinkedIn Ireland Unlimited Company. Further information on joint responsibility can be found here.

Further information on the purpose and scope of data collection and its processing by LinkedIn can be found in the privacy policy.

b) Legal basis for the processing of personal data

We process the data provided by you in connection with your interaction with our LinkedIn account or your contacting us and which may be accessible to us in order to safeguard our legitimate interests in contacting and communicating with our interested parties, which predominate in the context of a balancing of interests. This also constitutes our legitimate interests in data processing pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

c) Storage period and deletion of data

The storage period of the data that you transmit to us essentially depends on the reason for your contacting us. If the respective purpose for data processing no longer applies, we delete or block the data concerned.

Information on how long LinkedIn stores data can be found here.

d) Disclosure of data

We do not pass on data that we have received from you via our LinkedIn account to third parties.

LinkedIn may transfer data to the USA or other countries outside the European Union. You can find more information here.

11. xing

Xing is an online service of New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

You can find the contact details of Xing’s data protection officer here.

a) Purpose and scope of the processing of personal data

We use Xing to communicate with you and other interested parties and to inform you about Einkaufsbüro Deutscher Eisenhändler GmbH, among other things. As a rule, cookies are stored on your computer in which the usage behavior is stored. This user data is anonymized and aggregated by Xing and made available to us for analysis. In addition, we only process the data records that you make available to us via Xing.

Further information on the purpose and scope of data collection and its processing by LinkedIn can be found in the privacy policy.

b) Legal basis for the processing of personal data

We process the data provided by you in connection with your interaction with our Xing account or your contacting us and which may be accessible to us in order to safeguard our legitimate interests in contacting and communicating with our interested parties, which predominate in the context of a balancing of interests. This also constitutes our legitimate interests in data processing pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

c) Storage period and deletion of data

The storage period of the data that you transmit to us essentially depends on the reason for your contacting us. If the respective purpose for data processing no longer applies, we delete or block the data concerned.

You can find information on the storage period of data by Xing here.

d) Disclosure of data

We do not pass on data that we have received from you via our Xing account to third parties.

Information on the forwarding of data by Xing can be found here.

12. your rights

You have the right to request confirmation at any time as to whether we are processing your personal data and, if this is the case, to receive information about this data and the information specified in Art. 15 GDPR. Furthermore, you have the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR and the right to data portability pursuant to Art. 20 GDPR, provided that the applicable legal requirements are met.

In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.

If the processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a) GDPR, you have the right pursuant to Art. 7 para. 3 GDPR to withdraw your consent at any time with effect for the future.

To exercise your rights, you can contact us at any time using the contact details above.

a) Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

b) Right to lodge a complaint with a supervisory authority acc. Art. 77 para. 1 GDPR

If you suspect that your data is being processed unlawfully on our Instagram page, you can contact a supervisory authority. You have the right to lodge a complaint in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you turn at the above-mentioned locations. The supervisory authority to which the complaint has been submitted will then inform you of the status and outcome of your complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

13. existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

14. right to lodge a complaint with a supervisory authority acc. Art. 77 para. 1 GDPR

If you suspect that your data is being processed unlawfully on our Instagram page, you can contact a supervisory authority. You have the right to lodge a complaint in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you turn at the above-mentioned locations. The supervisory authority to which the complaint has been submitted will then inform you of the status and outcome of your complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.