HELLA Aglaia Mobile Vision GmbH
HELLA Aglaia Mobile Vision GmbH (Ullsteinstraße 140, 12109 Berlin) is running social media accounts on the networks Facebook, Instagram, LinkedIn, Twitter and YouTube. As operators of these pages we are, together with the respective network operators,
- Facebook: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, in the following: Facebook,
- Instagram: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, in the following: Instagram
- LinkedIn: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, in the following: LinkedIn,
- YouTube: Google LLC., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, in the following: YouTube
- Twitter: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, in the following: Twitter
controller in terms of Art. 4 No. 7 of the General Data Protection Regulation (GDPR).
We have, as joint controllers for these pages, entered into agreements with the network operators, which, among other things, regulate the conditions for the use of pages and similar appearances. The following agreements are applicable in each case:
LinkedIn: Data processing agreement from LinkedIn.
Twitter: The general terms and conditions of Twitter and the guidelines referred to there
When visiting our social media pages, personal data of the page visitors are processed by the controller as follows.
2. Use of insights, analyses and cookies
In connection with the operation of our social media accounts, we use the analysis functions provided by the network operators to obtain statistical evaluations regarding the users of our social media pages.
For this purpose, cookies and similar technologies such as Pixel are used by the network operators and a unique personal identifier is created in each case. The identifier can be linked to the data of users who are registered with the social media platform.
3. Purposes of Processing
The processing of this information is intended, inter alia, to enable network operators to improve their system of advertising which they disseminate through their networks. It is also intended to enable us, as the operator of the social media pages, to obtain statistics which are compiled on the basis of visits to our social media pages. This is intended to control the marketing of our activities. For example, it enables us to understand trends in the profiles of visitors who value our social media pages or use applications of the pages to provide them with more relevant content and develop features that may be of greater interest to them.
To help us better understand how our social media pages can be used to support our business objectives, demographic and geographic analyses are also prepared and made available to us based on the information collected. For example, we may use this information to serve targeted interest-based advertisements. However, we do not obtain direct knowledge of the identity of the visitor in this process. If visitors use social media services on several end devices, the collection and evaluation can also be carried out across devices and platforms, if the visitors are registered and logged in to their own profile.
The created visitor statistics are only transmitted to us in anonymized form and we have no access to the underlying data.
We also use our social media pages to communicate with our customers, interested parties and users and to inform them about our range of services. In this context, we may receive additional information, e.g. due to user comments, private messages or due to you following us or sharing our content. This information is processed solely for the purpose of communication and interaction with you.
4. Legal Basis and Legitimate Interests
We operate our social media accounts in order to present ourselves to the users of these platforms and other interested persons who visit our social media accounts and to communicate with them. The processing of users personal data is carried out on the basis of our legitimate interests in an optimised presentation of our company and services (Art. 6 para. 1 sentence 1 lit. f GDPR).
5. Transfer of Data
For Facebook, Instagram, YouTube, Twitter and LinkedIn, it is possible that some of the information collected is also processed outside the European Union in the United States of America.
The USA are a so-called unsecure third countries. A third country is considered to be unsafe if the EU Commission has not issued an adequacy decision for this country in accordance with Art. 45 para. 1 GDPR, which confirms that the country provides adequate protection for personal data.
With the ECJ ruling of 16 July 2020 (C-311/18), the (partial) adequacy decision for the USA, the so-called Privacy Shield, was declared void. The USA does not offer a level of data privacy comparable to that in the EU. The following risks exist when personal data is transferred to the USA: There is a risk that U.S. authorities may gain access to personal data on the basis of the PRISM and UPSTREAM surveillance programs based on Section 702 of the FISA (Foreign Intelligence Surveillance Act), as well as on the basis of Executive Order 12333 or Presidential Police Directive 28. EU citizens do not have effective remedies for legal protection against such accesses in the USA or the EU.
Facebook and Instagram: Facebook transfers personal data to Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, US (hereinafter: Facebook Inc.), based in the USA, on the basis of standard contractual clauses approved by the European Commission. We have no control over these processing operations. We ourselves do not pass on personal data that we receive via our Facebook page.
LinkedIn: LinkedIn transfers personal data to LinkedIn Corporation 1000 W Maude Ave Sunnyvale, CA, US (hereinafter: LinkedIn Corporation) based on standard contractual clauses approved by the European Commission. We have no control over these processing operations. We ourselves do not pass on personal data we receive via our LinkedIn page.
YouTube: YouTube transfers personal data based on standard contractual clauses approved by the European Commission to Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter: Google). We have no control over these processing operations. We ourselves do not pass on personal data that we receive via our YouTube channel.
Twitter: Twitter transfer personal data to Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, on the basis of standard contractual clauses approved by the European Commission. We have no control over these processing operations. We ourselves do not pass on any personal data that we receive via our presence on Twitter.
6. Essence of common responsibility / Assertion of rights of affected persons
With the agreement that we have with Facebook and Instagram for our Facebook and Instagram appearances, the operators recognize the joint responsibility under data protection law with regard to so-called Insights data and assume essential duties under data protection law to inform data subject, to ensure data security and to report data protection violations. In addition, it is set out in the agreement with Facebook that Facebook is the primary contact for the exercise of rights of data subjects (sec. 15 – 22 EU-GDPR). As the provider of the platform, Facebook alone has direct access to the necessary information and can also take any necessary measures and provide information immediately. Should our support nevertheless be necessary, we can be contacted at any time.
The agreement we have with LinkedIn states that LinkedIn will inform us as soon as an data subject exercises their data subject rights (sec. 15 – 22 EU-GDPR). LinkedIn will assist in responding to requests for information. You can enforce your data subject rights against us and LinkedIn.
The agreement we have entered into with Google in relation to our YouTube channel also provides for you to enforce your data subject rights against us and Google.
7. Right to Object
In particular, you have the following possibilities to enforce your right to object:
Facebook and Instagram: Under the settings for advertising preferences, users of Facebook and Instagram can influence the extent to which their user behavior may be recorded when visiting our Facebook page or Instagram profile. Further options for objection are offered by the Facebook settings or the form for the right of objection provided via Facebook. Objections for Instagram can also be made via the form.
LinkedIn: The processing of LinkedIn can be objected here. Further settings can be made using the form for objection.
YouTube: The processing of YouTube can be objected via the Google account settings. More information on how to make adjustments in the privacy settings can be found here.
Twitter: Processing by Twitter can be partially objected via the settings in your Twitter account. You can find more information here.
8. Further Information
More information about the handling of personal data, can be found in privacy policies of Facebook, Instagram, YouTube, LinkedIn and Twitter.