Privacy Policy

General

As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that reveals something about you and with which you can be identified. In this privacy policy, we would like to explain how, for what purpose, and on what legal basis we process your data.

Responsible for data processing on this website and in our company is:

Messerschmidt GmbH
Rotebachring 45
74564 Crailsheim

Phone: 07951 295331
E-Mail: info@grabstein-steinmetz.de

General Notes

SSL or TLS encryption

When you enter your data on websites, place online orders, or send e-mails over the Internet, you must always expect that unauthorized third parties may access your data. Complete protection against such access does not exist. However, we do everything in our power to protect your data to the best of our ability and to close security gaps as far as we can.

An important security mechanism is the SSL or TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the lock icon in front of the entered Internet address in your browser and by the fact that our Internet address begins with https:// and not http://.

Encrypted payment transactions

Payment data, such as account or credit card numbers, are particularly in need of protection. For this reason, payment transactions involving common payment methods are processed by us exclusively via an encrypted SSL or TLS connection.

How long do we store your data?

In some places in this privacy policy, we inform you about how long we or the companies that process your data on our behalf store your data. If no such information is provided, we will store your data until the purpose of the data processing no longer applies, you object to the data processing, or you revoke your consent to the data processing.

In the event of an objection or revocation, we may, however, continue to process your data if at least one of the following conditions is met:

We have compelling legitimate grounds for the continued processing of data that override your interests, rights, and freedoms (only in the event of an objection to data processing; if the objection is directed against direct marketing, we cannot put forward any legitimate grounds).

Data processing is necessary to establish, exercise, or defend legal claims (this does not apply if your objection is directed against direct marketing).

We are legally obligated to retain your data.

In this case, we will delete your data as soon as the condition(s) no longer apply.

Data transfer to the USA

On our website, we also use tools from companies that transfer your data to the USA, where it is stored and potentially further processed. This is of particular importance to you because your data in the USA does not enjoy the same protection as it does within the EU, where the General Data Protection Regulation (GDPR) applies. For example, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It may therefore be the case that US authorities (e.g., intelligence services) process, evaluate, and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

Your Rights

Objection to data processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS FOR PROCESSING YOUR DATA AND THEREFORE BASE THIS ON ART. 6(1) SENTENCE 1 LIT. F) GDPR, YOU HAVE THE RIGHT UNDER ART. 21 GDPR TO OBJECT TO THIS. THIS ALSO APPLIES TO PROFILING BASED ON THE AFOREMENTIONED PROVISION. A PREREQUISITE IS THAT YOU PROVIDE REASONS FOR THE OBJECTION RESULTING FROM YOUR PARTICULAR SITUATION. JUSTIFICATION IS NOT REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT MARKETING PURPOSES.

THE CONSEQUENCE OF AN OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS ONLY DOES NOT APPLY IF ONE OF THE FOLLOWING CONDITIONS IS MET:

  • WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS.
  • THE PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS.

THE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT MARKETING OR AGAINST PROFILING CONNECTED TO IT.

Further rights

Revocation of your consent to data processing

Many data processing operations take place on the basis of your consent. You provide this, for example, by checking a corresponding box in online forms before sending the form, or by allowing certain cookies when visiting our website. You can revoke your consent at any time without giving reasons (Art. 7(3) GDPR). From the time of revocation, we may no longer process your data. The only exception: We are legally obligated to retain the data for a certain period of time. Such retention periods exist in particular in tax and commercial law.

Right to lodge a complaint with the competent supervisory authority

If you believe that we are in violation of the General Data Protection Regulation (GDPR), you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. You may contact a supervisory authority in the Member State of your habitual residence, your place of work, or the place where the alleged infringement took place. The right to lodge a complaint exists without prejudice to administrative or judicial remedies.

Right to data portability

Data that we process automatically based on your consent or in the fulfillment of a contract must be handed over to you or a third party in a standard, machine-readable format if you request it. We can only transfer the data to another controller to the extent that it is technically feasible.

Right to access, deletion, and rectification

Under Art. 15 GDPR, you have the right to receive information free of charge about what personal data of yours we have stored, where the data comes from, to whom we transmit the data, and for what purpose it is stored. Should the data be incorrect, you have a right to rectification (Art. 16 GDPR); under the conditions of Art. 17 GDPR, you may demand that we delete the data.

Right to restriction of processing

In certain situations, you can demand under Art. 18 GDPR that we restrict the processing of your data. The data may then—apart from storage—only be processed as follows:

  • with your consent
  • for the establishment, exercise, or defense of legal claims
  • for the protection of the rights of another natural or legal person
  • for reasons of important public interest of the European Union or of a Member State

The right to restriction of processing exists in the following situations:

  • You have contested the accuracy of the personal data we have stored about you, and we need time to verify this. Here, the right exists for the duration of the verification.
  • The processing of your personal data is unlawful or was unlawful in the past. Here, the right exists as an alternative to the deletion of the data.
  • We no longer need your personal data, but you need it for the exercise, defense, or establishment of legal claims. Here, the right exists as an alternative to the deletion of the data.
  • You have objected pursuant to Art. 21(1) GDPR and your interests and ours must now be weighed against each other. Here, the right exists as long as the result of the weighing is not yet certain.

External hosting

Our website is hosted on a server of the following provider of Internet services (hoster):

Shopify International Limited
Victoria Buildings, 2nd Floor
1-2 Haddington Road
Dublin 4, D04 XN32
Ireland

Shopify has included a Data Processing Addendum in its terms and conditions. Further information on data protection at Shopify can be found at: https://www.shopify.de/legal/datenschutz The Data Processing Addendum can be found at: https://www.shopify.com/legal/dpa

How do we process your data?

Shopify stores all data of our website. This also includes all personal data that is collected automatically or through your input. This can, in particular, be: your IP address, pages accessed, names, contact details and inquiries, as well as meta and communication data. During data processing, Shopify adheres to our instructions and always processes the data only to the extent necessary to fulfill its service obligation towards us.

On what legal basis do we process your data?

Since we reach out to potential customers via our website and maintain contacts with existing customers, the data processing by Shopify serves contract initiation and fulfillment and is therefore based on Art. 6(1) lit. b) GDPR. Furthermore, it is our legitimate interest as a company to provide a professional Internet presence that meets the necessary requirements for security, speed, and efficiency. In this respect, we also process your data on the basis of Art. 6(1) lit. f) GDPR.

Data collection on this website

Use of cookies

Our website places cookies on your device. These are small text files used for various purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are needed to perform certain actions or functions on the site (functional cookies). For example, it would not be possible to use the benefits of a shopping cart in an online shop without cookies. Still other cookies are used to analyze user behavior or optimize advertising measures. If we use third-party services on our website, e.g., to process payments, these companies may also leave cookies on your device when you visit the website (so-called third-party cookies).

How do we process your data?

Session cookies are stored on your device only for the duration of a session. As soon as you close the browser, they disappear automatically. Permanent cookies, on the other hand, remain on your device unless you delete them yourself. This can lead to, for example, your user behavior being permanently analyzed. You can influence how your browser handles cookies via the settings in your browser:

  • Do you want to be informed when cookies are set?
  • Do you want to exclude cookies generally or for certain cases?
  • Do you want cookies to be deleted automatically when the browser is closed?

If you deactivate or do not allow cookies, the functionality of the website may be limited.

Insofar as we use cookies from other companies or for analytical purposes, we will inform you about this within the framework of this privacy policy. We will also ask for your consent in this regard when you visit our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our online services can be used by visitors without technical problems and that all desired functions are available to them. The storage of necessary and functional cookies on your device is therefore based on Art. 6(1) lit. f) GDPR. We use all other cookies on the basis of Art. 6(1) lit. a) GDPR, provided you give us your consent. You can revoke this at any time with effect for the future. If you consented to the placement of necessary and functional cookies when asked for consent, the storage of these cookies is also based solely on your consent.

Use of the consent management tool "Cookiebot"

We use the consent management tool Cookiebot from the company Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, on our website.

Cookiebot allows us to obtain, manage, and document the data-protection-compliant consent of users for the use of cookies and tracking technologies. When visiting our website, a cookie banner is displayed to the user, through which they can consent to or reject the use of certain cookies.

Data collected:

  • IP address in anonymized form

  • Date and time of consent

  • Browser information

  • URL of the visited page

  • Consent status, which is stored via a cookie

This data is stored on Cookiebot's servers in the EU and automatically deleted after 12 months, unless you revoke your consent beforehand or grant it again.

The storage of this data is based on Art. 6(1) lit. c GDPR (legal obligation) as well as Art. 6(1) lit. f GDPR (legitimate interest in the legally compliant documentation and management of consents). If you consent to the use of cookies, processing is further based on Art. 6(1) lit. a GDPR (consent).

Further information on data processing by Cookiebot can be found at:
https://www.cookiebot.com/de/privacy-policy/

How do we process your data?

We use Cookiebot to obtain your consent for the storage of cookies on your device and to document it in a data-protection-compliant manner. When you visit our website and close the Cookiebot cookie window with the consent request, the following data is transmitted to the company:

  • Your IP address (from which your country is also determined)
  • the browser used
  • the language used
  • the website accessed

Furthermore, Cookiebot stores various cookies in your browser in order to be able to assign the granted consent or its revocation to your browser. All collected data is stored until the cookies are no longer needed, you delete the cookies from Cookiebot, or you request us to delete the data. This only does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

We are legally obligated to obtain the consent of our website visitors for the use of certain cookies. To fulfill this obligation, we use Cookiebot. The legal basis for the data processing is therefore Art. 6(1) lit. c) GDPR.

Server log files

Server log files log all requests and accesses to our website and record error messages. They also include personal data, in particular your IP address. This is, however, anonymized by the provider after a short time so that we cannot assign the data to your person. The data is automatically transmitted by your browser to our provider.

How do we process your data?

Our provider stores the server log files in order to be able to trace activities on our website and to identify errors. The files contain the following data:

  • Browser type and version
  • operating system used
  • referrer URL
  • hostname of the accessing computer
  • time of the server request
  • IP address (possibly anonymized)

We do not combine this data with other data but only use it for statistical evaluation and for the improvement of our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our website runs without errors. It is also our legitimate interest to obtain an anonymized overview of the traffic on our website. Data processing is therefore lawful in accordance with Art. 6 (1) (f) GDPR.

Inquiry via email or telephone

You can send us a message via email or call us.

How do we process your data?

We store your message as well as the contact details you provided or the telephone number transmitted in order to be able to process your request, including any follow-up questions. We do not pass this data on to other persons without your consent.

How long do we store your data?

We delete your data as soon as one of the following points occurs:

  • Your request has been fully processed.
  • You request that we delete the data.
  • You withdraw your consent for storage.

This does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

Insofar as your request is related to our contractual relationship or serves the implementation of pre-contractual measures, we process your data on the basis of Art. 6 (1) (b) GDPR. In all other cases, it is our legitimate interest to effectively process requests directed to us. The legal basis for data processing is therefore Art. 6 (1) (f) GDPR. If you have consented to the storage of your data, Art. 6 (1) (a) GDPR is the legal basis. In this case, you can revoke your consent at any time with effect for the future.

Appointment booking with cituro

What is cituro?
Tool for appointment scheduling

Who processes your data?
cituro GmbH, Peter-Dörfler-Straße 30, 86199 Augsburg, Germany

Where can you find more information about data protection at cituro?
https://www.cituro.com/datenschutz

How do we process your data?

You can use the cituro tool to book an appointment with us. We use the data for scheduling, conducting, and, if applicable, following up on the appointment.

How long do we store your data?

We delete your data as soon as one of the following points occurs:

  • The purpose of the data processing has ceased.
  • You request that we delete the data.
  • You withdraw your consent for storage.

This does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

We have a legitimate interest in arranging appointments with customers and other interested parties as simply as possible. Data processing is therefore carried out on the basis of Art. 6 (1) (f) GDPR. If you have consented to the storage of your data, Art. 6 (1) (a) GDPR is the sole legal basis. In this case, you can revoke your consent at any time with effect for the future.

Analysis tools and advertising

We use the following tools to analyze the behavior of our website visitors and to show them advertising.

Google Analytics

What is Google Analytics?

Tool for analyzing user behavior provided by Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Has a data processing agreement been concluded with Google Analytics?

Yes

Where can you find more information about data protection at Google Analytics?

https://support.google.com/analytics/answer/6004245?hl=en

On what basis do we transfer your data to the USA?

On the basis of the European Commission's Standard Contractual Clauses (https://privacy.google.com/businesses/compliance)

How can you prevent data collection?

Among other things, with a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en

How do we process your data?

We are always interested in optimizing our website for our visitors and placing advertisements optimally. Google Analytics, a tool that analyzes user behavior and thus provides us with the necessary data basis for adjustments, helps us in this. Through the tool, we receive information about the origin of our visitors, their page views, and the length of time they spend on the pages, as well as the operating system they use.

Standard processing

To collect data, Google Analytics uses cookies, device fingerprinting, or other technologies to recognize users. The data is transmitted to Google servers in the USA and combined with the also recorded IP address into a profile that can be assigned to you or your device.

You can prevent Google from processing your data by installing a browser plugin provided by Google itself: https://tools.google.com/dlpage/gaoptout?hl=en.

IP anonymization

We have activated the "IP anonymization" function within Google Analytics. For you, this means that Google truncates your IP address (from the EU or EEA) before transmission to the USA. Only in exceptional cases will Google transmit the full IP address to servers in the USA and truncate it there.

Demographic features

We use the "demographic features" function of Google Analytics to display suitable advertisements to our website visitors within the Google advertising network. As a result, reports can be created that contain statements about the age, gender, and interests of our site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. It is not possible to assign the collected data to specific persons.

You can deactivate this function in the settings of your Google account.

E-commerce tracking

We use the "e-commerce tracking" function of Google Analytics. This allows us to analyze the purchasing behavior of our website visitors and improve our online marketing campaigns. With e-commerce tracking, for example, your orders, average order values, shipping costs, and the time from viewing to purchasing a product are recorded. Google can combine the data under a transaction ID and assign it to you or your device.

How long do we store your data?

According to its own information, Google deletes or anonymizes data stored at the user and event level that is linked to cookies, user identifiers (e.g., user IDs), or advertising IDs after 14 months (cf. https://support.google.com/analytics/answer/7667196?hl=en).

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in analyzing user behavior for the purpose of optimizing our web presence and the advertising placed there. Data processing is therefore lawful according to Art. 6 (1) (f) GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google Analytics, Art. 6 (1) (a) GDPR is the sole legal basis. You can revoke your consent at any time with effect for the future.

eCommerce and payment providers

Customer and contract data

How do we process your data?

When we conclude a contract with you, we require certain personal data from you. We only collect, process, and use this data to the extent necessary to establish, structure the content of, or modify our legal relationship. If you can only use our services via our website or if the services are billed via the website, we also collect usage data if this is necessary to enable you to use our offer or to bill for the service provided.

How long do we store your data?

We store your data until our legal relationship ends, unless we are legally obligated to retain the data for longer.

On what legal basis do we process your data?

We store your data in order to fulfill the contract with you or to perform pre-contractual measures. The basis for data processing is therefore Art. 6 (1) (b) GDPR.

Data transmission during goods shipment

How do we process your data?

When you order goods from us, we transmit your data to companies that we commission with delivery and/or through which we process payment. Only data that is necessary for the commissioned company to execute the specific order is transmitted. If we intend to share further data, we will obtain your consent. We do not pass on your data for advertising purposes.

On what legal basis do we process your data?

We pass on your data to fulfill the contract that we have concluded with you. The basis for data processing is therefore Art. 6 (1) (b) GDPR.

Payment services

In order for you to be able to pay for your purchases on our website conveniently, we use the service of payment services, i.e., external companies that process payments for us. You can see which ones these are specifically in the list at the end of this section.

How do we process your data?

For the payment process, you must provide certain personal data, e.g., your name, your account details, or credit card number. We pass this data on to the respective payment service. The respective terms and conditions and data protection provisions of the respective services apply to the transaction itself.

On what legal basis do we process your data?

We pass on your data to fulfill the contract that we have concluded with you. The basis for data processing is therefore Art. 6 (1) (b) GDPR. Furthermore, we have a legitimate interest in processing purchases as quickly, conveniently, and securely as possible. The legal basis is therefore also Art. 6 (1) (f) GDPR. If you have consented to the transfer of your data, the data processing is based on Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future.

Which payment services do we use?

Shopify Payments

What is Shopify Payments?
Payment service provider that bundles various payment services

Who processes your data?
Shopify Payments, 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2, Ireland

Where can you find more information about data protection at Shopify?
https://www.shopify.de/legal/datenschutz

Where can you find more information about data protection at Shopify?
https://stripe.com/de/privacy

Google Pay

What is Google Pay?
Mobile payment system of the US company Google

Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google Pay?
https://policies.google.com/privacy

On what basis do we transfer your data to the USA?
Google adheres to the Standard Contractual Clauses of the European Commission (https://privacy.google.com/businesses/compliance)

Apple Pay

What is Apple Pay?
Mobile payment service from Apple Inc.

Who processes your data?
Apple Inc., Infinite Loop, Cupertino, CA 95014, USA

Where can you find more information about data protection at Apple Pay?
https://www.apple.com/legal/privacy/de-ww/

On what basis do we transfer your data to the USA?
Apple Pay adheres to the Standard Contractual Clauses of the European Commission (cf. https://www.apple.com/legal/privacy/de-ww/)

Audio and video conferencing

As a company, we are in contact with many people: customers, business partners, service providers, etc. In doing so, we also use so-called online conference tools in addition to other means of communication for exchange. You can find information relevant to data protection law regarding the provider(s) of the tools we use at the end of this section. If you communicate with us via such a tool, not only do we process your personal data, but in particular the provider of the respective tool.

How do we process your data?

Online conference tools collect and store various personal data to enable participation in an online conference and its smooth execution. In addition to registration, conference, and technical data, this also concerns certain communication content.

Registration data: Your email address and/or telephone number and, if applicable, other data that you provide when registering for the conference.

Conference data: Start, end, and duration of your participation in the conference, the number of participants, and other metadata regarding the conference.

Technical data: IP address, MAC address, device ID, device type, operating system and version, client version, camera type, microphone or speaker, as well as the type of connection.

Communication content: Cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared while using the service.

Please refer to the privacy policies of the respective conference tool provider for details on data processing.

How long do we store your data?

As your communication partner, we delete your data from our systems as soon as one of the following points occurs:

The purpose of data processing ceases to exist.

You request that we delete the data.

You withdraw your consent for storage.

This does not apply if we are legally obligated to retain the data.

Cookies remain on your device until you delete them.

The providers of conference tools also store your data for their own purposes. Please ask the providers directly what this means for the duration of the storage of your data.

On what legal basis do we process your data?

If we are already contractually bound or you wish to conclude a contract with us, we use conference tools to fulfill the contract or to inform you about our services or products. Data processing is therefore carried out on the basis of Art. 6 (1) (b) GDPR. Otherwise, the use of conference tools serves the purpose of simple and fast communication, without which we could not manage our company efficiently. We therefore also have a legitimate interest in data processing according to Art. 6 (1) (f) GDPR. Another legal basis can be your consent. In this case, Art. 6 (1) (a) GDPR is relevant. This basis no longer applies for the future if you withdraw your consent.

Which online conference tools do we use?

join.me

What is join.me?
Communication platform for online meetings

Who processes your data?
LogMeIn Ireland Limited, Bloodstone Building Block C, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland

Has a data processing agreement been concluded with join.me?
Yes

Where can you find more information about data protection at join.me?
https://www.goto.com/de/company/legal/privacy/international

On what basis do we transfer your data to the USA?
LogMeIn adheres to the Standard Contractual Clauses of the European Commission

Data processing on social media

What is social media?

By social media, we mean the social networks on which we have created publicly accessible profiles. You can read which social networks these are specifically below.

Who processes your data?

The respective operating companies of the social networks. You can find the individual operators below for the respective networks.

How is your data processed?

The operators of social networks are generally able to collect and evaluate comprehensive data about the behavior of visitors and users of the network. It is not possible for us to track all processing operations on the social networks we use, which is why other processing operations that are not listed here may be carried out by the operators of the social networks. You can find more information about this in the terms of use and privacy policies of the respective social networks.

The processing of your data may be triggered by you visiting the social network's website or our profile page there. Even if you access a website that uses certain content from the network, e.g., like or share buttons, data may already be transmitted to the operators of the social network. If you are a user of the social network yourself and are logged into your user account, your visit to our profile page can be assigned to your account by the operator of the social network. Even if you have not registered a user account or are not logged in, it is possible that the operator of the network will still collect your personal data, e.g., by recording your IP address or setting cookies. With this data, the operators can create user profiles tailored to your behavior and interests and show you interest-based advertising inside and outside the network. If you are a registered user of the network, interest-based advertising can also be displayed on all devices on which you are or were logged in.

On what legal basis is your data processed?

Our profiles on social networks are intended to ensure the most comprehensive presence of our company on the Internet. As a company, we have a legitimate interest in this. The data processing is therefore lawful under Art. 6 (1) (f) of the GDPR.

The data processing operations and analyses carried out by the operators of the social networks themselves may be based on other legal grounds. These must be specified by the operators of the social networks.

Who is responsible for the processing of your data and how can you assert your rights?

When you visit one of our profiles on social networks, we are jointly responsible with the operator of the respective network for the data processing operations triggered during this visit. In principle, you can assert your rights both against us and against the operator of the respective network.

Despite our joint responsibility with the operators of the social networks, our influence on the data processing operations of the respective operator is limited and is primarily based on the operator's guidelines.

How long will your data be stored?

When we collect data via our profiles on social networks, it will be deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, or you withdraw your consent for storage. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no control over how long the operators of the social networks store your data, which the operators collect for their own purposes. You can obtain information on this directly from the operator of the respective social network, e.g., in their respective privacy policy.

Which social media do we use?

Facebook

What is Facebook?
Social network

Who processes your data?
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland

Where can you find more information about data protection at Facebook?
https://de-de.facebook.com/privacy/explanation

On what basis do we transfer your data to the USA and other third countries?
On the basis of standard contractual clauses and adequacy decisions of the European Commission (cf. https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381)

Instagram

What is Instagram?
Social network

Who processes your data?
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Where can you find more information about data protection at Instagram?
https://instagram.com/about/legal/privacy/

On what basis do we transfer your data to the USA and other third countries?

On the basis of standard contractual clauses and adequacy decisions of the European Commission (cf. https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381)

Pinterest

What is Pinterest?
Visual search engine and online pinboard

Who processes your data?
Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

Where can you find more information about data protection at Pinterest?
https://policy.pinterest.com/de/privacy-policy

On what basis do we transfer your data to the USA?
On the basis of standard contractual clauses of the European Commission (cf. https://policy.pinterest.com/de/privacy-policy#section-residents-of-the-eea)

TikTok

What is TikTok?
Social network in the form of a video platform for short videos

Who processes your data?
TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

Where can you find more information about data protection at TikTok?
https://www.tiktok.com/legal/tiktok-website-cookies-policy?lang=de