1 General
I. I. Registration on Social Media platforms
Users can register themselves on social media platforms, on which we present our company, by providing their personal data. The data is entered into an input mask and transmitted to the provider of the platform and stored. Users register themselves on the respective social media platforms on a voluntary basis. We would like to point out that each user uses our websites on social media platforms and their functions under their own responsibility. This applies in particular to the use of interactive functions, such as commenting, sharing or rating. When visiting our websites on social media platforms, the provider of the platform collects user information, such as IP address, through the end device used by the user. Our company is not involved in the processing of personal data when the interactive functions are used and during the registration process on social media platforms. Information on the legal basis for data processing, the purpose of data processing, the duration of storage, requests for information, and the option of objection and disposal can be found in the information on data protection of the respective platform provider.
Joint responsibility applies to all further processing of personal data in accordance with Art. 26 EU General Data Protection Regulation (EU GDPR). For our company's Privacy Policy, please see Sections II to VI.
I. II. Data Privacy Statement of the DESOI GmbH
1. 1. Name and Address of Controller
Responsible for all content in accordance with the EU General Data Protection Regulation, other national data privacy regulations of EU member states, and all other data privacy regulation is:
DESOI GmbH
Frau Regina Desoi, Herr Martin Desoi
Gewerbestraße 16
36148 Kalbach
GERMANY
Phone: +49 6655 96360
Email: info@desoi.de
Website: www.desoi.de
1. 2. Name and Address of the Data Security Officer
Serving as Data Security Officer for the Responsible Parties is:
BerIsDa GmbH
Rangstraße 9
36037 Fulda
GERMANY
Phone: +49 661 29698090
Email: datenschutz@berisda.de
Website:
www.berisda.de
I. III. General Information on Data Processing
1. 1. Extent to which Personal Data is Processed
In principle, we collect and use our users' personal data only if it is provided by the user and is required for interaction which we ask for.
1. 2. Legal Basis for Processing Personal Data
Any time we request consent for the collection of data for processing, Article 6 Paragraph 1a of the EU General Data Protection Regulation serves as the legal basis. For the processing of personal data required for the fulfillment of a contract to which the user is a party, Article 6 Paragraph 1b of the EU General Data Protection Regulation serves as the legal basis. This rule also applies to the processing necessary to prepare entry into a contract.
To the extent that processing personal data is required for the fulfillment of a legal obligation that our company is subject to, Article 6 Paragraph 1c of the EU General Data Protection Regulation serves as the legal basis. For the case that processing personal data is required to protect the vital interests of the user or of any other natural person, Article 6 Paragraph 1d of the EU General Data Protection Regulation serves as the legal basis. If processing personal data is required to protect the legitimate interest of our company or of a third party and such interests are not overriden by the interests, fundamental rights or basic freedoms of the user or third party, Article 6 Paragraph 1f of the EU General Data Protection Regulation serves as the legal basis.
1. 3. Deletion of Data and Duration of Data Storage
The user's personal data will be deleted or made inaccessible as soon as the purpose for its storage is no longer valid. Data may however remain in storage beyond this period if specified in European or national statutes relevant to EU law, regulations or other rules to which the the Responsible Parties are subject. Data will be deleted or made inaccessible when and if the storage duration specified in the named legal requirements expires, unless continued storage is required to fulfill a contractual obligation.
I. IV. Users' Rights
If your personal data are being stored or processed then you are a "Data Subject" in accordance with the General Data Protection Regulation, which gives you the following rights vis a vis the Controller:
1. 1. Right of Access by the Data Subject
The data subject shall have the right to be informed by the controller whether or not his personal data is being processed. In the case that your personal data is being used, you may us to provide the following information:
(1) the purposes to which the personal data is being used;
(2) the categories of personal data being processed;
(3) the recipients with whom the personal data has been or will be shared;
(4) the duration or length of time which the personal data is to be stored
(5) the existence of your rights
(7) all available information about the source of the data
(8) the existence of automated decision-making, including profiling in accordance with Article 22 Paragraphs 1 and 4 You have the right to require that we inform you as to whether your personal data were transferred to a foreign country or to an international organization. In this context you may require the Controller to inform you about the appropriate guarantees with regard to such a transfer in accordance with Article 46 of the EU General Data Protection Regulation.
1. 2. Right to Rectification
You have the right to obtain from us the rectification and/or completion of inaccurate or incomplete personal data. The Controller is required to carry out the rectification or completion without delay.
1. 3. Right to Restriction of Processing
If the following conditions are met you may require us to refrain from processing your personal data:
(1) if you contest the correctness of your personal data for a period allowing us to verify its accuracy;
(2) the processing is unlawful and you oppose the erasure of the personal data and prefer instead to restrict its use;
(3) the controller no longer needs the personal data for the purposes of the processing but it is nonetheless required by the data subject for the establishment, exercise or defense of legal claims, or
(4) the data subject has objected to processing his personal data in accordance with Article 21 Paragraph 1 of the EU General Data Protection Regulation and it has yet to be determined whether the legitimate reasons of the controller override those of the data subject.
If the processing of your personal data has been restricted, it can only be processed with your consent or for purposes of establishing, exercising or defending legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or one of its member states.
If processing of personal data has been restricted in accordance with any of the requirements described above, you will be informed before the restriction of processing is lifted.
1. 4. Right to Erasure
a. a) Duty to delete
You have the right to require from the controller that your personal data be deleted immediately and the controller is obligated to delete it without delay provided any of the following grounds applies:
(1) your personal data is no longer required for the purposes for which it was collected or otherwise to be processed.
(2) you withdraw your consent, on which the processing of the data was legally based, in accordance with Article 6 Paragraph 1a or Article 9 Paragraph 2a of the EU General Data Protection Regulation, and no other legal ground for processing is in effect.
(3) you object to the processing in accordance with Article 21 Paragraph 1 of the EU General Data Protection Regulation and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Article 21 Paragraph 2.
(4) your personal data was processed unlawfully.
(5) the personal data has to be erased for compliance with a legal obligation of an EU or member state law to which the controller is subject.
(6) the personal data was collected in relation to the offer of information society services referred to in Article 8 Paragraph 1 of the EU General Data Protection Regulation.
a. b) Information to Third Parties
If the controller has made the personal data public and is obliged in accordance with Paragraph 1 to delete the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the deletion by such controllers of any links to, or copy or replication of, those personal data.
a. c) Exceptions
The right to insist on deletion shall not apply to the extent that processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by EU or member state law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with Article 9 Paragraph 2h and i as well as Article 9 Paragraph 3 of the EU General Data Protection Regulation;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 Paragraph 1 of the EU General Data Protection Regulation in so far as the right referred to in Paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or (5) for the establishment, exercise or defense of legal claims.
1. 5. Right to Notification
If you have asserted your right to rectification, deletion or restriction of the processing of your personal data, the controller is obliged to communicate this rectification, deletion or restriction of processing to all recipients with whom the personal data was shared, unless such communication proves to be impossible or involves disproportionate effort. You have the right to be informed of all of these recipients.
1. 6. Right to Data Portability
You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance from the controller to which the personal data was provided, on the condition that
(1) the processing is based on consent pursuant to Article 6 Paragraph 1a of the EU General Data Protection Regulation or on a contract pursuant to Article 6 Paragraph 1b. and
(2) the processing is carried out by automated means.
In exercising this right you also have the right to have the personal data concerning you be transmitted directly from one controller to another, where technically feasible. This right shall not adversely affect the rights and freedoms of others. The right to data portability does not apply to the processing of personal data which is required for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
1. 7. Right to object
You have the right to object to processing of personal data concerning you, as well as to processing of a personal profile, on grounds relating to your particular situation at any time, on the basis of Article 6 Paragraph 1e of the EU General Data Protection Regulation.
The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
If personal data concerning you are processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing; this applies to the profile as well, to the extent that it's used for direct marketing.
If you object to data processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her rights to object by automated means using technical specifications.
1. 8. Right to Revoke Consent
You have the right to revoke your consent to the gathering and processing of your personal data at any time. The revocation of consent shall not affect the lawfulness of processing based on consent before its revocation. You can send the revocation either by post or by email to the data controller.
1. 9. Automated Individual Decision-Making, including Profiling
You have the right to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or otherwise significantly affecting you. This rule does not apply if the decision:
(1) is necessary for entering into or fulfilling a contract between you and a data controller;
(2) is authorized by an EU or member state law to which the controller is subject and which also laws down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests; or
(3) is based on the data subject's explicit consent. Such decisions shall not be based on special categories of personal data referred to in Article 9 Paragraph 1 of the EU General Data Protection Regulation unless Article 9 Paragraph 2a or g applies and suitable measures to safeguard the data subject's rights and freedoms and legitimate interests are in place.
In the cases referred to under (1) and (3), the data controller shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
1. 10. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the member state of his or her normal residence, place of work, or place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes the EU General Data Protection Regulation.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 of the EU General Data Protection Regulation.
I. V. E-Mail Contact
1. 1. Description and Extent of Data Processing
We provide email addresses on the social media platforms we use as well as in our own email signatures to enable the user to contact us. All personal data concerning the user which is transmitted with the email will be stored. This personal data will not be shared with third parties. The data is stored purely for purposes of managing the conversation with the user.
1. 2. Legal Basis for Processing Data
The legal basis for processing data sourced from emails is provided by Article 6 Paragraph 1f of the EU General Data Protection Regulation. If the email is sent for purposes of concluding a legal contract, the legal basis is Article 6 Paragraph 1b.
1. 3. Purpose for Processing Data
Processing personal data serves solely to facilitate communication with customers. This communication provides the required legitimate interest in processing data.
1. 4. Duration of Storage
The data is deleted as soon as it is no longer required for the purpose for which it was gathered. In the case of personal data gathered from email, it is deleted as soon as the conversation with the user is ended. The conversation is considered to be over when the circumstances indicate that the issue under discussion has been resolved.
1. 5. Rights of Objection and Deletion
Any time a user contacts us with an email, he has the right to object to us storing and/or processing his personal data. All personal data stored as a result of the contact will be deleted. However, in this case it will not be possible to continue the conversation.
I. VI. Contact via a Social Media Platform (Contact form, Chat)
Description and Extent of Data Processing
Some social media platforms enable users to contact content providers using internal functionality. (eg. using a contact form or a chat app) If the user takes the opportunity to use one of these functions the data entered will be processed and stored by the social media platform, and transmitted to us.
Using a social media platform to contact us is a voluntary act on the part of the user. The processing of personal data which are gathered while using the internal functionality of the social media platform are subject to the data protection rules of the relevant social media platform.
1. 1. Description and scope of data processing
In order to process your enquiry, your personal data may need to be processed internally by DESOI GmbH. The following provisions apply to the internal processing of your enquiry by DESOI GmbH:
1. 2. Legal Basis for Data Processing
The legal basis for processing personal data gathered in the course of a contact or inquiry by the user is Article 6 Paragraph 1f of the EU General Data Protection Regulation. If the contact is made for the purpose of pursuing a contract, the legal basis is provided by Article 6 Paragraph 1b.
1. 3. Purpose of Data Processing
The internal processing of personal data, which we have received from the contact options of the social media platforms, serves us solely to make the requested contact.
1. 4. Duration of Data Storage
The data is deleted as soon as they are no longer necessary to the purpose they were gathered for. In the case of personal data collected from a contact form this is deemed to be the case when the current conversation with the user is ended. The conversation is considered to be ended when circumstances indicate that the issue at hand is resolved.
1. 5. Right to Objection and Deletion
If a user's personal data is processed internally to process the request, they can object to the storage of their personal data at DESOI GmbH at any time. If this right is exercised, it will not be possible to continue the conversation.
In such cases, all personal data that was stored within the company when contact was made with us will be deleted.
2 Facebook (a product by Meta)
Name and Address of content owners
The following parties are jointly responsible, in the context of the EU General Data Protection Regulation, for the operation of this Facebook page:
Meta Platforms Ireland Limited (hereinafter „Facebook“ or „Meta")
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
and
DESOI GmbH
Frau Regina Desoi, Herr Martin Desoi
Gewerbestraße 16
36148 Kalbach
Deutschland
Tel.: +49 6655 96360
E-Mail: info@desoi.de
Website: www.desoi.de
Information about our Facebook page
We operate this page to provide information about our services, jobs and products as well as to facilitate contact with you. Additional information about us, our business, and our company etc. is available at our website. As owners/operators of this Facebook page, we have no interest in gathering any personal data, nor in using it for analysis or marketing purposes.
During the operation of this Facebook page we process personal data only for purposes of securing the prompt and effective provision of information and to maintain communication with our users and site visitors in accordance with Article 6 Paragraph 1 of the EU's General Data Protection Regulation.
Processing of personal data by Meta
Meta Platforms, Inc is the US parent company of Meta Platforms Ireland Limited, so any transfer of your personal data to a third country cannot be ruled out. The transmission and further processing of personal data of users in third countries, such as the USA, as well as the associated possible risks for users cannot be ruled out by me/us as the operator of the site. In the USA, there is no level of data protection which may be compared to the requirements according to the GDPR. Effective enforcement of your rights is probably not feasible. Public authorities may also access the personal data provided without you or us knowing.
Meta processes user data for the following purposes, among others: advertising (analysis, creation of personalised advertising), creation of user profiles and market research. To store and further process this information, Meta uses cookies, i.e. small text files that are stored on the end devices of the user. If the user has a Facebook profile and is logged in to it, storage and analysis are also conducted across devices.
If you have any questions about your rights vis-à-vis Facebook, please contact Facebook directly. You can find your general rights under the GDPR in this Privacy Policy under Section IV.
If information enquiries are made to us as the site operator, we are obliged by the additional agreement with Meta to forward these enquiries to Meta within 7 days, regardless of whether by private individuals or authorities. This also results from the aforementioned data controller addendum
https://www.facebook.com/legal/terms/page_controller_addendum
If you no longer want your data processed as described here, please unlink your user profile from our site by using the "I no longer like this page" function. Meta's Privacy Policy contains further information on data processing
https://www.facebook.com/about/privacy/ and here you can find options on how to object (opt-out):
https://www.facebook.com/settings?tab=ads
Statistical Data (Insights)
Facebook "Insights" are statistical data of various categories which we can access. This data is generated and made available by Facebook. We, as operators of this Facebook site, have no influence on the generation or presentation of the data. This function can not be deactivated to prevent the generation and processing of the data. For a period of time to be determined the following data associated with our Facebook site will be made available:
Total number of pages viewed, Likes, Page activity, Posts, Reach, Video views, Reach of posts, Comments, Shared content, Answers, Proportion of men to women, Country and City of origin, Language, Views and Clicks in shop, Clicks in route planner, Clicks on telephone numbers, and Data on associated Facebook groups.
We use this data to make our Facebook page more attractive for users. (eg. planning the optimal time for posts, choosing the best way to address our audience by age or gender, or optimizing our content for presentation on client devices)
In accordance with the Facebook Terms of Use, which every user is required to agree to, we can identify all of our subscribers and page fans as well as view their profiles and certain additional information.
3 Instagram (a product by Meta)
Name and Address of content owners
The following parties are jointly responsible, in the context of the EU General Data Protection Regulation as well as of all other data privacy regulations, for the operation of this Instagram page:
Meta Platforms Ireland Limited (hereinafter "Instagram" or "Meta")br /> 4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Irland
and
DESOI GmbH
Frau Regina Desoi, Herr Martin Desoi
Gewerbestraße 16
36148 Kalbach
Deutschland
Tel.: +49 6655 96360
E-Mail: info@desoi.de
Website: www.desoi.de
Information on our use of Instagram
We operate this page to provide information about our services, jobs and products as well as to facilitate contact with you. Additional information about us, our business, and our company etc. is available at our website. As owners/operators of this Instagram page, we have no interest in gathering any personal data, nor in using it for analysis or marketing purposes.
During the operation of this Instagram page we process personal data only for purposes of securing the prompt and effective provision of information and to maintain communication with our users and site visitors in accordance with Article 6 Paragraph 1 of the EU's General Data Protection Regulation.
Processing of personal data by Meta
Meta Platforms, Inc is the US parent company of Meta Platforms Ireland Limited, so any transfer of your personal data to a third country cannot be ruled out. The transmission and further processing of personal data of users in third countries, such as the USA, as well as the associated possible risks for users cannot be ruled out by me/us as the operator of the site. In the USA, there is no level of data protection which may be compared to the requirements according to the GDPR. Effective enforcement of your rights is probably not feasible. Public authorities may also access the personal data provided without you or us knowing.
If you have any questions about your rights, please contact Meta directly. You can find your general rights under the GDPR in this Privacy Policy under Section IV.
For more information, see Meta's Privacy Policy at:
https://instagram.com/about/legal/privacy/
4 Linkedin
Name and Address of content owners
The following parties are jointly responsible, in the context of the EU General Data Protection Regulation as well as of all other data privacy regulations, for the operation of this LinkedIn page:
LinkedIn Corporation, (hereafter referred to as „LinkedIn“)
2029 Stierlin Court,
Mountain View,
CA 94043,
USA
and
DESOI GmbH
Frau Regina Desoi, Herr Martin Desoi
Gewerbestraße 16
36148 Kalbach
Deutschland
Tel.: +49 6655 96360
E-Mail: info@desoi.de
Website: www.desoi.de
Processing of personal data by LinkedIn
LinkedIn Corporation is a company based in the USA, so that the transfer of your personal data to a third country cannot be ruled out. The transmission and further processing of personal data of users in third countries, such as the USA, as well as the associated possible risks for users cannot be ruled out by me/us as the operator of the site. In the USA, there is no level of data protection which may be compared to the requirements according to the GDPR. Effective enforcement of your rights is probably not feasible. Public authorities may also access the personal data provided without you or us knowing. If you are logged in to your LinkedIn account, LinkedIn allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your LinkedIn account.
If you have any questions about your rights vis-à-vis LinkedIn, please contact LinkedIn directly. You can find your general rights under the GDPR in this Privacy Policy under Section IV.
For more information on the handling of user data, please see LinkedIn's Privacy Policy at:
https://www.linkedin.com/legal/privacy-policy
5 Xing
Name and Address of content owners
The following parties are jointly responsible, in the context of the EU General Data Protection Regulation as well as of all other data privacy regulations, for the operation of this Xing page:
New Work SE (hereafter referred to as „XING“)
Dammtorstraße 30
20354 Hamburg
Deutschland
and
DESOI GmbH
Frau Regina Desoi, Herr Martin Desoi
Gewerbestraße 16
36148 Kalbach
Deutschland
Tel.: +49 6655 96360
E-Mail: info@desoi.de
Website: www.desoi.de
Information on how we use Xing
We operate this page to provide information about our services, jobs and products as well as to facilitate contact with you. Additional information about us, our business, and our company etc. is available at our website. As owners/operators of this Xing page, we have no interest in gathering any personal data, nor in using it for analysis or marketing purposes.
During the operation of this Xing page we process personal data only for purposes of securing the prompt and effective provision of information and to maintain communication with our users and site visitors in accordance with Article 6 Paragraph 1 of the EU's General Data Protection Regulation.
As long as you are logged on to your Xing account, Xing is able to track your online activity and to associate it with your personal profile. You can prevent this by logging out of your Xing account.
Processing of personal data by XING
If you are logged in to your XING account, XING allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your XING account.
If you have any questions about your rights vis-à-vis XING, please contact XING directly. You can find your general rights under the GDPR in this Privacy Policy under Section IV. Further information on handling user data can be found in XING's Privacy Policy at
https://privacy.xing.com/en/your-privacy
6 YouTube
Name and Address of content owners
The following parties are jointly responsible, in the context of the EU General Data Protection Regulation as well as of all other data privacy regulations, for the operation of this YouTube page:
YouTube, LLC, 901 Cherry Ave., (hereafter referred to as „YouTube“)
San Bruno,
CA 94066,
USA
and
DESOI GmbH
Frau Regina Desoi, Herr Martin Desoi
Gewerbestraße 16
36148 Kalbach
Deutschland
Tel.: +49 6655 96360
E-Mail: info@desoi.de
Website: www.desoi.de
Information on our use of YouTube
We operate this site to provide information about our services, jobs and products as well as to facilitate contact with you. Additional information about us, our business, and our company etc. is available at our website. As owners/operators of this YouTube page, we have no interest in gathering any personal data, nor in using it for analysis or marketing purposes.
During the operation of this YouTube page we process personal data only for purposes of securing the prompt and effective provision of information and to maintain communication with our users and site visitors in accordance with Article 6 Paragraph 1 of the EU's General Data Protection Regulation.
As long as you are logged in to your YouTube account, YouTube is able to track your online activity and to associate it with your personal profile. You can prevent this by logging out of your YouTube account.
Processing of personal data by YouTube
Google, LLC. is the US parent company of YouTube, LLC., so the transfer of your personal data to a third country cannot be ruled out. The transmission and further processing of personal data of users in third countries, such as the USA, as well as the associated possible risks for users cannot be ruled out by me/us as the operator of the site. In the USA, there is no level of data protection which may be compared to the requirements according to the GDPR. Effective enforcement of your rights is probably not feasible. Public authorities may also access the personal data provided without you or us knowing.
If you are logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
If you have any questions about your rights, please contact YouTube directly. You can find your general rights under the GDPR in this Privacy Policy under Section IV.
You can find further information about handling user data in the Privacy Policy of YouTube at:
https://policies.google.com/privacy?hl=en&gl=en
