Privacy Social Media

The following information applies to our presence on the following social media channels and is supplementary to our general data protection declaration:

The protection of personal data is an important concern for us. Therefore, we process your data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the other applicable legal provisions on the protection of personal data and data security.

They provide you with an overview of what personal data we collect from you via our website, as well as for what purposes and in what way we use it. In addition, we inform you about the rights you have in relation to your personal data.

1. Responsible body in the sense of data protection law

OPTENDA GmbH
Hasenbergstraße 49B
70176 Stuttgart

optenda@iqony.energy
www.optenda.com

2.Contact details of our data protection officer

STEAG GmbH
Corporate Data Protection Officer
Rüttenscheider Straße 1–3
45128 Essen
datenschutz@steag.com

3. Processing your data

The processing of your personal data generally takes place in a member state of the European Union or in another contracting state of the Agreement on the European Economic Area. A transfer of personal data to a third country or access to this data from a third country only takes place if the special requirements of Art. 44 et seq. DSGVO are fulfilled (e.g. through the agreement of standard contractual clauses or if the recipient acts on the basis of a legal basis decided by the European Commission pursuant to Art. 45 (1) DSGVO (so-called adequacy decision)).

However, special features apply to the use of social media channels. We would like to point out that we cannot trace all processing operations on the social media channels. Depending on the provider, processing operations may be carried out by the operators of the social media channels over which we have no influence and of which we obtain no knowledge, in particular no data from you. For details, please refer to the terms of use and data protection provisions of the respective social media channels. These can be found under Legal basis and revocation option at the end of this chapter.

Insofar as we have control over the processing of your data, we ensure that the applicable data protection provisions are complied with as described.

joint responsibility according to Art. 26 GDPR:

According to the European Court of Justice (ECJ), we are jointly responsible for the processing of your personal data with the provider of the respective social media channel. Insofar as the social media channels process personal data based on our instructions, the social media channels process your personal data under our responsibility as our processors. You can find the addresses of our processors under “Recipients of the data”.

You use these channels and their functions under your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). We would like to point out that your data may be processed outside the European Union. Unfortunately, this is not currently possible in accordance with data protection regulations.

Note: Data transfer to the USA
We would like to point out that in its ruling of 16.07.2020 (Case C-311/18), the ECJ declared the EU-US Privacy Shield agreement on the permissible transfer of data between the EU and the USA to be inadmissible and that personal data cannot currently be transferred to the USA in a data protection-compliant manner. The reason for this is existing laws in the USA that give security authorities far-reaching powers to monitor “foreign communications”. We hereby expressly draw your attention to this risk.

Scope of the processing

If you use the contact options for us on these social media channels, we process the data and information you provide in order to process your request, the reason for your contact and to answer your questions. In particular, this involves your inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).

The social media channels provide our company with statistical data, so-called “page insights”, which give us information about the user activities on our company websites.

Purposes of the processing
Via the aforementioned portals, we offer you the opportunity to inform yourself about our company and our products and to contact us. For this purpose, we use the social media channels to ensure the broadest possible presence on the Internet.

Receiver
The recipient of the data is the respective social media channel as the order processor:

  • Instagram (Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA)
  • Kununu (NEW WORK AUSTRIA, XING kununu Prescreen GmbH, Schottenring 2-6, A – 1010 Wien)
  • Linkedin (Linkedln Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
  • Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland)
  • Youtube (a service of Google Ireland Limited Gordon House, Barrow Street Dublin 4 Irland)

Depending on the recipient, processing of personal data in states outside the European Union, in particular in the USA, cannot be ruled out. Under certain circumstances, this may be associated with the risk of more difficult legal enforcement, which represents a risk for the individual user.to the USA.

Storage duration

The personal data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it or you revoke your consent to its storage. Stored cookies remain on your terminal device until you delete them.

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, the links to which can be found at the end of this chapter).

Legal basis and possibility of revocation

We process your personal data on the basis of our legitimate interests in informing you about our company and bringing you closer to our products and services, as well as enabling you to communicate with us (Art. 6 (1) sentence 1 lit. f DSGVO). The analysis processes initiated by the social media channels may be based on different legal grounds, which are to be stated by the operators of the social media channels (e.g. consent within the meaning of Art. 6 para. 1 sentence 1 lit. a DSGVO).

For a detailed description of the respective processing and the opt-out options for the aforementioned services, please refer to the data protection declarations of:

As we do not have full access to your personal data, you should contact the providers of the social media channels directly when asserting your rights (see section “Your rights”), as they each have access to the personal data of their users and can take appropriate measures and provide information.

If you still need help, we will of course try to support you. Please contact datenschutz@steag.com.

4. Your rights

You have a right of access, i.e. you can ask us to disclose all the personal information we have collected and hold for a period of time (Art. 15 DSGVO). In addition, you may also request rectification (Art. 16 DSGVO) or erasure (Art. 17 DSGVO) or restriction of processing (Art. 18 DSGVO) and have a right of appeal to a data protection supervisory authority (Art. 77 DSGVO in conjunction with § 19 BDSG).

If we process your personal data on the basis of your consent, you can revoke this consent at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation, but the processing will cease for the future.

You can address revocation and other requests to our Group Data Protection Officer.

We take your enquiries and concerns very seriously and always endeavour to comply with them.

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Article 77 DSGVO in conjunction with Section 19 BDSG. In North Rhine-Westphalia, the competent supervisory authority is: State Commissioner for Data Protection and Freedom of Information, Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, e-mail:

poststelle@lfdi.bwl.de.

 

As of January 2022