Home Confidentiality Social media data protection information

Social media data protection information

Instagram

Information on the collection of personal data

In the following we inform you about the handling of your personal data in connection with the Instagram page of HEINE Optotechnik GmbH & Co. KG. Personal data is all data with which you can be personally identified.

Together with Meta Platforms Inc. ("Meta"), we are jointly responsible for the processing of your personal data on this website within the meaning of Art. 26 GDPR, as we use the technical platform and services of Meta Platforms Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA, for Instagram.

Instagram is part of the Meta Platforms Inc. group of companies and shares infrastructure, systems, technology and possibly personal data (e.g. personal data, IP numbers, etc.) with Facebook and other Facebook companies.

We process personal data ourselves via our Instagram page (see 1.), but at the same time data processing is also carried out by Facebook as the operator of the Instagram platform (see 2.).

Please check carefully which personal data you share with us via Instagram. As long as you are logged in with your Instagram account and visit our Instagram page, Instagram can associate this with your Facebook profile. We expressly point out that Instagram passes this data on to Facebook and its affiliated companies. Facebook stores the data of its users (e.g. personal information, IP address, etc.) and may also use it for business purposes.

You can find more information on data processing by Instagram and Facebook at www.instagram.com/legal/privacy/ and https://de-de.facebook.com/policy.php.

Contact details of the controller

Processing of personal data by HEINE Optotechnik GmbH & Co. KG

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is HEINE Optotechnik GmbH & Co. KG, Dornierstr. 6, 82205 Gilching, Germany, e-mail: info(at)heine.com, telephone: +49 8105 7728, insofar as we process the data transmitted to us by you via Facebook exclusively ourselves.

Our data protection officer

Sven Lenz

German data protection law firm - Datenschutzkanzlei Lenz GmbH & Co. KG

Bahnhofstraße 50

87435 Kempten

Kempten, Germany

If you have any questions about data protection or other data protection concerns, you are welcome to send an e-mail to the following e-mail address: dsb@heine.com

We ourselves collect personal data when you contact us (e.g. via a contact form or by liking and commenting on our posts or following our profile). You can see which data we collect when you contact us via the contact form from the relevant contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f) GDPR.

If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your enquiry, provided that there are no statutory retention obligations to the contrary. We assume that processing is complete if it can be inferred from the circumstances that the matter in question has been conclusively clarified.

We pass on your payment data to the authorised credit institution as part of the payment processing, insofar as this is necessary for payment processing. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.
In the case of contracts for the delivery of goods, we pass on the personal data collected by us to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods.

The data you enter on Instagram, in particular your user name and the content published under your account, will also be processed by us to the extent that we may link your posts or reply to them or write posts from us that refer to your account.

The data you freely publish and disseminate on Instagram is thus included by us in our offer and made accessible to our followers.

However, the recipient of the data that you enter or disclose on our Instagram page is also Instagram or Facebook, who may use it for their own purposes and pass it on to third parties under their responsibility. The recipient of published personal data, e.g. in the context of posts, is also the public, i.e. potentially anyone.

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and - if applicable - additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law). When processing personal data on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, this data is stored until the data subject withdraws their consent. If there are statutory retention periods for data that is processed within the scope of legal or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for contract fulfilment or contract initiation and/or we no longer have a legitimate interest in further storage.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 para. 2 GDPR. Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Data transfer to a third country

Data is transferred to a third country (in this case the USA) or an international organisation. Since July 2023, there has been an adequacy decision by the EU Commission (Data Privacy Framework), which identifies the USA as a third country with a level of data protection comparable to that of the EU. The adequacy decision can now serve as the basis for data transfers to certified organisations in the USA. According to the list of certified organisations published by the US Department of Commerce, Meta Platforms, Inc, Menlo Park, California, is listed as a certified organisation.

Processing of personal data by Instagram and Facebook

Insofar as the data you transmit to us via Facebook is also or exclusively processed by Facebook (Insights data), Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR).In this respect, data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR, which you can view here: www.facebook.com/legal/terms/page_controller_addendum.

Data protection officer of Meta Platforms Inc:

You can contact them via the online contact form provided by Facebook at www.facebook.com/help/contact/540977946302970. 

The Instagram page of HEINE Optotechnik GmbH & Co. KG is part of the online platform operated by Meta Platforms Inc. at www.instagram.com. The purposes of the data processing associated with this platform by Instagram (in particular the operation of the platform itself and the display of advertising on the platform), the legal basis for this and the legitimate interests pursued are described in Instagram's data policy at www.instagram.com/legal/privacy/.

We have no influence on data collection and further processing by Instagram. Furthermore, it is not clear to us to what extent, where and for how long the data from the visit to our Instagram page is stored by Instagram and Facebook, to what extent Facebook fulfils existing deletion obligations, which evaluations and links are made with the data by Instagram or Facebook and to whom the data is passed on.

Instagram itself describes in general terms in its data usage guidelines at help.instagram.com/519522125107875 which personal data and thus information about the users of the Instagram and Facebook platform is received and how it is used.

By using Instagram, your personal data will be collected, transferred, stored, disclosed and used by Instagram and transferred to, stored and used in the United States, Ireland and any other country in which Facebook does business, regardless of your place of residence.

On the one hand, Instagram and Facebook process your voluntarily entered data such as your name and user name, email address and telephone number.

On the other hand, Instagram and Facebook also analyse the content you share to determine which topics you are interested in, store and process confidential messages that you send directly to other users and can determine your location using GPS data, information on wireless networks or your IP address in order to send you advertising or other content.

Finally, Facebook also receives information when you view content, for example, even if you have not created an account. This so-called "log data" may include the IP address, the browser type, the operating system, information about the previously accessed website and the pages you have accessed, your location, your mobile phone provider, the end device you are using (including device ID and application ID), the search terms you have used and cookie information.

Via Instagram buttons or widgets integrated into websites and the use of cookies, Facebook is able to record your visits to these websites and assign them to your Instagram profile. This data can be used to offer you customised content or advertising. You have the option of restricting the processing of your data in the general settings of your Instagram account and under "Privacy and security".

Furthermore, an additional agreement between us and Facebook Ireland Ltd. as joint controllers pursuant to Art. 26 GDPR applies to the use of certain Facebook products, such as the so-called "Facebook Business Tools", and for data processing carried out in this way, which can be viewed here: www.facebook.com/legal/controller_addendum 

Data processing for statistical and marketing purposes

Instagram provides us with so-called Page Insights for our Instagram page. This is summarised data that allows us to gain information about how people interact with our page. Page Insights may be based on personal data that is collected in connection with a visit or interaction of people on or with our page and its content. In accordance with Art. 6 para. 1 lit. f GDPR, this serves to safeguard our legitimate interests in an optimised presentation of our offer and effective communication with customers and interested parties, which predominate in the context of a balancing of interests. You can object to the processing of your data for the aforementioned purposes at any time by changing your settings for adverts in your Instagram user account accordingly.

Rights of the data subject

The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

- Right of access pursuant to Art. 15 GDPR;

- Right to rectification pursuant to Art. 16 GDPR;

- Right to erasure pursuant to Art. 17 GDPR;

- Right to restriction of processing pursuant to Art. 18 GDPR;

- Right to information pursuant to Art. 19 GDPR;

- Right to data portability pursuant to Art. 20 GDPR;

- Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;

- Right to lodge a complaint pursuant to Art. 77 GDPR.

General right to object

If we process your personal data as part of a balancing of interests on the basis of our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation. If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

Information on the collection of personal data and contact details

of the controller:

In the following we inform you about the handling of your personal data. Personal data is all data with which you can be personally identified. Please check carefully which personal data you share with us via the social medium LinkedIn. We expressly point out that LinkedIn stores the data of its users (e.g. personal information, IP address, etc.) and may also use it for business purposes. You can find more information on LinkedIn's data processing in LinkedIn's privacy policy at www.linkedin.com/legal/privacy-policy;

We have no influence on data collection and further processing by LinkedIn. Furthermore, it is not clear to us to what extent, where and for how long the data is stored, to what extent LinkedIn fulfils existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on. If you would like to prevent LinkedIn from processing personal data that you have transmitted to us, please contact us by other means. You can find our full contact details in our LinkedIn legal notice.

Insofar as the data you transmit to us via LinkedIn is also or exclusively processed by LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR), provided that you are resident in a country of the European Union, Iceland, Liechtenstein, Norway or Switzerland. If you are based in another country, LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, is also responsible for data processing within the meaning of the GDPR in addition to us. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Our data protection officer

Sven Lenz

German data protection law firm - Datenschutzkanzlei Lenz GmbH & Co. KG

Bahnhofstraße 50

87435 Kempten

Kempten, Germany

If you have any questions about data protection or other data protection concerns, please send an e-mail to the following e-mail address: dsb@heine.com

Contact Data Protection Officer LinkedIn Ireland Unlimited Company

You can contact LinkedIn Ireland Unlimited Company or LinkedIn Corporation via the contact form available at the following link: www.linkedin.com/help/linkedin/ask/TSO-DPO

Data processing when contacting us

We collect personal data ourselves when you contact us, e.g. via contact form or messenger. You can see which data we collect when you contact us via the contact form from the relevant contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your enquiry, provided that there are no statutory retention obligations to the contrary. We assume that processing is complete if it can be inferred from the circumstances that the matter in question has been conclusively clarified.

Rights of the data subject

erasure (Art. 17 GDPR) or that the processing should be restricted (Art. 18 GDPR). In certain cases, you also have the right to data portability (Art. 20 GDPR). Under certain circumstances, you can also object to the processing (Art. 21 GDPR).

You also have the right to lodge a complaint with the competent supervisory authority if you are of the opinion that your data is not being processed in a lawful manner.

General right to object

Objection to direct advertising

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. You can exercise your objection as described above under "General objection". If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

Duration of storage of personal data

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims. When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 para. 2 GDPR. Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Facebook

Data protection information Facebook

Information on the collection of personal data

In the following we inform you about the handling of your personal data. Personal data is any data that can be used to identify you personally. Please check carefully which personal data you share with us via Meta Platforms. As long as you are logged into your Meta Platforms account and visit our Meta Platforms profile, the operator of the Meta Platforms platform can assign this to your Meta Platforms profile. We expressly point out that Meta Platforms stores the data of its users (e.g. personal information, IP address, etc.) and may also use it for business purposes. For more information on Meta Platforms' data processing, please refer to Meta Platforms' privacy policy at www.facebook.com/privacy/policy/

We have no influence on data collection and further processing by Meta Platforms. Furthermore, it is not clear to us to what extent, where and for how long the data is stored by Meta Platforms, to what extent Meta Platforms fulfils its deletion obligations, which evaluations and links are made with the data by Meta Platforms and to whom the data is passed on by Meta Platforms. If you would like to prevent Meta Platforms from processing personal data that you have transmitted to us, please contact us by other means.

Facebook is part of the Meta Platforms group of companies and shares infrastructure, systems, technology and possibly personal data (e.g. personal data, IP numbers, etc.) with Meta and other companies in the group.

Contact details of the controller

Insofar as the data you provide to us via Meta Platforms is also or exclusively processed by Meta Platforms (Insights data), Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR). In this respect, data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR, which you can view here: www.facebook.com/legal/terms/page_controller_addendum

Furthermore, for the use of certain Meta Platforms products, such as the so-called "Meta Platforms Business Tools", and for data processing carried out through them, an additional agreement applies between us and Meta Platforms Ireland Ltd. as joint controllers pursuant to Art. 26 GDPR, which can be viewed here: www.facebook.com/legal/controller_addendum

The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Our data protection officer

Sven Lenz

German Data Protection Law Firm - Datenschutzkanzlei Lenz GmbH & Co. KG

Bahnhofstraße 50

87435 Kempten

Kempten, Germany

If you have any questions about data protection or other data protection concerns, please send an e-mail to the following e-mail address: dsb@heine.com

The data protection officer of Meta Platforms

via the online contact form provided by Meta Platforms at www.facebook.com/help/contact/540977946302970. 

Data transfer to a third country

Data processing when contacting us

Data processing for statistical and marketing purposes

Page insights

Meta Platforms provides us with so-called page insights for our Meta Platforms page: www.Meta Platforms.com/business/a/page/page-insights. This is summarised data that enables us to obtain information about how people interact with our site. Page Insights may be based on personal data collected in connection with a visit or interaction of persons on or with our site and its content. In accordance with Art. 6 para. 1 lit. f GDPR, this serves to safeguard our legitimate interests in an optimised presentation of our offer and effective communication with customers and interested parties, which predominate in the context of a balancing of interests. You can object to the processing of your data for the aforementioned purposes at any time by changing your settings for adverts in your Meta Platforms user account at www.Meta Platforms.com/settings?tab=ads.

Meta Platforms Lead Ads

We use the "Lead Ads" function of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms") to collect and process certain personal data of interested parties - so-called leads - via a contact form displayed on Meta Platforms websites (so-called "instant form"). The content and scope of the data requested in this form depends on the focus of the respective lead campaign. The processing of the data is strictly bound to the purposes pursued with the respective lead ad campaign. These purposes are clearly stated in the lead ad or on the form provided before the specified data is transmitted. Depending on the focus of the lead ad campaign, the legal basis for data processing is either your express consent in accordance with Art. 6 para. 1 lit. a GDPR (e.g. for direct advertising measures such as registration for e-mail newsletter dispatch) or our legitimate interest in optimising the marketing of our offer in accordance with Art. 6 para. 1 lit. f GDPR. The data will not be passed on to third parties. As part of the aforementioned services, data transmitted via instant forms may be stored on servers of Meta Platforms Inc, 1601 Willow Rd, Menlo Park, CA 94025, USA. Further information on data processing via Meta Platforms Lead Ads can be found in Meta Platforms' data policy at www.facebook.com/privacy/policy/

Duration of storage of personal data

Rights of the data subject

The applicable data protection law grants you comprehensive data subject rights (information and intervention rights) vis-à-vis the controller with regard to the processing of your personal data. You have the right to obtain information from us about the data we process about you (Art. 15 GDPR). You can also request that we rectify inaccurate personal data concerning you (Art. 16 GDPR). If applicable, you can request that the personal data processed about you be deleted (Art. 17 GDPR) or that the processing be restricted (Art. 18 GDPR). In certain cases, you also have the right to data portability (Art. 20 GDPR). Under certain circumstances, you can also object to the processing (Art. 21 GDPR).

Furthermore, you have the right to lodge a complaint with the competent supervisory authority if you believe that your data is not being processed in a lawful manner.

Xing

Information on data protection

Information on the collection of personal data and contact details

of the controller

In the following we inform you about the handling of your personal data. Personal data is all data with which you can be personally identified. Please check carefully which personal data you share with us via the social medium XING, which is operated by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. We expressly point out that XING stores the data of its users (e.g. personal information, IP address, etc.) and may also use it for business purposes. Further information on data processing by XING can be found in XING's privacy policy at privacy.xing.com/de/datenschutzerklaerung. 

We have no influence on data collection and further processing by XING. Furthermore, it is not clear to us to what extent, where and for how long the data is stored, to what extent XING fulfils existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on. If you would like to prevent XING from processing personal data that you have transmitted to us, please contact us by other means. You can find our full contact details in our legal notice on XING.

Responsible for data processing within the meaning of the

General Data Protection Regulation (GDPR) is

Insofar as the data you transmit to us via XING is also or exclusively processed by XING, XING SE, Dammtorstraße 30, 20354 Hamburg, Germany, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR). The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Our data protection officer

Sven Lenz

German data protection law firm - Datenschutzkanzlei Lenz GmbH & Co. KG

Bahnhofstraße 50

87435 Kempten

Kempten, Germany

If you have any questions about data protection or other data protection concerns, please send an e-mail to the following e-mail address: dsb@heine.com

Contact Data Protection Officer of XING SE

Dammtorstraße 30, 20354 Hamburg, Germany

E-Mail: Datenschutzbeauftragter@xing.com

Data processing when contacting us

We collect personal data ourselves when you contact us, e.g. via the contact form or Messenger. You can see which data we collect when you contact us via the contact form from the relevant contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR.

the matter in question has been conclusively clarified.

Rights of the data subject

- Right of access pursuant to Art. 15 GDPR;

- Right to rectification pursuant to Art. 16 GDPR;

- Right to erasure pursuant to Art. 17 GDPR;

- Right to restriction of processing pursuant to Art. 18 GDPR;

- Right to information pursuant to Art. 19 GDPR;

- Right to data portability pursuant to Art. 20 GDPR;

- Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;

- Right to lodge a complaint pursuant to Art. 77 GDPR.

General right to object

Objection to direct advertising

Duration of storage of personal data

Twitter

Twitter privacy policy

Information on data protection

Information on the collection of personal data and contact details of the controller.

In the following we inform you about the handling of your personal data. Personal data is all data with which you can be personally identified. Please check carefully what personal data you share with us via Twitter. We expressly point out that Twitter stores the data of its users (e.g. personal information, IP address, etc.) and may also use it for business purposes. You can find more information about Twitter's data processing in Twitter's privacy policy at twitter.com/de/privacy. 

We have no influence on data collection and further processing by Twitter. Furthermore, it is not clear to us to what extent, where and for how long the data is stored, to what extent Twitter fulfils existing deletion obligations, which analyses and links are made with the data and to whom the data is passed on. If you would like to prevent Twitter from processing personal data that you have transmitted to us, please contact us by other means. You can find our full contact details in our legal notice on Twitter.

The person responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is, as far as we process the data transmitted to us by you via Twitter exclusively ourselves.

Address and contact of all responsible persons:

HEINE Optotechnik GmbH & Co. KG

Dornierstr. 6

82205 Gilching

Gilching, Germany

E-mail: info(at)heine.com

Phone: +49 8105 7728 0

Commercial register no.: HRA 52039

Managing directors: Oliver Heine, Timo Martin

Insofar as the data you transmit to us via Twitter is also or exclusively processed by Twitter, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR).

The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Our data protection officer

Sven Lenz

German data protection law firm - Datenschutzkanzlei Lenz GmbH & Co. KG

Bahnhofstraße 50

87435 Kempten

Kempten, Germany

If you have any questions about data protection or other data protection concerns, please send an e-mail to the following e-mail address: dsb@heine.com

Contact Twitter data protection officer:

You can contact Twitter's data protection officer via the online contact form provided by Twitter at: twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp

Data processing when contacting us

the matter in question has been conclusively clarified.

Rights of the data subject

- Right of access pursuant to Art. 15 GDPR;

- Right to rectification pursuant to Art. 16 GDPR;

- Right to erasure pursuant to Art. 17 GDPR;

- Right to restriction of processing pursuant to Art. 18 GDPR;

- Right to information pursuant to Art. 19 GDPR;

- Right to data portability pursuant to Art. 20 GDPR;

- Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;

- Right to lodge a complaint pursuant to Art. 77 GDPR.

General right to object

Objection to direct advertising

Duration of storage of personal data

Social media data protection information

Instagram

linkedIn

Facebook

Xing

Twitter