Data Protection Declaration Social Networks

We maintain online presences on various social networks and platforms. Below we would like to inform you about the data collected by them and us, their purposes, the legal basis, recipients and your rights.

1. NOTE IN ADVANCE

We would like to point out that you use our content and the interactive functions provided (e.g. commenting, sharing, rating) at your own risk. Alternatively, you can also find the information/products etc. offered via our social networks on our website at www.outsourcing4work.de . For more information, you can also write to us at any time via email at info@outsourcing4work.de .

2. RESPONSIBLE

We are jointly responsible within the meaning of Article 26 of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations for our social platforms

Outsourcing4work GmbH

Breslauer Str. 1a

64521 Groß-Gerau

Tel.: 061519069900

E-Mail: info@outsourcing4work.de

as well as the company named below for the respective network

Facebook: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The supervisory authority is Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, https://www.dataprotection.ie .

Instagram: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The supervisory authority is Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, https://www.dataprotection.ie .

Xing: New Work SE, Dammtorstraße 30, 20457 Hamburg, Germany, Tel.: +49 40 419 131-0, Email: info@xing.com . The data protection officer is Felix Lasse, Am Strandkai 1, 20457 Hamburg, https://www.xing.com/support/contact/security/data_protection . The supervisory authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, www.datenschutz-hamburg.de .

YouTube: Google Ireland Ltd., Gordon House, Barrow St., Dublin 4, Ireland. The supervisory authority is Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, https://www.dataprotection.ie/ .

Twitter: Twitter International Unlimited Company, The Supervisory Authority is Data Protection Officer, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND; The supervisory authority is Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, https://www.dataprotection.ie .

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2. The data protection officer can be reached at https://www.linkedin.com/help/linkedin/ask/TSO-DPO . The supervisory authority is the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, https://www.dataprotection.ie .

Pinterest: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; The supervisory authority is Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, https://www.dataprotection.ie/ . The data protection officer can be contacted at https://help.pinterest.com/de/data-protection-officer-contact-form .

3. GENERAL DATA COLLECTED

When you visit our website on the respective social network, your IP address and other information are stored. The further information arises from the data mentioned in section 4, which we process, as well as from the data that the respective network processes (for further information, see section 6). Some of the data is stored on your device using cookies. Cookies are small text files that are sent to your browser by a web server as soon as you visit a website and are stored locally on your device (PC, notebook, tablet, smartphone, etc.) and stored on your computer and given to the user (i.e. us). provide certain information. Cookies do not cause any damage to the computer and do not contain any viruses. Each cookie contains a characteristic string (so-called cookie ID) that allows the browser to be uniquely identified when the website is accessed again.

If you want to avoid data usage by the social network, you should log out of it or deactivate the “stay logged in” function, delete the cookies on your device and close and restart your browser. You can then visit our fan page without revealing your own ID. Please note, however, that you will then not be able to use any interactive functions as you would have to log in again.

You can also deactivate or restrict the use of cookies by setting your browser software accordingly. However, in this case you may not be able to access our site on the social network.

4. DATA PROCESSED BY US ON SOCIAL NETWORKS

4.1 Facebook

4.1.1 PageInsights

We ourselves use the respective statistical evaluations (page insights) that the social network makes available to us. We cannot currently turn this off or modify it. We therefore collect the following data:

• Statistical figures on people’s actions: including visits to our site, viewing posts, subscribing to pages, tagging, recommendations, comments, shares, types of reactions, performance of posts, clicks, negative feedback, conversations, views of our shop, etc .interactions there, about our events (ticket sales, clicks, registrations, guest contributions) or about interactions there (link usage, tickets sold, people reached), the use of the website, telephone number, plan route buttons or other buttons our page.

• Statistical data about the actions themselves and the people who performed the actions or the browsers/apps they used: access times, location (estimated based on the IP address or, for logged in users, from the user profile), language code (from the http header the browser and/or language setting); Age/gender data (from the user profile; only for logged in users); previously visited website (from the browser’s http header); Use of a computer or mobile device (from the browser user agent or app attributes); Facebook user ID (only for logged in users).

• If we post events, live videos, stories or anything else, the performance data is also evaluated, i.e. the number of views or the duration of the views, the number of interactions, the demographic target group, etc.

We receive the evaluations of the data mentioned in this paragraph anonymously, whereas Facebook receives the data without anonymization.

Whether someone is logged in to Facebook is determined using cookies (see cookie policy at https://www.facebook.com/policies/cookies ). Most actions are not possible without login.

The legal basis for our collection of the above-mentioned data for statistical purposes is Art. 89 GDPR and, as far as sensitive data is concerned, Section 27 BDSG in conjunction with Art. 9 Para. 1 in conjunction with Art. 22 Para. 2 Sentence 2 GDPR. We only process the data anonymously. Further legal basis for this is Article 6 Paragraph 1 Letter a) GDPR; This applies in particular to the marketing purposes pursued with PageInsights. We also have a legitimate interest in this. By anonymizing the data, your rights are largely protected.

Purpose: We use the data so that we can learn which posts visitors interact with (or not). With the help of the results, we can build and expand our target group and provide them with interesting events, information, etc. tailored to the target group and optimize our content. Using the reach and post statistics, we can see which posts received the most attention; through action and contribution statistics we see how we can motivate people to interact more; The view statistics allow us to address the content to specific target groups.

Deletion: The statistical data will be deleted after 90 days at the latest. As already stated, the statistical data is collected without us currently having the option to opt out. If you do not want this, you can configure this under Settings, https://www.facebook.com/settings . Furthermore, please contact the social network directly at the addresses mentioned in section 2.

4.1.2 Interactions/Messages

We collect content, communications and other information that you provide when you visit our fan page and interact with us through it, see above. Because of this, we collect and process the content you communicate and the type of interactions. We process the content of the message as well as the time.

We would like to point out that – if you have a Facebook profile yourself – we are also able to track your networks (groups, connected pages) and connections as a result of your interaction, as well as the information you have posted there (photos, posts, information, etc .) can be viewed. In doing so, you may also disclose sensitive data in accordance with Art. 9 GDPR. If we collect this data, we will only collect and evaluate it anonymously without being able to identify a person. This is to learn more about our customer target group and to better tailor our advertising/products to our customers. We use the data to help us learn what posts and information you interact with (or not). With the help of the results, we can build and expand our target group and provide them with interesting events, information, etc. tailored to the target group and optimize our content. We also see which posts received the most attention. We would also like to know which visitors view our profile and how this came about. This also helps us to learn more about our customer target group and to better tailor our advertising/products to you.

We would like to point out that the data can be viewed not only by us and Facebook, but also by their affiliated partners/companies as well as by all subscribers, fans, post sharers, commentators and other people who click on our site or on our subscribers’ sites. Fans, post sharers and commenters surf.

The legal basis for collecting the aforementioned data is Article 6 Paragraph 1 Letter a) GDPR. Subscribers, fans, post sharers and commenters give their consent to the collection by voluntarily interacting with our fan page in conjunction with accepting Facebook’s terms of use.

The data is usually removed when our site is deleted or temporarily removed when deactivated. You can also delete your connections to us by deactivating the Like buttons again. If we receive a revocation and we have the opportunity to delete your data (e.g. comments on our pinboard, etc.), we will take the necessary steps to do so. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation. Alternatively, we ask you to contact the social network directly at the addresses mentioned in section 2, as we cannot trace which data comes from you due to the extensive anonymization of the data. You can prevent the collection of your data by selecting the appropriate privacy settings on Facebook, see https://www.facebook.com/settings .

You can also send us messages via the social network. In this case, the personal data transmitted with the message (name/username; profile picture) will be saved. In this case, you agree that we may also contact you via this communication channel to answer your request. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation. The legal basis for the processing of data transmitted in the course of sending a message is Article 6 Paragraph 1 Letter f) GDPR. The legitimate interest lies in processing your request. If the message/contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b) GDPR. The data from the message is deleted when the respective conversation ends. However, if the conversation is aimed at concluding a contract, the data will be deleted after the statutory retention periods; this is usually 10 years. There is a possibility of revocation if the message does not serve to prepare or implement a contract. Please note that in this case the request may not be processed.

4.1.3 Use of Facebook interfaces

If we use Facebook’s tools that create an interface to Facebook (e.g. use of the Facebook pixel), information will be passed on to Facebook, such as your device, websites visited, purchases made, advertisements viewed and type of use of the services – regardless of whether you have a Facebook account or are logged in there.

Because of this, we collect and process it

• the type of interactions (likes),

• information about transactions, i.e. how data is processed if you are redirected to our shop via our fan page.

• Information about log data if you use our Facebook login

This serves to learn more about our customer target group and to better tailor our advertising/products to our customers. This also serves to measure the effectiveness and distribution of the advertisements and to advertise products as effectively as possible on multiple channels.

When using the interface tools, the data can be viewed not only by us and Facebook, but also by their affiliated partners/companies and, if applicable, by all subscribers, fans, post sharers, commentators and other people who click on our site (e.g. on like clicks).

The legal basis for collecting data as part of the tools is in particular Article 6 Paragraph 1 Letter a) GDPR. The use of the tools is voluntary. You give your consent to the collection by voluntarily activating the tools or using them to contact us in connection with your acceptance of Facebook’s terms of use.

You can prevent the collection of your data by, for example, making purchases directly via our website, not activating the Like buttons and, for example, not logging in or registering via Facebook Connect. You can delete your connections to us, for example by deactivating the Like button again. If we receive a revocation and we have the opportunity to delete your data, we will take the necessary steps to do so. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation. Alternatively, we ask you to contact the social network directly at the addresses mentioned in section 2.

4.1.4 Facebook Stories

We also use the “Stories” tool on Facebook. You can like, share and comment on these and otherwise interact with us and others. Because of this, we collect and process the content you communicate (hashtags, messages, etc.) and the type of interactions. We process the content of any message as well as the time. The recording helps us to find out more about our fans and to better tailor our advertising/products to them.

Only we as authors see your comments and reactions to the stories. But we would like to point out that the data is also processed by Facebook.

The legal basis for collecting the aforementioned data is Article 6 Paragraph 1 Letter a) GDPR. You give your consent to the collection by voluntarily interacting with our story in conjunction with accepting Facebook’s terms of use.

If we receive a revocation and we have the opportunity to delete your data (e.g. messages), we will take the necessary steps to do so. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation. You can also delete your connections to us by deactivating the interaction buttons again.

4.1.5 Facebook group

Groups and the content within them serve to exchange insights and experiences, ask for advice and make contacts with professionals in the same industry or with people with similar interests. Only as a group member is it possible to participate in conversations, etc. We can create a Facebook group. To the extent that you interact within it, what has been said in Section 4.1.2 applies with the proviso that the data remains stored until the group is deleted and provided that the data has not been shared or passed on by third parties. We can invite people to our group. Messages and reactions made in the group can only be seen by other group members. The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR. You can revoke your consent at any time. If we receive a revocation and we have the opportunity to delete your data (e.g. comments on our pin board, application documents, etc.), we will take the necessary steps to do so. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation.

4.1.6 Call-to-action buttons

You can contact us directly using the button, obtain further information or conclude a contract. The legal basis for the processing of data transmitted in the course of sending a message is Article 6 Paragraph 1 Letter f) GDPR. The legitimate interest lies in processing your request. If this is aimed at concluding a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b) GDPR. The personal data collected will be stored until the end of the statutory retention period for merchants (6, 8 or 10 years after the end of the calendar year in which the contractual relationship was terminated) and then deleted. In exceptional cases, this does not apply if we are obliged to store the data for a longer period of time due to tax or commercial retention obligations (according to the German Commercial Code (HGB), StGB or AO) or if you have consented to further storage. If the legal basis is your consent, you can also revoke it. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation.

4.1.7 Meta Business Suite

We use Meta BusinessSuite to create evaluations of advertising strategies, plan our advertising, create and maintain our shop, place and evaluate advertisements, create ad reports, manage our media library and page settings, plan posts and bill advertising accounts , manage events, manage forms. We can also define our target groups.

The legal basis for this is Art. 6 Para. 1 lit. f) GDPR, as this is the only way we are able to use the social network sensibly for business purposes, plan budgets sensibly and define our customer strategy. Any use of the target group settings is based on Art. 6 Para. 1 lit. f) GDPR, as we only select those interested parties for whom we are potentially interesting and other people are not bothered by this. This is in our interest and in the interest of everyone. Otherwise, what has been said in Sections 4.1.1 and 4.1.2 applies.

4.1 Instagram

Instagram is an offering from Meta. However, in order to avoid confusion, we will always use the term Instagram below, even when it comes to the operator.

4.2.1 Page Insights

5 Statistical figures on people’s actions: access to our profile, our website, our post, clicks on our buttons or the route planner, interactions with our posts and the type of interaction/reaction.

Depending on the type of post, 6 interactions include tagging, commenting, sharing or saving our content, negative feedback such as reporting as spam or hiding, like clicks, leaving or clicking on next stories, clicks on links.

7 Incidentally, statistical payments: Reaching new subscribers through our posts, reach, average percentage of video content viewed.

Data about our target group is also collected: top locations, average age, gender, most active times, interests, etc.

According to Instagram, no insights are created in the EU in connection with news.

If we post live videos, stories or anything else, the performance data will also be evaluated according to the data mentioned above.

We receive the evaluations of the data mentioned in this paragraph anonymously, whereas Instagram receives the data without anonymization. Whether someone is logged in to Instagram is determined using cookies (see cookie policy at https://www.facebook.com/policies/cookies). Most actions are not possible without login. All you can do is visit a page or click on a photo/video to view it.

The legal basis for our collection of the above-mentioned data for statistical purposes is Art. 89 GDPR and, as far as sensitive data is concerned, Section 27 BDSG in conjunction with Art. 9 Para. 1 in conjunction with Art. 22 Para. 2 Sentence 2 GDPR. We only collect the data anonymously. Another legal basis for collecting the aforementioned data is Article 6 Paragraph 1 Letter a) GDPR. You give your consent to the collection by accepting the terms of use of the respective social network and the posts based on them.

Purpose: We use the data so that we can learn which posts you interact with (or not). With the help of the results, we can build and expand our target group and provide them with interesting events, information, etc. tailored to the target group and optimize our content. Using the reach and post statistics, we can see which posts received the most attention; through action and contribution statistics we see how we can motivate people to interact more; The view statistics allow us to address the content to specific target groups.

Deletion: This data will be made available for up to 90 days. As already stated, the statistical data is collected without us currently having the option to opt out. If you do not want this, you can configure this in Settings, https://www.instagram.com/accounts/privacy_and_security/ . Furthermore, please contact the social network directly at the addresses mentioned in section 2.

4.2.2 Interactions/Messages

We collect content, communications and other information that you provide when you visit our fan page and interact with us through it, see above. Because of this, we collect and process the content you communicate (hashtags, messages, etc.) and the type of interactions. We process the content of the message as well as the time. We would like to point out that – if you have an Instagram profile yourself – we are also able to track your networks (subscriptions) and connections as well as view the information you have posted there (posts, etc.) based on your interaction. In doing so, you may also disclose sensitive data in accordance with Art. 9 GDPR.

If we do this, it helps us to learn more about our customer target group and to better tailor our advertising/products to you. We may mention and show your name, posts and interactions in a post (story, etc.), for example because your post or interaction serves as a review for us.

We would like to point out that the data can be viewed not only by us and Instagram, but also by their affiliated partners/companies as well as by all subscribers, post sharers, commenters and other people who click on our site or on the pages of our subscribers, post sharers and Surf commentators.

The legal basis for collecting the aforementioned data is Article 6 Paragraph 1 Letter a) GDPR. Subscribers, post sharers and commenters give their consent to the collection by voluntarily interacting with our fan page in conjunction with accepting Instagram’s terms of use.

The data is usually removed when our site is deleted or temporarily removed when deactivated. You can also delete your connections to us by deactivating the Like buttons again. If we receive a revocation and we have the opportunity to delete your data, we will take the necessary steps to do so. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation. The data is stored in our Instagram statistics for a period of up to 24 months and then automatically deleted. This also applies below, unless we inform you otherwise. You can prevent the collection of your data by selecting the appropriate privacy settings on Instagram, see https://www.instagram.com/accounts/privacy_and_security/ .

You can also send us messages via the social network. In this case, the personal data transmitted with the message (name/username; profile picture) will be saved; If you send us videos, voice messages or pictures, the information transmitted thereby will also be processed by Instagram and, if necessary, us (image, voice, etc.). In this case, you agree that we may also contact you via this communication channel to answer your request. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation. The legal basis for the processing of data transmitted in the course of sending a message is Article 6 Paragraph 1 Letter f) GDPR. The legitimate interest lies in processing your request. If the message/contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b) GDPR. The data from the message is deleted when the respective conversation ends. However, if the conversation is aimed at concluding a contract, the data will be deleted after the statutory retention periods; this is usually 10 years. There is a possibility of revocation if the message does not serve to prepare or implement a contract. Please note that in this case the request may not be processed.

4.2.3 Instagram posts, stories, reels and guides

We also use Stories, Reels and Guides on Instagram. You can like, share and comment on these and otherwise interact with us and others. Because of this, we collect and process the content you communicate (hashtags, messages, etc.) and the type of interactions. We process the content of any message as well as the time. The recording helps us to find out more about our fans and to better tailor our advertising/products to them.

Instagram Stories with Swipe Up function: Once we reach a certain number of followers, we can add a swipe up link to Stories and post it. If you use this link, this will be recorded statistically (reach, number of link clicks). The recording helps us to find out more about our fans and to better tailor our advertising/products to them.

Only we as authors see your comments and reactions to the stories. But we would like to point out that the data is also processed by Instagram. We can also connect our stories with various functions. If you use the functions, we can see your information, opinions, etc.

We can integrate call-to-action buttons on our profile and in posts (call, SMS or email button). If you click on this, you can contact us via the selected media or carry out other actions (e.g. reservations, etc.).

The legal basis for collecting the aforementioned data is Article 6 Paragraph 1 Letter a) GDPR. You give your consent to the collection by voluntarily interacting with our story in conjunction with accepting Instagram’s terms of use. The legal basis for the processing of the data transmitted in the course of sending a contact is Article 6 Paragraph 1 Letter f) GDPR. The legitimate interest lies in processing your request. If the contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b) GDPR.

If we receive a revocation and we have the opportunity to delete your data (e.g. messages), we will take the necessary steps to do so. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation. The data from a message is deleted when the respective conversation ends. However, if the conversation is aimed at concluding a contract, the data will be deleted after the statutory retention periods; this is usually 10 years. There is a possibility of revocation if the message does not serve to prepare or implement a contract. Please note that in this case the request may not be processed.

4.2.4 Use of Instagram interfaces

If we use Instagram’s tools that create an interface to Instagram (e.g. use of the Instagram pixel), information will be passed on to Instagram, such as websites visited, purchases made and how the services are used – regardless of whether you are Have an Instagram account or are logged in there.

Because of this, we collect and process it

• the way of interactions (likes),

• information about transactions, ie how data is processed, if you

be redirected to our shop via our fan page.

This is to learn more about our customer target group and to better tailor our advertising/products to our customers. This also serves to measure the effectiveness and distribution of the advertisements and to advertise products as effectively as possible on multiple channels.

When using the interface tools, the data can be viewed not only by us and Instagram, but also by their affiliated partners/companies and, if applicable, by all subscribers, post sharers, commenters and other people who click on our page (e.g. if you like it). me clicks).

The legal basis for collecting data as part of the tools is in particular Article 6 Paragraph 1 Letter a) GDPR. The use of the tools is voluntary. You give your consent to the collection by voluntarily activating the tools or using them to contact us, in conjunction with accepting Instagram’s terms of use.

You can prevent the collection of your data by, for example, making purchases directly via our website and not activating the Like buttons. You can delete your connections to us, for example by deactivating the Like button again. If we receive a revocation and we have the opportunity to delete your data, we will take the necessary steps to do so. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation. Furthermore, please contact the social network directly at the addresses mentioned in section 2.

4.2.5 Meta Business Suite

4.3 Xing

4.3.1 Interactions, Statistics, Messages

We ourselves use functions that the social network makes available to us as well as other information that you provide when you visit our fan page or interact with us through it. As a result, we collect and process the following data, among others: publicly visible contact details of other users; Reactions of other users to the posts and/or comments posted/shared/commented by us; Messages from Xing about birthdays etc.; Anonymized statistical information about visitors; News (particularly who read it and when); Contact paths through which you may be connected. We also receive details about our profile visitors, in particular statistical data about who was on our profile, when and how often in the last 90 days and how they became aware of the profile.

If we create surveys and you participate in them, we will also find out your answer results.

We would like to point out that – if you have a Xing profile yourself – we are also able to track your networks and connections as a result of your interaction and view the information you have posted there (photos, posts, information about you personally, etc.). . In doing so, you may also disclose sensitive data in accordance with Art. 9 GDPR. If we collect this data, we will only collect and evaluate it anonymously without being able to identify a person.

We use the data to help us learn what posts and information our visitors interact with (or not). With the help of the results, we can build and expand our target group and provide them with interesting events, information, etc. tailored to the target group and optimize our content. We also see which posts received the most attention. We would also like to know which visitors view our profile and how this came about. This also helps us to learn more about our customer target group and to better tailor our advertising/products to our customers.

You can prevent the collection of your data by selecting the appropriate privacy settings, see https://www.xing.com/settings .

We would like to point out that the data can be viewed not only by us and Surf commentators.

As far as purely statistical and therefore anonymous data is concerned, the legal basis is Art. 89 GDPR. Another legal basis for collecting the aforementioned data is Article 6 Paragraph 1 Letter a) GDPR. You give your consent to the collection by accepting the terms of use of the respective social network and the posts based on them.

Deletion: The statistical data is deleted after 90 days (information about visitors). The remaining data is usually removed when our site is deleted or temporarily removed when deactivated. You can also delete your connections to us by deactivating the Like buttons again. If we receive a revocation and we have the opportunity to delete your data, we will take the necessary steps to do so. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation. In addition, the user can set the extent to which some information should be visible to others.

You can also send us messages via the social network. In this case, the personal data transmitted with the message (name/username; profile picture, message) will be saved. In this case, you agree that we may also contact you via this communication channel to answer your request. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation. The legal basis for the processing of data transmitted in the course of sending a message is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. The legitimate interest lies in processing your request. If the message/contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 Para. 1 Sentence 1lit. b) GDPR. The data from the message is deleted when the respective conversation ends. However, if the conversation is aimed at concluding a contract, the data will be deleted after the statutory retention periods; this is usually 10 years. There is a possibility of revocation if the message does not serve to prepare or implement a contract. Please note that in this case the request may not be processed.

4.3.2 Onlyfy by Xing

We use Onlyfy by Xing for recruiting. Xing provides us with various tools:

• TalentManager (tool for direct contact with users)

• Employer branding profile (company presence on 2 portals with statistics tool)

• Post job advertisements

The ads we post there are suggested by Xing to suit each member and linked to contacts. We have no influence on this. The ads are analyzed automatically by Xing. Here we find out information about click numbers, demographic visitor information and the interested parties who best fit the job requirements. If you visit a job advertisement, this will be recorded statistically.

If you apply to us, we process the information that we receive from you as part of the application process, i.e. information from the documents sent, your email address, Xing data and the information contained therein.

If you send us a photo of you, we may be able to derive information about your racial or ethnic origin. We would like to point out that we do not explicitly examine the photos for such information, biometric data or health data, but sometimes clues arise simply from looking at the picture. If you do not wish to send us such information, we ask that you do not send us a portrait.

Your data will initially be processed exclusively to carry out the application process. If your application is successful, the data will become part of the personnel file and can be used to carry out and terminate the employment relationship. If we are currently unable to offer you employment, we will process your data in order to defend ourselves against possible legal claims, in particular due to alleged discrimination in the application process. If you receive reimbursements, the corresponding accounting documents will be processed to fulfill commercial and tax retention obligations. The legal basis for data processing is therefore Art. 6 Para. 1 lit. b) GDPR, insofar as the data processing serves to decide on the establishment of an employment relationship and insofar as the data is then included in the employment relationship. If storage serves to secure claims, the legal basis is Art. 6 Para. 1 lit. f) GDPR. The legitimate interest here is the receipt of evidentiary documents for a possible defense. We process information and documents that are not required for the above-mentioned purposes on the basis of your implied consent in accordance with Art. 6 Para. 1 lit. a) GDPR, which you gave us by sending it. If you receive cost reimbursements from us, the legal basis is Art. 6 Para. 1 lit. c) GDPR.

The evaluation data will be made available to us for 30 days. We store the data required for a successful application and for the employment relationship until the end of the employment relationship and for a period of up to 3 years afterwards. We will process the data relating to an application for which we had to decide to reject it for a period of 6 months after sending the rejection in order to protect our legitimate interests. If we are called upon as part of a process, we store the data until it is completed. This also applies to data received voluntarily. If you receive cost reimbursements, the corresponding accounting documents will be stored in order to fulfill the commercial and tax retention obligations until a maximum of March 31 of the eleventh calendar year after payment, or in the case of commercial and business letters and other tax-relevant documents, the seventh calendar year after their creation.

The legal basis for the statistics is Article 6 Paragraph 1 Letter f) GDPR, as this provides us with valuable information about those interested in our recruiting measures.

If you have given your consent to the processing of the data, you have the right to revoke this consent at any time. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation.

4.4 YouTube

We put videos on our YouTube channel. To evaluate these videos, we use the respective statistical evaluations that YouTube provides to us. We cannot currently turn this off or modify it. As a result, we collect the following data, among other things: number of views and subscribers, access sources, interactions, target group information (number of viewers; times, age, gender, countries, languages, etc.). We receive these evaluations anonymously.

We also collect data from our fans, our non-fans and those people who have commented or shared something. For this purpose, we find out the name (or just the user name), (if available) the profile picture, the time and the rating and, in turn, the information made publicly available by the person, in particular about their own YouTube activities. If you subscribe to our channel, you will receive a notification from YouTube about new videos we have posted and will also see them in your subscription field. Only through the data do we find out which measures are worthwhile on our part and whether our videos are well received by the audience. This allows us to optimize our content.

The legal basis for collecting the aforementioned data is Article 6 Paragraph 1 Letter a) GDPR. You give your consent to the collection by accepting the terms of use of the respective social network and the posts based on them.

The statistical data and comments are collected and processed by us. In addition, this data is processed by the social network and its associated partners/companies etc. The public comments and ratings of a video as well as the subscription to our channel/video are visible not only to us and the social network and their affiliated partners/companies, but also to all subscribers, post sharers, commenters and other people who click on our video.

We can also ensure that our videos are played directly to our target group based on target group selection. However, the assignment is made by YouTube. The legal basis for this is Art. 6 Paragraph 1 Letter f) GDPR, as this is the only way we can determine whether the effort involved in creating such a video is worthwhile and in order to be able to make our videos more target customer-oriented if necessary .

The statistical, anonymized data is available for the duration specified by YouTube in accordance with YouTube’s unchangeable settings. The remaining interaction data will be irrevocably removed when our site is deleted.

As already stated, the statistical data is collected without us currently having the option to opt out. For this reason, we cannot comply with your right to object for technical reasons. We therefore ask you to contact the social network directly at the addresses mentioned in section 2. There is also the possibility of objecting to comments as follows: We can delete comments upon request, but also if we consider their content to be unlawful. Regarding further interactions, we ask you to contact YouTube itself, as we have no influence on this either. If you do not want your data to be collected, you can set your privacy accordingly at https://myaccount.google.com/privacycheckup?utm_source=pp&utm_medium=Promo-in-product&utm_campaign=pp_intro&hl=de .

4.5 Twitter
4.5.1 Statistics

We ourselves use the respective statistical evaluations that the social network makes available to us. We cannot currently turn this off or modify it. We therefore collect the following data:

• Number of impressions

• Number of interactions (likes, comments, retweets, clicks, views)

• Number of followers and changes in the follower statistics

• Results of a possibly selected goal

• If we have posted videos, we receive information about the

Average playback time and how often they were viewed

We receive the evaluations anonymously – for each individual tweet and for our profile as a whole.

Purpose: We use the data so that we can learn which posts you interact with (or not). With the help of the results, we can build and expand our target group and provide them with interesting information, etc. tailored to the target group, optimize our content and gain additional followers. We also see which posts received the most attention. We would also like to know which visitors view our profile and how this came about. This also helps us to learn more about our customer target group and to better tailor our advertising/products to you. The statistics allow us to see which posts received the most attention.

As far as purely statistical and therefore anonymous data is concerned, the legal basis is Art. 89 GDPR. Another legal basis for collecting the aforementioned data is Article 6 Paragraph 1 Letter a) GDPR. You give your consent to the collection by accepting the terms of use of the respective social network and the posts based on them.

The data can be used not only by us, but also by Twitter and, if necessary, by its affiliated companies.

The statistical, anonymized data is always available in accordance with Twitter’s unchangeable settings, i.e. for an unlimited period of time. As already stated, the statistical data is collected without us currently having the option to opt out. For this reason, we cannot comply with your right to object for technical reasons. We therefore ask you to contact the social network directly at the addresses mentioned in section 2, as we cannot trace which data comes from you due to the extensive anonymization of the data. If you do not want this, you can configure this in Settings, https://twitter.com/settings/privacy_and_safety .

4.5.2 Interactions, messages, surveys, live videos

We also collect data from our followers and fans (retweeters, likers, etc.) and those people who have commented or replied to something or who become our fans and subscribe to us. For this purpose, we find out your name (or username), if available, the profile picture and the information you have made publicly available in your Twitter accounts. We would like to point out that – if you have a Twitter profile yourself – we are also able to track your networks and connections as a result of your interaction and view the information you have posted there (photos, posts, information about you personally, etc.). . In doing so, you may also disclose sensitive data in accordance with Art. 9 GDPR. If we collect this data, we will only collect and evaluate it anonymously without being able to identify a person. If we post a live video and you watch and/or record this video, your data will be collected. If we start surveys, we process the answers and voting behavior.

We use the data to help us learn what posts and information you interact with (or not). With the help of the results, we can build and expand our target group, provide them with interesting information, etc. tailored to the target group, and optimize our content. We also see which posts received the most attention. The surveys show us current trends so that we can control our marketing and corporate development.

The legal basis for collecting the aforementioned data is Article 6 Paragraph 1 Letter a) GDPR. You give your consent to the collection by accepting the terms of use of the respective social network and the posts based on them (like clicks, retweet clicks, comments).

We would like to point out that the data can be viewed not only by us and Twitter, but also by their affiliated partners/companies as well as by all followers, commentators and other people who are on our account or surf the pages of our followers and commentators .

The data is usually removed when our site is deleted or temporarily removed when deactivated. You can also delete your connections to us by deactivating the Like buttons again. If we receive a revocation and we have the opportunity to delete your data, we will take the necessary steps to do so. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation. Alternatively, we ask you to contact the social network directly at the addresses mentioned in section 2, as due to the extensive anonymization of the data, we are sometimes unable to understand which data comes from you. In addition, the user can set the extent to which some information should be visible to others. You can prevent the collection of your data by selecting the appropriate privacy settings, see https://twitter.com/settings/privacy_and_safety .

You can also send us messages via the social network. In this case, the personal data transmitted with the message (name/username; profile picture) will be saved. In this case, you agree that we may also contact you via this communication channel to answer your request. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation. The legal basis for the processing of data transmitted in the course of sending a message is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. The legitimate interest lies in processing your request. If the message/contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 Para. 1 Sentence 1lit. b) GDPR. The data from the message is deleted when the respective conversation ends. However, if the conversation is aimed at concluding a contract, the data will be deleted after the statutory retention periods; this is usually 10 years. There is a possibility of revocation if the message does not serve to prepare or implement a contract. Please note that in this case the request may not be processed.

4.5.3 Twitter Communities/Spaces/Circles

Groups and circles and the content within them serve to exchange experiences with people with similar interests, ask for advice and make contacts. Only as a group member is it possible to take part in conversations etc., provided we allow this. We can create a space. To the extent that you interact with it, what has been said in Sections 4.5.1 and 4.5.2 applies with the proviso that the data remains stored until the group is deleted and provided that the data has not been shared or passed on by third parties. We can invite people to our group. You are free to decide whether to accept the invitation or not. Messages and reactions made in the group are publicly viewable. The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR. You can prevent your data from being collected, for example by not participating. You can revoke your consent at any time and leave the space.

We do not store Space conversations. According to information from Twitter, the audio recordings will be kept there for a certain period of time in case they need to be checked for violations of the Twitter rules.

4.6 LinkedIn
4.6.1 Statistics

We ourselves use the respective statistical evaluations that the social network makes available to us. We cannot currently turn this off or modify it. As a result, we collect the following data:

• In the area of our personal page, we collect statistics as follows: number of profile visitors, companies and industries of visitors, job titles of the people, type of networking by the visitor, time of visit, way of finding our profile and the number of reactions by type (interesting, commented, shared). The retention period is 90 days.

• Regarding our company website, we collect statistics as follows:

– About visitors in general: page views, visitors, clicks on buttons, demographic data (areas of activity, location, career level, company size, industry) and their activities (enquiries, comments, mentions, posts, shares, reactions). The retention period is 30 days.

– For updates: impressions, clicks, reactions, comments, shares, engagement rate (the number of interactions plus the number of clicks and followers gained, divided by the number of impressions), followers; For videos, the minutes viewed and the number of viewers, if viewed for longer than 3 seconds. The storage period is 1 year.

– To followers: number; new ones added over a certain period of time; Data on how followers were acquired through ads and sponsored content, list of current followers, statistical demographic data (location, area of activity, career level, industry, company size). The storage period is 1 year.

The data is collected regularly if you are logged in to LinkedIn when you visit our profile. Cookies are used to determine whether someone is logged in to LinkedIn. Most actions are not possible without login.

Purpose: We use the data so that we can learn which posts you interact with (or not). With the help of the results, we can build and expand our target group and provide them with interesting information, etc. tailored to the target group, optimize our content and gain additional followers. We also see which posts received the most attention. We would also like to know which visitors view our profile and how this came about. This also helps us to learn more about our customer target group and to better tailor our advertising/products to our customers. The statistics allow us to see which posts received the most attention and how we can address the content to specific target groups.

The legal basis for our collection of the above-mentioned data for statistical purposes is Art. 89 GDPR. Another legal basis for collecting the aforementioned data is Article 6 Paragraph 1 Letter a) GDPR. You give your consent to the collection by accepting the terms of use of the respective social network and the posts based on them.

The statistical data is collected and processed by us. In addition, this data is processed by the social network and its associated partners/companies etc.

As already stated, the statistical data is collected without us currently having the option to opt out. If you do not want this, you can configure this under Settings, https://www.linkedin.com/psettings/ . Furthermore, please contact the social network directly at the addresses mentioned in section 2.

Contact synchronization: We have the option to synchronize the contacts from our address book. The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR, which means we will only synchronize your contact if you agree to this.

We can also export data (articles, address book contacts, invitations, recommendations, messages, profiles, etc.). If personal data is affected by this, the legal basis is Art. 6 Para. 1 lit. a) GDPR. You give your consent by accepting LinkedIn’s terms of use.

You have the option to revoke your consent in the future at any time.

4.6.2 Interactions, Messages, Invitations

We also collect data from our followers or those people who have interacted with our page (connect, like, comment, share, etc.). For this purpose, we find out the name (if applicable, the user name of the account), the profile picture and, in turn, the information that the person has made publicly available. We also learn something about your opinion or yourself through the comments. We would like to point out that – if you have a LinkedIn profile yourself – we are also able to see your networks (groups, connected pages) and… To track connections and view the information you have posted there (photos, posts, information about you personally, etc.). In doing so, you may also disclose sensitive data in accordance with Art. 9 GDPR. If we collect this data, we will only collect and evaluate it anonymously without being able to identify a person.

We use the data to help us learn what posts and information you interact with (or not). With the help of the results, we can build and expand our target group and provide them with interesting events, information, etc. tailored to the target group and optimize our content. We also see which posts received the most attention. We would also like to know which visitors view our profile and how this came about. This also helps us to learn more about our customer target group and to better tailor our advertising/products to you.

LinkedIn Stories with swipe up function: When we post stories, we can provide them with a swipe up link. If you use this link, this will be recorded statistically (reach, number of link clicks). The recording helps us to find out more about our fans and to better tailor our advertising/products to them.

The legal basis for collecting the aforementioned data is Article 6 Paragraph 1 Letter a) GDPR. You give your consent to the collection by accepting the terms of use of the respective social network and the posts based on them or through your interaction.

The data can be viewed not only by us and the social network and their affiliated partners/companies, but also by all subscribers, fans, post sharers, commenters and other people who click on our site or on the pages of our subscribers, fans, post sharers and commenters surfing

You can also send us messages/InMails via the social network. In this case, the personal data transmitted with the message (name/username; profile picture, time of the message) will be saved. In this case, you agree that we may also contact you via this communication channel to answer your request. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation. The legal basis for the processing of data transmitted in the course of sending a message is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. The legitimate interest lies in processing your request. If the message/contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Sentence 1 Letter b) GDPR. The data from the message is deleted when the respective conversation ends. However, if the conversation is aimed at concluding a contract, the data will be deleted after the statutory retention periods; this is usually 10 years. There is a possibility of revocation if the message does not serve to prepare or implement a contract. Please note that in this case the request may not be processed.

Additionally, we may send you an invitation to follow us. You are free to decide whether to accept the invitation or not. If you are not yet a LinkedIn member, we will of course only send you an invitation if we have your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR. If you are already on LinkedIn, you have agreed to receive invitations by agreeing to the terms of use. In the case of acceptance, we see that you have accepted and the time of acceptance.

You can prevent the collection of your data by declining our invitations/messages and not interacting. The data is usually removed when our account is deleted or temporarily removed when deactivated. You can also delete your connections to us by deactivating the interaction buttons again. If we receive a revocation and we have the opportunity to delete your data (e.g. comments on our pinboard, etc.), we will take the necessary steps to do so. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation. Alternatively, we ask you to contact the social network directly at the addresses mentioned in section 2, as we cannot trace which data comes from you due to the extensive anonymization of the data. You can also partially prevent the collection of your data by selecting the appropriate privacy settings on LinkedIn, see https://www.linkedin.com/psettings/ .

4.6.3 LinkedIn Publishing

Publishing is used for companies to publish articles and spread news via a newsletter.

If you interact with us via the articles (comment, etc.), what was said in Section 4.6.2 applies. We also collect statistics about our readers. The legal basis for this is Article 6 Paragraph 1 Letter f) GDPR.

4.6.4 Communities

Groups and the content within them serve to exchange insights and experiences, ask for advice and make contacts with professionals in the same industry or with people with similar interests. Only as a group member is it possible to participate in conversations etc.

We can create a LinkedIn group. As far as you interact in it (post content/photos/videos etc., carry out surveys, offer help, applaud, share, mark, comment etc.), what has been said in section 4.6.2 applies with the proviso that the data is stored for this long remain until the group is deleted and as long as the data has not been shared or passed on by third parties.

We can invite people to our group. You are free to decide whether to accept the invitation or not. Messages and reactions made in the group can only be seen by other group members. The legal basis for this is Article 6 Paragraph 1 Letter f) GDPR.

4.6.5 LinkedIn Ads

We use LinkedIn Ads with the aim of getting more profile views, more website visitors, more news and to use campaigns more specifically. Through targeted advertising, we can also lead potential interested parties to our website, draw attention to our profile and promote job advertisements and/or events. The advertisements are aimed at specific target groups in terms of location, job function/title, subjects of study, years of employment as well as language, location, career level, industry and company size. As soon as LinkedIn members see an ad or interact with it, we receive a statistical report, which states, for example, that 30% of the selected target groups come from Munich. Furthermore, LinkedIn does not pass on any personal data as part of the advertisements, but only demographic data (i.e. job title, company, location, etc.). We only receive data if the viewer of the ad contacts us (see section 4.6.2).

If you click on a text ad, you will be taken to a website we have selected. TextAds are target group based.

We use this to send message ads or conversion ads, which are linked to an action button (link, etc.). With message ads we receive demographic reports (activity, company, type of reaction).

We also use the LinkedIn Audience Network, which means our advertisements are also presented on third-party websites.

The purpose of the ads and LinkedIn Audience Network is to find out which campaigns and information are being received. This allows us to optimize our content and marketing. This also serves to better tailor our advertising/products to you. This also serves to measure the effectiveness and distribution of the advertisements.

The legal basis for the collection of data in the context of advertising and the LinkedIn Audience Network is Art. 6 Para. 1 lit.

a) GDPR. You give your consent to the collection by voluntarily activating the tools or contacting us via them, in conjunction with accepting LinkedIn’s terms of use. If a contract is concluded as a result, the legal basis is Article 6 Paragraph 1 Letter b) GDPR. The processing of statistical data is based on Article 6 Paragraph 1 Letter f) GDPR; the legitimate interest lies in the stated purpose.

We would like to point out that the data can be viewed not only by us and LinkedIn, but also by their affiliated partners/companies. The websites on which our advertisements appear due to the use of LinkedIn Audience Network do not receive any data.

You can prevent the collection of your data by, for example, not going to our website via LinkedIn and not clicking any buttons or following links or, alternatively, deactivating any connection (e.g. likes). The data is usually removed when our LinkedIn account is deleted or temporarily removed when deactivated. If we receive a revocation and we have the opportunity to delete your data, we will take the necessary steps to do so. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation. Alternatively, we ask you to contact the social network directly at the addresses mentioned in section 2, as we cannot trace which data comes from you due to the extensive anonymization of the data. You can also partially prevent the collection of your data by selecting the appropriate privacy settings on LinkedIn, see https://www.linkedin.com/psettings/.

4.6.6 LinkedIn Talent Solutions

4.6.6.1 LinkedIn Jobs

We publish job advertisements on LinkedIn. You can apply by message and/or via the website www.outsourcing4work.de. If you apply via the website, we refer to the data protection declaration stated there.

If you apply to us, we process the information that we receive from you as part of the application process, i.e. information from the

• Correspondence (especially from a possible application letter, attachments, especially certificates, and the CV)

• Profile details of the person on LinkedIn (such as slogan, location, professional career, training, telephone number)If you apply via message, we process this additionally

• E-mail address

• Information from the suitability questions asked of you, if we ask them

• If necessary, further information that is transmitted via the message.

We can view and manage the applications made via LinkedIn centrally via LinkedIn (in particular filter, evaluate and categorize). LinkedIn sometimes uses this to learn which applicants we are looking for and then suggest people who fit our criteria. For this purpose, LinkedIn collects statistics with the following data: location, position, candidate flow, qualification level, training.

If you send us a photo of you, we may be able to derive information about your racial or ethnic origin. We would like to point out that we do not explicitly examine the photos for such information, biometric data or health data, but sometimes clues arise simply from looking at the picture.

Your data will initially be processed exclusively to carry out the application process. If your application is successful, the data will become part of the personnel file and can be used to carry out and terminate the employment relationship. If we are currently unable to offer you employment, we will process your data in order to defend ourselves against possible legal claims, in particular due to alleged discrimination in the application process. If you receive reimbursements, the corresponding accounting documents will be processed to fulfill commercial and tax retention obligations. The legal basis for data processing is therefore Art. 6 Para. 1 lit. b) GDPR, insofar as the data processing serves to decide on the establishment of an employment relationship and insofar as the data is then included in the employment relationship. If storage serves to secure claims, the legal basis is Art. 6 Para. 1 lit. f) GDPR; The same applies to the central administration through LinkedIn. The legitimate interest here is the receipt of evidentiary documents for a possible defense. With regard to administration, the legitimate interest is that we want to concentrate on suitable and interested people. This also ensures that you are not confronted with inquiries even though the position is not suitable for you. We process information and documents that are not required for the above-mentioned purposes on the basis of your implied consent in accordance with Art. 6 Para. 1 lit. a) GDPR, which you gave us by sending it. If you receive cost reimbursements from us, the legal basis is Art. 6 Para. 1 lit. c) GDPR. The legal basis for the statistics is Article 89 GDPR and Article 6 Paragraph 1 Letter f) GDPR.

We store the data required for a successful application and for the employment relationship until the end of the employment relationship and for a period of up to 3 years afterwards. We will process the data relating to an application for which we had to decide to reject it for a period of 6 months after sending the rejection in order to protect our legitimate interests. If we are called upon as part of a process, we store the data until it is completed. This also applies to data received voluntarily. If you receive cost reimbursements, the corresponding accounting documents will be stored in order to fulfill the commercial and tax retention obligations until a maximum of March 31 of the eleventh calendar year after payment, or in the case of commercial and business letters and other tax-relevant documents, the seventh calendar year after their creation.

4.6.6.2 Recruiter (Lite)

We use LinkedIn Recruiter. LinkedIn gives us the opportunity to select people based on their position, location, skills, company and year of graduation so that we can write to them specifically. We then receive statistics from LinkedIn on the number of potential candidates, whether they are likely to respond and whether they are open to new opportunities, as well as any contacts from our company with the candidate. We can manage this information in Recruiter and will also be notified when candidates update their profile in order to contact them in a timely manner so that we can recruit them for our company. The legal basis for the statistics and administration is Art. 6 Para. 1 lit. f) GDPR, as this gives us valuable information about candidates and this gives us the opportunity to fill our vacancies with the most optimal applicants and also gives us valuable information that enable us to contact them at the best conditions and times. The data will be deleted at the latest if the candidate is not interested.

4.7 Pinterest
4.7.1 Statistics

We ourselves use the respective statistical evaluations that the social network makes available to us. We cannot currently disable or modify this. As a result, we collect the following data, among others: number of impressions, interactions, number of tags, clicks on PINS, video views, etc. Re: We collect information from our target group about location, gender, interests and age, among other things. We receive the evaluations anonymously.

As far as purely statistical data is concerned, the legal basis is Art. 89 GDPR. Another legal basis for this is Article 6 Paragraph 1 Letter f) GDPR, so that we know which pins are worthwhile for us. This particularly applies to the marketing purposes pursued with it. We also have a legitimate interest in this. This allows us to optimize our content. Because we carry out these evaluations anonymously and can only be used for personal purposes by the social network (within the scope of their terms of use), we believe that the interests of our users are protected.

The statistical data is collected and processed by us. In addition, this data is processed by the social network and its associated partners/companies etc. The statistical data will be deleted after 30 days. As already stated, the statistical data is collected without us currently having the option to opt out. If you do not want this, you can configure this under Settings, https://www.pinterest.de/settings/privacy . Furthermore, please contact the social network directly at the addresses mentioned in section 2.

4.7.2 Interactions, messages

We also collect data from people who have commented, shared, rated, posted, tagged something or follow our profile. To do this, we find out the person’s name (or user name) and can access the person’s profile with all the associated data. We would like to point out that – if you have a Pinterest profile yourself – we are also able to track your networks and connections and view the information you have posted there based on your interaction. In doing so, you may also disclose sensitive data in accordance with Art. 9 GDPR. If we collect this data, we will only collect and evaluate it anonymously without being able to identify a person. We use the data to help us learn what posts and information our visitors interact with (or not). With the help of the results, we can build and expand our target group and provide them with interesting information, products, etc. tailored to the target group and optimize our content. We also see which posts received the most attention. We would also like to know which visitors view our profile and how this came about.

The legal basis for our collection of the above-mentioned data for statistical purposes is Art. 89 GDPR. Another legal basis for collecting the aforementioned data is Article 6 Paragraph 1 Letter a) GDPR. You give your consent to the collection by accepting the terms of use of the respective social network and the posts based on them.

The data can be viewed not only by us and the social network and their affiliated partners/companies, but also by all followers, commentators and other people who click on our site or surf the pages of our followers, commentators, etc.

The data is usually removed when our site is deleted or temporarily removed when deactivated. You can also delete your connections to us by deactivating the interaction buttons or PINS again. If we receive a revocation and we have the opportunity to delete your data (e.g. comments on our pin board, application documents, etc.), we will take the necessary steps to do so. The revocation will not affect the lawfulness of the processing of your data based on your consent until any revocation.

You can also send us messages via the social network. In this case, the personal data (name/username) transmitted with the message will be saved. In this case, you agree that we may also contact you via this communication channel to answer your request. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation. The legal basis for the processing of data transmitted in the course of sending a message is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. The legitimate interest lies in processing your request. If the message/contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 Para. 1 Sentence 1lit. b) GDPR. The data from the message is deleted when the respective conversation ends. However, if the conversation is aimed at concluding a contract, the data will be deleted after the statutory retention periods; this is usually 10 years. There is a possibility of revocation if the message does not serve to prepare or implement a contract.

4.7.3 Booking

We also use the “product” pins on Pinterest. If you click on the PIN, you will be redirected to our website www.outsourcing4work.de, where you can use our services. For the data collected and processed there, we refer to our data protection declaration there.

We collect, store and, if necessary, pass on this data to the extent necessary to provide the contractual services. We use the data in particular to identify you as a customer, to process the contract, to correspond with you, to issue invoices and, if necessary, to process contractual and non-contractual claims. You can also use it to save articles or simply view the services you have set up. If the click is aimed at concluding a contract, the legal basis for the processing is Article 6 Paragraph 1 Letter b) GDPR.

We are entitled to transmit your contractual data to third parties if and to the extent that this is necessary to carry out pre-contractual measures and fulfill this contract in accordance with Art. 6 Para. 1 lit. b) GDPR, to fulfill a legal obligation within the meaning of Art. 6 Para. 1 lit. c) GDPR or to enforce our legitimate interests in accordance with Art. 6 Para. 1 lit. f) GDPR. A transmission can in particular be made to

a) Shipping service provider for the purpose of delivery

b) Debt collection companies or lawyers for the purpose of enforcing debts if you are in default. This is where our legitimate interest lies in enforcing our legitimate claim. Due to our advance payment and your delay, our legitimate interests outweigh.

c) Tax advisor.

We would like to point out that Pinterest also collects data about which services you are interested in.

The personal data collected will be stored until the end of the statutory retention period for merchants (6, 8 or 10 years after the end of the calendar year in which the contractual relationship was terminated) and then deleted. In exceptional cases, this does not apply if we are obliged to store the data for a longer period of time due to tax or commercial retention obligations (according to the German Commercial Code (HGB), StGB or AO) or if you have consented to further storage.

5. RIGHTS OF THE AFFECTED PERSON AGAINST US

Below we would like to point out your rights. Please note that unfortunately we can only provide limited information because the data collected by the social network is received by us anonymously, meaning that we only collect anonymized data in this sense. Therefore, we cannot assign a request to any person. However, we can assign your identity and guarantee you your rights to the extent that we collect your data directly, for example based on a request, a like, etc.

5.1 Rights towards us

You have the right to request information from us at any time about the personal data we have stored about you (Article 15 GDPR). This also applies to the recipients or categories of recipients to whom this data is passed on and the purpose of storage.

You also have the right to request the correction of incorrect or incomplete data under the conditions of Art. 16 GDPR and/or the deletion of stored data under the conditions of Art. 17 GDPR. Deletion is only possible if processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

You have the right to request the restriction of processing under the conditions of Article 18 GDPR if you dispute the accuracy of your data, the processing is unlawful and we refuse to delete it, you need the data to assert legal claims or if You have objected to the processing.

Furthermore, you can request data transfer at any time under the conditions of Article 20 GDPR.

If the data collection is based on your consent, you can revoke your consent to us at any time. As a result, we are not allowed to process this data any further in the future.
In the case of processing personal data to carry out tasks in the public interest (Art. 6 Para. 1 S. 1 lit. e GDPR) or to pursue legitimate interests (Art. 6 Para. 1 S. 1 lit. f DS -GVO), you can object to the processing of your personal data at any time with future effect. In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes, unless

• there are compelling, legitimate reasons for processing that outweigh your interests, rights and freedoms, or

• processing is necessary to assert, exercise or defend legal claims.

For more information, we refer to the full text of the GDPR.

Please send all requests for information, requests for information, revocations or objections to data processing by email to the person responsible named under section 2. You also have the option of complaining to the responsible supervisory authority about data protection issues. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, www.datenschutz.hessen.de.

We would also like to point out the special features of the respective social networks below:

5.2 Facebook

In accordance with the agreement between Facebook Ireland and us regarding the processing of Insights data, Meta Platforms Ireland Ltd. responsible for providing information about the processing of the aforementioned page insights in the event of inquiries. We will therefore forward your request with your name and email address to Meta Platforms Ireland Ltd. forward, which will help us answer or implement the request.
Meta Platforms Ireland Ltd. has also assumed primary responsibility for the processing of the Insights data in accordance with Section 2 Paragraph 1 and has assured that it will fulfill all obligations regarding the processing of the data, in particular the rights of those affected. Accordingly, further data subject rights to rectification, portability, deletion and objection are also available to Meta Platforms Ireland Ltd. to be asserted (see point 2). For complaints against Meta Platforms Ireland Ltd. and us regarding the processing of data for page insights, the Irish Data Protection Commission, see https://www.dataprotection.ie/, has been declared responsible. If the legal basis for data processing is Article 6 Paragraph 1 Letter c) or e) GDPR, the supervisory authority named in Section 5.1 is responsible for complaints.

5.3 Pinterest

In accordance with the agreement between Pinterest and us regarding the processing of Insights data, Pinterest is responsible for providing partial information about the processing in response to requests. We will therefore forward your request with your name and email address to Pinterest, which will help us answer or implement the request.

5.4 Other Networks

Furthermore, the social networks have not taken any explicit implementation measures for the data protection rights of those affected, so we can currently only advise you to assert the following rights against the social network. As far as data that you provide to us is concerned, we will also implement it to the extent that this is technically possible.

6. PROCESSING OF DATA THROUGH THE SOCIAL NETWORK AND TRANSFER OF DATA

The social network collects various information from you. Unfortunately, we cannot tell you for what purposes, to what extent, for how long, in what way and to which recipients the data is processed by the respective social network. We therefore refer you to the data protection declaration of the respective network regarding the data and the purposes for which the data is collected, as well as the recipients of this data.

Data is therefore also passed on to partners and companies in countries outside the European Union, especially in the USA, which, according to a ruling by the European Court of Justice, currently does not have an adequate level of data protection.

The rights of the GDPR are also available to you regarding the social network:

• You have the right to request information about the personal data stored about you (Article 15 GDPR) at any time. This also applies to the recipients or categories of recipients to whom this data is passed on and the purpose of storage.

• You also have the right to request correction under the conditions of Art. 16 GDPR and/or deletion under the conditions of Art. 17 GDPR and/or restriction of data under the conditions of Art. 18 GDPR to request processing.

• Furthermore, you can request data transfer at any time under the conditions of Article 20 GDPR.

• For further information we refer to the full text of the GDPR.

• In the case of processing personal data to carry out tasks in the public interest (Art. 6 Para. 1 S. 1 lit. e GDPR) or to pursue legitimate interests (Art. 6 Para. 1 S. 1 lit. f GDPR), you can object to the processing of your personal data at any time with future effect. In the event of an objection, any further processing of your data for the above-mentioned purposes must be refrained from unless there are compelling, legitimate reasons for processing which outweigh your interests, rights and freedoms, or the processing is for the assertion, exercise or Defense of legal claims required.

Please send all requests for information, requests for information, revocations or objections to data processing by email to the address of the social network specified in section 2. You also have the option of complaining about data protection issues to the relevant supervisory authority named there. These are also – as far as known – mentioned under section 2.

Furthermore, you can revoke your consent to the processing of certain data or object to it using the appropriate settings on social networks. However, we would like to refer you to the providers:

6.1 Facebook

You can find out more information about data protection at http://de-de.facebook.com/about/privacy and https://www.facebook.com/policies/cookies . Since Facebook also stores information about users’ end devices, it is possible for Facebook to assign IP addresses to individual users. In addition, Facebook is able to track that you have visited our site and how you used it.

Meta Platforms Ireland Ltd. is based in the USA. This means that the data is also transferred to the USA. The transmission there is currently critical due to the ruling of the European Court of Justice. We have made various agreements with Meta regarding Facebook to protect personal data,

• Addition for those responsible (agreement on joint responsibility in accordance with Art. 26 Para. 1 Sentence 3 GDPR), see https://www.facebook.com/legal/controller_addendum .

• Information on page insights (agreement of joint responsibility in accordance with Art. 26 para. 1 sentence 3 GDPR regarding insights data), see https://www.facebook.com/legal/terms/page_controller_addendum

• Data processing conditions (order processing contract in accordance with Art. 28 GDPR), which can be viewed at https://www.facebook.com/legal/terms/dataprocessing/update.

• Facebook-EU data transfer addendum (EU controller-to-processor standard contractual clauses, i.e. transfer from responsible companies to Facebook as a processor), which can be viewed at https://www.facebook.com/legal/EU_data_transfer_addendum .

Settings and objections to the use of data for advertising purposes are possible within the profile settings at https://www.facebook.com/settings?tap=ads .

6.2 Instagram

Further information on data protection can be found at https://help.instagram.com/519522125107875 and https://help.instagram.com/1896641480634370?ref=ig . We would also like to point out the following:

Instagram as part of Meta Platforms Ireland Ltd. is based in the USA. This means that the data is also transferred to the USA. The transmission there is currently critical due to the ruling of the European Court of Justice. We have concluded a contract with Meta in accordance with the European Commission’s standard contractual clauses.

Settings and objections to the use of data for advertising purposes are possible within the profile settings at https://www.instagram.com/accounts/privacy_and_security/ .

6.3 Xing

Further information on data protection can be found at https://privacy.xing.com/de/datenschutzerklaerung .

Settings and objections to the use of data for advertising purposes are possible within the profile settings at https://www.xing.com/settings .

6.4 YouTube

Further information on data protection can be found at https://policies.google.com/privacy?hl=de DSE and https://policies.google.com/technologies/product-privacy?hl=de .

Google is based in the USA. This means that the data is also transferred to the USA. The transmission there is currently critical due to the ruling of the European Court of Justice. We have concluded the following agreements with Google to protect personal data:

https://business.safety.google/adsprocessorterms/sccs/ .

Settings and objections to the use of data for advertising purposes are possible within the profile settings at https://myaccount.google.com/privacycheckup?utm_source=pp&utm_medium=Promo-in-product&utm_campaign=pp_intro&hl=de .

6.5 Twitter

Further information on data protection can be found at https://twitter.com/de/privacy and https://help.twitter.com/de/rules-and-policies/twitter-cookies .

Twitter is based in the USA. This means that the data is also transferred to the USA. The transmission there is currently critical due to the ruling of the European Court of Justice. We have made the following agreements with Twitter to protect personal data: https://privacy.twitter.com/en/for-our-partners/global-dpa .

Settings and objections to the use of data for advertising purposes are possible within the profile settings at https://twitter.com/settings/privacy_and_safety .

6.6 LinkedIn

Further information on data protection can be found at https://de.linkedin.com/legal/privacy-policy and https://de.linkedin.com/legal/cookie-policy as well as at https://de.linkedin.com/ legal/l/dpa .

LinkedIn is based in the USA. This means that the data is also transferred to the USA. The transmission there is currently critical due to the ruling of the European Court of Justice. We have made the following agreements with LinkedIn to protect personal data: https://de.linkedin.com/legal/l/dpa

Settings and objections to the use of data for advertising purposes are possible within the profile settings at https://www.linkedin.com /psettings/ .

6.7 Pinterest

Further information on data protection can be found at https://policy.pinterest.com/de/privacy-policy and https://policy.pinterest.com/de/cookies .

Pinterest is based in the USA. This means that the data is also transferred to the USA. The transmission there is currently critical due to the ruling of the European Court of Justice. We have concluded the following agreements with Pinterest to protect personal data: https://assets.ctfassets.net/h67z7i6sbjau/1KmAN2yqkBfgC8xyj6BOQh/0a08964e847e773904f0d4b7a70aad0d/PASA_-_German.pdf?utm_campaign=4ab41f&utm_medium=2023&utm_source=31Settings and objections to the use of data for advertising purposes are possible within the profile settings at https://www.pinterest.de/settings/privacy.

7. CHANGES TO THE PRIVACY POLICY

We reserve the right to change our privacy practices and these Terms in order to adapt them to changes in relevant laws, regulations, case law or requirements of data protection authorities or to better meet your needs. Any changes to our privacy practices will be posted here. Please note the current version date