icon film  GOTS film  gb de fr it es jp ch

PRIVACY NOTICE FACEBOOK 

As the data controller we have prepared this privacy notice to inform you in accordance with the requirements of the EU General Data Protection Regulation 2016/679 (GDPR) about the nature, scope and purpose of the processing of personal data in relation to the services we offer on our Facebook business page.

  1. Definitions

„Personal data“ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

„Processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

„Controller“ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

 „Recipient“ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

  1. General information
  2. The data controller

Global Standard gemeinnützige GmbH

Augustenstrasse 84 A

70178 Stuttgart

Deutschland

E-Mail:

 

Responsible for the processing of personal data on Facebook Inc. (hereinafter "Facebook")

1 Hacker Way

Menlo Park

CA 94025

USA.

 

Responsible for the processing of personal data on Facebook in relation to data subjects in the EU Facebook Ireland Ltd (hereinafter "Facebook")

4 Grand Canal Square

Grand Canal Harbour

Dublin 2

Ireland.

 

  1. Contact details of the data protection officer

OBSECOM GmbH

Königstr. 40

70173 Stuttgart

Germany

Telephone: 0711 / 4605025-40

Telefax: 0711 / 4605025-49

E-Mail:

Website: https://www.obsecom.de

 

You can contact Facebook´s Data Protection Officer at:

Facebook Ireland Ltd.

4 Grand Canal Square

Grand Canal Harbour

Dublin 2

Ireland

Website: https://www.facebook.com/help/contact/540977946302970

 

  1. Legal basis

On this web site personal data are being processed on at least one of the following legal bases:

  • The data subject has given consent to the processing of his or her personal data for one or more specific purposes (Art.  6 para. 1 lit. a GDPR);
  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art.  6 para. 1 lit. b GDPR);
  • Processing is necessary for compliance with a legal obligation to which we are subject (Art.  6 para. 1 lit. c GDPR);
  • Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party (Art.  6 Abs. 1 lit. f GDPR)

 

In this privacy policy we refer to the respective legal basis of the individual data processing operations.

 

  1.  Rights of data subjects

As a data subject you have the following right:

  • Pursuant to Art. 15 GDPR to request information about your personal data processed by us. You may also request information regarding the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be stored, or the criteria used to determine that period; where the personal data are not collected from you, the data source; the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing; the existence of the right to request rectification or erasure of data concerning you, the right to restrict processing or to object to such processing, the right to lodge a complaint with a supervisory authority. Finally, you have a right to know whether personal data has been transferred to a third country or to an international organisation, and, if so, the appropriate safeguards relating to this transfer;
  • Pursuant to Art. 16 GDPR to demand the immediate rectification of inaccurate personal data and to have incomplete personal data that are stored with us to be completed;
  • Pursuant to Art. 17 GDPR to demand the erasure of your personal data stored with us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of a legal claim; 
  • Pursuant to Art. 18 GDPR to request the restriction of the processing of your personal data if the accuracy of the personal data is contested by you; the processing is unlawful but you oppose the erasure of the personal data and request the restriction of their use instead; we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; you have objected to processing pursuant to Art. 21 para. 1 GDPR pending the verification whether our legitimate grounds override your interests;
  • Pursuant to Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller;
  • Pursuant to Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation, or if you object to processing for direct marketing purposes and the legal basis for the processing are our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR;
  • Pursuant to Art. 7 para. 3 GDPR to withdraw your consent given to us at any time. As a result we are no longer allowed to continue the data processing that was based on this consent in the future;
  • Pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. A list of contact details of the data protection officers and supervisory authorities can be found on this website: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

If you wish to assert the data subject rights mentioned above for personal data (such as name and contact details, requests) which we collect on this Facebook page on our own behalf and which we process for our own purposes, you may contact us or our Data Protection Officer by using the contact details above.

 

  1. Erasure and restriction of personal data

Unless otherwise provided for in this privacy notice, personal data will be deleted, if these data are no longer necessary in relation to the purposes for which they were collected or otherwise processed and the deletion does not conflict with statutory retention requirements. In addition, we will erase the personal data processed by us in accordance with Art. 17 GDPR on your request, if the conditions provided therein are met. If personal data are required for other lawful purposes, they will not be erased, but their processing will be restricted in accordance with Art. 18 GDPR. In case of restriction, the data will not be processed for other purposes. This applies, for example, to personal data that must be retained by us due to commercial or tax law obligations. For example, data must be kept for 6 years pursuant to section 257 (1) Nos. 2 and 3 German Commercial Code (HGB) and section 147 (1) Nos. 2, 3, 5 German Tax Code (AO); data must be kept for 10 years pursuant to section 257 (1) Nos. 1 and 4 HGB and section 147 Abs. 1 No. 1, 4, 4a AO.

 

  1. Processing of personal data in joint responsibility with Facebook

The processing of site statistics for this Facebook page is operated jointly with Facebook in accordance with Art. 26 GDPR. Information on which one of the joint controllers meets the obligations under the GDPR with regard to the processing of site statistics can be found here: 

https://en-gb.facebook.com/legal/terms/page_controller_addendum

  

 

  1.  Onward transfer of personal data

We transfer personal data to recipients (data processors or other third parties) only to the extent required and only if one of the subsequent conditions are met:

  • the data subject has consented to the data transfer;
  • the onward transfer is required to fulfil a contractual obligation or pre-contractual measure on the request of the data subject;
  • we are obliged by law to make such a transfer;
  • The onward transfer is made on the basis of our legitimate interest or on those of a third party.

 

  1.  Third Countries

The transfer of personal data to a third country or an international organisation outside the European Union (EU) or the European Economic Area (EEA) is subject to legal or contractual permission only in accordance with the provisions under Art. 44 et seq. GDPR. It means that pursuant to Art. 45 GDPR an adequacy decision of the EU commission must be present for the respective country, appropriate safeguards for data privacy under Art. 46 GDPR, or Binding Corporate Rules under Art. 47 GDPR do exist.

 

  9.  Cookies

This web site uses cookies. Cookies are small text files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, PC, etc.) when you visit our website. Cookies do no harm to your device, nor do they contain any viruses or other malicious software. The cookie stores information which is created in relation to the specific device you are using. However, this does not mean that we become immediately aware of your identity. Cookies are mainly used to make the website more user-friendly, effective and secure.

Facebook uses cookies on this website, among others, for statistical evaluation of website visits, for the purpose of authentication, the targeted placement of advertisements, the provision of website functions and services, to recognize during your visit that you have already visited individual pages of this and other internet offers, and to optimize the user-friendliness of the web site. For detailed information on how and on what legal basis Facebook uses cookies on this website, the personal data involved by the processing, duration of storage, joint data processing with third parties, and what options are available to you to control its use, please visit: https://en-gb.facebook.com/policies/cookies

The data processed by cookies are required for the purposes mentioned above in order to protect our and Facebook’s legitimate interests which result thereof, as well as those of third parties according to Art. 6 para. 1 lit. f GDPR.

Most browsers accept cookies automatically. However, if you do not wish to accept cookies, you can configure your browser so that no cookies are stored on your device or a message is displayed before new cookies are created. A general objection to the use of cookies used for online marketing purposes can be made for a variety of services, such as explained at http://www.youronlinechoices.com/or the opt-out page of the Network Advertising Initiative http://optout.networkadvertising.org. Facebook supports EIDAA to opt-out of interest-based online advertising from Facebook and other participating companies. However, disabling cookies may mean that you may not be able to use all the features of our website.

 

III. Facebook services

For personal data that are collected within the framework of this web site by Facebook for their own purposes, Facebook fulfil their obligations under the GDPR with regard to the right of data subjects. You will receive information about your personal data and can correct or transmit them in your personal Facebook settings at https://www.facebook.com/settings. To object to data processing by Facebook or restrict data processing please visit: https://www.facebook.com/help/contact/1994830130782319. Facebook comply with the obligation under Articles 13 and 14 GDPR to inform data subjects about the processing of personal data collected for their own purposes.

Facebook have joined the EU/US Privacy Shield Agreement and are committed to uphold EU data privacy standards. Facebook therefore meet the EU requirements for legitimising the transfer of personal data to the United States. For information about Facebook’s commitment, please visit: 

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

For more information on the collection, processing, disclosure, and use of personal data by Facebook, please refer to the data policy available at https://en-gb.facebook.com/policy.php. There. Facebook will present information on how to protect your privacy and introduces methods to prevent the transfer of data to Facebook. For an overview of the available Facebook plug-ins, please refer to: https://developers.facebook.com/docs/plugins/?locale=en_US.

  1.  Communication in the social network

This website uses functionalities of Facebook's social network. Facebook enables participants in the social network to communicate and interact, to share opinions, experiences and to publish information. The legal basis for data processing is your voluntary consent to participate in a conversation pursuant to Art. 6 para. 1 lit. a GDPR.

 

  1.  Facebook-Pixel

This website uses the so-called "Facebook pixel". The use of this technology enables Facebook to associate visitors of this website with certain groups (for example, visitors to our website are linked to the areas of interest we have registered at Facebook, the so-called "Custom Audiences") in order to recognise them and to display specific advertisements. This technology aims at ensuring that users are shown only interest-oriented ads and to minimise inconvenience by improper advertising. Through the use of the Facebook pixel, Facebook can also track the effectiveness of ads for statistical purposes and track whether and how a user has used an offer after clicking on the advertisement.

For more information about the Facebook Pixel and how it works, please visit https://www.facebook.com/business/help/651294705016616. Details on how Facebook processes the data obtained, as well as general information about Facebook advertising, can be found on the Facebook data policy available at https://www.facebook.com/about/privacy/update. On your Facebook account under the heading "Settings" you also have the option available to object to the collection of your data via the Facebook pixel and its use for the display of specific advertisements. You can find further information about these settings at https://www.facebook.com/settings?tab=ads (login required).

The use of Facebook Pixel helps to promote products and services in an appropriate manner, without annoying you with inconvenient or inappropriate advertising. The legal basis for the use of the Facebook pixel are therefore the legitimate interests for us, Facebook, and third parties according to Art. 6 para. 1 lit. f GDPR.    

 

  1.  Access data and log files

When you visit our Facebook business pages, information about your visit is automatically sent to the web server by the browser on your device. This information is stored in so-called page statistics by Facebook. For more information on how Facebook handles this information, please visit: https://en-gb.facebook.com/business/a/page/page-insights

 

If you contact us using the contact details published in our web site (for example, by e-mail) and in this context provide us with personal data, we will use this data to process your request on the basis of Art. 6 para. 1 lit. b GDPR, if your request is related to the performance of a contract or is required to perform pre-contractual action. In all other cases, processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and / or our legitimate interest in the effective processing of requests addressed to us pursuant to Art. 6 para. 1 lit. f GDPR. We will store your personal data until you ask us for deletion, revoke your consent to the storage, or the data are no longer necessary for the purpose for which they were collected (for example, after completion of your request). Mandatory statutory provisions - especially retention periods - remain thereof unaffected.

 

IV. Individual processing operations

1. Access data and log files

We use Facebook page insights for an anonymous statistical analysis of page visits. The purpose of this data is to ensure a needs-based design and continuous optimisation of our page contents, to measure the success of marketing measures and to generate statistical evaluations. The legal basis of data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection mentioned above. In no case do we use the data collected for the purpose of drawing conclusions about an individual person.

 

2. Contact requests

If you want to get in touch with us via our Facebook business page, we will use your name. Other personal information can be provided by you on a voluntary basis. The processing of data is necessary for the purpose of contacting us and answering your request based on your voluntarily consent pursuant to Art. 6 para. 1 lit. a GDPR. All personal data collected in connection with your request will be deleted after your request has been processed, unless storage is required for the documentation of other transactions (for example, subsequent conclusion of a contract).

 

3. External content

On our Facebook page we do link to external content on our own website. When clicking on the relevant links you will be redirected to https://www.global-standard.org/. The legal basis is our legitimate interest in the communication and promotion of our services in accordance with Art. 6(1)(f) GDPR. For more information on how we handle personal information on our website, please refer to: https://www.global-standard.org/data-privacy.html