The protection of your personal data is very important to us. In the following, you will find information on how we handle your data, which are recorded through your use of our social media presence on social networks and platforms.
Summary
magicplan extends its social media presence to other platforms such as Twitter, Instagram, Facebook, Circle (magicplan Community platform), YouTube, and LinkedIn, with each provider responsible for data processing on their respective platforms. The policy informs users about general data processing on social media platforms, emphasizing market research, advertising, contact, and contract handling. The policy outlines users' rights in the transfer of data and provides information on the duration of data storage, concluding with a list of links to the privacy policies of the mentioned social media providers. The information provided is current as of April 2022.
Legal Documentation Below
I. Providers
1. Facebook Fan Page
1.1 Controller
In case you provide us with data, which is also or exclusively processed by Facebook, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is the controller for data processing, in accordance with the GDPR, in addition to or instead of us. For this purpose, we have concluded an agreement with Facebook pursuant to Art. 26 GDPR on joint controllership for data processing (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook fan page. See the following link to consult this agreement: https://www.facebook.com/legal/terms/page_controller_addendum.
If you, as a visitor to the site, wish to exercise your rights (access, rectification, erasure, restriction, data portability, complaint with a supervisory authority, objection or withdrawal), you can contact both, Facebook and us.
You can edit your advertising preferences in your account settings. Click on the following link and log in to your account to change your settings:
https://www.facebook.com/settings?tab=ads
For further details, please see Facebook’s privacy policy:
https://www.facebook.com/about/privacy/
1.2 Facebook’s data protection officer
You can use Facebook’s online form to contact Facebook’s data protection officer. To access it, please use of the following link:
https://www.facebook.com/help/contact/540977946302970.
1.3 Data processing for statistical purposes using Page Insights
Facebook provides Page Insights Data for our Facebook fan page: https://www.facebook.com/business/a/page/page-insights. This aggregated data gives us an insight into how people interact with our page. Page Insights data may be based on personal data gathered from visits and interactions on, or with our page, and from connections with provided content. Please consider which personal data you share with us via Facebook. Your data may be processed for market research and promotional purposes, even if you are not logged into Facebook or do not have a Facebook account. User profiles can be created on the basis of user behaviour and the resulting interests of users. User profiles may be used for targeted advertisements within or outside the platform. Data recording is done using cookies, which are stored on your terminal device. In addition, user profiles may contain data, that is gathered from memberships on other platforms. Legal basis of the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the optimized presentation of our proposition, the effective information and communication with customers and interested parties as well as in the targeted placement of advertisements. Please note that we have no influence on the data gathering and further processing by Facebook. As a result, we cannot provide any access about where, for how long and to which extent Facebook retains the data. Furthermore, we cannot make any statements about the extent to which Facebook complies with existing erasure deadlines, what evaluations and translations are made and to whom the data is transferred by Facebook. If you want to prevent your personal data being processed by Facebook, please contact us by other means.
2. Other social media providers
2.1 Controller
If your personal data is processed by one of the providers listed below, this provider is responsible for data processing within the meaning of the GDPR. For the assertion of your rights, please contact the respective provider. Only they have access to the data collected from you. However, if you need any assistance, please contact us any time.
We are present on social media platforms of the following providers:
- Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
- Instagram Inc., Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
- YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
2.2 Data protection officer
Information on how to contact the data protection officer of the respective social media providers can be found here:
- Twitter Inc.: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp
- Instagram Inc.: https://www.facebook.com/help/contact/540977946302970
- LinkedIn Ireland Unlimited Company: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
- To contact the YouTube data protection officer, please approach Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
II. General information on social media platforms
1. Responsible data controller
Insofar as we process the data provided by you via social media the responsible data controller is Sensopia Inc., 434 rue Sainte Hélène, Montreal, QC H2Y 2K7, Canada („Sensopia“). Sensopia and its affiliated company, enapt GmbH, Dietrich-Bonhoeffer-Str. 14, 83043 Bad Aibling, Germany („enapt“) are partly jointly responsible data controllers. In this respect, the companies have defined in an agreement which of them fulfils which data protection obligation. The essential content of this agreement can be obtained from Sensopia or enapt upon request.
2. Our data protection officer
If you have any concerns about us processing your data, please contact our data protection officer at the following contact details:
PROLIANCE GmbH / datenschutzexperte.de
Leopoldstr. 21
80802 München
Germany
Email: datenschutzbeauftragter@datenschutzexperte.de
3. General data processing on social media platforms
3.1 Data processing for market research and advertising
Organisations generally process data for market research and promotional purposes. Therefore, website providers use cookies, which load on to your browser and detect your return to the same URL. The recorded data is used to create user profiles. User profiles may be used for targeted advertisements within or outside the platform. In addition, user profiles may contain data, that is gathered from memberships on other platforms.
3.2 Data processing through making contact
We collect data when you contact us, for example via contact form or messenger services such as Facebook Messenger. The data collected depends on the details you provide and the contact details you specify. It will be stored for the purpose of processing the inquiry and in the event of follow-up questions. Under no circumstances we will pass on the data to third parties without your consent. The legal basis for the data processing is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your request aimed at the conclusion of a contract. Unless there are compelling reasons, your data will be erased after final processing. We assume the processing is finalized, when the regarding circumstances are clarified.
3.3 Data processing for the purpose of contract handling
If your request via social media or other platforms is aimed at the conclusion of a contract, regarding the delivery of goods or the provision of services, we process your data in order to perform the contract and the requested services, or pre-contractual measures. In this case, the legal basis for the processing of your data is Art. 6 para. 1 lit. b GDPR. Your data will be erased if they are no longer necessary for the fulfilment of the contract or if it is certain, that pre-contractual measures will not lead to the conclusion of a contract corresponding to the purpose of establishing the contact. Please take into account, that it may be necessary to store personal data of our contractual partners in order to comply with contractual or legal obligations even after the conclusion of contract.
3.4 Data processing by virtue of consent
IV. Data transfer and recipient
Please note, that by using social media platforms, data processing may take place outside the EU and the European Economic Area, wherefore European levels of data protection cannot be guaranteed. The US based social media providers mentioned above are certified by “Privacy Shield“. “Privacy Shield” is an US-European-data protection convention, warranting the compliance with EU data protection levels. We have no influence on the processing and handling of your personal data by the respective providers as well as we have no information on this matter. Please consider the privacy policy of the providers for further information:
Twitter privacy policy: https://twitter.com/de/privacy
Opt-out: https://twitter.com/personalization
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active
Instagram privacy policy and Opt-out: http://instagram.com/about/legal/privacy/
YouTube/Google privacy policy: https://policies.google.com/privacy?hl=de&gl=de
Opt-out: https://adssettings.google.com/authenticated
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active
V. Your rights
You have the right,
to request information about your personal data processed by us; Art. 15 GDPR. In particular, you may obtain information about the purpose of processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing, the right to lodge a complaint, where the personal data are not collected from us, any available information as to their source, the existence of automated decision-making, including profiling and meaningful information about the logic involved.
To obtain from the controller without undue delay the rectification of inaccurate personal data or have incomplete personal data completed; Art. 16 GDPR.
To obtain from us the erasure of personal data concerning, unless the processing is necessary for, exercising the right of freedom of expression and information, compliance with a legal obligation, reasons of public interest, achieving purposes in the public interest and the establishment, exercise or defence of legal claims, Art. 17 GDPR.
To obtain from us restriction of processing where, the accuracy of personal data is contested by you, the processing is unlawful, we no longer need the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21; Art. 18 GDPR.
To receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller; Art. 20 GDPR
To lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of alleged infringement; Art. 77 GDPR.
To withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before it’s withdrawal. Prior to giving consent, you shall be informed thereof; Art. 7 para. 3 GDPR. In case of countermand the respective data shall be deleted immediately, unless further processing cannot be based on a legal basis for processing without consent.
Right of object
In line with Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on processing for the purposes of the legitimate interests (Art. 6 Abs. 1 lit. GDPR) pursued by us. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.
If you wish to make use of your right of objection or withdrawal, send an E-Mail to support@magicplan.app
VI. Duration of storage
The personal data collected and stored by us will be erased from our systems, if the purpose of processing ceases to exist or if you have made use of your right of withdrawal or objection. Legal retention periods remain unaffected. We have no influence on the storage period of your data being stored by social media providers for their own purposes. For further details, please contact them directly.
April 2022