8. Integration of social media and professional networks

8.1  Social media appearances and use of social media icons 

We do not use social plug-ins as active buttons on our website. We only refer to our offer in the following social networks: 

• Linkedin: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

To protect data protection, we only link to the offer in the social networks. As a result, no personal data is transmitted to the social networks simply by visiting our website. Only when you click on the link and thus call up our company website there is a connection to this third-party provider established via your web browser in a separate tab (tab). This third-party provider can thus track your visit to our site. If you are a member, you can share the content of our site with other members from your network by activating the button. 

By participating in the LinkedIn network or by visiting or calling up our company website, your data can be processed outside the EU. This can result in risks because e.g. B. the enforcement of your rights can be more difficult. 

When you access a social network, cookies are usually stored on your end device to record user behavior. If you have a user account on the respective network and are logged in there, your usage behavior can be saved for your user account. The social networks can analyze usage behavior and use it for market research and advertising purposes. This can lead to advertisements being displayed to you both inside and outside of social networks. We have no influence on this. 

We have no influence on the data collected and stored about you by the social networks. We only receive anonymous evaluations of user data via our above-mentioned company website. If users interact with our company website and are logged in with a user account, we can also recognize the user profile and see the content of comments or postings on our website. This data processing is therefore carried out jointly with the respective provider of the social network, in this case LinkedIn. 

For the evaluation of the data in connection with our company appearance, an additional agreement, the Joint Controller Addendum, became part of the LinkedIn Terms of Use (Article 26 DSGVO). 

8.2    LinkedIn

We operate a company website at www.linkedin.com/company/buergerenergie-gmbh/, which we use to display photos and posts on community energy, provide information about our services and current events, publish job advertisements if necessary and communicate with users. When using and accessing our LinkedIn page, user data is also processed by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, based in Ireland, and LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, based in the USA (im hereinafter “LinkedIn”). Among other things, LinkedIn enables a system in which LinkedIn distributes advertising via its network.

We analyze the views and interactions on our LinkedIn page. For this purpose, LinkedIn creates usage profiles, but only provides us with anonymous data, so-called page analyses. This is aggregated data that gives us insight into how users interact with our LinkedIn page. The generated statistics are only transmitted to us in an anonymous form. We have no access to the underlying data. In relation to this analysis service, we process your personal data together with LinkedIn. For this reason, LinkedIn has added a joint controller addendum with regard to so-called page insights as part of the terms of use (Article 26 DSGVO).  In this, LinkedIn has undertaken, among other things, to inform you about joint responsibility to inform you and to protect your rights as a data subject. For more information, see Linkedin's privacy policy https://www.linkedin.com/legal/privacy-policyand the Joint Controller Addendum https://legal.linkedin.com/pages-joint-controller-addendum. You can also assert your rights against us. However, LinkedIn can fulfill your rights more comprehensively because the data for use and evaluation is also stored there. 

You can access our LinkedIn page regardless of whether you have a LinkedIn user account or not. We process your personal data when you interact with our LinkedIn page, e.g. B. leave a comment, click a Like button or send us a message. We do not pass on the data to other third parties. The terms of use of LinkedIn at: https://ch.linkedin.com/legal/user-agreement?trk=hb_ft_userag.

Depending on the type of activity, the legal basis for this data processing is your consent (Art. 6 Para. 1 lit. a DSGVO) or our legitimate interest (Art. 6 Para. 1 lit. f DSGVO) in customer-oriented marketing. LinkedIn users can revoke their consent to the publication of their comment or like at any time with effect for the future by deleting the comment or the content in question. A revocation does not affect the legality of the processing carried out on the basis of the consent up to the time of revocation.

LinkedIn offers the possibility to object to certain data processing; relevant information and opt-out options can be found at: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out?trk=microsites-frontend_legal_cookie-policy. 

LinkedIn users can go to https://www.linkedin.com/psettings/advertising to influence the extent to which your usage behavior may be recorded when you visit our LinkedIn page. 

Data processing via cookies used by LinkedIn can also be prevented by settings in the browser.

LinkedIn only transfers user data to countries for which the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR or on the basis of suitable guarantees pursuant to Art. 46 DSGVO. The LinkedIn Corporation is certified under the EU-US Privacy Shield, but does not offer an adequate level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). The European Court of Justice has determined that the USA does not have a level of data protection comparable to that of the EU (EuGH, judgment of July 16, 2020 - C-311/18, Rn. 200, Facebook/Schrems II). If personal data is transferred there, there is a risk that surveillance authorities will be able to evaluate this data. There is currently no effective legal protection against this.

9. Data Security

In order to protect your data from unwanted access as comprehensively as possible, we take technical and organizational measures. We use an encryption process on our website. Your details are transmitted from your computer to our server and vice versa via the Internet using TLS encryption (Transport Layer Security). You can recognize this by the fact that the lock symbol is closed in the status bar of your browser and the address line changes from "http://" to "https://".

10. Your rights as a user

We are happy to inform you below about the rights that you as the data subject have with regard to the processing of your personal data.

10.1  right to information

You can request confirmation as to whether personal data concerning you is being processed by us. If such processing is available, you can request information about the following information: 

• Purposes of processing; 

• the recipients or categories of recipients to whom your personal data has been or will be disclosed; 

• if possible, the planned duration of the storage of the personal data concerning you or, if this is not possible, criteria for determining the storage duration; 

• the existence of other rights, see below; 

• all available information about the origin of the data if the personal data is not collected from you;

• the existence of automated decision-making including profiling and, if necessary, further information on this.

You have the right to information about the appropriate guarantees according to Art. 46 DSGVO if your data is forwarded to a third country or an international organization.

10.2 Rightfor correction

You have the right to demand that we immediately correct any incorrect or incomplete personal data concerning you. 

10.3 Right to erasure

You can request that we delete the personal data concerning you immediately. We are obliged to delete your personal data immediately if one of the following reasons applies:

• Your personal data is no longer necessary for the purposes for which we collected it or processed it in any other way.

• You revoke your consent and there is no other legal basis for processing.

• You file an objection (see below) against the processing.

• Your personal data has been processed unlawfully.

• The deletion of your personal data is necessary for us to fulfill a legal obligation under Union law or the law of the member states.

• We collected the personal data on the basis of a child's consent.

10.4 Right to Restrictionseffect of processing

You have the right to request us to restrict processing if one of the following conditions is met:

You contest the accuracy of the personal data. The processing of the data is unlawful and you reject the deletion of the personal data and instead request that the use of the personal data be restricted. We no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims; or you have objected to the processing (see below) pending the verification whether our legitimate grounds override yours.

10.5  Right to information

If you have asserted the right to correction, deletion or restriction of processing against us, we are obliged to inform all recipients to whom your personal data has been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

10.6  Right to data portability

You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from us, provided that

• the processing is based on consent in accordance with Article 6 Paragraph 1 lit. a DSGVO or Article 9 Paragraph 2 lit. a DSGVO or 

• is based on a contract in accordance with Art. 6 Paragraph 1 lit. b DSGVO and the processing is carried out using automated procedures.

In exercising this right, you can request that we transmit the personal data concerning you directly to another person responsible, insofar as this is technically feasible. The freedoms and rights of other people must not be impaired by this. The right to data portability does not apply to processing of personal data that is required to perform a task that is in the public interest or in the exercise of official authority that has been assigned to the controller.

10.7  right of objection

If data is collected on the basis of Article 6 Paragraph 1 lit. f (data processing to protect legitimate interests), you have the right to object to the processing at any time for reasons that arise from your particular situation (Art. 21 DSGVO). We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

10.8  Right of appeal to a supervisory authority

In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the supervisory authority (Article 77 DSGVO). For a list of data protection officers seeand their contact details can be found at the following link: 

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Status: January 2023

Copyright: Bürgerenergie GmbH