As per April 2020
1. Joint controllers
The purposes and methods of processing personal data when visiting our Facebook page https://www.facebook.com/SFBBabenhausen (“Facebook page”) are jointly determined by SFB Schwäbische Formdrehteile GmbH & Co. KG, Weiherweg 12-16, 87727 Babenhausen, Germany (“SFB”)
and Facebook Ireland Ltd. (“Facebook”) in the meaning set out in Art. 26 EU General Data Protection Regulation (GDPR). This is based on the fact that by setting up this kind of page, SFB – as operator of the Facebook page – enables Facebook to place cookies on the computer or any other device of the person visiting the Facebook page (“visitor”), regardless of whether the visitor has a Facebook account.
As joint controller, Facebook assumes primary responsibility pursuant to the GDPR for the processing of insights data and satisfies all obligations according to the GDPR in regard to the processing of insights data (Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR, among others). Moreover, Facebook provides data subjects with the material information contained in these Page Insights (refer to the relevant “Page Insights Controller Addendum” here: https://www.facebook.com/legal/terms/page_controller_addendum).
We must advise you that any use of this Facebook page and its functions takes place on your own responsibility. This applies in particular to using the interactive functions (commenting, sharing, liking especially).
2. Name and address of the joint controller
a) The primary controller is:
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland
b) The other controller is:
SFB Schwäbische Formdrehteile GmbH & Co. KG
Phone: +49 8333 303-01
3. Options to contact the data protection officer of the primary controller Facebook
You may contact the data protection officer of the primary controller Facebook by selecting the following link:
4. Name and address of the data protection officer of the other controller
You can contact the data protection officer of the other controller SFB (refer to 2.b) at:
Dachauer Str. 65
+49 89 7400 45840
5. Legal basis for the processing of personal data
Where consent is obtained from the data subject for the processing of personal data, Art. 6 para. 1 sentence 1 point a) GDPR shall be the legal basis for the processing of personal data.
In regard to the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 point b) GDPR shall be the legal basis. This applies also to processing that is necessary to take steps prior to entering into a contract.
Where processing of personal data is necessary for compliance with a legal obligation to SFB or Facebook is subject, Art. 6 para. 1 sentence 1 point c) GPPR shall be the legal basis.
In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 para. 1 sentence 1 point d) GDPR shall be the legal basis.
Where processing is necessary to protect a legitimate interest of SFB, Facebook or a third party and the interests, fundamental rights and freedoms of the data subject do not override this interest, Art. 6 para. 1 sentence 1 point f) DSGVO shall be the legal basis for processing.
6. Right to object and to rectification
The visitor may withdraw their consent to the processing of personal data at any time (refer also to the rights of data subjects). Visitors may object to the storage of their personal data at any time by sending us an email.
The collection of data for the provision of the Facebook page and the storage of this data in log files are absolutely necessary for operation of the Facebook page. It follows, therefore, that the visitor does not have the right to object.
7. Rights of the data subject
Where personal data concerning you is processed, you are the data subject in the meaning of the GDPR and you have the following rights in regard to the controller:
Right to obtain information about the data concerning you that is stored by SFB or Facebook;
Right to rectification, erasure or restriction of processing of your personal data;
Right to object to processing which serves the legitimate interests of SFB or Facebook, a public interest or profiling, unless SFB or Facebook can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend against legal claims;
Right to data portability:
Right to lodge a complaint with a supervisory authority;
Right to withdraw your consent to the collection, processing and use of your personal data at any time with effect for the future.
You may address your concern to SFB or Facebook if you wish to exercise any of your rights. To do so, you may use the contact details provided above, for example. Should you make contact with us, we will forward your request to Facebook as far as your concern addresses questions regarding the processing of insights data. Facebook will respond to requests in compliance with our obligations pursuant to the Page Insights Controller Addendum.
II. PROCESSING OF PERSONAL DATA BY SFB
1. Purpose of data processing
SFB maintains online presences within social networks in order to communicate with interested parties and users who are active there and to provide them with information about our products, events and news.
When you visit our Facebook page (regardless of whether or not you are signed into your Facebook account), your browser will, for technical reasons, transmit certain data to the web server for which Facebook is responsible. Facebook will also place “cookies” on your device. Cookies are small text files that are placed in your browser and stored in the memory of your device. Among other things, cookies placed by Facebook are intended to enable SFB, as operator of the Facebook page, to obtain statistics that Facebook compiles on the basis of visits to this page for the purpose of managing the marketing of our activities.
2. Description and scope of data processing
As the operator of the Facebook page, SFB can use the Facebook Page Insights function to obtain anonymised statistical data concerning the visitors to our Facebook page. Facebook makes this function available to us as a non-derogable part of the user relationship. This data is collected using the cookies placed by Facebook on the user’s device, which each contain a unique code to identify visitors. The user code – which can be associated with the login details of users that are registered with Facebook – is collected and processed when the Facebook page is visited.
In particular, the fan page operator may receive demographic data about its target group that is provided – and therefore processed – by Facebook, including trends in regard to age, gender, relationship status and professional situation, information about the lifestyle and interests of its target group and information about the purchases and online purchasing behaviour of visitors to its page, the categories of goods or services they are most interested in, as well as geographical data informing the operator about where to organise special promotions or organise events and, more generally, enabling it to structure the information as purposefully as possible.
Although the visitor statistics compiled by Facebook are transferred to SFB, as the operator of the Facebook page, exclusively in an anonymised form, compilation of these statistics is based on the previous collection – by means of the cookies placed by Facebook on the device of the visitors – and processing of personal data concerning these visitors for the aforementioned statistical purposes. For more information on Facebook Page Insights, refer to:
In addition to this automatically collected and anonymised data, we also process the data that you make available to us voluntarily, e.g. by commenting on posts or by contacting us.
If you click on the link https://www.sfbgroup.de/en/datenschutz-facebook/
(you are currently on this page), which is integrated on the SFB Facebook
fan page, you will be redirected to a sub-page of the SFB website. Personal
data is processed on this page as well. Click on the following link for the
3. Data erasure and duration of storage
Personal data is erased or blocked as soon as the purpose of its storage ceases to apply. Storage beyond this time may also be necessary if this is permitted by European or national directives, laws or other regulations to which SFB is subject. The data will also be blocked or erased if a mandatory retention period specified by one of the directives, laws or regulations mentioned above comes to an end, except where storage of the data remains necessary for the conclusion or performance of a contract.
III. PROCESSING OF PERSONAL DATA BY FACEBOOK
1. Purpose of data processing
By its own admission, Facebook processes personal data for the following purposes:
• Provision, personalisation and improvement of Facebook products;
• Provision of measurements, analyses and other Facebook services;
• Promotion of protection, integrity and security;
• Communication with Facebook users;
• Research and innovation for social purposes.
You will find additional details concerning Facebook’s legitimate interests in the processing of personal data here: https://www.facebook.com/about/privacy/legal_bases
2. Description and scope of data processing
a) Which kinds of information does Facebook process?
It is necessary for Facebook to process information about its visitors in order to provide its products. The types of information collected by Facebook depend on how the visitor uses the Facebook products. Facebook may process the following information in this context:
Activities performed done and made available by visitors and others, such as information about how the visitor uses Facebook products, information about transactions conducted with Facebook products, or information about the people, pages, accounts, hashtags and groups with which the visitor is connected.
Device information such as its attributes, the network, connections and cookie data.
Information from partners stating that advertisers, app developers and publishers can send information to Facebook through the Facebook business tools they use, including the social plugins (such as the “Like” button), Facebook login or the Facebook pixel. These partners provide Facebook with information about the visitor’s activities outside of Facebook.
The IP address assigned to your device is transferred to Facebook when you access a Facebook page. Facebook has stated that the IP is anonymised (in the case of “German” IP addresses) and then deleted after 90 days. Facebook also stores information about its user’s devices (in particular as part of the “sign-in notification” function); this may enable Facebook to assign IP addresses to individual users.
If you wish to prevent this from happening, you should sign out of Facebook or disable the “stay signed in” function, delete the cookies on your device and then restart the browser. This deletes information that can be used to identify you directly. In this case, you will still be able to use our Facebook page, but without disclosing your Facebook identifier. You will be shown a Facebook sign-in screen if you use interactive functions on the page (Like, Comment, Share, Message etc.). Facebook will again be able to identify you as a specific user if you sign into your account again.
For more information about managing or deleting information concerning you, visit the following Facebook support pages: https://de-de.facebook.com/about/privacy.
b) How is the information processed by Facebook shared with other parties?
Facebook works with external partners that support it in the provision and improvement of its services or that use Facebook business tools to leverage their business. In this regard, Facebook may share information with the following external partners:
• partners that use Facebook analysis services;
• partners for measurements;
• partners that use Facebook products to offer goods and services;
• providers and service providers;
• researchers and scientists;
• prosecutors and law enforcement authorities or parties submitting legal enquiries.
c) How does Facebook process and transfer data within the framework of its global services?
Facebook shares information globally, both internally between Facebook companies and externally with its partners, as well as with persons or organisations with whom the visitor establishes connections and shares content around the world. This may also involve the transfer or data to the USA or to third countries that do not maintain adequate data protection standards, where the data is then processed. In this regard, Facebook uses standard contractual clauses approved by the European Commission, i.e. refers to adequacy decisions issued by the European Commission for certain countries.
Facebook Inc., the US-American parent company of Facebook, is certified according to the EU-U.S. Privacy Shield and has therefore entered into the commitment to adhere to the European data protection regulations. For more information concerning Facebook’s Privacy Shield status, visit: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
3. Data erasure and duration of storage
Facebook stores data until it is no longer needed in order to provide its services and Facebook products, or until the user’s Facebook page is deleted, depending on what comes first. This is a case-by-case decision and depends on aspects such as the nature of the data, why it is being collected and processed, and relevant legal or operational storage requirements.