Privacy Policy Social Media

1. Introduction

The protection of your personal data is very important to us. In the following, you will find information on how we handle your data, which are recorded through your use of our social media presence on social networks and platforms. The processing of your data is in accordance with the legal regulations.

2. Provider

If your personal data is processed by one of the providers listed below, this provider is responsible for data processing within the meaning of the GDPR. For the assertion of your rights, please contact the respective provider. Only they have access to the data collected from you. However, if you need any assistance, please contact us any time.

  • We are present on social media platforms of the following providers:
  • Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
  • Instagram, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
  • Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
  • LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
  • XING, New Work SE, Dammtorstraße 30, 20354 Hamburg, Deutschland
  • YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

2.1 Data protection officer

Information on how to contact the data protection officer of the respective social media providers can be found here:

3. General information on social media platforms given by the CAD-PLAN GmbH

3.1 Controller

Insofar as we process the data provided by you via social media, the following body is responsible for data processing within the meaning of GDPR:

CAD-PLAN GmbH
Hanauer Landstr. 174
60314 Frankfurt
Germany
info@cad-plan.com
www.cad-plan.com

3.2 Our data protection officer

If you have any concerns about us processing your data, please contact our data protection officer at the following contact details:

Mr. Dominik Fünkner
datenschutz@cad-plan.com

3.3 General data processing on social media platforms

3.3.1 Data processing for market research and advertising

Organisations generally process data for market research and promotional purposes. Therefore, web-site providers use cookies, which load on to your browser and detect your return to the same URL. The recorded data is used to create user profiles. User profiles may be used for targeted advertise-ments within or outside the platform. In addition, user profiles may contain data, that is gathered from memberships on other platforms.

3.3.2 Data processing through making contact

We collect data when you contact us, for example via contact form or messenger services such as Facebook Messenger. The data collected depends on the details you provide and the contact details you specify. It will be stored for the purpose of processing the inquiry and in the event of follow-up questions. Under no circumstances we will pass on the data to third parties without your consent. The legal basis for the data processing is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your request aimed at the con-clusion of a contract. Unless there are compelling reasons, your data will be erased after final pro-cessing. We assume the processing is finalized, when the regarding circumstances are clarified.

3.3.3 Data processing for the purpose of contract handling

If your request via social media or other platforms is aimed at the conclusion of a contract, regarding the delivery of goods or the provision of services, we process your data in order to perform the contract and the requested services, or pre-contractual measures. In this case, the legal basis for the processing of your data is Art. 6 para. 1 lit. b GDPR. Your data will be erased if they are no longer necessary for the fulfilment of the contract or if it is certain, that pre-contractual measures will not lead to the con-clusion of a contract corresponding to the purpose of establishing the contact. Please take into ac-count, that it may be necessary to store personal data of our contractual partners in order to comply with contractual or legal obligations even after the conclusion of contract.

3.3.4 Data processing by virtue of consent

If the respective platform providers request you to consent to the processing for a particular purpose, the legal basis for the processing is Art. 6 para. 1 lit. a, Art. 7 GDPR. You have the right to withdraw such consent with effect for the future at any time.

4. Data transfer and recipient

Please note, that by using social media platforms, data processing may take place outside the EU and the European Economic Area, wherefore European levels of data protection cannot be guaranteed. The US based social media providers mentioned above are certified by “Privacy Shield “. “Privacy Shield” is an US-European-data protection convention, warranting the compliance with EU data pro-tection levels. We have no influence on the processing and handling of your personal data by the re-spective providers as well as we have no information on this matter. Please consider the privacy policy of the providers for further information:

5. Your rights

You will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller in the following. You have the right,

to request information about your personal data processed by us; Art. 15 GDPR. In particular, you may obtain information about the purpose of processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request from the con-troller rectification or erasure of personal data or restriction of processing, the right to lodge a com-plaint, where the personal data are not collected from us, any available information as to their source, the existence of automated decision-making, including profiling and meaningful information about the logic involved.

To obtain from the controller without undue delay the rectification of inaccurate personal data or have incomplete personal data completed; Art. 16 GDPR.

To obtain from us the erasure of personal data concerning, unless the processing is necessary for, exercising the right of freedom of expression and information, compliance with a legal obligation, rea-sons of public interest, achieving purposes in the public interest and the establishment, exercise or defence of legal claims, Art. 17 GDPR.

To obtain from us restriction of processing where, the accuracy of personal data is contested by you, the processing is unlawful, we no longer need the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21; Art. 18 GDPR.

To receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller; Art. 20 GDPR

To lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of alleged infringement; Art. 77 GDPR.

To withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before it’s withdrawal. Prior to giving consent, you shall be informed thereof; Art. 7 para. 3 GDPR. In case of countermand the respective data shall be deleted immediately, unless further processing cannot be based on a legal basis for processing without consent.

 Right of object

In line with Art. 21 GDPR, you have the right to object, on grounds relating to your particular situa-tion, at any time to processing of personal data concerning you which is based on processing for the purposes of the legitimate interests (Art. 6 Abs. 1 lit. GDPR) pursued by us. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.

If you wish to make use of your right of objection or withdrawal, send an E-Mail to datenschutz@cad-plan.com

6. Duration of storage

The personal data collected and stored by us will be erased from our systems, if the purpose of pro-cessing ceases to exist or if you have made use of your right of withdrawal or objection. Legal retention periods remain unaffected. We have no influence on the storage period of your data being stored by social media providers for their own purposes. For further details, please contact them directly.