Privacy policyPrivacy policy for our social media presence

Table of contents

1.    General

2.    Responsible body

3. Information about the collection of personal data

3.1 Facebook presence

3.2. Instagram presence

3.3. YouTube page

3.4. LinkedIn presence

3.5. Xing presence

3.6 Kununu presence

4. Contact via a social media channel

5. Your rights as a data subject

1. General

We maintain publicly accessible profiles on various social networks. Your visit to these profiles triggers a variety of data processing operations. Below, we provide an overview of which of your personal data we collect, use, and store when you visit our profiles. Personal data is information that can be attributed to you as a specific person (e.g., name, age, address, photos, email addresses, including IP addresses). We also inform you about your rights with regard to the processing of your personal data by us. You are not obliged to provide us with your personal data. However, this may be necessary for individual functions of our social media profiles. These functions will not be available to you, or will only be available to a limited extent, if you do not provide us with your personal data.

When you visit our profiles, your personal data is collected, used, and stored not only by us but also by the operators of the respective social network. This also happens if you do not have a profile on the respective social network yourself. The individual data processing operations and their scope vary depending on the operator of the respective social network and are not necessarily traceable to us.

2.    Responsible body

The respective operator and

Bock 1 GmbH & Co. KG
An der Heide 17-19
92353 Postbauer-Heng
Tel.: 09180 189-0
Email: info@bockonline.de

You can contact our data protection officer at

Christian Volkmer
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Email: anfrage@projekt29.de
Tel.:

Further information about us and how we handle personal data can be found in the privacy policy on our website at https://www.bockonline.de/de/footer-navigation/datenschutz.

For details on the collection and storage of your personal data and the nature, scope, and purpose of its use by the operator of the respective social network, please refer to the privacy policies of the respective operator.

3. Information about the collection of personal data

 3.1 Facebook presence

We operate this page as a communication and information channel to provide information about our offerings. Personal data is processed in accordance with Art. 6 (1) (f) of the General Data Protection Regulation on the basis of our legitimate interest in using this modern means of information and interaction with users and visitors to the site.

We would like to point out that you use this Facebook page and its functions at your own responsibility. This applies in particular to the use of interactive functions (e.g., commenting, sharing, rating).

Processing of personal data by Facebook:

When you visit our Facebook page, Meta collects, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Further information on this is provided by Meta at the following link: https://www.facebook.com/privacy/center/

The data collected about you in this context is processed by Meta Platforms Ireland Limited and may be transferred to countries outside the European Union. Meta describes in general terms what information Meta receives and how it is used in its  privacy policy. There you will also find information about how to contact Meta and about the settings for advertisements. The privacy policy and the information required under Article 13(1)(a) and (b) of the GDPR are available at the following link: http://de-de.facebook.com/about/privacy.

 Mta edoes not conclusively and clearly state how it uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Meta stores this data, and whether data from visits to the Facebook page is passed on to third parties. This information is not known to us.

When you access a Facebook page, the IP address assigned to your device is transmitted to Meta. According to Meta, this IP address is anonymized (for "German" IP addresses) and deleted after 90 days. Meta also stores information about its users' devices (e.g., as part of the "login notification" feature); this may enable Meta to assign IP addresses to individual users.
If you are currently logged in to Meta as a user, a cookie with your Facebook ID is stored on your device. This enables Meta to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. Facebook buttons embedded in websites enable Meta to record your visits to these websites and assign them to your Facebook profile. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out of Facebook or deactivate the "stay logged in" function, delete the cookies on your device, and close and restart your browser. This will delete Facebook information that can be used to identify you directly. This allows you to use our Facebook page without revealing your Facebook ID. When you access interactive features on the page (like, comment, share, message, etc.), a Facebook login screen will appear. After logging in, you will once again be recognizable to Meta as a specific user.

Since personal data is transferred to the USA, additional protective measures are required to ensure the level of data protection provided by the GDPR. To ensure this, we have agreed on standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA. Further information from the third-party provider on data protection, including the legal basis on which Meta Platforms Ireland Limited relies, as well as information on how you can manage or delete information about you, can be found on the following website of Meta: https://www.facebook.com/privacy/center/

Processing of data by us:

Statistical data from various categories is available to us via the so-called "Insights" of the Facebook page. These statistics are generated and provided by Meta. As the operator of the page, we have no influence on the generation and presentation of this data. We cannot disable this function or prevent the generation and processing of the data. For a selectable period of time and for the categories of fans, subscribers, people reached, and people interacting, Meta provides us with the following data relating to our Facebook page:

  • Total number of page views and activities, post interactions ("likes," comments, shared content, clicks on links, etc.), (post) reach, video views, replies,
  • proportion of men and women,
  • Origin in terms of country and city,
  • Language,
  • Views and clicks in the shop,
  • Clicks on route planners,
  • Clicks on phone numbers.

Data on Facebook groups linked to our Facebook page is also provided in this way. Due to the constant development of Facebook, the availability and processing of data is subject to change, so we refer you to the above-mentioned privacy policy of Meta for further details. We use this data, which is available in aggregated form, to make our posts and activities on our Facebook page more attractive to users. For example, we use the distribution by age and gender to tailor our approach and the preferred visiting times of users to optimize the timing of our posts. Information about the type of devices used by visitors helps us to adapt the visual design of our posts. In accordance with Facebook's Terms of Use, which every user has agreed to when creating a Facebook profile, we can identify the subscribers and fans of the page and view their profiles and other information they have shared.

User rights:

Under the agreement on joint responsibility concluded between us and Meta, Meta Platforms Ireland Limited assumes primary responsibility under the GDPR for the processing of Insights data and fulfills all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR, and Articles 32 to 34 GDPR). In addition, Meta Platforms Ireland Limited will make the essence of this Page Insights Supplement available to the data subjects.

You are welcome to contact us or Meta if you have any questions. Under the agreement between Meta us and, we will forward your request to Meta without delay, provided that Meta is solely responsible for fulfilling your rights as a data subject. Meta Platforms Ireland Limited will respond to requests in accordance with our obligations under this Page Insights Addendum.

3.2. Instagram presence

We operate this page as a communication and information channel to provide information about our offerings. Personal data is processed in accordance with Art. 6 (1) (f) of the General Data Protection Regulation on the basis of our legitimate interest in using this contemporary means of information and interaction with users and visitors to the page.

We would like to point out that you use this Instagram page and its functions at your own responsibility. This applies in particular to the use of interactive functions (e.g., commenting or rating).

When you visit our Instagram page, Meta collects, among other things, your IP address and other information stored on your device in the form of cookies. This information is used to provide us, as the operator of the Instagram page, with statistical information about the use of the Instagram page. The data collected about you in this context is processed by Meta and may be transferred to countries outside the European Union. The information that Meta receives and how it is used is described in general terms by Meta in its privacy policy . There you will also find information about how to contact Meta and about the settings options for advertisements. The privacy policy  is available at the following link: https://help.instagram.com/519522125107875

How Meta uses the data from visits to Instagram pages for its own purposes, to what extent activities on the Instagram page are assigned to individual users, how long Meta stores this data, and whether data from a visit to the Instagram page is passed on to third parties is not conclusively and clearly stated by Meta and is not known to us.

When you access an Instagram page, the IP address assigned to your device is transmitted to Meta. According to information provided by Meta , this IP address is anonymized (for "German" IP addresses) and deleted after 90 days. Meta also stores information about its users' devices (for example, as part of the "login notification" function); this may enable Meta to assign IP addresses to individual users.
If you are currently logged in to Instagram as a user, a cookie with your Instagram ID is stored on your device. This enables Meta to track that you have visited this page and how you have used it. This also applies to all other Instagram pages. Instagram buttons embedded in websites enable Meta to track your visits to these websites and assign them to your Instagram profile. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out of Instagram or deactivate the "stay logged in" function, delete the cookies on your device, and close and restart your browser. This will delete Instagram information that can be used to identify you directly. This allows you to use our Instagram page without revealing your Instagram ID. When you access interactive features on the page (likes, comments, messages, and more), an Instagram login screen will appear. After logging in at , you will once again be recognizable to Instagram as a specific user.

Since personal data is transferred to the USA, additional protective measures are required to ensure the level of data protection provided by the GDPR. To ensure this, we have agreed on standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA. Further information from the third-party provider on data protection and information on how you can manage or delete information about you can be found in the Instagram help section at the following address: https://help.instagram.com/196883487377501 .

3.3. YouTube page

We operate this site as a communication and information channel to provide information about our offerings. Personal data is processed in accordance with Art. 6 (1) (f) of the General Data Protection Regulation on the basis of our legitimate interest in using this modern means of communication and interaction with users and visitors to the site.

We would like to point out that you use the YouTube channel offered here and its functions at your own responsibility. This applies in particular to the use of the "Discussion" function. Information about which data is processed by Google and for what purposes can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de&gl=en#infocollect.

We have no influence on the type and scope of data processed by Google, the type of processing and use, or the transfer of this data to third parties. Nor do we have any effective means of control in this regard. When you use Google, your personal data is collected, transferred, stored, disclosed, and used by Google. In addition, regardless of your place of residence, your data will be transferred to the United States, Ireland, and any other country in which Google LCC does business, where it will be stored and used. Your data will be transferred to companies affiliated with Google and to other trusted companies or individuals who process it on Google's behalf. Google processes the data you voluntarily enter, such as your name and username, email address, and phone number. Google also processes the content you create, upload, or receive from others when using the services. This includes, for example, photos and videos you save, documents and spreadsheets you create, and comments you write on YouTube videos. On the other hand, Google also evaluates the content you share to determine which topics you are interested in, stores and processes confidential messages that you send directly to other users, and can determine your location using GPS data, information about wireless networks, or your IP address in order to send you advertising or other content.

Google may use analysis tools such as Google Analytics for evaluation purposes. We have no influence on Google's use of such tools and have not been informed of any such potential use. If tools of this kind are used by Google for our YouTube channel, we have neither commissioned nor otherwise supported this in any way. Furthermore, the data obtained during the analysis is not made available to us. We can only view the profiles of subscribers via their accounts. Moreover, we have no way of preventing or stopping the use of such tools on your YouTube channel.

Finally, Google also receives information when you view content, for example, even if you have not created an account. This so-called "log data" may include your IP address, browser type, operating system, information about the website you previously visited and the pages you visited, your location, your mobile phone provider, the device you are using (including device ID and application ID), the search terms you used, and cookie information.

You can restrict the processing of your data in the general settings of your Google account. In addition to these tools, Google also offers specific privacy settings for YouTube. You can find out more about this in Google's guide to privacy in Google products: https://policies.google.com/technologies/product-privacy?hl=de&gl=en.

For more information on these points, please refer to Google's privacy policy under the term "Privacy settings": https://policies.google.com/privacy?hl=de&gl=en#infochoices.

We also process your data when you communicate with us via YouTube. Although we do not collect any data about your YouTube account ourselves, we do process the data you enter on YouTube, in particular your user name and the content published under your account, in order to respond to your comments and publications under "Discussions" if necessary. The data you freely publish and distribute on YouTube can thus be included in our offering and made available to our followers.

3.4. LinkedIn presence

We operate this page as a communication and information channel to provide information about our offerings. Personal data is processed in accordance with Art. 6 (1) lit. f) of the General Data Protection Regulation on the basis of our legitimate interest in using this modern means of information and interaction with users and visitors to the site.

We would like to point out that you use this LinkedIn page and its functions at your own responsibility. This applies in particular to the use of interactive functions (for example, when you post a comment, click a Like button, share a post, send us a message, visit the page, or engage in any other possible interaction on our LinkedIn page).

We have no influence on the type and scope of data processed by LinkedIn, the type of processing and use, or the transfer of this data to third parties. We also have no effective control over this. When you use LinkedIn, your personal data is collected, transferred, stored, disclosed, and used by LinkedIn.

You can restrict the processing of your data in the general settings of your LinkedIn account. In addition, on mobile devices (smartphones, tablet computers), you can restrict LinkedIn's access to contact and calendar data, photos, location data, etc. in the settings options there. However, this depends on the operating system used.

Since personal data is transferred to the US, additional safeguards are required to ensure the level of data protection provided by the GDPR. To ensure this, we have agreed on standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even with this contractual extension , we endeavor to obtain additional regulations and commitments from the recipient in the USA.

Further information on these points is available in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

Information on the available personalization and privacy settings can be found here: https://www.linkedin.com/help/linkedin/answer/66?lang=de

We also process your data when you communicate with us via LinkedIn. By analyzing the visits and interactions on our LinkedIn page, we obtain usage profiles and statistics. The visitor statistics created are transmitted to us exclusively in anonymized form.  We do not have access to the underlying data. LinkedIn also uses this information to create demographic and geographic analyses and makes them available to us. All of this information helps companies better understand which posts interest users, enabling them to interact more effectively with their target group or place better advertisements.

3.5. Xing presence

We operate this page as a communication and information channel to provide information about our offerings. Personal data is processed in accordance with Art. 6 (1) lit. f) of the General Data Protection Regulation on the basis of our legitimate interest in using this modern means of information and interaction with users and visitors to the site.

XING is a social network operated by XING SE, based in Hamburg. Members can use it primarily to manage their professional and private contacts and to establish new contacts. Organizations can set up a page with their logo and a short profile, post news, and initiate discussion groups. To use the network functions, users must be registered. There is a free basic version and a paid version with additional features. Unlike other social networks, XING is based more on a combination of personal and electronic contact, is less commercial, and less visually oriented. The focus is on professional exchange on specialist topics with people who have the same professional interests. In addition, XING is often used by companies and other organizations to recruit personnel and present themselves as attractive employers. For this purpose, XING is linked to the employer review platform kununu.

We would like to point out that you use this Xing page and its functions at your own risk. This applies in particular to the use of interactive functions (for example, when you post a comment, click a Like button, share a post, send us a message, visit the page, or engage in any other possible interaction on our Xing page).

We have no influence on the type and scope of data processed by Xing, the type of processing and use, or the transfer of this data to third parties. Nor do we have any effective means of control in this regard. When you use Xing, your personal data is collected, transferred, stored, disclosed, and used by Xing.

You can restrict the processing of your data in the general settings of your Xing account. In addition, on mobile devices (smartphones, tablet computers), you can restrict Xing's access to contact and calendar data, photos, location data, etc. in the settings options there. However, this depends on the operating system used.

Further information on these points can be found in Xing's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung/druckversion

We also process your data when you communicate with us via Xing. By analyzing the visits and interactions on our Xing page, we obtain usage profiles and statistics. The visitor statistics created are transmitted to us exclusively in anonymized form.  We do not have access to the underlying data. This information collected by Xing is also used to create demographic and geographic analyses, which are made available to us. All of this information helps companies better understand which posts interest users, enabling them to interact more effectively with their target group or place better advertisements.

3.6 Kununu presence

We maintain a company profile on the employer review platform kununu, a service provided by New Work SE, Am Strandkai 1, 20457 Hamburg (www.kununu.com). The platform allows users to submit anonymous reviews of employers and view information about companies.

Joint responsibility (Art. 26 GDPR)
As the profile operator and New Work SE, we are jointly responsible for data processing in connection with the use of our kununu profile within the meaning of Art. 26 GDPR. Kununu determines the terms of use and operates the technical infrastructure.

 Purposes and legal basis of data processing
Data processing is carried out for the purpose of online presence, communication with applicants and employees, and reputation management.
The legal basis for processing is our legitimate interest pursuant to Art. 6 (1) (f) GDPR, in particular in presenting our company in an attractive manner and interacting with users.

If you leave reviews on kununu or contact us, kununu is responsible for data processing. We only receive aggregated or anonymized information, not direct personal data, unless you make this public yourself when contacting us.

 Data processing by kununu
New Work SE processes users' personal data for the following purposes, among others: operation of the platform, analysis, advertising, and compliance with legal obligations. Further information on data processing by kununu can be found in the privacy policy at: https://support.kununu.com/hc/de/c/5139-

Anonymity and ratings
kununu allows anonymous reviews. However, it may be possible to identify the reviewer in certain circumstances, particularly in the case of very small companies or specific comments. Please bear this in mind when publishing your own content.

4. Contacting us via a social media channel

If you use our profiles on social networks to contact us (e.g., by creating your own posts, responding to one of our posts, or sending us private messages), we will process the data you provide to us exclusively for the purpose of contacting you. The legal basis for data collection is therefore Art. 6 (1) (a) and (b) GDPR. We delete stored data as soon as its storage is no longer necessary or you request us to delete it; in the case of legal storage obligations, we restrict the processing of the stored data accordingly.

5. Your rights as a data subject

As a data subject, you have the following rights:

  • You have the right, within the scope of Art. 15 GDPR, to obtain information from us about the processing of your personal data.
  • You have the right, within the scope of Art. 16 GDPR, to request that we immediately correct any inaccurate personal data concerning you and/or complete any incomplete personal data.
  • You have the right, within the scope of Art. 17 GDPR, to request the immediate erasure of personal data concerning you.
  • You have the right, within the scope of Art. 18 GDPR, to request the restriction of data processing concerning you.
  • You have the right, within the scope of Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured and machine-readable format and to transmit this data to another controller.
  • You have the right, within the scope of Art. 21 GDPR, to object at any time to the processing of personal data concerning you for reasons arising from your particular situation, provided that the processing is based on an overriding interest or your data is used for the purpose of direct marketing.
  • You have the right to withdraw your consent to data processing at any time without affecting the lawfulness of the data processing carried out on the basis of your consent prior to withdrawal.
  • You have the right to complain to a supervisory authority about our processing of your data.