Privacy policy for our Instagram presence.

1. General information

Social media has become an integral part of the internet and modern communication. In order to stay in touch with our customers and interested parties and to be able to share exciting news at RATIONAL AG with you, we have also set up our own Instagram Fan Page. Instagram is an online service for sharing photos and videos, Meta Platforms Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: "Facebook") in Ireland is the controller responsible for the operation of the network as well as for the social network Facebook. When you visit our Instagram Fan Page, we are joint controllers with Facebook as concerns the processing of your personal data. In the following, we would like to inform you about the associated data processing on our Fan Page (as far as we are able).

We expressly draw your attention to the fact that Facebook stores data (e.g. IP address, preferences and personal interests (e.g. through hashtags and groups with which a user is connected), behaviour on Instagram pages, any personal information stored on Instagram, etc.) of users and uses it for business purposes.

We have no control over the processing and further use of this data, as Facebook alone determines the processing. It is currently not possible for us to trace to what extent, where and for what duration the data are stored, to what extent the data are linked and analysed and to whom the data are transferred. We also have no insight or influence with regard to deletion periods, i.e. whether and to what extent deletion periods are adhered to.

Facebook’s own information about what information is collected can be found in the Instagram Privacy Policy, which can be viewed HERE .

If you are an Instagram member and are logged in to an Instagram user account, Facebook can associate your visit to our site with your user account. If you would like to prevent Facebook from linking data about your visit to our Instagram Page with your member data stored with Instagram, you must

  • log out of Instagram before every visit to our Instagram page,
  • delete the cookies present on the device
  • and close and restart your browser.

In this way, according to Facebook, all information through which you can be identified by Facebook is deleted.

2. Scope of data collection and storage

To view the content on our Instagram page, you do not need to be an Instagram member. However, data is collected, stored and used by Facebook every time you visit our Instagram page.

The moment you visit our Instagram page, your browser establishes a connection with a Facebook server. Data may be transferred to countries outside the European Union. In any case, regardless of whether you are registered with Instagram or not, your IP address will be transferred and cookies will be set. If you are an Instagram member and are logged in to your Instagram user account, Facebook can associate your visit to our page with your user account.

Cookies used include session cookies that are deleted when the browser is closed and persistent cookies that remain on the terminal device until they expire or are deleted by the user. A cookie is a tiny text file that allows a website to recognise a browser. Cookies are stored on the computer when a website is called up and are retrieved and read the next time the web server is called up. You can use your browser settings to decide for yourself whether and which cookies you want to allow, block or delete. You can find instructions for common browsers here: Internet Explorer, Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge, Safari, Safari mobile.

Alternatively, you can also install ad blockers such as Ghostery .

According to Facebook, the cookies used by Instagram are used for authentication, security, website and product integrity, advertising, recommendations, insights and measurements, website functions and services, performance as well as analysis and research. You can find more information in the Instagram help section at the following link: https://help.instagram.com/1896641480634370 .

If you do not have an Instagram account, you can manage interest-based online advertisements via the settings of the European Interactive Digital Advertising Alliance and via the settings of your mobile device. The collection and storage of data through the use of the above-mentioned cookies by Facebook can additionally, but also at any time with effect for the future, be objected to via the following opt-out link: http://www.youronlinechoices.com/de/praferenzmanagement/ .

You can manage your preferences regarding usage-based online advertising using the link above. If you object to usage-based online advertising with a particular provider using the preference manager, this only applies to the particular business data collection via the web browser you are currently using. Preference management is cookie-based. Deleting all browser cookies will also remove the preferences you have set with the preference manager.

You can also configure your browser before visiting our Instagram page so that no cookies are stored by Facebook. Information on how to adjust the settings for cookies in your browser can be found in the help section of the browser you are using.

We have no influence on whether and which cookies Facebook sets via our Instagram page and how this data is processed.

In principle, we only store personal data until the respective purpose for which the data was collected has been achieved. In the context of a business relationship with you, we store your personal data for as long as the business relationship lasts, including the initiation and the processing of a contract as well as the regular limitation period. In addition, we store the data if and to the extent that we are subject to statutory retention obligations. These may arise, for example, from the German Commercial Code (HGB) or the German Fiscal Code (AO).

If you have given us consent for a processing operation, the data related to the granting of consent will be stored until revoked or at the longest for the duration of the processing operation and after its termination within the scope of the limitation period.

If you have sent us a message via social media, you also have the option of deleting your data/chat history yourself after your request has been processed.

There is no legal or contractual obligation to provide your personal data to us or Facebook. There will be no negative consequences for not providing your personal data.

3. Instagram Insights

We use the Instagram Insights function for statistical evaluation purposes. In this context, we receive anonymised data in the form of statistics, which Facebook collects via cookies and pixels, among other things, on the visitors to our Instagram page. It is therefore not possible for us to identify you personally.

The following information is provided to us by Facebook's Instagram Insights:

  • Followers: Number of people who follow us – this includes development within a maximum period of 30 days.
  • Demographic data: Average age of visitors, gender, place of residence, language.
  • Activity data: Times at which most users from the community are active.
  • Scope: Number of people who see posts we share. Number of interactions with our post. This gives us the opportunity to derive which content is more interesting for the community than others.
  • Ad performance: Number of people who have been reached with a post or paid ad and have interacted with it.
  • Activities on our Instagram page: Number of clicks on our buttons (to plan a route, send e-mails to us, to our website)
  • Visits: Number of times our Instagram page was accessed

Meta provides further information on the Insights functions in its Instagram privacy policy ( https://instagram.com/about/legal/privacy ).

In the Instagram help section, there is a guide explaining which settings need to be made in order to decide in which form targeted advertising is displayed. You can do this by selecting the “Manage your account” tab under the link https://help.instagram.com/ and then “Instagram advertisements”.

We do not carry out automated decision-making, including profiling, as defined by Article 22 GDPR with the data collected via our Instagram page.

4. Disclosure and use of personal data

If you interact with Instagram, Facebook will of course also have access to your data. In particular, Meta Platforms Inc., 1601 Willow Road, Menlo Park, California 94025, USA, may have access to your data. Facebook is located in an insecure third country where the level of data protection is lower.

According to information from Facebook’s Instagram privacy policy , standard contractual clauses for data transfers from the EEA to the USA and other countries are used, among other things. Facebook has made available online a " Facebook EU Data Transfer Addendum " since 31/08/2020, which is intended to incorporate the standard contractual clauses in cases where Meta Platforms Ireland Limited processes data from the EU/EEA as a processor and transfers it to Facebook Inc. as a sub-processor.

We also use Sprout Social, a service of Sprout Social Inc., 131 Dearborn St. Floor 7, Chicago, IL 60603, USA . The social media management tool "Sprout Social" is used to respond to your requests on social media (such as Facebook, Instagram, Twitter, LinkedIn, etc.) and is used by us as a publishing tool that enables the planning and delivery of posts and campaigns. This takes place within the framework of our legitimate interest (Article 6 (1)(f) GDPR) to respond efficiently and quickly to your concerns and to optimise customer communication by means of Sprout Social as a management tool. The data processed for social media management when using Sprout Social is limited to the messages you send, the account user data (name, business e-mail address, IP address and language preference) and specified social media profile data, with the specific types of personal data collected depending on the social network.

In order to safeguard data processing in the insecure third country of the USA, we have concluded a commissioned processing agreement with Sprout Social in accordance with Article 28 GDPR, under which Sprout Social undertakes to ensure the necessary protection of your data and to process it in accordance with the applicable data protection regulations exclusively on our behalf and in accordance with our instructions. An adequate level of protection within the meaning of Article 44 et seq. GDPR is guaranteed by the use of the EU standard contractual clauses pursuant to Article 46 GDPR in the context of contract processing.

You will find more information at: https://sproutsocial.com/de/privacy-policy/

5. Legal bases

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1)(f) GDPR is the legal basis for the processing. We consider our legitimate interest in data processing to be the representation of our company and our products and services for your information and, in particular, in the provision of modern communication options for and with you. If your message is directed towards the conclusion of a contract or concerns the implementation of an existing contractual relationship, the legal basis for the processing is also Article 6 (1)(b) GDPR. In the event of contact by potential applicants for the purpose of establishing an employment relationship, the legal basis is Section 26, Paragraph 1, Sentence 1 Federal Data Protection Act (BDSG).

6. Your rights

Provided that the conditions specified in the law are met, you have the following rights:

  • Access: Article 15 GDPR
  • Rectification: Article 16 GDPR
  • Erasure: Article 17 GDPR
  • Blocking/restriction of processing: Article 18 GDPR
  • Objection: Article 21 GDPR
  • Data portability: Article 20 GDPR
  • Right to lodge a complaint with the competent supervisory authority: Article 77 GDPR
  • Right of withdrawal with effect for the future if consent has been granted: Article 7(3) GDPR

Pursuant to Article 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on points (e) or (f) of Article 6(1) GDPR; this also applies to profiling based on these provisions.

If personal data is processed for direct marketing purposes, you also have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

7. Joint controllers pursuant to Article 26 GDPR

RATIONAL Aktiengesellschaft
Siegfried-Meister-Straße 1
86899 Landsberg am Lech
E-Mail: info@rational-online.com
https://www.rational-online.com

RATIONAL AG processes the data under joint responsibility with the respective national company, which can be viewed in the list of recipients.

and

Meta Platforms Ireland Limited
4 Grand Canal Square, Grand Canal Harbour,
D2 Dublin
Ireland

In the opinion of the European Court of Justice (ECJ), we are joint controllers with Facebook as concerns the processing of your personal data. The ECJ decision of 5 June 2018 can be found here .

As joint controllers, we are informing you, with regard to Article 26 GDPR, about the essentials of the joint controller agreement between us and Facebook: https://www.facebook.com/legal/terms/page_controller_addendum

If you have any further questions about privacy, please contact us. If you have any questions about the collection, processing or use of your personal data, or if you wish to obtain information, rectify, block or delete data, or withdraw consent, please contact:

RATIONAL Aktiengesellschaft Data Protection Officer
Siegfried-Meister-Straße 1
86899 Landsberg am Lech
E-Mail: privacy@rational-online.com

8. More information

You can find further information on the safe use of social networks on the website of the Federal Office for Information Security at https://www.bsi-fuer-buerger.DE/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html