Privacy policy for our X channel (formerly Twitter).

1. General information

Social media has become an integral part of the internet and modern communication. For the X short message service provided here, we use the technical platform and services of X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, to contact and stay in touch with prospects and customers. The data controller within the EU/EEA is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland. Below we inform you about the data processing in connection with your visit to our X channel.

We provide information on our X channel and offer you, as an X user, the opportunity to communicate. When you take an action on our channel (such as posting comments and posts or giving likes), you may choose to make personal information (such as your first name, last name or user profile photo) public.

We would like to point out that you use the X short message service and its features under your own responsibility. This applies in particular to the use of interactive functions (e.g. sharing, rating). X uses your data to operate, improve, personalise, measure and analyse its services, according to its own privacy policy. In addition, the data is used by X to promote protection and security and to communicate with you as a user.

We have no control over the processing and further use of this data, as X alone determines the processing. It is currently not possible for us to trace to what extent, where and for what duration the data are stored, to what extent the data are linked and analysed and to whom the data are transferred. We also have no insight or influence with regard to deletion periods, i.e. whether and to what extent deletion periods are adhered to. Information about which data X processes and for which purposes can be found in X's privacy policy and about the possibility of viewing your own data on X . In addition, you can view information on the storage of your data in X's privacy policy and find out more about the findability of content that has already been supposedly deleted in the Help Centre . You can also request information using the X privacy form or archiving requirements .

2. Scope of data collection and storage.

Our X channel is used to communicate and share information with (potential) customers. In particular, we use the corporate image to present our products and news. Publications on the channel may include the following content:

  • Information on the product
  • Information about services
  • Lead generation
  • Competitions
  • Customer contact
  • Service and support

Each user is also free to publish personal data through activities.

We would like to point out that when you visit our X channel, data is processed even if you do not have a X account or are not logged in. The focus here is on the promotional use of your data for X.

We do not have full or independent access to the data collected by X or your profile data. The data entered by you as a user on X, in particular the user name and the content published under the user account, are only processed by us to the extent that we retweet the tweets, if applicable, respond to them or write tweets that refer to the respective user account. The content freely published and distributed on X is therefore included in our X offering and made accessible to the followers there. Beyond that, we do not process any other personal data from the use of the service.

We receive anonymous statistics from X through reporting on the use and usage of our X channel. X provides us with the following information in the statistics:

  • Number of people who have subscribed to us, as well as growth and development within a defined period.
  • Number of people who see a post we make. Number of interactions with/to one of our posts and registrations for our events. We use this, for example, to determine which content is more interesting for the community than others.

We use these statistics to continuously improve our X channel and our posts and to better respond to the interests of our users. We cannot identify specific users from the statistics or link them to the data of our subscribers. This does not include any personal data.

X collects and processes various usage data about your visit for each of your visits. This includes the usual log data, such as IP address, browser type, browser language, operating system, referring website, access times, pages visited, location, your mobile carrier, device data (including device and application IDs), search terms and IDs (including those not submitted as queries), as well as advertisements displayed to you on X , identifiers generated by X and identifiers associated with cookies. This also means that your use of the services will be tracked as part of X's provision of special services. For more detailed information about what information Twitter collects, for what purpose and on what basis, please see X's Privacy Policy .

You can limit the processing of your data in the general settings of your X account as well as under “Privacy and security”. In addition, you can restrict X's access to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in their settings. However, this depends on the operating system used. You can find more information about these points on the following X support pages.

X, as the controller, uses cookies when you visit our X channel. Further information on the use of cookies on X can be found in the X Help Centre. Cookies used include session cookies that are deleted when the browser is closed and persistent cookies that remain on the terminal device until they expire or are deleted by the user. A cookie is a tiny text file that allows a website to recognise a browser. Cookies are stored on the computer when a website is called up and are retrieved and read the next time the web server is called up. You can use your browser settings to decide for yourself whether and which cookies you want to allow, block or delete. Alternatively, you can also install ad blockers such as Ghostery. You can find more privacy options in the X Help Centre .

You can opt out of interest-based advertising you have requested on X via the YourAdchoice website or the Network Advertising Initiative website. Please note that the advertising settings for your X account are only applied if you are also logged into X. For more information on access, see Personalisation and Data Settings .

If you do not have a Twitter account, you can manage interest-based online advertisements via the settings of the European Interactive Digital Advertising Alliance and via the settings of your mobile device. The collection and storage of data through the use of cookies can also be objected ti at any time with future effect by using the following opt out link: Your Online Choices .

You can manage your online advertising preferences using the link above. If you use the Preferences Manager to opt out of usage-based online advertising from a particular vendor, this will only apply to that vendor's business data collection through the web browser you are currently using. Preference management is based on cookies. If you delete all of your browser cookies, any settings you have made using the Settings Manager will also be deleted.

We do not carry out automated decision-making, including profiling, as defined by Article 22 GDPR with the data collected through our X channel.

In principle, we only store personal data until the respective purpose for which the data was collected has been achieved. In the context of a business relationship with you, we store your personal data for as long as the business relationship lasts, including the initiation and the processing of a contract as well as the regular limitation period. In addition, we store the data if and to the extent that we are subject to statutory retention obligations. These may arise, for example, from the German Commercial Code (HGB) or the German Fiscal Code (AO).
If you have given us consent for a processing operation, the data related to the granting of consent will be stored until revoked or at the longest for the duration of the processing operation and after its termination within the scope of the limitation period.
If you have sent us a message via social media, you also have the option to delete your data/chat history yourself once your request has been processed.

3. Disclosure and use of personal data.

If you interact on our X channel, X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, will of course have access to your information.

X states that it is the "controller" for some processing operations and the "processor" for other processing operations in accordance with Article 28 GDPR. For data processing carried out by X under a data processing agreement pursuant to Article 28 GDPR, we have concluded the Data Processing Addendum (DPA) with X. Data processing between controllers is protected by the Controller-to-Controller Data Protection Addendum for data processing.

We would like to point out that if you use X, your data may be processed outside the EU. According to the European Court of Justice, there is a lower level of data protection in the USA. In order to provide adequate safeguards for the protection of personal data transferred and processed outside the EU, the transfer of data to and processing of data by X is therefore based on adequate safeguards in accordance with Article 46 GDPR. Twitter undertakes to comply with European standards through the standard contractual clauses provided by the EU Commission. For more information, see X's Controller-to Controller Data Protection Addendum of X .

We also use Sprout Social, a service of Sprout Social Inc., 131 Dearborn St. Floor 7, Chicago, IL 60603, USA . The social media management tool Sprout Social is used to respond to your requests on social media (such as Facebook, Instagram, Twitter, LinkedIn, etc.) and is used by us as a publishing tool to plan and deliver posts and campaigns. This is done within the scope of our legitimate interest (Article 6 (1)(f) GDPR) in responding efficiently and quickly to your concerns and optimising customer communication using Sprout Social as a management tool. The data processed when using Sprout Social for social media management is limited to the messages you send, account user data (name, business email address, IP address and language preference) and certain social media profile data, with the specific types of personal data collected depending on the social network.

In order to secure data processing in the unsecure third country USA, we have entered into a data processing agreement with Sprout Social in accordance with Article 28 GDPR, in which Sprout Social undertakes to ensure the necessary protection of your data and to process it in accordance with the applicable data protection regulations exclusively on our behalf and according to our instructions. An adequate level of protection within the meaning of Article 44 et seq. GDPR is guaranteed by the use of the EU standard contractual clauses according to Article 46 GDPR in the context of order processing. You will find more information at: https://sproutsocial.com/de/privacy-policy/

4. Legal bases

The processing of your personal data on our X channel takes place on the basis of our legitimate interest pursuant to Article 6 (1)(f) GDPR. Our legitimate interest is to ensure communication with our customers, to respond to customer enquiries and to inform them about news related to our products. Further legal bases for data processing may be derived in individual cases from Article 6 (1)(a) GDPR (consent), Article 6 (1)(b) GDPR (necessity for the performance of the contract) or Article 6 (1)(c) GDPR (legal obligation).

5. Your rights

Provided that the conditions specified in the law are met, you have the following rights:

  • Right of access Article 15 GDPR
  • Right to rectification Article 16 GDPR
  • Right to erasure Article 17 GDPR
  • Right to restriction of processing Article 18 GDPR
  • Right to object Article 21 GDPR
  • Right to data portability Article 20 GDPR
  • Right to lodge a complaint with a supervisory authority Article 77 GDPR
  • Right to withdraw consent with effect for the future Article 7(3) GDPR

You have the right, pursuant to Article 21 GDPR, to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.

If personal data is processed for direct marketing purposes, you also have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising.

6. Contact details of the controller and data protection officer.

The controllers within the meaning of the GDPR are

Twitter International Unlimited Company,
One Cumberland Place, Fenian Street,
Dublin 2, D02 AX07 Ireland.

and the

RATIONAL Aktiengesellschaft
Siegfried-Meister-Straße 1
Luton, LU4 8EF
E-mail: info@rational-online.com
https://www.rational-online.com

RATIONAL AG processes the data as a joint controller with the respective national subsidiary, which can be seen in the list of recipients .

If you have any further questions about privacy, please contact us. If you have any questions about the collection, processing or use of your personal data, or if you wish to obtain information, rectify, block or delete data, or withdraw consent, please contact:

RATIONAL Aktiengesellschaft Data Protection Officer
Siegfried-Meister-Straße 1
Luton, LU4 8EF
E-Mail: privacy@rational-online.com

7. More information.

You can find further information on the safe use of social networks on the website of the Federal Office for Information Security at https://www.bsi-fuer-buerger.DE/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html