Data Protection Facebook
Privacy notice for our Facebook page CATRICE Cosmetics
and our Instagram channel CATRICE Cosmetics
As you may be aware, the European Court of Justice ("ECJ") recently ruled that Facebook and a Facebook site operator are jointly responsible for data processing under data protection law. In addition to the platform of the same name, Facebook also operates the "Instagram" platform, on which we also operate a company page.
Responsible in the sense of the General Data Protection Regulation ("GDPR") for data processing during the operation of the Fan Pages are:
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour Dublin 2
Am Limespark 2
65843 Sulzbach, Germany
("cosnova" or "we")
As the operator of our fan pages, we have reached agreements with Facebook regarding joint responsibility for data protection. You can download the relevant "Page Controller Addendum" here: https://www.facebook.com/legal/terms/page_controller_addendum
II. contact to the data protection officers
You can contact the Facebook data protection officer here: https://www.facebook.com/help/contact/540977946302970
Our data protection officer is:
Telephone: 06154 - 57605-0
Fax: 06154 - 57605-29
III. Data processing during the operation of fanpages
As the operator of the fan pages, we use the "Insights" function provided by Facebook. Via Insights, we receive statistical data from Facebook (e.g. total number of page views, "Like" information, page activities, etc.). This statistical data is only transmitted to us in anonymous form, i.e. we cannot assign this data to any particular visitor to our site. We also do not have access to the data on which the statistics are based. Facebook provides information about the Insights function on the "Information on Page Insights Data" page, which you can access here: https://www.facebook.com/legal/terms/information_about_page_insights_data
In order for Facebook to provide us with this information, Facebook stores cookies on the devices that you use to access fan pages. These cookies are small text files that contain a unique user code. The cookies are active for a period of two years, unless they delete it beforehand. To the extent we know, Facebook uses the information collected through the cookies to provide advertisements to you and to enable Facebook affiliates and advertising partners of Facebook to do the same.
You can find further information on data processing by Facebook in Facebook's privacy statement: https://www.facebook.com/about/privacy/.
When you interact with us through fan pages, and especially when you contact us, we may receive additional information from you, such as comments from you or private messages you send us through fan pages.
IV. Purposes of processing
Facebook also uses the data collected by Facebook for market research and advertising purposes, in particular to analyze their behavior, to create user profiles and to provide personalized advertising (including on behalf of third parties).
Here you can make use of an "opt-out" option and influence which advertising is displayed to you in the future as a user of the Facebook service: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com. You can make further settings here: https://www.facebook.com/help/contact/367438723733209
If you interact with us via the fan pages (e.g. if you send us a private message), we process any personal data exclusively for the purpose of communication and interaction with you.
V. Disclosure of Data
We do not pass on any personal data. We cannot exclude the transmission and further processing of personal data by Facebook to Facebook Inc. based in the USA or other companies outside the EU and the associated risks for affected parties. Facebook Inc. is certified under the so-called "Privacy Shield" and is therefore obliged to comply with European data protection regulations. Information on Facebook's Privacy Shield status can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
VI. Legal basis
We maintain these fan pages to promote our products and to interact with you. Personal data is processed based on our legitimate interests pursuant to Art. 6 Para. 1 S. 1 lit. f GDPR in effective communication and interaction with users as well as an optimized presentation of our products and services. In the case of data processing based on Art. 6 para. 1 sentence 1 lit. f GDPR we draw attention to the data subject's existing right of objection (cf. VII. (f)).
VII. Your rights
Information requests and the assertion of further rights of data subjects should be asserted most effectively and sensibly directly on Facebook as the provider of the platform. The agreement concluded with us (the Page Controller Addendum, see above) stipulates that Facebook is the primary point of contact for exercising the rights of data subjects listed below and that Facebook assumes the essential data protection obligations for informing data subjects, for data security or for reporting data protection violations. Regarding data processing around the tool Insights, only Facebook has the direct information and the database from which the statistics transmitted to us are compiled. Should our support be necessary, you can contact us at any time.
You have the following rights:
(a) Right to information
You have the right to obtain from us at any time upon request information on the personal data processed by us concerning you in the scope of Art. 15 GDPR. For this purpose, you may submit an application by post or by e-mail to the address given below.
(b) Right to correct inaccurate data
You have the right to ask us to correct your personal data immediately if it is inaccurate. To do so, please contact us at the addresses below.
(c) Right to deletion
You have the right, under the conditions described in Art. 17 GFPR, to request us to delete your personal data. In particular, these conditions provide for a right of deletion if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, or in cases of unlawful processing, the existence of an objection or the existence of an obligation to delete under Union law or the law of the Member State to which we are subject. To exercise your right to cancellation, please contact the addresses below.
(d) Right to limitation of processing
You have the right to demand from us the restriction of processing in accordance with Art. 18 GDPR. This right exists in particular if the correctness of the personal data is disputed between the user and us, for the duration which the verification of the correctness requires, as well as in the event that the user demands limited processing instead of deletion in the case of an existing right to deletion; furthermore in the event that the data is no longer necessary for the purposes pursued by us, but the user needs it for the assertion, exercise or defense of legal claims and if the successful exercise of an objection between us and the user is still disputed. To exercise your right to limit the processing, please contact us at the addresses below.
(e) Right to transfer data
You have the right to receive from us the personal data concerning you which you have provided to us in a structured, common, machine-readable format in accordance with Art. 20 GDPR. To exercise your right to data transfer, please contact us at the addresses below.
(f) Right of objection
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out, among other things, on the basis of Art. 6 para. 1 lit. e) or f) GDPR, pursuant to Art. 21 GDPR. We will stop processing your personal data unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.
(g) Right of revocation (in case of consent given)
They have the right to revoke consents granted pursuant to Art. 7 para. 3 GDPR with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out based on consent until revocation.
(h) Right of appeal
They shall also have the right to address complaints to the supervisory authorities.