Social Media Company Accounts

We maintain different social media accounts, which are listed below. It must be differentiated between the personal data and information collected and processed by the social media provider (I.) and the personal data and information collected and processed by us through the use of our respective social media company account (II.).

This Social Media Company Account Data Processing Notice informs you how R. STAHL AG, Am Bahnhof 30, 74638 Waldenburg, Germany ("we" or "us" or "our") as a joint controller processes personal data and other information of users ("you" or "your") in particular within the meaning of the General Data Protection Regulation ("GDPR") in connection with the use of our social media company accounts (II.). We process such personal data jointly together with the respective social media provider (Twitter, LinkedIn, XING and YouTube, for further details see below under section I.) pursuant to Art. 26 GDPR.

1. Personal data processed by the social media provider

We do not collect personal data about you via your social media account, e.g. personal data provided by you when setting up your social media account or passively collected information when using your social media account. When you visit our social media company account, the social media provider may collect personal data about you, e.g. via cookies. Such collection of personal data can also occur even if you are not logged in or registered on the respective social media platform.

Information about the data collection and further processing by the social media provider can be found in the privacy notice of the respective social media provider. For more details see below:

1.1 Twitter

We have a company account at Twitter, named R. STAHL Group (@rstahlgroup).

The platform and service provider of Twitter is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. If you are a citizen in the EU/EEA, the controller for the processing of your personal data is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland.

You may adjust your Twitter data privacy settings independently via your user account. To do so, click on this link and log in: https://twitter.com/personalization.

Twitter processes personal data that you voluntarily provide, e.g. name, email address, telephone number, and information about your use of the social media platform. Twitter may also use certain analytic tools. For details on how Twitter processes your personal data, please refer to the Twitter privacy notice you find here: twitter.com/en/privacy.

1.2 LinkedIn

We have a company account at LinkedIn, named R. STAHL Group.

The provider and controller is LinkedIn Ireland Unlimited Company, Gardner House, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

LinkedIn processes personal data that you voluntarily provide, e.g. name, email address, job description, and information about your use of the social media platform. LinkedIn also uses advertising cookies. If you would like to deactivate LinkedIn advertising cookies, please use the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

For details of how LinkedIn processes your personal data, please refer to the LinkedIn privacy notice:
https://www.linkedin.com/legal/privacy-policy.

1.3 XING

We have two company accounts at XING, named R. STAHL AG and R. STAHL Schaltgeräte GmbH.

The provider and controller is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany ("XING").

XING processes personal data that you voluntarily provide, e.g. name, email address, job title, company name, job description, and information about your use of the XING platform.

For details of how XING processes your personal data, please refer to the XING privacy notice:

https://privacy.xing.com/en/privacy-policy.

1.4 YouTube

We have a company account at YouTube, named R. STAHL Group.

The provider and controller is YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube processes personal data that you voluntarily provide, e.g. name, email address, location and information about your use of the YouTube platform (e.g. terms you search for, videos you watch, comments you share). Google’s privacy checkup (https://myaccount.google.com/privacycheckup?utm_source=pp&hl=en) guides you through key privacy settings for your Google Account.

For details of how YouTube processes your personal data, please refer to the Google privacy notice:

https://policies.google.com/privacy?hl=en.

2. Information received and personal data processed by us

2.1 Information received

2.1.a Twitter

We receive from Twitter anonymous statistics and reports that do not include personal data. The following anonymous information will be provided to us:

• Followers: number of persons following our Twitter account.
• Tweet interactions: all clicks on a tweet (including hashtags, links, avatar, username, and tweet expansion), retweets, replies, follows, and likes.
• Audience insights: aggregated insights on demographics (e.g. household income categories, education, occupation, marital status), lifestyle (e.g. interests), consumer behavior (e.g. buying styles, goods purchases), and mobile footprint.

Those statistics are used to steadily develop and optimize our Twitter online content and to better respond to the interests of our users. We cannot link statistical data with the profiles of our followers or individual users. 

2.1.b LinkedIn

We receive from LinkedIn anonymous statistics and reports about the usage of our social media company account that do not include personal data. The following anonymous information will be provided to us:

• Followers: number of persons following our LinkedIn account – including growth and development over a defined period.
• Range: number of people who see a specific contribution. Number of interactions on a post as well as on our company page. For example, you can deduce which content in the community is better than other. 
• Advertisement performance: how many people have seen an ad or an article and interacted with it.
• Demography: job function, company industry, company size, location, seniority, country, employment status.

Those statistics are used to steadily develop and optimize our LinkedIn online content and to better respond to the interests of our users. We cannot link statistical data with the profiles of our followers or individual users. 

2.1.c XING

We receive from XING anonymous statistics and reports about the usage of our social media company account that do not include personal data. The following anonymous information will be provided to us:

• Visitors: number of visits of our company sites.
• Followers: number of persons following our Xing accounts
• Entries as employer of choice: number of persons who have added or removed us as employer of choice

Those statistics are used to steadily develop and optimize our XING online content and to better respond to the interests of our users. We cannot link statistical data with the profiles of individual users. 

2.1.d YouTube

We receive from YouTube anonymous statistics and reports about the usage of our social media company account that do not include personal data. The following anonymous information will be provided to us:

• Views and watch time: how many people and how long are people watching videos.
• Audience retention: how consistently are people watching the videos, when do they stop watching.
• Demographics: age, gender, and geographical location.
• Traffic sources: where are people discovering the videos.
• Devices: what percentage of views come from desktop, mobile, or elsewhere.
• Subscribers: number of subscribers to our account.
• Likes and dislikes, comments and shares.

Those statistics are used to steadily develop and optimize our YouTube online content and to better respond to the interests of our users. We cannot link statistical data with the account of individual users.

2.2 Personal data

We process personal data if you actively transmit your data, in particular if you are sending us a message.

2.2.a Controller and contact details for questions

Controller  is R. STAHL AG, Am Bahnhof 30, 74638 Waldenburg, Germany, e-mail: datenschutz@r-stahl.com.

You may contact our data protection officer at datenschutz@r-stahl.com or at our postal address with the addition "Data Protection Officer".

2.2.b Categories of personal data, processing purposes, legal basis and source

Via each social media account listed below you can send messages to our social media company account. We may process your username and the content every time you send us a direct message. If you do so, we will use your personal information solely to respond to and deal with your comments or queries or for such other purpose for which it is provided. The processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to communicate with you and respond to your message. The provision of your personal data is voluntary.

2.2.b.aa Twitter

Although we do not collect any data about your Twitter account ourselves, the data you enter on Twitter, in particular, your username and the content published under your account, will be processed by us to the extent that we may re-tweet or respond to your tweets or create tweets from us that refer to your account. The data freely published and shared by you on Twitter will thus be made accessible to our followers.

The purpose of such data processing is to provide you and other users with a broad spectrum of multi-media contents and to communicate with you on important topics.

The processing is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to promote our business.

2.2.b.bb LinkedIn

Although we do not collect any data about your LinkedIn profile ourselves, the data you enter on LinkedIn, in particular, your username and the content published under your profile, will be processed by us to the extent that we may respond to content you posted in response to a post of us or if you marked our profile in your post. Usage of your profile information is limited to the information you have set to be publicly available on LinkedIn.

The purpose of such data processing is to provide you and other users with a broad spectrum of multi-media contents and to communicate with you on important topics.

The processing is based on our legitimate interests pursuant to Art. 6 para 1. lit. f GDPR. Our legitimate interest is to present our company and to recruit new employees.

2.2.b.cc XING

Although we do not collect any data about your XING profile ourselves, the data you enter on XING, in particular, your username and the content published under your profile, will be processed by us to the extent that we may respond to content you posted/shared. Usage of your profile information is limited to the information you have set to be publicly available on XING.

The purpose of such data processing is to facilitate recruiting of new employees.

The processing is based on our legitimate interests pursuant to Art. 6 para 1. lit. f GDPR. Our legitimate interest is to present our company and to recruit new employees.

2.2.b.dd YouTube

Although we do not collect any data about your YouTube account ourselves, the data you enter on YouTube, in particular, your username and the content published under your account, will be processed by us to the extent that we may respond to content you posted/shared.

The purpose of such data processing is to provide you and other users with a broad spectrum of multi-media contents and to communicate with you on important topics.

The processing is based on our legitimate interests pursuant to Art. 6 para 1. lit. f GDPR. Our legitimate interest is to present our company and to promote our business.

2.2.c Categories of recipients

We may engage external service providers, who act as a data processor for us, to provide certain services to us such as administration of the accounts, marketing services or IT support services. When providing such services, the external service providers may have access to and/or may process your personal data. Those external service providers will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the personal data and to process the personal data only as instructed.

We may also pass your personal data on to official authorities, courts, external advisers and similar third parties where this is legally prescribed or permitted.

The personal data that we collect or receive about you may be transferred to and processed by recipients that are located inside or outside the European Economic Area and which do not provide for an adequate level of data protection. To the extent your personal data are transferred to countries that do not provide for an adequate level of data protection from an EU law perspective, we will base the respective transfer on appropriate safeguards, such as standard data protection clauses adopted by the European Commission (Art. 46 para. 2 GDPR). You can ask for a copy of such appropriate safeguards by contacting us as set out in Section 2a. The access is limited to recipients with a need to know.

2.2.d Retention Period

We and/or our service providers will store your data in compliance with applicable data protection laws for no longer than we need to for the performance of our obligations and only for as long as is necessary to achieve the relevant processing purposes. If we no longer require your personal data for compliance with contractual or legal obligations or to achieve the above purposes, your personal data will be erased from our systems or anonymised accordingly, so that no identification is possible unless we are required to retain information, including your personal data, in order to comply with legal or official obligations which are binding on us, e.g. statutory retention periods which can result from e.g. Commercial Code, Tax Code and usually contain retention periods from 6 to 10 years, or if we need it to preserve evidence within the statutes of limitation, which is usually three years but can be up to thirty years.

2.2.e Automated Decision-Making

We do not take decisions based solely on automated processing.

2.2.f Your Rights

Under the applicable data protection laws, you have the right, to make a complaint to a data protection supervisory authority. In addition, you may be entitled to the following rights (though national law may restrict these rights). To exercise your rights, please contact us using the contact details provided in Section 2a.

(a) Right of access: You may have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, to request access to the personal data. The right of access includes, among other things, the purposes of the processing, the categories of the personal data to be processed, and the recipients or categories of recipient to whom the personal data will be disclosed. However, this right is not unrestricted as the rights of other persons may limit your right of access.

In certain circumstances, you have the right to receive a copy of the personal data processed by us.

(b) Right to rectification: You have the right, where relevant, to request the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including through the provision of a supplementary statement.

(c) Right to erasure (right to be forgotten): Subject to certain preconditions, you have the right to request us to erase personal data concerning you and we may be obliged to erase such personal data.

(d) Right to restriction of processing: Subject to certain preconditions, you have the right to request that we restrict the processing of your personal data. In that case, the data concerned will be marked and only processed by us for certain purposes.

(e) Right to data portability: Subject to certain preconditions, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit that data to a different controller without hindrance from us.

(f) Right to object: Subject to certain preconditions, you have the right to object at any time to the processing of your personal data by us on grounds arising from your particular situation, and we can be required not to process your personal data any longer. If personal data is processed for direct marketing purposes, you have an additional right to object at any time to the processing of personal data in relation to you for the purpose of such marketing. This also applies to profiling where this is connected to direct marketing. In that case, the personal data will no longer be processed by us for these purposes.