7. Use of social media links
We maintain online presences within social networks and process user data in this context to communicate with users actively or offer information about us.
We want to point out that user data may be processed outside the European Union. The processing may result in risks for the users because, for example, it could make it more difficult to enforce the users’ rights.
Furthermore, user data is usually processed within social networks for market research and advertising purposes. For example, usage profiles can be created based on the users’ usage behaviour and resulting interests. The usage profiles can be used, for example, to place advertisements within and outside the networks that presumably correspond to the users’ interests. For these purposes, cookies are usually stored on the users’ computers, in which the user behaviour and interests of the users are stored. Furthermore, data may also be stored in the usage profiles irrespective of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). Detailed information on these analysis programs is explained below.
In the footer of our website, you will find the icons to the services Facebook, Instagram and YouTube, LinkedIn and XING. These are just hyperlinks. If you click on one of these graphics, you will be forwarded to the respective service. Your user information will only then be forwarded.
Legal basis: The processing is carried out following Art. 6 para. 1 lit. f) GDPR based on our legitimate interest in the functionality of our website.
After you click on the link, a connection to the respective social media platform is established. If you are logged into a social media account at this time, a connection to your account is possible. If you do not want such a connection, please log out of the respective account. However, we would like to point out that we cannot rule out the possibility that personal data may nevertheless be collected by the operators of the social media platforms.
Please refer to the data protection information of the respective service provider to find out which specific data is collected and how it is used:
Facebook: http://www.facebook.com/policy.php
Instagram: https://help.instagram.com/155833707900388
LinkedIn: https://www.linkedin.com/legal/privacy-policy
XING: https://www.XING.com/privacy
YouTube: https://policies.google.com/privacy
Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.
We do not influence your data storage period, which the operators of the social networks store for their purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see above).
For all social media channels mentioned below, the provision of your data is voluntary. Without providing your data, we cannot grant you access to our offered content and services.
You can revoke your consent to store your data via the respective social media accounts at any time with effect for the future. You can notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
7.1 Insights through social media channels
As a responsible company, we do not use automatic decision-making or profiling for this data processing. However, we have insights into various categories of the respective social media channels for a selectable time.
We, therefore, have no way of identifying you personally or assigning you to your account. We process the anonymised and aggregated data based on our legitimate interest, according to Art. 6 para. 1 lit. f). Our legitimate interest is to evaluate the anonymised data and to be able to improve our offer.
The generated visitor statistics are transmitted to us exclusively in anonymised form. We use this data, which is available in aggregated form, to make our posts and activities on our social media channels more attractive. However, we do not have access to the underlying data in each case. It applies to this data that it does not fall within the scope of the GDPR due to its anonymisation.
7.1.1 Facebook Insights
With Insights, Facebook offers an analytics tool that we use to collect anonymised data to align our Facebook posts and activities more closely with the interests of our target group.
For a selectable time as well as for each of the following categories, we have insight into the following information:
- Reach of the Facebook page
- “Like” count for Facebook page
- Most successful posts (reach)
- “Like” count, number of comments, number of shared content, number of link clicks, reactions to content
- Age and gender of the target group
- Top cities of the target group
- Leading countries of the target group
7.1.2 Instagram Insights
Insights are Instagram’s free analytics tool, which we use to view statistics about our profile with our business account.
For a selectable time and each of the following categories, we have insight into the following statistics:
- Reach of the Instagram page
- Total number of subscribers
- New subscribers
- Terminated subscriptions
- Number of accounts reached
- Number of accounts that interacted
- Age and gender of the target audience
- Top cities of the target group
- Leading countries of the target group
- Most active times of the target group (hours and days)
- Number of impressions
- Number of profile views
- Number of “tapped on the email button
- Number “tapped on the call button”
- Engagement rate, impressions, clicks, reactions, comments and tags
7.1.3 LinkedIn Analytics
We use LinkedIn Analytics through our LinkedIn profile. LinkedIn Analytics allow us to evaluate various metrics and measure our success.
Through the analytics platform, we have insights into our visitors, followers, and performance data.
Here, there are three general categories of data on LinkedIn:
- Visitors (data on people who visit our site).
- Updates (engagement metrics for content published on LinkedIn).
- Followers (numerical and demographic information about people who subscribe to a page)
In LinkedIn Analytics, we can view the following categories in the anonymised form:
- Number of page views
- Number of unique visitors
- Number of clicks on the customised button (if used)
- Number of hits via desktops and mobile devices
- Top activity areas of visitors
- Total number of followers
- Increase in followers
- Number of posts
- Engagement rate, impressions, clicks, reactions, comments, and tags
- Number of times we appear with our profile in other search results
7.1.4 XING analysis tool
Currently, we use the standard employer profile and thus only have insight into part of the reach of our company profile. We can view the following information for self-determined time periods:
- Number of new visitors from logged in members
- Total number of page visits in the selectable time
- Number of new followers added
- Total number of followers
- New employer of choice markers
- Total number of employer of choice markers
As soon as our XING profile is switched to an Employer Branding profile to be paid for, all content of the analysis tool will be unlocked. We currently do not use the employer branding profile.
7.1.5 YouTube Analytics
We use YouTube Analytics to keep track of the performance of our channel and our videos based on current metrics and reports.
Here, the following metrics are recorded and viewed by us:
- Views by video
- Total views
- Playback time in hours
- Average playback time
- Number of impressions
- Click-through rate of impressions in per cent
- Calls by access source
- Channel pages
- Youtube search
- External
- Breakdown
- Video suggestions
- Playlist page
- Views by region
- Age and gender of viewers
- Views by date
- Subscription status
- Subscription source
- Type of device through which the video was accessed
- Playback location
- YouTube playback pages
- Embedded in external websites and apps
- YouTube channel pages
- The operating system through which the video was accessed
- Use of translations and which
- Subtitles and which ones were used
- Shared content by service with which it was shared
Again, this data is only presented to us in an anonymised manner.
7.2 Online presence on social media
7.2.1 Online presence on Facebook (Meta)
Our website links to services of the social network facebook.com, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square Dublin 2, Ireland, with the parent company: Meta Platforms, Inc, 1601 Willow Road, 94025 Menlo Park, USA. No data is transferred to Facebook when you visit our website, as no Facebook plug-ins are integrated.
However, clicking on a Facebook link or Facebook button will take you to Facebook, where data will be collected by Facebook. The data collected about you is processed by Meta Platforms, Inc., the US parent company of Meta Platforms Ireland Limited, and may be transferred to countries outside the European Union.
Facebook, or Meta, is certified in accordance with the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active). The EU-US Data Privacy Framework (DPF) has been in place since July 10, 2023, for which the EU Commission has issued an adequacy decision in accordance with Art. 45 GDPR (https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The EU-US Data Privacy Framework (DPF) is an agreement between the European Union and the United States, which is intended to ensure compliance with European data protection standards when processing data in the USA.
If a company from the United States is not or not yet certified under the DPF, there is (as yet) no adequacy decision by the EU Commission. A possible data transfer to the USA is then based on the standard data protection clauses of the EU Commission (Art. 46 (2) and (3) GDPR). You can find more information here: https://de-de.facebook.com/help/566994660333381
For the purpose and scope of the data collection and the further processing and use of the data by Facebook, your rights in this regard and setting options for protecting your privacy, please refer to the privacy notices of Facebook and our privacy policy for the Facebook fan page.
Suppose you are a Facebook member and do not want Facebook to collect data about you and link it to your membership data stored on Facebook. In that case, you must log out of Facebook before clicking on a Facebook link or a Facebook button. However, your data may also be collected under certain circumstances if you are not logged in or have no Facebook account.
Jointly responsible for our Facebook page within the meaning of the EU GDPR and other data protection regulations are Meta Platforms Ireland Limited, 4 Grand Canal Square Dublin 2, Ireland and Kählig Antriebstechnik GmbH.
The purpose of the Facebook fan page, under processing the user’s personal data, is to draw the user’s attention to our services/products on time and get in touch. This is our legitimate interest. The legal basis is Art. 6 para. 1 lit. f) GDPR.
You can use our Facebook page without revealing your Facebook identifier. When you access the interactive functions of the page (like, comment, share, news, etc.), a Facebook login screen appears. After any login, you will again be recognisable to Facebook as a specific user. Information on managing or deleting information about you can be found on the following Facebook support pages: https://www.facebook.com/help
When you visit our Facebook page, Facebook collects, among other things, the user’s IP address and additional information that is present in the form of cookies on the user’s PC. This information is used to provide statistical information about the use of the Facebook page.
Facebook processes personal data for advertising, creating user-profiles and market research. In what way Facebook uses data from visits to Facebook pages for its purposes, to what extent activities on the Facebook page are assigned to individual users and whether data from a visit to the Facebook page is passed on to third parties is not conclusively and clearly stated by Facebook and is not known to us.
When you access a Facebook page, the IP address assigned to your end devices is transmitted to Facebook. According to Facebook, this IP address is anonymised (for “German” IP addresses) and deleted after 90 days. Facebook also stores information about the end devices of its users (e.g. as part of the “login notification” function); if necessary, this enables Facebook to assign IP addresses to individual users. If you are currently logged in to Facebook as a user, there are cookies on your end device, i.e. small text files stored on the user’s end devices. If the user is logged in on their Facebook profile, cross-device data is stored and analysed.
The data enables Facebook to track that you visited this page and how you used it. As stated above, this also applies to all other Facebook pages. Via Facebook buttons embedded in websites, Facebook can record your visits and assign them to your Facebook profile. Based on this data, content or advertising can be tailored to you and offered.
If you want to avoid this, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies on your device and exit and restart your browser. In this way, Facebook information through which you can be directly identified will be deleted.
Facebook describes in general terms which information they receive and how it is used in their data policy: https://www.facebook.com/policy.php?ref=pf. You have a right to object; to exercise this right, please get in touch with Facebook.
If you no longer wish to have the data processing described here in the future, please cancel the connection of your user profile to our site by using the functions “I no longer like this page” and or “Do not subscribe to this page”.
The data collected about you will be processed by Facebook Ltd, the US parent company of Facebook Ireland Ltd, and may be transferred to countries outside the European Union.
7.2.2 Online presence on Instagram (Meta)
As the operator of the Instagram page, Kählig Antriebstechnik is jointly responsible with the social network Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square Dublin 2) within the meaning of Art. 4 No. 7 GDPR. Instagram uses the same systems and technologies like Facebook. When you call up web pages of our website that have an integrated Instagram function, data is transmitted to Instagram, stored and processed. Since we have not integrated an Instagram plug-in, but only a link to Instagram on the website, data transmission to Instagram only occurs when you actively click on the link or icon. Thus your data is processed across all Meta companies. The terms of use of Instagram are authoritative. We would like to point out that you use this Instagram page and its functions on your responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing).
Instagram, or Meta, is certified in accordance with the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active). The EU-US Data Privacy Framework (DPF) has been in place since July 10, 2023, for which the EU Commission has issued an adequacy decision in accordance with Art. 45 GDPR (https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The EU-US Data Privacy Framework (DPF) is an agreement between the European Union and the United States, which is intended to ensure compliance with European data protection standards when processing data in the USA.
If a company from the United States is not or not yet certified under the DPF, there is (as yet) no adequacy decision by the EU Commission. A possible data transfer to the USA is then based on the standard data protection clauses of the EU Commission (Art. 46 (2) and (3) GDPR). You can find more information here: https://de-de.facebook.com/help/566994660333381
The legal basis for the lawfulness of data processing on the Instagram page is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to promptly make the user aware of our services/products and get in touch.
Instagram users can influence the extent to which their user behaviour may be recorded when visiting our Instagram page under the settings for advertising preferences. Further options are provided by the Facebook and Instagram settings under account privacy or the right to object form. The processing of information by means of the cookie used by Facebook can also be prevented by not allowing cookies from third-party providers or those from Instagram in your browser settings.
If you want to delete your data on Instagram completely, you must permanently delete your Instagram account. Information on how Facebook handles personal data on Instagram can be found in their privacy policy at Instagram Privacy Policy: https://www.facebook.com/privacy/policy/?entry_point=facebook_help_center_ig_data_policy_redirect
7.2.3 Online presence on LinkedIn
We have a LinkedIn profile. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. If you are logged into your LinkedIn account and visit our social media presence, LinkedIn can assign this visit to your user account. However, your data may also be collected under certain circumstances if you are not logged in or have no account on LinkedIn. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address. With the help of the data collected, LinkedIn can create user profiles in which your preferences and interests are stored. In this way, LinkedIn can show you interest-based advertising inside and outside of LinkedIn. If you have an account on LinkedIn, the interest-based advertising may be displayed on all devices you are logged in or have been logged in. Please also note that we cannot track all processing operations on LinkedIn. Therefore, additional processing operations may be carried out by LinkedIn. For details, please refer to LinkedIn’s terms of use and privacy policy.
Legal basis: The processing is carried out following Art. 6 (1) lit. f) GDPR based on our legitimate interest in contact opportunities with our customers. The analysis processes initiated by LinkedIn may be based on deviating legal bases to be specified by LinkedIn (e.g. consent within the meaning of Art. 6 (1) lit. a) GDPR). You can find out which specific data is collected and how it is used in Linkedin’s data protection mentioned above.
LinkedIn is certified in accordance with the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000L0UZAA0&status=Active). The EU-US Data Privacy Framework (DPF) has been in place since July 10, 2023, for which the EU Commission has issued an adequacy decision in accordance with Art. 45 GDPR (https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The EU-US Data Privacy Framework (DPF) is an agreement between the European Union and the United States, which is intended to ensure compliance with European data protection standards when processing data in the USA.
If a company from the United States is not or not yet certified under the DPF, there is (as yet) no adequacy decision by the EU Commission. A possible data transfer to the USA is then based on the standard data protection clauses of the EU Commission (Art. 46 (2) and (3) GDPR). You can find more information here: https://www.linkedin.com/legal/l/dpa?
After the end of the purpose, the use of LinkedIn by us and the data collected in this context will be deleted.
7.2.4 Online presence on XING
If you are logged into your XING account and visit our social media presence, XING can assign this visit to your user account. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. However, your data may also be collected under certain circumstances if you are not logged in or have no XING account. In this case, this data collection takes place, for example, via cookies that are stored on your terminal device or by recording your IP address. With the help of the data collected, XING can create user profiles in which your preferences and interests are stored. In this way, XING can show you interest-based advertising inside and outside of XING. If you have an account on XING, the interest-based advertising can be displayed on all devices you are logged in or have been logged in. Please also note that we cannot track all processing on XING. Therefore, additional processing operations may be carried out by XING. For details, please refer to XING’s terms of use and privacy policy.
Legal basis: The processing is carried out following Art. 6 para. 1 lit. f) GDPR, based on our legitimate interest of contact possibilities to our customers. The analysis processes initiated by XING may be based on different legal bases to be specified by XING (e.g. consent within the meaning of Art. 6 para. 1 lit. a) GDPR).
Please refer to the data protection information mentioned above of XING to find out which specific data is collected and how it is used: Recipients of the data are employees of the IT department of your own company and XING.
After the end of the purpose and the use of XING by us, the data collected in this context will be deleted.
You can find additional information in XING’s privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
7.2.5 Online presence on YouTube
We use the video platform YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“YouTube”). YouTube is a platform that enables the playback of audio and video files.
All data stored when using YouTube converge in the Google account.
Google is certified under the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active). The EU-US Data Privacy Framework (DPF) has been in place since July 10, 2023, for which an adequacy decision of the EU Commission pursuant to Art. 45 GDPR exists (https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The EU-US Data Privacy Framework (DPF) is an agreement between the European Union and the United States, which is intended to ensure compliance with European data protection standards when processing data in the USA.
If a company from the United States is not or not yet certified under the DPF, there is (as yet) no adequacy decision by the EU Commission. A possible data transfer to the USA is then based on the standard data protection clauses of the EU Commission (Art. 46 (2) and (3) GDPR).
YouTube does not have a privacy policy. The privacy policy for the use of YouTube is Google’s privacy policy, as is the case for all Google services. See the policy: https://www.youtube.com/intl/ALL_de/howyoutubeworks/user-settings/privacy/. According to this policy, the information stored includes the personal data that each user enters during registration or even later in his account. We only see usernames and the names of YouTube channels.
In addition, however, large amounts of information are obtained by analysing the use of Google services. The data includes data on location, IP addresses and devices used.
If you watch a video on our YouTube channel, data is also transmitted to YouTube as the responsible party. According to its privacy policy, Google, and thus YouTube, uses the collected data primarily to provide and improve its services. “Improvement” in this context mainly means personalisation.
If you are logged in to Google, your data will be directly assigned to your account. If you do not want the association with your profile on YouTube, you must log out of your Google account before clicking on our YouTube icon on our website or before clicking on our YouTube videos. However, your data may also be collected under certain circumstances if you are not logged in or have no YouTube or Google account. YouTube stores your data as usage profiles and uses them for advertising, market research and or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and inform other social network users about your activities on our website. You have a right to object to creating these user profiles, whereby you must contact YouTube to exercise this.
Settings for data protection on YouTube must therefore be made in the Google account. With the “My data on YouTube” function, you can better understand and control what data is stored and how YouTube and Google use it. Using the feature, you can quickly access YouTube’s privacy settings and learn more about how YouTube processes data like your search and playback history. The activities in your history are private and are used to help you get the most out of the platform. For example, you will be shown which videos you have already watched, and thus you will get appropriate recommendations and search results. You can delete specific videos from your playback history and search queries from your search history, as well as pause or completely delete the playback and search history. Videos you have deleted from your history will no longer affect video recommendations, and deleted searches will no longer appear as suggestions in the search bar.
We are not responsible for the processing of this data by YouTube.
The legal basis for the processing is Art. 6 (1) (f) GDPR, our overriding legitimate interest. We use our YouTube channel because of the more attractive presentation of our products and our company. In addition, this contributes positively to our mission statement.
7.2.6 Online presence on kununu
We have an online presence on the review platform “kununu”. kununu is a service of NEW WORK AUSTRIA XING kununu onlyfy GmbH, Schottenring 2-6, 1010 Vienna, Austria and is operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. kununu and Kählig Antriebstechnik are jointly responsible for protecting your personal data following Art. 26 GDPR.
Employees can rate the employment relationships of their companies anonymously and reliably on the kununu platform. In addition to the evaluation function by employees, we also use kununu’s online presence to provide information about our company, career opportunities and our range of products and services.
As we have not integrated a kununu plug-in but only a link to kununu on our website, data is transmitted only to kununu when you actively click the link/icon.
We cannot track in detail which personal data is collected and processed by kununu. Data may also be collected from users who are not logged in or registered with kununu. To avoid processing completely, you should avoid visiting the kununu website and using other kununu applications. Further information on data processing by kununu and deletion periods can be found here: https://www.XING.com/privacy
We only receive anonymised data from kununu regarding visitor statistics and the number of visits to our company website. We cannot use these statistics to draw any conclusions about individual users. We do not receive any account data from registered users.
The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR, which is our main legitimate interest. Our legitimate interest is, among other things, to communicate with you via our kununu page and to inform you about our company, career opportunities, and our range of products and services.