Instagram privacy policy

–––––––––––––––––––––––––––––
Information on data protection
–––––––––––––––––––––––––––––


1) Information about the collection of personal data and contact details of the person responsible
1.1 In the following we will inform you about the handling of your personal data. Personal data are all data with which you can be personally identified.
Please check carefully which personal data you share with us via Instagram. Instagram is part of the Facebook group of companies and shares the infrastructure, systems and technology with Facebook and with other Facebook companies (https://www.facebook.com/help/111814505650678?ref=dp). We expressly point out that Facebook stores the data of the users of its services (e.g. personal information, IP address, etc.) and may also use them for business purposes. For more information on data processing by Facebook on Instagram, see the Instagram privacy policy at https://help.instagram.com/519522125107875?helpref=page_content.
We have no influence on the data collection and further processing by Facebook. Furthermore, it is not clear to us to what extent, where and for what duration the data is stored, to what extent Facebook complies with existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on. If you would like to prevent Facebook from processing the personal data you have transmitted to us, please contact us in another way. You can find our full contact details in our imprint on Instagram.
1.2 The person responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is Selina Klingebiel, Spitzstock, Gartenstr. 20, 37308 Heilbad Heiligenstadt, Germany, Tel .: 017672185583, E-Mail: info@spitzstock.de, insofar as we only process the data transmitted by you via Instagram ourselves. Insofar as the data you transmit to us via Instagram is also or exclusively processed by Facebook, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland, is responsible for data processing within the meaning of the General Data Protection Regulation (GDPR).
The person responsible for processing personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

2) Data protection officer
You can contact Facebook's data protection officer using the online contact form provided by Facebook at https://www.facebook.com/help/contact/540977946302970.

3) Data processing when contacting us
We collect personal data ourselves when you e.g. B. Contact us via the contact form or messenger. You can see from the relevant contact form which data we collect when you contact us via the contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit.f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after your request has been processed, provided that there are no statutory retention requirements. We assume final processing if it can be inferred from the circumstances that the matter in question has been finally clarified.

4) rights of the data subject
4.1 The applicable data protection law grants you comprehensive rights of data subjects (information and intervention rights) vis-à-vis the person responsible with regard to the processing of your personal data, about which we will inform you below:
- Right to information in accordance with Art. 15 GDPR;
- Right to rectification in accordance with Art. 16 GDPR;
- Right to deletion in accordance with Art. 17 GDPR;
- Right to restriction of processing in accordance with Art. 18 GDPR;
- Right to information in accordance with Art. 19 GDPR;
- Right to data portability in accordance with Art. 20 GDPR;
- Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
- Right to lodge a complaint in accordance with Art. 77 GDPR.
4.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR MAIN LEGITIMATE INTEREST, YOU HAVE THE EVERY TIME TO PROCESS YOUR PERSONAL DATA ON THE BASIS OF A REASONS WHICH ARE GIVEN BY YOUR SPECIFIC SITUATION.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED. FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPULSORY REASONS FOR PROCESSING THAT OUTSIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING OR EXPRESSION OF THE EXPRESSION APPLIES.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY OBJECTIVE AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

5) Duration of storage of personal data
The duration of the storage of personal data is based on the respective legal basis, the processing purpose and - if relevant - additionally based on the respective statutory retention period (e.g. commercial and tax retention periods).
When processing personal data on the basis of express consent in accordance with Article 6 (1) (a) GDPR, this data is stored until the person concerned revokes his or her consent.
If there are statutory retention periods for data that are processed in the context of legal or similar obligations on the basis of Art. 6 Paragraph 1 lit. and / or we have no legitimate interest in further storage.
When processing personal data on the basis of Art. 6 Paragraph 1 lit. prove for the processing that the interests, rights and freedoms of the data subject outweigh, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct advertising on the basis of Art. 6 Paragraph 1 lit.
Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.