Találkozzunk

Lehetőségek

Kereskedők

Csatlakozz

Social Media Privacy Policy

Name and address of the responsible for data processing

The responsible data controller in the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other regulations of data protection character is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. In the case of our social media channels, this is a joint responsibility between EDE International AG and the corresponding platform operators.

If you transmit personal data to us via our social media channels and we alone are responsible for the purposes and ways of processing, then the

EDE International AG
Steinackerstrasse 3
8302 Kloten Schweiz
Phone: +41 44 3652800
E-Mail: info@ede-international.com
Website: www.ede-international.com

is Responsible for Processing.

Data protection officer contact data

Einkaufsbüro Deutscher Eisenhändler GmbH
FAO Data Protection Officer

EDE Platz 1
42389 Wuppertal

Germany

E-mail: datenschutz@ede.de
Website: www.ede.de

Data subjects can contact our data protection officers directly at any time in case of any questions or suggestions pertaining to data protection.

Please read the following chapters for more information on the possible shared responsibilities with relation to the relevant social media channels.

Status: 09.2023

1. Notes on data protection

We are very pleased about your visit to one of our social media channels and your interest in our company. Data protection is especially important for the management of EDE International AG. With this data protection notice, we inform you about how personal data is processed in connection within the visit or interactions with our social media channels or their content.

Personal data is any information relating to an identified or identifiable natural person (a „data subject”). The legal basis for data protection can be found in the General Data Protection Regulation.

EDE International AG is present on the following social media platforms:

– Facebook

– Instagram

– YouTube

– LinkedIn

Any data subject may contact our data protection administrator directly at any time with any questions or suggestions regarding data protection.

Please refer to the following chapters for contact information about the data protection administrators of the individual platform operators.

2. Wonderlink

To create a link tree that helps users of our social media channels find our privacy notices, among other things, we use Wonderlink technology from Seyffert mit Himmelspach GmbH, Boppstrasse 10, 10967 Berlin, Germany. The Wonderlink link tree does not use cookies or other technologies to create user profiles or analyze user data in any way.

You can contact Seyffert mit Himmelspach GmbH regarding data protection issues via the e-mail address support@wonderlink.de.

Here you can find more information about Wonderlink as well as the privacy policy of Seyffert mit Himmelspach GmbH.

3. Facebook

The operating company of Facebook is Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the responsible company for processing personal data is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

You can contact the data protection administrator of Meta Platforms Ireland Ltd. via the contact form of Meta Platforms Ireland Ltd.

The data policy published by Facebook provides information about the collection, processing and use of personal data by Facebook. It also provides information on the setting options offered by Facebook to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

Purpose and scope of the processing relating to personal data

We use the Facebook Insights statistics service to optimize our Facebook fan page. When processing personal data via this service, there is a shared responsibility between us and Meta Platforms Ireland. You can find more information about joint responsibility here. When you visit our site, Facebook Insights records your activities and provides us with the data via anonymized statistics. Information about Facebook Insights can be found here.

If you contact us via Facebook, share our posts or comment, we receive further data, such as your name for your Facebook account, date and time of your post or your contact. The further data sets or information provided by you depend on the content of the comments or the purpose of your contact.

Legal basis for the processing of personal data

We process the data provided by you in relation to your interaction with our site or your contact and which may be accessible to us in order to protect our legitimate interests in contact with our interested parties, which outweigh our interests in the context of a balancing of interests. This also includes our legitimate interests in data processing pursuant to Art. 6 (1) p. 1 lit. f DS-GVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DS-GVO.

Storage duration and deletion of data

The storage period of the data that you transmit to us is essentially related to the reason for your contact. If the respective purpose for data processing is no longer given, we delete or block the data in question.

You can find information about the storage period on Facebook here.

Transmission of data

We do not share data received from you through our Facebook page with third parties.

Facebook may transfer data to the USA or other countries outside the European Union. Information on how you can restrict this can be found here.

4. Instagram

Instagram is an online service of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The controller of personal data, if a data subject lives outside the USA or Canada, is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

You can contact the data protection administrator of Meta Platforms Ireland Ltd. via the contact form of Meta Platforms Ireland Ltd.

Information on data processing by Meta Platforms Ireland

The Instagram Privacy Policy specifies the categories of personal data that are processed when using Meta Platforms products (see I.), describes in general terms the purposes for which this data is used (see II.) and specifies the categories of recipients to whom this data may be disclosed (see III., IV.). Under the link provided to the Privacy Policy, you will also find information on the legal basis for the processing of this data (see V.) and information on how to revoke any consent you have given regarding the processing of personal data.

You can find more information about the relevant legal basis here. In the Privacy Policy you will find information on how to exercise your rights of access, rectification, portability and erasure towards Meta Platforms Ireland (see VI.). Under this point you will also find information about your right to object to certain processing of personal data.

You can find more information about your control options in this Help-Article . In the Privacy Policy you will also find information about the period for which personal data is stored and information about the criteria regarding the determination of this period and the possibility of blocking or deleting Instagram accounts (see VII.). The Privacy Policy refers to Meta Platforms Ireland’s intention to transfer data to third countries, if necessary, based on adequacy decisions or standard contractual clauses adopted by the European Commission (see IX.).

We have set up our Instagram page as a business profile and use anonymized page statistics („Instagram Insights”) provided by Meta Platforms Ireland to provide us with insights about visitors of our Instagram page and their interactions with our Instagram account and its content. We do not give any input into the decision on the means and purposes of processing event data used to generate page statistics. The statistics include the following information:

Reach, page views, time spent on videos
Interactions like liking a post, commenting on a post, or sharing a post

Demographic information on age, gender and location

We use this data to identify trends. We are not able to track the individuals who triggered these events.

Information regarding the use of cookies by Meta Platforms Ireland

When you visit our Instagram page and your browser allows cookies to be stored, Meta Platforms Ireland stores information in the form of small text files in your browser’s memory (hereinafter „cookies”) and can access this information when you visit the Facebook platform or a website that includes Facebook technologies. For more information about the purpose of the cookies used, the involvement of these cookies by other websites and your control options in this regard, please refer to the information on Instagram cookies.

We would like to point out that Meta Platforms Ireland is able to track user behavior (across devices for registered users) on other websites beyond Instagram by means of the cookies used. This applies both to persons registered with the Instagram platform and to persons not registered there.

We would also like to point out that we have no influence on the data processing carried out by Meta Platforms Ireland in connection with cookies. Visiting our Instagram page is also possible if you configure your browser so that no cookies are stored by the Facebook platform. Information on how to adjust the settings for cookies in your browser can usually be found in the help section of the browser you are using.

If you are registered or logged in to your Instagram or Facebook account and would like to prevent Meta Platforms Ireland from associating your visit to our Facebook page with your Instagram or Facebook user account, you should log out of Facebook or disable the „stay logged in” feature, delete the cookies present on your device, and exit and restart your browser.

Data processing during interactions on our Instagram page

Our Instagram page gives you the opportunity to respond to and comment on our posts and send us private messages. Please carefully consider what personal data you share with us through our Instagram page. If you would like to avoid Meta Platforms Ireland processing any personal data you submit to us, please contact us by other ways.

In addition to the content you submit, information about your profile, likes, and posts is visible to us depending on your privacy settings. You can learn how to change your privacy settings in this Help-Article.

The processing of your data when contacting or interacting with our site or its content is carried out by us based on Art. 6 para. 1 p. 1 lit. f DS-GVO. Our legitimate interest is to respond to your request. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DS-GVO.

We process the data you provide in this context and which may be accessible to us in order to protect our legitimate interests in contacting and communicating with our interested parties, which are outweighed by our interests. This is also our legitimate interests in the data processing according to Art. 6 para. 1 p. 1 lit. f DS-GVO.

As far as we are able, your data will be deleted when we stop operating our Instagram page. If Meta Platforms Ireland continues to store this data, this is based exclusively on the regulations in the Instagram data protection policy and Instagram terms of use.

5. YouTube

YouTube is an online service of YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. The data controller for individuals living outside the United States is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

You can contact Google’s privacy department using this contact form.

Purpose and scope of the processing of personal data

YouTube collects and processes personal data from you when you access our YouTube channel as the sole responsible party. This includes, for example, your IP address and other information that can usually be assigned to your device via cookies.

For more information on the purpose and scope of data collection and its processing by YouTube, please see YouTube’s privacy policy.

Legal basis of the processing of personal data

We process the data you provide in relation to your interaction with our YouTube channel or your contact and which may be accessible to us in order to protect our legitimate interests in contacting and communicating with our interested parties, which are overriding in the context of a balancing of interests. This is also our legitimate interests in the data processing according to Art. 6 para. 1 p. 1 lit. f DS-GVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DS-GVO.

The storage period of the data that you transmit to us is essentially related to the reason for your contact. If the respective purpose for the data processing no longer exists, we delete or block the data concerned.

Information on the storage period of data by YouTube or Google can be found here.

Information on opt-out options can be found here.

Transmission of data

We do not share data received from you through our YouTube channel with third parties.

YouTube or Google may transmit data to the USA or other countries outside the European Union. Information on how you can restrict this can be found here.

6. LinkedIn

LinkedIn is an online service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

You can contact the data protection administrator of LinkedIn via this contact form.

Purpose and scope of the processing relating to personal data

We use LinkedIn to communicate with you and other interested parties and to inform you there, among other things, about EDE International AG. As a rule, cookies are stored on your computers, in which the usage behavior is saved. This user data is made available to us by LinkedIn anonymized and aggregated for analysis. Furthermore, we only process the data records that you make available to us via LinkedIn. When processing personal data via LinkedIn, there is a joint responsibility between us and LinkedIn Ireland Unlimited Company. You can find more information about joint responsibility here.

For more information on the purpose and scope of data collection and its processing by LinkedIn, please see the privacy policy.

Legal basis for the processing of personal data

We process the data you provide in connection with your interaction with our LinkedIn account or your contact and which may be accessible to us to protect our legitimate interests in contacting and communicating with our interested parties, which outweigh our interests in the context of a balancing of interests. This is also our legitimate interest in the data processing according to Art. 6 para. 1 p. 1 lit. f DS-GVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DS-GVO.

Storage duration and deletion of data

Information on the storage period of data by LinkedIn can be found here.

Transmission of data

We do not share data that we have received from you through our LinkedIn account with third parties.

LinkedIn may transfer data to the USA or other countries outside the European Union. You can find information about this here.

Rights of the data subject

Right to confirmation

Every data subject has the right, established by the European Union, to obtain confirmation from the controller as to whether personal data relating to him or her are being processed. If a data subject wishes to exercise this right, he or she may, at any time, contact the controller specified above.

Right to information

Any person concerned by the processing of personal data has the right granted by the European Union to be informed at any time and free of charge by the controller of the personal data relating to him or her that has been stored and to receive a copy of that data. In addition, the European Union has granted the data subject the right to request the following information:

– the processing purposes

– the categories of personal data that are processed

– the recipients or categories of recipients to whom the personal data have been or will be revealed, in case of recipients in third countries or international organizations

– if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria for defining this period

– the right to request the correction or deletion of personal data relating to him or her, or the limitation of processing by the controller, or the right to object to such processing

– the existence of a right of appeal to a supervisory authority

– if the personal data are not collected from the data subject: All available information about the source of the data

– the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject

Furthermore, the data subject shall have the right to obtain information as to whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to receive information about the appropriate safeguards in connection with the transfer.

If a data subject wants to use this right of access, he or she can contact the responsible person mentioned under 2 at any time.

Right of correction

Any person affected by the processing of personal data has the right to request the correction of inaccurate personal data relating to him or her without delay, as granted by the European Union Data Protection Agency. Furthermore, the data subject has the right to request the completion of incomplete personal data – also by means of a supplementary declaration – considering the purposes of the processing.

If a data subject wants to use this right of access, he or she can contact the responsible person mentioned under 2 at any time.

Right to be deleted (right to be forgotten)

Any person concerned by the processing of personal data has the right, granted by the European Directive and Regulation, to obtain from the data controller the erasure without delay of personal data concerning him or her, where one of the following reasons applies and as far as the processing is not necessary:

The data subject revokes the consent on which the processing was based pursuant to Art. 6(1)(a) DS-GVO or Art. 9(2)(a) DS-GVO and there is no other legal basis for the processing.

The data subject objects to the processing according to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing according to Article 21(2) of the GDPR.

The personal data have been processed unlawfully.

The deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the responsible party is subject.

The personal data was collected in relation to information society services that were made available in accordance with Art. 8 (1) DS-GVO.

If one of the reasons above applies, and a data subject wants to arrange the deletion of personal data stored by the EDE International AG, he or she may, at any time, contact any of the persons responsible for the data protection listed under 2. The employee of the Einkaufsbüro EDE International AG will arrange the deletion without delay.

If the personal data was made public by the EDE International AG and our company as the responsible party is required to delete the personal data pursuant in Art. 17 Para. 1 DS-GVO to erase the personal data, the EDE International AG shall take reasonable measures, including technical measures, to monitor the available technology and the cost of implementation in order to inform other data processors which process the published personal data that the data subject has requested from those other data processors the erasure of all links to the personal data or copies or replications of the personal data, unless the processing is necessary. The employees of the EDE International AG will arrange everything necessary in individual cases.

Right to restriction of processing

Any person concerned by the processing of personal data has the right, granted by the European Directive and Regulation, to obtain from the data controller the restriction of processing if one of the following conditions is met:

The accuracy of the personal data is denied by the data subject for a period of time which permits the controller to verify the accuracy of the personal data.

The processing is unlawful, the data subject objects to the erasure of the personal data and instead requests the restriction of the use of the personal data.

The controller no longer needs the personal data for processing purposes, but the data subject needs it for the enforcement, exercise or defense of legal claims.

The data subject has objected to the processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.

If one of the conditions is met, and a data subject wishes to request the restriction of personal data stored by the EDE International AG, he or she may, at any time, contact the controller identified in section 2. The employees of the EDE International AG will arrange the restriction of the processing.

Right to data transferability

Any person concerned by the processing of personal data has the right, granted by the European Directive and Regulation, to receive the personal data concerning him or her, which have been provided by the data subject to a data controller, in a structured, commonly used and machine-readable format. He or she also has the right to transmit this data to another controller without hindrance from the controller to whom the personal data have been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when the data subject uses his or her right to data portability according to Article 20(1) of the GDPR, he or she has the right to have the personal data transferred directly from one data controller to another data controller, to the extent that this is technically possible and if this does not affect the rights and freedoms of other individuals.

To assert the right to data portability, the data subject can contact the EDE International AG at any time.

Right to object

Any person affected by the processing of personal data has the right to object at any time, on grounds relating to his or her situation, to the processing of personal data concerning him or her which is carried out based on Article 6(1)(e) or (f) of the GDPR, as granted by the European Directive and Regulation. This also applies to profiling based on these terms.

The EDE International AG will no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defense of legal claims.

If the EDE International AG processes personal data for the purpose of direct marketing, the data subject shall have the right to object at any time that the personal data be processed for such marketing. This also applies to profiling, in so far as it is related to such direct marketing. If the data subject objects to the EDE International AG any processing for direct marketing purposes, the EDE International AG will no longer process the personal data for these purposes.

In addition, the data subject has the right, on grounds relating to his specific situation, to object to processing of personal data relating to him which is carried out by the EDE International AG for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the DS-GVO, unless the processing is necessary for the performance of a task carried out in the public interest.

To exercise the right to object, the data subject may directly contact any employee of the EDE International AG or another employee. The data subject is also free to exercise his or her right to object in relation to the use of information society services, regardless of Directive 2002/58/EC, by means of automated procedures using technical specifications.

Automated decisions in individual cases including profiling

Any data subject concerned by the processing of personal data shall have the right, granted by the European Directive and the Regulation, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, unless the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the data controller, or (2) is based on Union or Member State law to which the controller is subject, and that law contains suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is based on the data subject’s explicit consent.

If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the data controller, or (2) if it is made with the data subject’s explicit consent, the EDE International AG shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, which include at least the right to obtain the intervention of a data subject on the part of the controller, to express his or her point of view and to object to the decision.

If a data subject wants to use this right of access, he or she can contact the responsible person mentioned under 2 at any time.

Right to revoke consent under data protection law

Any person affected by the processing of personal data has the right granted by the European Directive and Regulation to withdraw his or her consent to the processing of personal data at any time.

If a data subject wants to use this right of access, he or she can contact the responsible person mentioned under 2 at any time.

7. Right to complain to a supervisory authority pursuant to Art. 77 (1) DS-GVO

If you suspect that your data is being processed unlawfully on our Instagram page, you may contact a supervisory authority. You have the right to file a complaint in your EU member state of residence, workplace and/or the location of the alleged violation, i.e., you can choose the supervisory authority where you file the complaint in the above-mentioned locations. The supervisory authority to which the complaint has been submitted will then inform you of the status and outcome of your filing, including the possibility of a legal remedy pursuant to Article 78 of the GDPR.