Privacy statement for the Facebook fan page of the University of Koblenz

We, the University of Koblenz, take the protection of personal data and its confidential treatment very seriously. When you visit our Facebook fan page, your personal data is processed. It does not matter whether you are logged in or not when you visit the fan page. Therefore, we hereby inform you how we process your personal data and what rights you have.

The University of Koblenz and Facebook Ireland Limited are partly joint controllers for data processing related to the Facebook fan page. For this purpose, a joint controller agreement has been concluded between the University of Koblenz and Facebook, which you can find here.

Facebook is a service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: Facebook). You can find more information about data processing by Facebook Ireland Limited as the provider of Facebook here.

1. Controller

University of Koblenz
Universitätsstraße 1
D-56070 Koblenz
Germany

Phone: +49 261 287-0
Fax: +49 261 287-1600
E-Mail: service@uni-koblenz.de

2. Data protection officer

If you have any questions or suggestions regarding data protection, please contact our data protection officer.

University of Koblenz - Data protection officer
Konstantin Wagner
Universitätsstraße 1
D-56070 Koblenz,
Germany

Phone: +49 261 287-2860
Contact via E-Mail: datenschutz(at)uni-koblenz.de

Facebook's data protection officer can be contacted here.

3. Data subject rights

As a data subject, you have the following rights under the GDPR:

Right of access: You have the right to receive information about the personal data pertaining to you that we process.

Right to rectification: You may demand that inaccurate personal data will be rectified. Furthermore, you may demand that incomplete data will be completed.

Right to erasure: In certain cases, you are entitled to demand the erasure of your personal data.

Right to restriction of processing: In certain cases, you are entitled to demand that we restrict the processing of your data.

Right to data portability: If you have made the data available to us based on a contract or consent, you are entitled to demand to receive the data which you provided to us in a structured, commonly used and machine-readable format or to have them transmitted by us to another controller.

Withdrawal of consent: If you have given us your consent as to the processing of your data, you may withdraw the consent at any time with effect for the future. This does not affect the legitimacy of the processing of your personal data before the withdrawal of the consent.

Right to object: You have the right to object at any time to the processing of your personal data on the basis of Art. 6(1)(e) or (f) GDPR for reasons arising from your particular situation. Your personal data will then no longer be processed unless we can provide compelling protected reasons for such processing that outweigh your interests, rights and freedoms, or the processing is necessary for the assertion of, exercise of, or defence against any legal claims.

Asserting your rights: To assert any of your abovementioned rights, please contact us by email at datenschutz@uni-koblenz.deor in writing at the above address. Please ensure that we are able to clearly identify you.

Right to complain to a supervisory authority: You have the right to complain to a data protection supervisory authority if you believe that the processing of your personal data is unlawful. The supervisory authority responsible for us is:

The Rhineland-Palatinate DPA (Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz)
Hintere Bleiche 34
55116 Mainz
Germany

E-Mail: poststelle@datenschutz.rlp.de

4. Details of the relevant processing purposes and functionalities

4.1 Interaction and use of functionalities of the service

We use our Facebook fan page to provide you with this content in order to fulfil our public-interest duties (public relations work of the University of Koblenz). The processing includes interacting and communicating with visitors, receiving and processing requests, complaints or other feedback.

The categories of personal data processed include profile name, profile picture, ‘like’ information, comment, follow information, period of commenting, most active times, content of message, date and time of message.

4.2 Statistical analysis using Facebook page insights

We use Facebook Insights to ensure that the content of our Facebook fan page is well-structured and continuously optimised. The provider supplies us with anonymised data in the form of statistics about visitors to and their interaction with our Facebook fan page (Page Insights).

Facebook provides more detailed information here about Page Insights and which categories of personal data are processed and how.

5. Legal basis for the processing of personal data

The use of our Facebook fan page and the related processing of personal data by the University of Koblenz is based on Article 6 (1) (e) of the General Data Protection Regulation (GDPR) in conjunction with Section 3 of the Rhineland-Palatinate Data Protection Act (LDSG) in conjunction with Section 2 (11) of the Rhineland-Palatinate Higher Education Act (HochSchG) and serves to perform necessary tasks in the public interest (public relations work of the University of Koblenz), as well as, in the case of page insights, to optimise our public relations work and to communicate with our visitors more effectively.

If you contact us voluntarily via our Facebook fan page, your data will be processed on the basis of your express consent in accordance with Article 6(1)(a) GDPR.

Facebook Ireland Limited's data protection information, in particular on data processing related to the Page Insights, can be viewed here. Page Insights processing is conducted in joint controllership with Facebook in accordance with Art. 26 GDPR and for this service we have therefore concluded a agreement with Facebook Ireland Limited, which you can find here. Among other things, the agreement stipulates that the provider is primarily responsible for data processing and that the University of Koblenz has no access to individual users' data.

6. Access to data and location of the data processing

Employees of our organisation have access to your personal data to the extent necessary to fulfil the above-mentioned purposes.

We use service providers to support us with data processing as part of data processing on our behalf. These service providers are subject to strict contractual agreements, including confidentiality agreements.

By law, we are obliged in some cases to transfer personal data to authorities (e.g. requests for information from investigating authorities).

We process your personal data only in Germany and in the European Union. Regarding the third-country transfer of Facebook, we refer to their privacy statement.

Facebook states that they share infrastructure, systems and technologies with other Meta entities. These meta entities may include the parent company Meta Platforms, Inc. based at 1 Meta Way, Menlo Park, California 94025, USA. In addition, Facebook shares information worldwide, both internally between meta entities and externally with partners and third parties with whom they connect through meta services and with whom they share information. For details, please refer to the Facebook Privacy Policy.

For this purpose, personal data may also be transferred to the United States or other third countries. According to Facebook, these data transfers are necessary to provide the services described in the Facebook terms of use and to operate worldwide. Facebook transfers European data on the basis of standard contractual clauses, but reserves the right to use other transfer mechanisms recognised by the General Data Protection Regulation (e.g. adequacy decisions).

7. Duration of processing and storage of personal data

We store your personal data only as long as it is necessary to fulfil the above-mentioned purposes and there are no obligations to store it.

In the event of an objection or the withdrawal of consent, we will delete your personal data, unless further processing is permitted by the relevant legal provisions. In addition, illegal content may be deleted. Regarding deletion by Facebook, we refer to their privacy statement.