Privacy statement for the Instagram profile of the University of Koblenz

We, the University of Koblenz, take the protection of personal data and its confidential treatment very seriously. When you visit our Instagram profile, your personal data is processed. It does not matter whether you are logged in or not when you visit the page. Therefore, we hereby inform you how we process your personal data and what rights you have.

The following information relates to the processing of your data when you visit our Instagram profile, provided that this is done under our own responsibility.

Instagram is a service provided by Meta Platforms Ireland Limited (hereinafter: ‘Meta’). Whenever you visit this platform, Meta also processes data. You can find more information about data processing by the provider of Instagram here.

1. Controller

University of Koblenz
Universitätsstraße 1
D-56070 Koblenz
Germany

Phone: +49 261 287-0
Fax: +49 261 287-1600
E-Mail: service@uni-koblenz.de

2. Data protection officer

If you have any questions or suggestions regarding data protection, please contact our data protection officer.

University of Koblenz - Data protection officer
Konstantin Wagner
Universitätsstraße 1
D-56070 Koblenz,
Germany

Phone: +49 261 287-2860
Contact via E-Mail: datenschutz(at)uni-koblenz.de

Meta’s data protection officer can be contacted here.

3. Data subject rights

As a data subject, you have the following rights under the GDPR:

Right of access: You have the right to receive information about the personal data pertaining to you that we process.

Right to rectification: You may demand that inaccurate personal data will be rectified. Furthermore, you may demand that incomplete data will be completed.

Right to erasure: In certain cases, you are entitled to demand the erasure of your personal data.

Right to restriction of processing: In certain cases, you are entitled to demand that we restrict the processing of your data.

Right to data portability: If you have made the data available to us based on a contract or consent, you are entitled to demand to receive the data which you provided to us in a structured, commonly used and machine-readable format or to have them transmitted by us to another controller.

Withdrawal of consent: If you have given us your consent as to the processing of your data, you may withdraw the consent at any time with effect for the future. This does not affect the legitimacy of the processing of your personal data before the withdrawal of the consent.

Right to object: You have the right to object at any time to the processing of your personal data on the basis of Art. 6(1)(e) or (f) GDPR for reasons arising from your particular situation.
Your personal data will then no longer be processed unless we can provide compelling protected reasons for such processing that outweigh your interests, rights and freedoms, or the processing is necessary for the assertion of, exercise of, or defence against any legal claims.

Asserting your rights: To assert any of your abovementioned rights, please contact us by email at datenschutz@uni-koblenz.deor in writing at the above address. Please ensure that we are able to clearly identify you.

Right to complain to a supervisory authority: You have the right to complain to a data protection supervisory authority if you believe that the processing of your personal data is unlawful. The supervisory authority responsible for us is:

The Rhineland-Palatinate DPA (Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz)
Hintere Bleiche 34
55116 Mainz
Germany

E-Mail: poststelle@datenschutz.rlp.de

4. Details of the relevant processing purposes and functionalities

4.1 Interaction and use of functionalities of the service

We use our Instagram profile to provide you with content related to our public-interest duties (public relations work of the University of Koblenz). The processing includes interacting and communicating with visitors, receiving and processing requests, complaints or other feedback.

The categories of personal data processed include profile name, profile picture, ‘like’ information, sharing the post, ‘follower’ request and status, comment, period of commenting, content of message, date and time of message.

4.2 Statistical analysis using Instagram page insights

We use Instagram Insights to ensure that the content of our Instagram profile is well-structured and continuously optimised. The statistics we receive from the provider are anonymised data about visitors and their interaction on our Instagram profile (page insights).

Meta provides more detailed information here about Page Insights and which categories of personal data are processed and how.

The use of our Instagram profile and the related processing of personal data by the University of Koblenz is based on Article 6 (1) (e) of the General Data Protection Regulation (GDPR) in conjunction with Section 3 of the Rhineland-Palatinate Data Protection Act (LDSG) in conjunction with Section 2 (11) of the Rhineland-Palatinate Higher Education Act (HochSchG) and serves to perform necessary tasks in the public interest (public relations work of the University of Koblenz), as well as, in the case of page insights, to optimise our public relations work and to communicate with our visitors more effectively.

If you contact us voluntarily via our Instagram profile, your data will be processed on the basis of your express consent in accordance with Article 6(1)(a) GDPR.

More information on the purposes and legal basis of processing by Instagram can be found here. For the page insights, we have concluded a agreement with Meta Platforms Ireland Limited, which you can find here. Among other things, the agreement stipulates that the provider is primarily responsible for data processing and that the University of Koblenz has no access to individual data of users.

6. Access to data and location of the data processing

Employees of our organisation have access to your personal data to the extent necessary to fulfil the above-mentioned purposes.

We use service providers to support us with data processing as part of data processing on our behalf. These service providers are subject to strict contractual agreements, including confidentiality agreements.

By law, we are obliged in some cases to transfer personal data to authorities (e.g. requests for information from investigating authorities).

Meta processes data as provider of Instagram as described here. Meta states that it shares infrastructure, systems and technologies with other Meta entities. These Meta entities may include the parent company Meta Platforms, Inc. located at 1 Meta Way, Menlo Park, California 94025, USA. In addition, Meta shares information worldwide, both internally between Meta entities and externally with partners and third parties with whom they connect through Meta services and with whom they share information. For details, see the Instagram privacy policy.

For this purpose, personal data may also be transferred to the United States or other third countries. According to Meta, these data transfers are necessary to provide the services described in the Instagram terms of use and to operate worldwide. Meta transfers European data on the basis of standard contractual clauses, but reserves the right to use other transfer mechanisms recognised by the General Data Protection Regulation (e.g. adequacy decisions).

7. Duration of processing and storage of personal data

We store your personal data only as long as it is necessary to fulfil the above-mentioned purposes and there are no obligations to store it.

In the event of an objection or the withdrawal of consent, we will delete your personal data, unless further processing is permitted by the relevant legal provisions. In addition, illegal content may be deleted. Regarding deletion by Meta, we refer to their privacy statement.