1. Information on the collection of personal data and contact details of the responsible person

1.1 In the following, we inform you about the handling of your personal data. In this context, personal data is any data by which you can be personally identified.
Please check carefully which personal data you share with us via Facebook. As long as you are logged into your Facebook account and visit our Facebook profile, Facebook can assign this to your Facebook profile. We expressly point out that Meta, as the operator of Facebook, stores the data of its users (e.g. personal information, IP address, etc.) and may also use this data for business purposes. For more information on Facebook's data processing, please refer to Facebook's privacy policy at https://www.facebook.com/privacy/policy/
We have no influence on the data collection and further processing by Facebook. Furthermore, it is not apparent to us to what extent, where and for how long the data is stored by Facebook, to what extent Facebook complies with existing deletion obligations, what evaluations and links are made with the data by Facebook and to whom the data is passed on by Facebook. If you would like to avoid Facebook processing personal data that you have transmitted to us, please contact us by other means. Our full contact details can be found in our imprint on Facebook.

1.2 The responsible party for data processing within the meaning of the General Data Protection Regulation (GDPR) is benuta GmbH, Hohe Str. 87, 53119 Bonn, Germany, Tel.: +49 (0) 228 - 96 96 89-5, Fax: +49 (0) 228 - 96 96 89-5, E-Mail: [email protected], insofar as we exclusively process the data transmitted to us by you via Facebook ourselves.
Insofar as the data you provide to us via Facebook is also or exclusively processed by Meta as the operator of Facebook (insights data), Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also the responsible party for data processing within the meaning of the General Data Protection Regulation (GDPR) in addition to us. In this respect, data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum.
Furthermore, for the use of certain Facebook products, such as the so-called "Facebook Business Tools", and for data processing carried out as a result, an additional agreement between us and Meta Platforms Ireland Ltd. as joint controller pursuant to Art. 26 GDPR applies, which can be viewed here: https://www.facebook.com/legal/controller_addendum
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2. Data protection officer

You can reach our data protection officer as follows: "Dr. Ralf W. Schadowski, [email protected]"
You can contact Meta's data protection officer as the operator of Facebook via the online contact form provided at https://www.facebook.com/help/contact/540977946302970

3. Data processing when contacting us

We ourselves collect personal data when you contact us via contact form or messenger, for example. You can see which data we collect when you contact us via the contact form from the relevant contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) point b GDPR. Your data will be deleted once we have completed processing your enquiry, provided there are no legal obligations to retain data. We assume that processing is complete when the circumstances indicate that the matter in question has been conclusively clarified.

4. Data processing for statistical and marketing purposes

Page Insights

Facebook provides us with so-called page insights for our Facebook page: https://www.facebook.com/business/a/page/page-insights. These are aggregated data that allow us to understand how people interact with our site. Page insights may be based on personal data collected in connection with a visit to or interaction with our site and its content. Pursuant to Art. 6 (1) point f GDPR, this serves to protect our legitimate interests in an optimised presentation of our offer and effective communication with customers and interested parties, which outweigh our interests in the context of a balancing of interests.
You can object to the processing of your data for the aforementioned purposes at any time by changing your settings for advertisements in your Facebook user account at https://www.facebook.com/settings?tab=ads accordingly.

5. Rights of the data subject

5.1 The applicable data protection law grants you the following comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data:

• Right to access pursuant to Art. 15 GDPR

• Right to rectification pursuant to Art. 16 GDPR

• Right to erasure pursuant to Art. 17 GDPR

• Right to restriction of processing pursuant to Art. 18 GDPR

• Right to be informed pursuant to Art. 19 GDPR

• Right to data portability pursuant to Art. 20 GDPR

• Right to withdraw a given consent pursuant to Art. 7 (3) GDPR

• Right to lodge a competent supervisory authority pursuant to Art. 77 GDPR

5.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

6. Duration of storage of personal data

The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and - if relevant – on the respective legal retention period (e.g. commercial and tax retention periods).
If personal data is processed on the basis of an express consent pursuant to Art. 6 (1) point a GDPR, this data is stored until the data subject revokes his consent.
If there are legal storage periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely deleted after expiry of the storage periods if it is no longer necessary for the fulfillment of the contract or the initiation of the contract and/or if we no longer have a justified interest in further storage.
When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection in accordance with Art. 21 (1) GDPR, unless we can provide compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the information contained in this declaration on specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.