Profiles on Social Networks

We maintain publicly accessible profiles on various social networks. We use the technical platform and services of the providers for these information services. We operate profiles with the following providers:

LinkedIn

• Profile: https://www.linkedin.com/company/wmf-professional-coffee-machines/

• Registered office: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

• Data protection information: https://www.linkedin.com/legal/privacy-policy

Instagram

• Profile: https://www.instagram.com/wmfprofessionalcoffeemachines/

• Registered office: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Meta Platforms, Inc, 1601 Willow Road, Menlo Park, CA 94025, USA

• Data protection information: https://privacycenter.instagram.com/policy/

YouTube

• Profile: https://www.youtube.com/@WMFProfessionalCoffeeMachines

• Registered office: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

• Data protection information: https://policies.google.com/privacy

Your visit to these profiles triggers a variety of data processing operations. Below we provide you with an overview of which of your personal data is collected, used and stored by us and by the platform operators when you visit our profiles.

A) Purpose and scope of processing

When you visit our profiles, your personal data is collected, used and stored not only by us, but also by the operators of the respective social network. This happens even if you yourself do not have a profile on the respective social network.

The individual data processing operations and their scope differ depending on the operator of the respective social network and they are not necessarily traceable for us. We have no influence on this data processing. For details on the collection and storage of your personal data as well as the type, scope and purpose of its use by the operator of the respective social network, please refer to the data protection declarations of the respective operator. There you will also find information about contact options and the settings options for advertisements.

• Facebook / Instagram (Meta): https://www.facebook.com/privacy/policy

• LinkedIn: https://www.linkedin.com/legal/privacy-policy

• YouTube (Google): https://policies.google.com/privacy

We would like to point out that you use our presence on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).

When you visit our websites, the providers of the social media platforms process, among other things, your IP address and other data that is stored on your device in the form of cookies. This information is used to provide us, as the operator of the profile, with statistical information about the interaction with us.

When you access a post or the profile, the IP address assigned to your device is transmitted to the provider of the social media platform. Data processing may differ depending on whether you are registered and logged in to the social network or whether you visit the site as a non-registered and/or non-logged-in user. If you are currently logged in as a user, a cookie on your end device can be used to track how you have moved around the network. Buttons integrated into websites enable the platforms to record your visits to these websites and assign them to your respective profile. This data can be used to tailor content or advertising to you. If you wish to avoid this, you should log out or deactivate the "stay logged in" function, delete the cookies on your device and restart your browser.

The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. According to their own statements, all of the aforementioned providers maintain an appropriate level of data protection that corresponds to that of the former EU-US Privacy Shield and we have concluded the Data Processing Agreement (DPA) with the companies.

We do not know how the social media platforms use the data from your visit to our profiles and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties.

B) Controller responsible for data processing

The controllers within the meaning of Art. 4 No. 7 GDPR are

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2, Ireland
Telephone: not published (only accessible via the help section)
E-mail: no direct support address; contact via: https://www.facebook.com/help/contact/

Applies to: Instagram

LinkedIn Ireland Unlimited Company
Wilton Park House
Wilton Place
Dublin 2, Ireland
Phone: +353 (0)1 661 44 88
E-mail: via online form https://www.linkedin.com/help/linkedin/ask/TSO-DPO

Applies to: LinkedIn

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4, Ireland
Phone: +353 1 543 1000
Fax: +353 1 686 5660
Contact form: https://support.google.com/policies/contact/general_privacy

Applies to: YouTube

C) Data protection officer

The contact details of the data protection officer are

• Meta: https://www.facebook.com/help/contact/540977946302970

• LinkedIn: Data Protection Officer can be reached via the form above TSO-DPO

• Google: Data Protection Officer accessible via https://support.google.com/policies/contact/general_privacy

A) Purpose of the processing

We process this data in order to communicate with you, respond to your inquiries, present our offers and optimize our presence and content in social networks.

If you use our profiles in social networks to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), the data you provide us with will be processed by us exclusively for the purpose of contacting you.

In addition, we only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by e-mail, we will store your data in accordance with the general principles of our data processing, which we describe in this privacy policy.

B) Scope of the processing

When you visit our profiles on social networks, we process the following personal data

• Publicly visible profile data (e.g. user name, profile picture, content that you share publicly),

• Communication content that you send directly to us (e.g. messages, comments, posts, ratings)

• Interaction data (e.g. likes, shares, subscriptions, clicks),

• statistical data that the respective platform makes available to us in anonymized form (e.g. reach measurement, demographics of our site visitors, interests).

C) Legal basis

The legal basis for data processing is Art. 6 para. 1 lit. a) GDPR (consent, e.g. for active interaction with our profiles) and Art. 6 para. 1 lit. f) GDPR (legitimate interest in a contemporary external presentation, communication with users and optimization of our social media presence). Insofar as communication via the platforms takes place for the initiation or execution of a contract, Art. 6 para. 1 lit. b) GDPR also applies.

D) Storage duration

We delete stored data as soon as its storage is no longer required for the respective purposes or you request us to delete it. Messages and interaction content are generally deleted after a maximum of 12 months at the latest, unless they are required for longer-term communication or contract processing. In the case of statutory retention obligations, we restrict processing accordingly.

E) Recipients of the data

We transfer your personal data to the extent permitted by Art. 6 para. 1 GDPR to

• internal departments within WMF GmbH (e.g. departments responsible for communication and customer service),

• the respective operators of the platforms (Meta Platforms Ireland Ltd / Meta Platforms, Inc., LinkedIn Ireland Unlimited Company, Google Ireland Limited / Google LLC) as part of their own data processing,

• possibly commissioned by us Service providers (processors)who support us in the management of social media channels, community management or the evaluation of statistics.

Any further disclosure will only take place if there is a legal obligation to do so or if you have given your prior consent.