Data protection information for the meta platforms of the pilgrimage town of Kevelaer
The pilgrimage town of Kevelaer operates its Facebook page at www.facebook.com/Kevelaer-Rathaus and its Instagram page www.instagram.com/kevelaer.rathaus (hereinafter also referred to as fan pages). The aim is to provide information about municipal services and offers and to get in touch with you as a visitor to these fan pages. Further information about the pilgrimage town of Kevelaer can be found on the website www.kevelaer.de
Please pay attention to what information you share or publish via this medium and how you interact with the content (like, comment, share , etc.). Meta (formerly Facebook), the provider of Facebook and Instagram, grants itself the right to use the content and usage data collected for its own purposes.
As a visitor/user, you are responsible for your own use of Facebook and Instagram. All relevant information about municipal services and offers or job advertisements can also be found on the municipal website.
Below we provide you with information on data processing.
1. joint responsibility
In its judgment of June 5, 2018, the European Court of Justice(ECJ) ruled that the operator of a fan page is jointly responsible with Meta for the processing of personal data (judgment available here: http://curia.europa.eu/juris/document/document.jsf?text=&docid=202543&pageIndex=0&doclang=DE&mode=req&dir=&occ=first&part=1&cid=298398)
1.1 Name and address of those responsible
The joint controllers for the operation of these fan pages within the meaning of the EU General Data Protection Regulation and other data protection regulations are the:
Meta Platforms Ireland Ltd (hereinafter referred to as "Meta"); 4 Grand Canal Square; Grand Canal Harbour; Dublin 2 Ireland and the pilgrimage town of Kevelaer; The Mayor Dr. Dominik Pichler; Peter-Plümpe-Platz 12; 47623 Kevelaer; Telephone: (0 28 32) 1 22-0; E-Mail: info@kevelaer.de.
You can contact the municipal data protection officer as follows:
Nina Neunheuser; Data Protection Officer; Peter-Plümpe-Platz 12; 47623 Kevelaer; telephone number: (0 28 32) 1 22-2 04; e-mail: nina.neunheuser@kevelaer.de.
You can contact Meta's Data Protection Officer using the online contact form provided by Meta at https://www.facebook.com/help/contact/540977946302970.
1.2 Agreement on joint responsibility
The pilgrimage town of Kevelaer has concluded an agreement with Meta Platforms Ireland Ltd. on joint responsibility for data processing in accordance with Article 26 GDPR, the Page Insights Controller Addendum (available here: https://www.facebook.com/legal/terms/page_controller_addendum).
The agreement stipulates that Meta assumes primary responsibility for the fulfillment of data protection obligations with regard to "Insights data".
Explicitly, this means that Meta assumes the following duties:
- Compliance with information obligations
- Safeguarding the rights of data subjects
- Implementation of data security measures
- Reporting of data breaches.
The pilgrimage town of Kevelaer as the fan page operator assumes the following obligations:
- Determination of the legal basis for the use of Insights data
- Requests from visitors or data protection authorities are forwarded to Meta.
The agreement is subject to Irish law and jurisdiction in Ireland. In addition, the Irish Data Protection Authority has been designated as the supervisory authority.
2. processing of personal data
2.1 Statistical data/insights
The so-called "Insights" of the Meta fan pages provide access to statistical data of various categories for the pilgrimage town of Kevelaer as the operator of the pages. These statistics are generated and provided by Meta. The pilgrimage town of Kevelaer has no influence on the generation and presentation of these statistics. This function cannot be switched off by the city and the generation and processing of the data cannot be prevented. For a selectable period of time and for the categories fans, subscribers, persons reached and interacting persons, the following data is provided to the pilgrimage city of Kevelaer by Meta in relation to our Meta pages: Total number of page views, "Like" information, page activity, post interactions, reach, video views, post reach, comments, shared content, responses, proportion of men and women, origin based on country and city, language, views and clicks in the store, clicks on route planners, clicks on telephone numbers.
Meta uses cookies, i.e. small text files that are stored on the user's various end devices, to store and further process this information. If the user has a Facebook or Instagram profile and is logged in to it, the storage and analysis also takes place across devices.
Meta's privacy policy contains further information on data processing: https://www.facebook.com/about/privacy/
Data on the Facebook groups linked to the city's Facebook page is also provided in this way. Due to the constant development of Facebook and Instagram, the availability and processing of the data changes, so please refer to Meta's privacy policy for further details .
Objection options(so-called opt-out) can be set under the following links: https://www.facebook.com/settings?tab=ads and here http://www.youronlinechoices.com.
The transmission and further processing of users' personal data to third countries, such as the USA in the course of transmission to the US parent company (Meta Platforms, Inc.), as well as the associated possible risks for users cannot be excluded by the pilgrimage town of Kevelaer as the operator of the site.
2.2 Data collection outside of meta platforms
When a Meta page is accessed, the IP address assigned to the end device is transmitted to Meta. According to Meta, this IP address is anonymized (for "German" IP addresses) and deleted after 90 days. Meta also stores information about the end devices of its users(e.g. as part of the "login notification" function); Meta may thus be able to assign IP addresses to individual users.
If you are currently logged in to a Meta platform as a user, a cookie with your Facebook or Instagram ID is stored on your device. This enables Meta to track that you have visited this page and how you have used it. This also applies to all other Meta platforms. Facebook/Instagram buttons integrated into websites enable Meta to record your visits to these websites and assign them to your Facebook or Instagram profile. This data can be used to offer content or advertising tailored to you.
If you want to avoid this, you should log out of Facebook/Instagram or deactivate the "stay logged in" function, delete the cookies on your device and close and restart your browser. This will delete meta-information that can be used to identify you directly. This allows you to use the municipal fan pages without revealing your Facebook/Instagram ID. If you access interactive functions on the page (like, comment, share, message , etc.), a Facebook/Instagram login screen will appear. After logging in, you will once again be recognizable to Facebook/Instagram as a specific user.
It is also possible to adjust the settings for advertising measures in the account itself. If you have linked your Facebook and Instagram accounts, the settings for advertising preferences apply across all accounts. Find out more at https://www.facebook.com/settings?tab=ads (you must be logged into your Facebook account to do this). You can find out more about the advertisements on the following page: https://www.facebook.com/ads/about/?entry_product=ad_preferences
3. purpose and legal basis of data processing
3.1 Insights data
The pilgrimage town of Kevelaer, as the fan page operator, uses the anonymized Insights data described above in aggregated form for the purpose of statistical evaluation based on communicative interests. This means that the pilgrimage city of Kevelaer uses the Insights data to make the posts and activities on the city's meta-platforms more attractive to users. For example, users' preferred visiting times are used to optimize the scheduling of posts. Information about the type of devices used by visitors helps to adapt the visual design of posts accordingly. In accordance with the meta terms of use, which each user has agreed to when creating a Facebook or Instagram profile, subscribers and fans of the page can be identified and their profiles and other shared information can be viewed by them. In addition to general information, the pilgrimage town of Kevelaer offers the users of the fan pages the opportunity to interact with the content and thus also with the responsible persons of the city administration and therefore bases its data processing on Article 6, paragraph 1, lit. f) GDPR (processing based on legitimate interests).
3.2 Data processing when making contact
You have the option of contacting the city administration via Facebook and Instagram. The data you provide will be processed in order to process any request you make or to be able to respond to it. For this purpose, we may store your data in the city's IT environment. The legal basis for processing the data is the legitimate interest in processing your request (Article 6(1)(f) GDPR). If the request is not directed to the above-mentioned responsible body, but to another administration or to another responsible person within the city administration of Kevelaer, it will be forwarded accordingly within the administration (see Art. 6 para. 1 lit. f GDPR (legitimate interest in answering the request and the associated forwarding for internal administrative purposes in accordance with Rec. 48 GDPR).
You voluntarily provide your data to the pilgrimage town of Kevelaer in the course of an inquiry. If it is necessary to answer your request, further data may have to be collected from you.
4. rights of the users
In accordance with Article 15 GDPR, you have the right to obtain information about the personal data stored about you. If incorrect personal data has been processed, you have the right to rectification in accordance with Article 16 GDPR.
If the legal requirements are met, you can request the erasure or restriction of processing and object to data processing (Articles 17, 18 and 21 GDPR). In accordance with Article 20 GDPR, you can assert the right to data portability for data that is processed automatically on the basis of your consent or a contract with you.
If you are of the opinion that data processing violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice (Article 77 GDPR in conjunction with Section 19 BDSG). This also includes the supervisory authority responsible for the pilgrimage town of Kevelaer, which you can reach using the following contact details
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Telephone: (02 11) 3 84 24-0;
Fax: (02 11) 3 84 24-10
E-mail: poststelle@ldi.nrw.de
Since only Meta has full access to the User Data, it is recommended that you contact Meta directly if you wish to make requests for information or ask other questions about your rights as a user(e.g. right to deletion). If you no longer wish the data processing described here to take place in the future, please remove the link between your user profile and our site by using the "I no longer like this page" and/or "No longer subscribe to this page" functions.
5. information about your right to object in accordance with Article 21 GDPR:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests). If you lodge an objection, your personal data will no longer be processed by the city administration unless compelling legitimate grounds for the processing can be demonstrated which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
If you have any further questions, please contact our press office:
Pilgrimage town of Kevelaer
Lena Brey
Press and public relations
Peter-Plümpe-Platz 12
47623 Kevelaer
Phone: (02832) 122-220
E-mail: lena.brey@kevelaer.de