Thank you for your interest in the social media presence of BRITA SE, Heinz-Hankammer-Straße 1, 65232 Taunusstein, Germany (“BRITA SE”, “we” or “us”). Fundamentally, the operators of the social media platforms for the processing of your personal data are responsible parties within the meaning of Art. 4 No. 7 GDPR. You will find further information with regard to this in the privacy policies of the operators. We have provided links to these operators below. In addition, BRITA SE is the responsible party for individual operations and processes in connection with the social media presence of BRITA SE.

1.0 Processing in relation to the BRITA SE social media presence

1.1 Facebook

1.2 Instagram

1.3 LinkedIn

1.4 Xing

1.5 YouTube

1.6 TikTok

1.7 Pinterest

2.0 Transfer of information to third parties

3.0 Your rights as a user

4.0 Data deletion and duration of storage

5.0 Data security

6.0 Right to lodge a complaint with a supervisory authority

7.0 Contact details of the data protection officer

8.0 Right of modification

We operate an information channel about our product offering on Instagram that enables interaction with parties interested in our company and facilitates carrying out further campaigns in relation to Brita SE.

Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland („Meta“) processes your personal data when you visit our channel, e.g. for the provision of further services or advertising, in accordance with the Instagram privacy policy, which you can view here.

1.2.1    

In connection with the operation of the Instagram channel, we also use Instagram Insights to improve our offering. This service records your activity on our website and pro-vides us with statistics in anonymised form. Thanks to this we gain insights into the activity of our fan page visitors, the hits on our page, the reach of the input, hits and average duration of visuals and/or video playbacks, information telling us the countries and cities that our visitors come from and statistics on the gender balance of our visitors. Tracing to in-dividual users and access to individual user profiles by the administrator is not possible. Processing is carried out regardless of whether you are logged into Instagram or you are a member of the Instagram network.

Processing is carried out under the joint responsibility of Meta and ourselves. The basis for this is an agreement between the joint controllers pursuant to Art. 26 GDPR, which you can view here. The legal basis is our justified interest in improving our product offering, in providing information and contact details for interested parties and in being able to trace our social media presence, Art. 6 (1) f) GDPR. In particular, this makes it possible for us to record the reach and effectiveness of our campaigns, postings and other activities through the statistics provided.

With regard to this, we have agreed with Meta that for the processing in relation to Insta-gram Insights Meta shall be the primary responsible party. Further information on the data processing by Meta for Insights and exercising the rights of the persons affected can be found here.

1.2.2  

We use the function “Lead Ads” from Meta to record and process specific personal data of interested users – so-called Leads – via a contact form provided by Instagram. The content and scope of the data requested in this form depends on the focus of the relevant Lead campaign. The processing of the data is strictly associated with the aims of the rele-vant Lead campaign. These aims are clearly stated on the form for the user within the framework of the Lead Ad or the contact form presented before the requested data is transferred.

Depending on the type of Lead Ad campaign, the legal basis for the data processing is either your express consent pursuant to Art. 6 (1) a) GDPR (for direct advertising actions such as registration for the newsletter via email) or our justified interest in the optimal mar-keting of our offer pursuant to Art. 6 (1) f) GDPR. Transfer of data to third parties for other purposes does not take place.

Further information on the data processing of Lead Ads can be found in the Meta privacy policy, which you can access here.

1.2.3

In addition, we may share your contents on our channel and communicate with you, e.g. via a direct message. In this we process your user name and the contents of your com-munication. The legal basis for the processing is our justified interest pursuant to Art. 6 (1) f) GDPR, to interact with you and to answer your communication. If the intention of your enquiry is to initiate or process a contract (including customer service and warranties), the additional legal basis for processing is Art. 6 (1) b) GDPR.

1.2.4

From time to time you have the opportunity to participate in competitions on our channel. To run a competition we process your data (user name, (poss. plain-text name), email ad-dress, address and any further data necessary for the competition). We process your da-ta to examine eligibility, to determine and notify the winner, to send the prize and, if applica-ble, to publicise the winner (user name). The legal basis for the data processing described is Art. 6 (1) b) GDPR, and for the publication of the user name of the winner the consent of the user is obtained pursuant to Art. 6 (1) a) GDPR. The relevant eligibility conditions apply for competitions. Your submissions will be deleted after the end of the competition, unless they are required to notify the winners.

We operate a web page on LinkedIn to provide information on our projects, on job opportunities and other campaigns. In addition, we use the channel to actively recruit candidates for the company.

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”) processes your personal data when you visit our website to provide further services or advertising according to the LinkedIn privacy policy, which you can access here.

1.3.1

In addition, we use the LinkedIn page Insights, in order to improve the standard of our offering. This service records your activity on our channel and provides us with statistics in anonymised form. Thanks to this we gain insights into the activity of our web page visitors, the hits on our page, the reach of the input, hits and average duration of video play-backs, information telling us the countries and cities that our visitors come from, profes-sional information and statistics on the gender balance of our visitors. Tracing to individu-al users and access to individual user profiles by the administrator is not possible. Pro-cessing is carried out regardless of whether you are logged into LinkedIn or you are a member of the LinkedIn network.

Processing is carried out under the joint responsibility of LinkedIn and ourselves. The basis for this is an agreement between the joint controllers pursuant to Art. 26 GDPR, which you can view here. The legal basis is our justified interest in improving our product offering, in providing information and contact details for potential employees and professionally interested parties and in being able to trace our social media presence, Art. 6 (1) f) GDPR. In particular, this makes it possible for us to record the reach and effectiveness of our campaigns, postings and other activities through the statistics provided.

With regard to this, we have agreed with LinkedIn that for the processing in relation to the LinkedIn page, LinkedIn shall be the primary responsible party. Further information on the data processing by LinkedIn for Page Insights and exercising the rights of the persons affected can be found here.

1.3.2

We use the function “Lead Gen” from LinkedIn to record and process specific personal data of interested users – so-called Leads – via a contact form provided by the LinkedIn websites. The content and scope of the data requested in this form depends on the focus of the relevant Lead campaign. The processing of the data is strictly associated with the aims of the relevant Lead Gen campaign. These aims are clearly stated within the frame-work of the Lead Gen or on the contact form presented before the requested data is transferred. 

Depending on the type of Lead Gen campaign, the legal basis for the data processing is either your express consent pursuant to Art. 6 (1) a) GDPR (for direct advertising actions such as registration for the newsletter via email) or our justified interest in the optimal mar-keting of our offer pursuant to Art. 6 (1) f) GDPR. Transfer of data to third parties for other purposes does not take place.

Further information on the data processing of Lead Gen can be found in the LinkedIn privacy policy, which you can access here.

1.3.3 

In individual cases we share your contents on our page and communicate with you, par-ticularly via the direct messaging function. In this we process your user name and the contents of your communication. The legal basis for the processing is our justified interest pursuant to Art. 6 (1) f) GDPR, to interact with you and to answer your communication. If the intention of your enquiry is to initiate or process a contract (including customer service and warranties), the additional legal basis for processing is Art. 6 (1) b) GDPR. If you message regards the initiation, execution or processing of an employment relationship, the additional legal basis for processing is Art 88 (1) GDPR in conjunction with  § 26 (1) BDSG (German Data Protection Law).

1.3.4

From time to time you have the opportunity to participate in competitions on our page. To run a competition we process your data (name, email address, address and any further data necessary for the competition). We process your data to examine eligibility, determine and notify the winner, to send the prize and, if applicable, publicise the winner. The legal basis for the data processing described is Art. 6 (1) b) GDPR, and for the publication of the user name of the winner the consent of the user is obtained pursuant to Art. 6 (1) a) GDPR. The relevant eligibility conditions apply for competitions. Your submissions will be deleted after the end of the competition, unless they are required to notify the winners.

We operate a web page on Xing to provide information on our projects, on job opportunities and other campaigns. In addition, we use the channel to actively recruit candidates for job vacancies in the company.

XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany (“Xing”) processes your personal data when you visit our website, e.g. to provide further services or advertising in accordance with the Xing privacy policy, which you can access here.

1.4.1

In addition, we use Xing Insights, in order to improve the standard of our offering. This service records your activity on our channel and provides us with statistics in anonymised form. Thanks to this we gain insights into the activity of our web page visitors, the hits on our page, the reach of the input, hits and average duration of video playbacks, information telling us the countries and cities that our visitors come from, professional information and statistics on the gender balance of our visitors. Tracing to individual users and access to individual user profiles by the administrator is not possible. Processing is carried out re-gardless of whether you are logged into Xing or you are a member of the Xing network.

The legal basis is our justified interest in improving our product offering, in providing infor-mation and contact details for potential employees and professionally interested parties and in being able to trace our social media presence, Art. 6 (1) f) GDPR. In particular, this makes it possible for us to record the reach and effectiveness of our campaigns, postings and other activities through the statistics provided. 

1.4.2 

We use the function “Lead Ads” from Xing to record and process specific personal data of interested users – so-called Leads – via a contact form provided by the Xing websites. The content and scope of the data requested in this form depends on the focus of the rel-evant Lead campaign. The processing of the data is strictly associated with the aims of the relevant Lead Ads campaign. These aims are clearly stated on the form for the user within the framework of the Lead Ads or the contact form presented before the requested data is transferred.

Depending on the type of Lead Ads campaign, the legal basis for the data processing is either your express consent pursuant to Art. 6 (1) a) GDPR (for direct advertising actions such as registration for the newsletter via email) or our justified interest in the optimal mar-keting of our offer pursuant to Art. 6 (1) f) GDPR. Transfer of data to third parties for other purposes does not take place.

Further information on the data processing of Lead Ads can be found in the Xing privacy policy, which you can access here.

1.4.3

In individual cases we share your contents on our page and communicate with you, particularly via the direct messaging function. In this we process your user name and the contents of your communication. The legal basis for the processing is our justified interest pursuant to Art. 6 (1) f) GDPR, to interact with you and to answer your communication. If the intention of your enquiry is to initiate or process a contract (including customer service and warranties), the additional legal basis for processing is Art. 6 (1) b) GDPR. If you message regards the initiation, execution or processing of an employment relationship, the additional legal basis for processing is Art 88 (1) GDPR in conjunction with  § 26 (1) BDSG (German Data Protection Law).

1.4.4

From time to time you have the opportunity to participate in competitions on our page. To run a competition we process your data (name, email address, address and any further data necessary for the competition). We process your data to examine eligibility, determine and notify the winner, to send the prize and, if applicable, publicise the winner. The legal basis for the data processing described is Art. 6 (1) b) GDPR, and for the publication of the user name of the winner the consent of the user is obtained pursuant to Art. 6 (1) a) GDPR. The relevant eligibility conditions apply for competitions. Your submissions will be deleted after the end of the competition, unless they are required to notify the winners.

We operate a channel on YouTube that provides information on our projects and on us as an employer, as well as on other campaigns in connection with Brita SE.

If you visit YouTube, Google LLC (“Google”), Amphitheatre Parkway, Mountain View, CA 94043 USA, in its capacity as the operator of YouTube, saves and processes your personal data in accordance with Google’s privacy policy. You can access Google’s privacy policy here.

In connection with our YouTube channel we use YouTube Analytics in order to improve the quality of our offering. This service records your activity on our channel and provides us with statistics in anonymised form. Thanks to this we gain insights into the activity of our website visitors, the reach of the input, the average duration of the video playbacks, information telling us the countries and cities that our visitors come from and statistics on the gender balance of our visitors.   Tracing to individual users and access to individual user profiles by the administrator is not possible. Processing is carried out regardless of whether you are logged into YouTube or you are a member of YouTube.

Processing is carried out under the joint responsibility of YouTube and ourselves (Art. 26 GDPR). The legal basis is our justified interest in improving our product offering, in providing you with an information medium and in being able to trace our social media presence, Art. 6 (1) f) GDPR.

In individual cases we will communicate with you (e.g. via the direct messaging function). In doing this, we process your user name and the contents of your communication. The legal basis for the processing is our justified interest pursuant to Art. 6 (1) f) GDPR, to interact with you and to answer your communication.

From time to time you have the opportunity to participate in competitions on our channel. To run a competition we process your data (name, email address, address and any further data necessary for the competition). We process your data to examine eligibility, determine and notify the winner, to send the prize and, if applicable, publicise the winner. The legal basis for the data processing described is Art. 6 (1) b) GDPR, and for the publication of the user name of the winner the consent of the user is obtained pursuant to Art. 6 (1) a) GDPR. The relevant eligibility conditions apply for competitions. Your submissions will be deleted after the end of the competition, unless they are required to notify the winners.

We operate an information channel on TikTok that provides information on our products and for interaction with parties who are interested in our products.

If you visit TikTok, TikTok Technology Limited, an Irish company (“TikTok Ireland”), 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited (“TikTok UK”), Kaleidoscope, 4 Lindsey Street, London, United Kingdom, EC1A (together “TikTok”) they will save and process your personal data as the operator of TikTok in compliance with the privacy policy of TikTok. You can access their privacy policy here.

In addition, we use TikTok Analytics, in order to improve the quality of our offering. This service records your activity on our channel and provides us with statistics in anonymised form. Thanks to this we gain insights into the visits to our website, the reach of the input, the duration of the video playbacks, information telling us the countries and cities that our visitors come from and statistics on the gender balance of our visitors.   Tracing to individual users and access to individual user profiles by the administrator is not possible. Processing is carried out regardless of whether you are logged into TikTok or you are a member of TikTok.

The legal basis is our justified interest in improving our product offering and in being able to trace our social media presence, Art. 6 (1) f) GDPR.

In individual cases we will communicate with you (e.g. via the direct messaging function). In doing this, we process your user name and the contents of your communication. The legal basis for the processing is our justified interest pursuant to Art. 6 (1) f) GDPR, to interact with you and to answer your communication.

From time to time you have the opportunity to participate in competitions on our channel. To run a competition we process your data (name, email address, address and any further data necessary for the competition). We process your data to examine eligibility, to determine and notify the winner, to send the prize and, if applicable, to publicise the winner (user name). The legal basis for the data processing described is Art. 6 (1) b) GDPR, and for the publication of the user name of the winner the consent of the user is obtained pursuant to Art. 6 (1) a) GDPR. The relevant eligibility conditions apply for competitions. Your submissions will be deleted after the end of the competition, unless they are required to notify the winners.

We have a web page on Pinterest where we share information on our products and other details in connection with Brita SE.

If you visit Pinterest, Pinterest Ltd., Palmerston House 2nd. Floor, Fenian Stret, Dublin 2, Ireland (“Pinterest”) will store and process your personal data as the operator of Pinterest in compliance with the privacy policy of Pinterest. You can access their privacy policy here.

In addition, we use Pinterest Insights, in order to improve the quality of our offering. This service records your activity on our channel and provides us with statistics in anonymised form. Thanks to this we gain insights into the visits to our web page, the reach of the input, information telling us the countries and cities that our visitors come from and statistics on the gender balance of our visitors.   Tracing to individual users and access to individual user profiles by the administrator is not possible. Processing is carried out regardless of whether you are logged into Pinterest or you are a member of Pinterest.

The legal basis is our justified interest in improving our product offering and in being able to trace our social media presence, Art. 6 (1) f) GDPR.

Where necessary we may communicate with you (e.g. via direct message). In doing this, we process your user name and the contents of your communication. The legal basis for the processing is our justified interest pursuant to Art. 6 (1) f) GDPR, to interact with you and to answer your communication.

From time to time you have the opportunity to participate in competitions on our web page. To run a competition we process your data (name, email address, address and any further data necessary for the competition). We process your data to examine eligibility, to determine and notify the winner, to send the prize and, if applicable, to publicise the winner (user name). The legal basis for the data processing described is Art. 6 (1) b) GDPR, and for the publication of the user name of the winner the consent of the user is obtained pursuant to Art. 6 (1) a) GDPR. The relevant eligibility conditions apply for competitions. Your submissions will be deleted after the end of the competition, unless they are required to notify the winners.

We sometimes use data processing companies, subject to compliance with the statutory requirements, i.e. based on a contract on our behalf, according to our instructions and under our control. These are primarily data processing companies for the maintenance of our Social Media presence.

Insofar as we transfer data to third parties in countries that are not part of the European Economic Area and that are not included in any adequacy decisions of the EU Commission (third countries), we shall either ensure that we implement sufficient guarantees for your personal data, or that one of the legal exemptions is in place. As guarantees pursuant to Art 46 (2) c) GDPR, we regularly implement EU standard contractual clauses adopted by the EU Commission with recipients in third countries that are not recognised as secure. However, in many countries there is the risk that your data may be requested by the national authorities for checking and monitoring purposes, without any clear regulation of the requirements or corresponding legal remedies being provided. Insofar as there are such risks that are viewed by the legislature of the European courts as being unreasonable (for example, in some constellations in the case of the USA), we shall endeavour, insofar as this is possible, to put in place additional protective measures and agreements.

You can obtain further information on this by sending an email to mail@kinast.eu.

We would like to point out that, in the case of the data processing by the operators of the social media platforms, your personal data can be processed outside the area of the European Union. This can entail risks for the users because exercising your rights could be made more difficult by this. Please refer to the privacy policies of the operators of the social media platforms for further details.

Within the framework of our agreements governing joint responsibilities, we have determined with the operators of the social media platforms that they are primarily responsible for the fulfillment of the rights of the individuals affected. Naturally, you also have the option of exercising your user rights with us. Irrespective of whether we are the sole or the joint party responsible, you have the following rights with regard to the processing of your personal data:

• If you have any questions on the processing of your personal data by us, we will be happy to provide you with information about the personal data stored about you at any time free of charge (Art. 15 GDPR).
• You have a right to the rectification of incorrect data and to have incomplete data completed (Art. 16 GDPR).
• You have a right to the blocking / restriction of processing or to the deletion of your personal data that is no longer required or that is stored based on legal obligations (Art. 17, 18 GDPR).
• You have a right to the portability of your data in a structured, commonly used and machine-readable format, if you have provided the data to us based on a consent or a contract between you and us (Art. 20 GDPR).
• You have a right to object to the processing of your data for direct marketing at any time (Art. 21 (2) and (3) GDPR).
• You have a right to object due to processing based on a legitimate interest; in this case, we may demonstrate our compelling legitimate grounds (Art. 21, (1) GDPR). We have mentioned above when your personal data is processed based on our justified interests
• If you have given your consent to data processing, then you can withdraw this at any time with future effect, i.e. the lawfulness of the data processing remains unaffected up to the time of withdrawal. Once you have withdrawn your consent, you may not be able to use our services any longer.

Please address your concerns in writing to (key word: data protection) or via email to mail@kinast.eu. We reserve the right to verify your identity in order to prevent your personal data from being disclosed to unauthorised persons.

With regard to the processing for which we are solely responsible, under point 1 we have stated how long the data is stored with us and when it can be deleted or blocked Insofar as no specific storage duration is specified, your personal data is deleted or blocked as soon as the reason for the processing or the legal basis for storage no longer applies. You can find the storage duration for your personal data within the framework of joint responsibility in the privacy policy of the relevant operator of the social media platform.

Storage can be extended beyond the time stated in the case of a (threatened) legal dispute with you or any other legal proceedings, or if provision is made for storage in the statutory regulations that we are subject to as the responsible party (e.g. § 257 HGB [Handelsgesetzbuch (German Commercial Code)], § 147 AO [Abgabenordnung (Regulation of Taxation)]. Once the storage deadline has expired, deletion or blocking of the personal data is carried out unless we require further storage for which there is a legal basis.

We protect your personal data by means of technical and organisational safety measures, in order to minimise risks in connection with the loss, improper use, unauthorised access as well as unauthorised transfer and alteration of your data.  Together with the joint companies responsible for the processing we use firewalls and data encryption, for example, as well as physical access restrictions to our data centres and authorisation controls for data access. Of course, our employees and the service providers that we engage are committed to confidentiality.

According to art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. You can contact the data protection supervisory authority of the federal state where you are domiciled or the authority in Hessen, as the relevant federal state where BRITA SE has its headquarters.

Our data protection officer is at your disposal for information or suggestions concerning data protection:

Dr. Karsten Kinast

KINAST Rechtsanwaltsgesellschaft mbH

Hohenzollernring 54

D-50672 Cologne

Email: mail@kinast.eu

URL: www.kinast.eu