The links to social media included on our website are not integrated via so-called plugins. The embedded graphics with the logo of the providers only contain an HTTP link to our pages at the respective provider. When visiting our website, no connection is established to the providers' servers and no personal data is transferred to the providers.
The following information on data protection applies when you visit our company pages on the social media platforms Facebook or Instagram.
In June 2018, the European Court of Justice ruled that Facebook and a Facebook page operator - in our case Sunny Cars GmbH - are jointly responsible for data processing under data protection law.
Accordingly, we must keep you fully informed about the data processing that takes place through and through the Facebook Page. In addition, we have concluded an agreement with Facebook Ireland Limited ("Facebook Ireland") pursuant to Article 26 GDPR with regard to the joint responsibility for the processing of Insights data (data used for statistical evaluation), which is unilaterally provided by Facebook to the page operators, including us. "(Page Insights Controller Addendum).
Facebook agrees to assume primary responsibility under the GDPR for the processing of Insights Data and to comply with all obligations under the GDPR with respect to the processing of Insights Data. Facebook takes over
- the primary responsibility
- exercising of the rights of the data subject
- the information to be provided
- the notification of personal data breach to the supervisory authority
- the security of data processing
More information about Facebook's privacy practices can be found in their Data Policy.
As mentioned for Facebook, a joined controllership analogously applies to our Instagram presence. This is technically provided by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA.
Instagram is part of the Facebook group and shares infrastructure, systems, technology and, where applicable, personal information (e.g., private information, IP numbers, …) with Facebook and other Facebook companies.
You can find more information on this in Instagram’s Data Policy.
Description and scope of data processing
In addition to our own website, we operate a company-specific Facebook and Instagram page on the facebook.com or Instagram.com platform for communication and interaction with our customers and interested parties.
In what way Facebook uses the data from visits to Facebook or Instagram pages for its own purposes, to what extent activities on the pages are assigned, evaluated and linked to individual users, the location and duration of data storage and is passed to third parties, is not conclusively and clearly stated by Facebook and is not known to us.
When you visit the pages, Facebook and Instagram collect, among other things, your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook Pages, with statistical information about the usage of the page. More information about the "Page Insights" function is available on Facebook at the following link: https://www.facebook.com/business/a/page/page-insights
Legal basis for data processing
Legal basis for the processing of data pseudonymous to us, which is processed during your visit to our Facebook or Instagram page, is Article 6(1)(f) GDPR.
Purpose of data processing
The purpose of data processing is communication and interaction with our customers and interested parties. Another purpose is to compile usage statistics to further develop and optimize the content of the page.
e.g. we can call the following information to our side contributions:
- number of persons reached
- clicks on contributions
- reactions, comments, and shared content
- video views and playback behaviour details
Comments or contributions that you post freely accessible on our Facebook or Instagram page will be processed to respond to your request. Your public profile and contribution will be stored so that we can contact you.
Duration of storage
According to Facebook, the IP address is anonymized (for "German" IP addresses) and deleted after 90 days.
How long Facebook and Instagram stores the data from visits to Facebook and Instagram pages for its own purposes, the extent on which existing deletion obligations are fulfilled, is not conclusively and clearly stated by Facebook and is not known to us.
Right to object and right to rectification
Facebook does not offer the possibility to remove Facebook Insights, neither by the operator, nor by the user of the page. Consequently, there is no possibility for the user to object at the present time.
You can of course completely prevent the collection and processing of data by Facebook/Instagram and Sunny Cars GmbH by not using our Facebook or Instagram page.