Skip to content

Facebook & Instagram

Privacy Policy

Facebook Page and Instagram Profile 

Please do not provide any additional or unnecessary data on our social media pages on Facebook and Instagram. 

Our company processes your personal data jointly with Meta Platforms Ireland Ltd. in accordance with Article 26(1), first sentence, of the GDPR. This agreement defines the responsibility for data processing in specific operations related to the management of a Facebook page and an Instagram profile. This Privacy Policy informs you, in accordance with Articles 12 and 13 of the GDPR, about our processing of your personal data. Meta Platforms Ireland Ltd. is the controller for any further processing. 

1 Controlling Entities and Data Protection Officer 

1.1 (Joint) Controller within the meaning of the GDPR: 

Merz Verpackungsmaschinen GmbH
Carl-Benz-Ring 42
35423 Lich 

verwaltung@merz-system.de 

Managing Directors: 

Andreas Brazke, Schotten
Jörn Damaschke, Grünberg 

Joint Controller with us: 

Meta Platforms Ireland Ltd. 
4 Grand Canal Square, Grand Canal Habour 
Dublin 2, Irland 

1.2 Designated Data Protection Officer 

You can contact the Data Protection Officer as follows: 

bits + bytes it-solutions GmbH & Co. KG
Krombacher Straße 24
57223 Kreuztal 

datenschutz@bits-bytes.de 

You may contact our Data Protection Officer directly at any time with any questions or suggestions regarding data protection. 

1.3 You can contact the Data Protection Officer at Meta Platforms Ireland Ltd. as follows: 

https://www.facebook.com/help/contact/540977946302970

2 Processing under joint responsibility with 

Our Facebook page and our Instagram profile allow you to react to our posts, comment on them, and send us private messages. Please carefully review what personal data you share with us via Facebook or Instagram. If you wish to prevent Meta Platforms Ireland Ltd. from processing the personal data you have provided to us, please contact us through other means. 

We process the data you provide in this context—and to which we may have access—for the purpose of communicating with customers and prospective customers. We would like to offer you a platform where we can display up-to-date information and through which you can submit your inquiries to us so that we can address them as quickly as possible. 

For statistical analysis purposes, Meta Platforms Ireland Ltd. collects personal data through the Facebook Insights and Instagram Insights features. 

Personal data is collected from you via Insights when you perform the following actions: 

  • Viewing a Page, profile, post, video, Story, or other content associated with a Page 
  • Interacting with a Story 
  • Following or unfollowing a Page or profile 
  • Clicking “Like” or “Unlike” on a Page or post 
  • Recommending a Page in a post or comment 
  • Commenting on, sharing, or reacting to a Page post (including the type of reaction) 
  • Hiding or reporting a Page post as spam 
  • Hovering over a link to a Page or a Page’s name or profile picture to preview the Page’s content 
  • Clicking the website, phone number, “Get Directions” button, or any other button on a Page 
  • View a page’s event, react to an event (including the type of reaction), or click a link for event tickets 
  • Start a Messenger conversation with the page 
  • View or click on items in a page’s shop 

In this context, we receive anonymized data about users of our Facebook page and Instagram profile. This does not allow us to identify you personally. 

2.1 Legal Basis for Joint Responsibility with Meta Platforms Ireland Ltd. 

We process your data in accordance with Article 6(1), first sentence, f of the GDPR. The legitimate interest in data processing is the presentation of our company and our products and services for your information, and in particular the provision of modern communication channels for and with you. 

The joint processing of personal data for Insights data is based on Article 26(1), first sentence, of the GDPR. To safeguard your rights, it has been agreed with Meta Platforms Ireland Ltd. that you should direct any concerns regarding Insights processing directly to Meta Platforms Ireland Ltd. 

You can view the agreement provided by Meta Platforms Ireland Ltd. here: https://www.facebook.com/legal/controller_addendum 

If you have any questions, you may contact the data controller or the data protection officer designated by us. 

Meta Platforms Ireland Ltd. processes your personal data in accordance with Article 6(1), first sentence, point (a) (consent) and Article 6(1)(f) (legitimate interest). For more details, please visit: https://www.facebook.com/about/privacy/legal_bases 

2.2 Processing Carried Out by Meta Platforms Ireland Ltd. on Its Own Behalf 

Meta Platforms Ireland Ltd. collects your data independently of us for its own purposes. 

Meta Platforms Ireland Ltd. describes this processing in its own privacy policy. 

You can find the Meta Platforms Ireland Ltd. Privacy Policy at: www.facebook.com/about/privacy 

3 Cookies and Other Storage Technologies 

Facebook uses cookies on our Facebook page and our Instagram profile. These are the responsibility of Meta Platforms Ireland Ltd. 

For more information on Facebook’s use of cookies, please refer to Facebook’s Privacy Policy: https://www.facebook.com/policies/cookies/ 

4 Storage of Your Data by Meta Platforms Ireland Ltd. 

If the processing is carried out by Meta Platforms Ireland Ltd., you can always contact Meta Platforms Ireland Ltd. directly. This is particularly the case when processing is conducted as part of Page Insights. 

Facebook stores data until it is no longer needed to provide the services and Facebook products, or until your account is deleted, whichever occurs first. This is determined on a case-by-case basis and depends on factors such as the type of data, the purpose for which it is collected and processed, and the relevant legal or operational retention requirements. For example, if you search for something on Facebook or Instagram, you can access and delete that query at any time from your search history; however, the log of that search is not deleted until after 6 months. If you submit a copy of your government-issued ID for account verification, Facebook deletes that copy 30 days after verification, unless otherwise specified. 

4.1 Learn more about deleting content you’ve shared and cookie data you’ve received through social plugins. 

When you delete your account, Facebook deletes things you’ve posted, such as your photos and status updates. You will not be able to recover this information afterward. Information that others have shared about you is not part of your account and will not be deleted. If you do not want to delete your account but simply wish to temporarily stop using the products, you can deactivate your account instead. To delete your account at any time, please go to your Facebook settings or Instagram settings. 

You can contact Facebook using the following form: 

https://www.facebook.com/help/contact/259518714718624

5 Processing by Our Company on Its Own Behalf 

To communicate with you, we process the following personal data on our Facebook page and Instagram profile: 

Names, user names (if applicable), and content data (direct messages, comments) received from Meta Platforms Ireland Ltd. 

Von Ihnen erhalten wir personenbezogene Daten im Zusammenhang mit den Direktnachrichten, die Sie an uns richten. 

Please note that full encryption of the content of direct messages you send and receive via the Messenger platform is not currently guaranteed. We urge you not to send us any personal data through this channel. Please use alternative communication channels to provide us with personal data. 

When processing data via the Insights feature, we are able to process all of your public profile information—including interactions with our posts (likes, comments, shares)—in collaboration with Meta Platforms Ireland Ltd. 

If you are logged in with your Facebook or Instagram account, additional personal data about you will be processed, which we receive exclusively in anonymized form: 

  • Date and time of an action 
  • Country/city (estimated based on the IP address or, for logged-in users, from the user profile) 
  • Language code (from the browser’s HTTP header and/or language settings) 
  • Age/gender group (from the user profile, only for logged-in users) 
  • Previously visited website (from the browser’s HTTP header) 
  • Whether the action was performed on a computer or a mobile device (from the browser user agent or app attributes) 
  • Facebook/Instagram user ID 

Interactions with our posts or our page (Likes, Shares, Comments) are published by you on Facebook, which is why we receive this information indirectly from you. 

Anonymized Insights data and data from interactions do not constitute personal data within the meaning of the GDPR. 

5.1 Legal Basis for Processing Carried Out by Our Company on Its Own Behalf 

We process your data in accordance with Article 6(1), first sentence, f of the GDPR. The legitimate interest in data processing is the presentation of our company and our products and services for your information and, in particular, the provision of modern communication channels. 

5.2 Recipients of Your Data in Processing Carried Out Under Our Own Responsibility 

In the processing we carry out, the recipients of your personal data are the employees of our Public Relations department and social media managers, as well as the employees tasked with responding to your inquiry. 

Otherwise, we will only transfer your personal data to third parties if this is permitted by law or if you have given your consent. 

5.3 Retention Periods for Your Data 

We process and store your personal data only for the period necessary to achieve the purpose of storage or to the extent required by the legal provisions to which our company is subject. 

If the purpose of storage no longer applies or a prescribed retention period expires, the personal data will be routinely blocked or deleted in accordance with legal requirements. 

Alternatively, you may also contact us, and in such cases, we will forward your request—in accordance with our agreement with Facebook pursuant to Article 26 of the GDPR. 

6 Your Rights 

The point of contact for data subjects pursuant to Article 26(1), sentence 3 of the GDPR is the provider Facebook Ireland Ltd. The contact point is fully responsible for ensuring that the rights of data subjects under Articles 15–21 of the GDPR and Articles 33 and 34 of the GDPR are upheld. 

If a data subject contacts our company as the contact point to exercise their rights, we will immediately forward the request to the contact point, which will then process the request. 

We would like to inform you of the rights the GDPR grants you. Depending on the nature of the processing, certain rights may not be exercisable or may only be exercisable in part: 

Right of access to personal data concerning you (Article 15 of the GDPR) 

You have the right to obtain from us, free of charge, information at any time regarding the personal data we have stored about you, as well as a copy of that data. 

Rectification of inaccurate personal data (Article 16 of the GDPR) 

You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, the data subject has the right to request the completion of incomplete personal data, taking into account the purposes of the processing. 

Erasure of personal data (Article 17 of the GDPR) 

You have the right to request that we erase the personal data concerning you without undue delay, provided that one of the grounds provided for by law applies and provided that the processing is not necessary. 

Restriction of data processing (Article 18 of the GDPR) 

You have the right to request that we restrict processing if one of the legal requirements is met. 

Data Portability, so that your personal data is made available to you and transferred (Article 20 of the GDPR) 

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller to whom the personal data has been provided, without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. 

Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to have the personal data transmitted directly from one controller to another, provided this is technically feasible and does not infringe upon the rights and freedoms of others. 

Objection to Processing Based on Article 6(1), Sentence 1, (e) or (f) of the GDPR (Article 21 of the GDPR) 

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Article 6(1), first sentence, (e) (data processing in the public interest) or (f) (data processing based on a balancing of interests) of the GDPR. 

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. 

Withdrawal of Consent 

For any consent you have provided, you have the right to withdraw it for future processing. 

If you wish to file a complaint regarding the processing of your personal data, we ask that you first contact our Data Protection Officer. 

Of course, you can also send us an email at datenschutz@bits-bytes.de. 

You have the right to lodge a complaint with a supervisory authority responsible for data protection regarding our processing of pbData in accordance with Article 77(1) of the GDPR. 

We recommend that you submit your complaint to the supervisory authority responsible for us; this would be beneficial for your complaint process in several respects. Here are the contact details for the supervisory authority responsible for us: 

Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Tel. +49 (0) 611 1408 0, Email: poststelle@datenschutz.hessen.de 

https://datenschutz.hessen.de/service/beschwerde-uebermitteln

Addresses and links to all German and European data protection authorities: 

https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html