Skip to main content

Data protection
EU-DSGVO

Privacy policy

Data protection

Status March 2023

Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

Weitmann & Konrad GmbH & Co. KG

Friedrich-List-Str. 20 - 24

70771 Leinfelden-Echterdingen

Germany

+49 (0) 711 7988 0

info@weko.net

www.weko.net

Contact details of the data protection officer

The data protection officer of the person responsible is:

DataCo GmbH

Dachauer Strasse 65

80335 Munich

Germany

+49 89 7400 45840

www.dataguard.de

General information on data processing

1. Scope of processing of personal data

In principle, we only process the personal data of our users to the extent that this is necessary to provide a functional website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in such cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is required by statutory provisions.

2. Legal basis for processing personal data

Insofar as we obtain the consent of the person concerned for the processing of personal data, Article 6 (1) sentence 1 lit. a GDPR serves as the legal basis.

Article 6 (1) sentence 1 lit. b GDPR serves as the legal basis for the processing of personal data required to fulfill a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 Paragraph 1 Sentence 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph 1 Sentence 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first interest, Article 6 Paragraph 1 Sentence 1 lit. f GDPR serves as the legal basis for the processing.

3. Data Erasure and Storage Duration

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

rights of the data subject

If personal data is processed by you, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

1. The right to information (Article 15 GDPR)

You have the right to request confirmation from us as to whether personal data relating to you is being processed.

If this is the case, you have a right to information about this data and the following information:

processing purposes

Categories of Personal Data

Recipients or categories of recipients

Planned storage period or the criteria for determining this period

the existence of the rights to rectification, erasure or restriction or objection

Right of appeal to the competent supervisory authority

If applicable, origin of the data (if collected from a third party)

If applicable, the existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the expected effects

Possibly. Transfer of personal data to a third country or international organization

2. Right to rectification (Article 16 GDPR)

If your personal data is incorrect or incomplete, you have the right to request an immediate correction or addition of the personal data.

3. Right to restriction of processing (Article 18 GDPR)

If one of the following conditions is met, you have the right to demand that the processing of your personal data be restricted:

You contest the accuracy of your personal data for a period of time that enables us to verify the accuracy of the personal data.

In the context of unlawful processing, you reject the deletion of the personal data.

Instead, obtain the restriction of the use of the personal data.

We no longer need your personal data for the purposes of processing, but you need your personal data to assert, exercise or defend your legal claims or

after you have lodged an objection to the processing, for the duration of the examination as to whether our legitimate reasons outweigh your reasons.

4. Right to erasure (“right to be forgotten”) (Art. 17 GDPR)

If one of the following reasons applies, you have the right to demand the immediate deletion of your personal data:

Your data is no longer necessary for the processing purposes for which it was originally collected.

You revoke your consent and there is no other legal basis for processing.

You object to the processing and there are no overriding legitimate reasons for the processing or you object in accordance with Article 21 (2) GDPR.

Your personal data is being processed unlawfully.

Erasure is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.

The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

Please note that the above reasons do not apply if the processing is necessary:

To exercise the right to freedom of expression and information;

To fulfill a legal obligation or to perform a task that is in the public interest and to which we are subject.

For reasons of public interest in the field of public health.

For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes.

to assert, exercise or defend legal claims.

5. Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, common and machine-readable format or to request transmission to another person responsible.

6. Right to object to certain data processing (Article 21 GDPR)

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 (1) sentence 1 lit. e or f GDPR. This also applies to profiling based on these provisions.

If the personal data concerning you is processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

7. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. The supervisory authority to which the complaint was lodged will inform the complainant about the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR. A list of the supervisory authorities locally responsible in Germany can be found on the website of the Federal Commissioner for Data Protection under the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Provision of the website and creation of the log files

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected here:

Date and time of access

IP address

This data is stored in the log files of our system. This does not affect the IP addresses of the user or other data that enable the data to be assigned to a user. This data is not stored together with other personal data of the user.

2. Purpose of data processing

Storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Our legitimate interest in data processing in accordance with Article 6 (1) sentence 1 lit. f GDPR also lies in these purposes.

3. Legal basis for data processing

Legal basis for the temporary

The storage of the data is Art. 6 Para. 1 S. 1 lit. f GDPR.

4. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

5. Possibility of objection

The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined within the framework of a weighing of interests.

Use of cookies

1. Description and scope of data processing

When you visit our website, we use technical aids for various functions, in particular cookies, which can be stored on your end device. When you visit our website and at any time thereafter, you can choose whether you want to generally allow the setting of cookies or which individual additional functions you want to select. You can make changes in your browser settings or via our consent manager. Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using, so that certain information can flow to the place that sets the cookie. Below we describe what kind of cookies we use:

We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (fully correctly) or the support functions are not possible.

The following data is stored and transmitted by the technically necessary cookies:

language settings

Login Information

2. Purpose of data processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change.

We need the technically necessary cookies for the following applications:

Acceptance of language settings

functionality of the website

3. Legal basis for data processing

The provisions of the Telecommunications Telemedia Data Protection Act (TTDSG) apply to the storage of information in the end user’s terminal equipment and/or access to information already stored in the end user’s terminal equipment. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage of and access to cookies on your end device is based on § 25 Para. 2 No. 2 TTDDG. This storage of and access to the information on your end device serves to make it easier for you to use our website and to be able to offer you our services as you have requested them. Some functions of our website also do not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted after the end of the session (e.g. logging out or closing the browser) or after a specified period of time has expired. Information about deviating storage periods for cookies can be found in the following sections of this data protection declaration.

Application by e-mail and application form

1. Scope of processing of personal data

There is an application form on our website that can be used for electronic applications. If an applicant takes advantage of this opportunity, the data entered in the input mask will be transmitted to us and saved. These dates are:

Salutation

First name

Surname

address

Telephone / mobile number

E-mail address

salary expectations

Information on training and school education (only for training)

Date of birth (only for training)

Driving license (only with training)

CV

Testimonies

photo (optional)

How did you hear about us

Alternatively, you can also send us your application by email. In this case, we record your email address and the data you provided in the email.

After sending your application, you will receive an email from us confirming receipt of your application documents.

Your data will not be passed on to third parties. The data will only be used to process your application.

2. Purpose of data processing

The processing of the personal data from the application form serves us solely to process your application. If contact is made by email, this is also the necessary legitimate interest in the processing of the data.

The others during the sending processThe personal data processed serve to prevent misuse of the application form and to ensure the security of our information technology systems.

3. Legal basis for data processing

The legal basis for the processing of your data is the initiation of a contract, which takes place at the request of the person concerned, Article 6 (1) sentence 1 lit. b alternative 1 GDPR and Section 26 (1) sentence 1 BDSG.

4. Duration of storage

After completion of the application process, the data will be stored for up to six months. Your data will be deleted after six months at the latest. In the event of a legal obligation, the data will be stored within the framework of the applicable provisions.

The additional personal data collected during the sending process will be deleted after a period of six months at the latest.

5. Exercising Your Rights

corporate appearances

Use of company appearances in social networks

Instagram:

Instagram, Part of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland

On our company page we provide information and offer Instagram users the opportunity to communicate. If you carry out an action on our Instagram company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public. However, since we usually or to a large extent have no influence on the processing of your personal data by the companies responsible for the Weitmann & Konrad GmbH & Co. KG company Instagram, we cannot make any binding statements regarding the purpose and scope of the processing of your data Provide information.

We use our corporate presence in social networks to communicate and exchange information with (potential) customers. In particular, we use the corporate identity for:

Products, recruiting, advertising and image

The publications about the company’s appearance can contain the following content:

information about products

Information about Services

Advertising

Job offers

Every user is free to publish personal data through activities.

Insofar as we process your personal data in order to evaluate your online behavior, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Article 6 Paragraph 1 Clause 1 Letter a, Article 7 GDPR. The legal basis for the processing of personal data for the purpose of communication with customers and interested parties is Article 6 Paragraph 1 Sentence 1 lit. f GDPR. Our legitimate interest is to answer your inquiry optimally or to be able to provide the requested information. If contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

The data generated by the company’s appearance is not stored in our own systems.

For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses in accordance with Article 46 (2) (c) GDPR. A copy of the standard data protection clauses can be requested from us.

You can object to the processing of your personal data that we collect as part of your use of our Instagram corporate presence at any time and assert your data subject rights mentioned under IV. of this data protection declaration. To do this, send us an informal email to dsb-weko@weko.net. \n You can find more information about the processing of your personal data by Instagram and the corresponding objection options here:

Instagram: https://help.instagram.com/519522125107875

YouTube:

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

We provide information on our company website and offer YouTube users the opportunity to communicate. If you carry out an action on our YouTube company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public. However, since we usually or to a large extent have no influence on the processing of your personal data by the companies responsible for the Weitmann & Konrad GmbH & Co. KG corporate website YouTube, we cannot make any binding statements regarding the purpose and scope of the processing of your data Provide information.

We use our corporate presence on social networks to communicate and exchange information with (potential) customers. In particular, we use the corporate identity for:

Products, recruiting, advertising and image

The publications about the companiescompany appearance contain the following content:

information about products

Information about Services

Advertising

Job offers

Every user is free to publish personal data through activities.

Insofar as we process your personal data in order to evaluate your online behavior, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Article 6 Paragraph 1 Clause 1 Letter a, Article 7 GDPR. The legal basis for the processing of personal data for the purpose of communication with customers and interested parties is Article 6 Paragraph 1 Sentence 1 lit. f GDPR. Our legitimate interest is to answer your inquiry optimally or to be able to provide the requested information. If contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

The data generated by the company’s appearance is not stored in our own systems.

For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses in accordance with Article 46 (2) (c) GDPR. A copy of the standard data protection clauses can be requested from us.

You can object to the processing of your personal data that we collect as part of your use of our YouTube corporate presence at any time and assert your data subject rights mentioned under IV. of this data protection declaration. To do this, send us an informal email to dsb-weko@weko.net. \n You can find more information about the processing of your personal data by YouTube and the corresponding objection options here:

YouTube: https://policies.google.com/privacy?gl=DE&hl=de

Use of company appearances in job-oriented networks

1. Scope of data processing

We use the possibility of company appearances in job-oriented networks. We maintain a corporate presence on the following professional networks:

LinkedIn:

LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland

Xing:

XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany

On our site we provide information and offer users the opportunity to communicate.

The company website is used for applications, information/PR and active sourcing.

We have no information on the processing of your personal data by the companies jointly responsible for the company’s appearance. Further information can be found in the data protection declaration of:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Xing:

https://privacy.xing.com/de/datenschutzerklaerung

If you carry out an action on our company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.

2. Legal basis for data processing

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Article 6 Paragraph 1 Clause 1 Letter f GDPR. Our legitimate interest is to answer your inquiry optimally or to be able to provide the requested information. If contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

3. Purpose of data processing

Our corporate identity serves to inform users about our services. Every user is free to publish personal data through activities.

4. Duration of storage

We store your activities and personal data published on our company website until you revoke your consent. In addition, we comply with the statutory retention periods.

5. Possibility of objection

You can object to the processing of your personal data that we collect as part of your use of our company website at any time and assert your data subject rights mentioned under IV. of this data protection declaration. To do this, send us an informal email to the email address given in this data protection declaration.

You can find more information on how to exercise your rights here:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Xing:

https://privacy.xing.com/de/datenschutzerklaerung

hosting

The website is hosted on our own servers. Third parties do not have access to server log files.

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:

Browser type and browser version

operating system used

Referrer URL

Date and time of server requestIP address

This data is not merged with other data sources. This data is collected on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - the server log files must be recorded for this purpose.

The location of the server of the website is geographically in Germany.

Plugins used

We use plugins for various purposes. The plugins used are listed below:

Use of Facebook Comments1. Scope of processing of personal data We use functions of the social network Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and their representatives in the Union Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal H, D2 Dublin, Ireland (hereinafter: Facebook). We use this plugin to extend the functionality of our online presence. Users can use Facebook Comments to comment on content on our online presence with their Facebook account. This allows personal data to be stored and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and the operating system). We do not have any information about the exact scope of the collection of personal data

2. Purpose of data processingThe use of the Facebook Comment plug-in serves to improve the user-friendliness of our online presence. We use this plug-in to be able to offer an embedded comment function directly on Facebook without users having to leave our online presence.

3. Legal basis for the processing of personal data The legal basis for the processing of the personal data of the user is basically the consent of the user according to Article 6 Paragraph 1 Clause 1 lit.

4. Duration of storageYour personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Revocation and removal option You have the right to revoke your data protection declaration of consent at any time. The revocation of the consent does not affect the legality of the processing that has taken place on the basis of the consent up to the revocation. You can prevent the collection and processing of your personal data by Facebook by preventing the storage of third-party cookies on your computer, the ” Do Not Track” function of a supporting browser, disable the execution of script code in your browser or use a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery. com) in your browser. You can find more information on how to object to and remove Facebook from: https://de-de.facebook.com/policy.php

Use of YouTube1. Scope of processing of personal data We use the Google-operated plugin from YouTube, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA and their representatives in the Union Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). We use the YouTube plugin to embed videos from YouTube on our online presence. When you visit our online presence, your browser establishes a connection with the YouTube servers. This allows personal data to be stored and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and the operating system). We do not have any Influence on the content of the plug-in. If you are logged into your YouTube account during the visit, YouTube can assign your online presence visit to this account. By interacting with this plug-in, this information is transmitted directly to YouTube and stored there. Further information on the processing of data by Google is available here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processingThe use of the YouTube plugin serves to improve user-friendliness and an attractive presentation of our online presence.

3. Legal basis for the processing of personal data The legal basis for the processing of the personal data of the user is basically the consent of the user according to Article 6 Paragraph 1 Clause 1 lit.

4. Duration of storageYour personal information will bestored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Revocation and removal option You have the right to revoke your data protection declaration of consent at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the revocation. You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, which ” Do Not Track” function of a supporting browser, disable the execution of script code in your browser or use a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery. com) in your browser. You can use the following link to deactivate the use of your personal data by Google: https://adssettings.google.de .com/privacy?gl=DE&hl=de

Use of Plausible Analytics

1. scope of the processing

We use the privacy-friendly web analytics service Plausible Analytics to analyze and optimize our website. Plausible Analytics is a GDPR-compliant web analytics solution that does not require the use of cookies and does not process any personal data. Only aggregated statistics about the use of our website are created, which do not allow any conclusions to be drawn about individual users.

2 Purpose of data processing

The use of Plausible Analytics serves to optimize our website. We want to understand how our visitors use the website, which content is particularly popular and whether there are technical problems in order to continuously improve it and offer users a better experience. Only anonymized data is collected, such as the number of page views, the length of stay and the referring websites.

3. legal basis of the processing

The processing of anonymized user data by Plausible Analytics is based on our legitimate interest in accordance with [Art. 6 para. 1 lit. f GDPR]. Our legitimate interest is to continuously improve our website and adapt it to the needs of our users without jeopardizing the privacy of our visitors.

4 Duration of the processing

Since Plausible Analytics does not process any personal data and only collects aggregated, anonymized data, no personal data is stored. The data processed by Plausible Analytics is only stored for the period necessary to create the aggregated analyses. No data is passed on to third parties.

5 Exercising your rights

As Plausible Analytics does not collect any personal data, it is not possible to make specific requests for information or deletion in relation to these analyses. However, you can exercise general data subject rights under the GDPR (e.g. right of access, rectification or erasure) against us as the operator of the website, insofar as this concerns other data processing. If you have any questions about the use of your data, you can contact us at any time at info@weko.net

This privacy statement was created with the support of DataGuard.

Data protection

Status March 2023

Privacy Policy Facebook Fan Page

I. PRINCIPLES

1. Joint controllers for the processing of personal data

The purposes and means of processing personal data when you visit our Facebook page https://www.facebook.com/WEKO.Weitmann.und.Konrad (“Facebook page”) are managed by Weitmann & Konrad GmbH & Co. KG, Friedrich-List-Str. 20 - 24, 70771 Leinfelden-Echterdingen, Germany (“Weitmann & Konrad GmbH & Co. KG”) and Meta Platforms Ireland Ltd. (“Facebook”) together within the meaning of Art. 26 EU General Data Protection Regulation (GDPR). This results from the fact that Weitmann & Konrad GmbH & Co. KG, as the operator of the Facebook page, gives Facebook the opportunity to set up such a page on the computer or any other device of the person who visits the Facebook page (“visitor”). ) to place cookies, regardless of whether the visitor has a Facebook account.

As part of the shared responsibility, Facebook assumes primary responsibility under the GDPR for the processing of Insights data and fulfills all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Article 32 to 34 GDPR). In addition, Facebook makes the essentials of this page insights addendum available to the data subjects (you can find the relevant “Page Insights Controller Addendum” here: https://www.facebook.com/legal/terms/page_controller_addendum).

Below you will find a description of how personal data is handled by Weitmann & Konrad GmbH & Co. KG and Facebook when you visit the Facebook page. However, since Weitmann & Konrad GmbH & Co. KG usually or to a large extent has no influence on the data collected by Facebook and its processing by Facebook, we cannot yet provide any final information on the purpose and scope of the processing of your data by Facebook make. However, we will monitor further developments in this regard and, if necessary, adapt this data protection declaration accordingly.

We would like to point out that you use this Facebook page and its functions at your own risk. This applies in particular to the use of the interactive functions (especially commenting, sharing, rating).

2. Name and address of joint controllers

a) The primary controller is:

Facebook

Meta Platforms Ireland Ltd.

4 Grand Canal Square

Grand Canal Harbour

Dublin 2 Ireland

b) Further person responsible is:

Weitmann & Konrad GmbH & Co. KGFriedrich-List-Str. 20 - 2470771 Leinfelden-Echterdingen Germany Tel.: +49 (0) 711 7988 0 Email: info@weko.net Website: www.weko.net

3. Contact options for the data protection officer of the primarily responsible Facebook

You can contact the data protection officer of the primarily responsible Facebook under the following link:

https://www.facebook.com/help/contact/540977946302970

4. Name and address of the data protection officer of the other person responsible

You can reach the data protection officer of the other person responsible for Weitmann & Konrad GmbH & Co. KG for 2.b) at:

DataCo GmbH

Dachauer Strasse 65

80335 Munich

Germany

+49 89 7400 45840

www.dataguard.de

5. Legal basis for processing personal data

Insofar as the consent of the person concerned is obtained for the processing of personal data, Article 6 (1) sentence 1 lit. a (GDPR) serves as the legal basis for the processing of personal data.

Article 6 (1) sentence 1 lit. b GDPR serves as the legal basis for the processing of personal data required to fulfill a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as processing of personal data is required to fulfill a legal obligation to which Weitmann & Konrad GmbH & Co. KG or Facebook is subject, Art. 6 Para. 1 S.1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) sentence 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of Weitmann & Konrad GmbH & Co. KG, Facebook or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 S.1 lit. f GDPR as the legal basis for processing.

6. Possibility of objection and elimination

The visitor has the possibility to revoke his consent to the processing of personal data at any time (see also rights of the persons concerned). If the visitor contacts us by email, er object to the storage of his personal data at any time.

The collection of the data for the provision of the Facebook page and the storage of the data in log files is absolutely necessary for the operation of the Facebook page. Consequently, there is no possibility of objection on the part of the visitor.

7. Rights of data subjects

If personal data is processed by you, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

Right to information about the data stored about you by Weitmann & Konrad GmbH & Co. KG or Facebook;

Right to rectification, erasure or restriction of processing of your personal data;

Right to object to processing that serves the legitimate interest of Weitmann & Konrad GmbH & Co. KG or Facebook, a public interest or profiling, unless Weitmann & Konrad GmbH & Co. KG or Facebook can provide compelling reasons worthy of protection prove the processing that outweighs your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims;

right to data portability;

Right to complain to a supervisory authority;

Right to revoke your consent to the collection, processing and use of your personal data at any time with effect for the future.

If you would like to make use of your rights, you can address your concerns to Weitmann & Konrad GmbH & Co. KG or to Facebook. For example, you can use the contact options listed above. If you contact us, we will forward your request to Facebook, insofar as it concerns questions regarding the processing of Insights data. Facebook will respond to requests consistent with our obligations under the Page Insights Addendum.II. PROCESSING OF PERSONAL DATA BY Weitmann & Konrad GmbH & Co. KG

1. Purpose of data processing

Weitmann & Konrad GmbH & Co. KG maintains online presences within social networks in order to communicate with interested parties and users active there and to be able to inform them there about our products, events and news. If you call up our Facebook page (regardless of whether whether you are logged into your Facebook account or not), for technical reasons your browser transmits certain data to the web server for which Facebook is responsible. In addition, so-called “cookies” are used by Facebook. Cookies are small text files that are stored in the memory of your end device via your browser. Cookies set by Facebook are intended, among other things, to enable Weitmann & Konrad GmbH & Co. KG, as the operator of the Facebook page, to obtain statistics that Facebook creates based on visits to this page for the purpose of controlling the marketing of our activities.

2. Description and scope of data processing

As the operator of the Facebook page, Weitmann & Konrad GmbH & Co. KG can use the Facebook Page Insights function, which Facebook makes available to us free of charge as an essential part of the user relationship, to receive anonymous statistical data on the visitors to our Facebook page. This data is collected with the help of the cookies set by Facebook, each of which contains a unique user code and which Facebook stores on the visitor’s end device. The user code, which can be linked to the login data of such users who are registered with Facebook, is collected and processed when the Facebook page is accessed.

In particular, the fan page operator can receive demographic data provided by Facebook about his target group - and thus the processing of this data - e.g. trends in the areas of age, gender, relationship status and professional situation, information about the lifestyle and interests of its target audience and information about the purchases and online purchasing behavior of visitors to its site, the categories of goods or services that interest them most, and geographic data that informs them where to run specific promotions or organize events and, more generally, allows them to tailor their information offering as much as possible.

Although the visitor statistics created by Facebook are only transmitted in anonymous form to Weitmann & Konrad GmbH & Co. KG as the operator of the Facebook page, the creation of these statistics is based on the previous survey - through the cookies set by Facebook on the visitor’s device – and the processing of the personal data of these visitors for these statistical purposes. For more information on Facebook Page Insights, visit:

https://de-de.facebook.com/legal/terms/information_aboutpageinsights_data

https://de-de.facebook.com/help/pages/insights

Data on the Facebook groups linked to our Facebook page are also provided in this way. Due to the constant development of Facebook, the availability and processing of the data is changing, so that we refer to the corresponding data protection notices from Facebook mentioned in the previous paragraph and below under “PROCESSING OF PERSONAL DATA BY FACEBOOK” for further details.

We use this data, which is available in aggregate form, to make our posts and activities on our Facebook page more attractive to users. For example, we use the distribution by age and gender for an adapted address and the preferred visiting times of the users for a time-optimized planning of our contributions. Information about the type of end devices used by visitors helps us to adapt the posts to it in terms of visual design. According to the Facebook Terms of Service, which each user agrees to when creating a Facebook profile, we can identify the subscribers and fans of the page and see their profiles and other information shared by them.

In addition to this automatically collected anonymous data, we also process the data that you voluntarily provide us with, e.g. B. comments on posts or contacts.

If you click on the link www.weko.netde/datenschutzerklaerung (you are currently on this page), which is posted on the Facebook fan page of Weitmann & Konrad GmbH & Co. KG, you will be taken to a subpage of the Weitmann & Konrad website GmbH & Co. KG. Personal data is also processed on this website. The data protection declaration applicable to these pages can be found here: www.weko.netde/datenschutzerklaerung

3. Data erasure and retention period

Personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also be necessary if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which Weitmann & Konrad GmbH & Co. KG is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

III. PROCESSING OF PERSONAL DATA BY FACEBOOK

How Facebook uses the data from visiting Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties passed on is not named conclusively and clearly by Facebook and is not fully known to us. However, we will monitor further developments in this regard and, if necessary, adapt this data protection declaration accordingly. The following information is based on information publicly provided by Facebook regarding the processing of personal data when using Facebook products.

1. Purpose of data processing

According to its own statements, Facebook processes personal data of visitors for the following purposes:

Providing, personalizing and improving the Facebook Products;

Providing measurement, analysis and other Facebook services;

promoting protection, integrity and security;

communication with Facebook users;

Research and innovation for social purposes.

Further information on the purposes of data processing by Facebook can be found in the Facebook Data Policy : https://de-de.facebook.com/policy.php

Further information on Facebook’s legitimate interests with regard to the processing of personal data can be found here: https://de-de.facebook.com/about/privacy/legal_bases

When you visit our Facebook page (regardless of whether you are logged into your Facebook account or not), your browser transmits certain data to the web server responsible for Facebook for technical reasons. “Cookies” are also used by Facebook. Facebook uses cookies, among other things, to provide Weitmann & Konrad GmbH & Co. KG, as the operator of the Facebook page, with statistics for the purpose of controlling the marketing of our activities. Further information on the use of cookies by Facebook can be found in the Facebook Cookie Policy : \n https://de-de.facebook.com/policies/cookies/

2. Description and scope of data processing

a) What types of information does Facebook process?

In order to provide the Facebook products, it is necessary for Facebook Iprocessed information about visitors. The types of information Facebook collects depend on how the visitor uses the Facebook Products. The following information can be processed by Facebook:

Things made and provided by visitors and others, such as information about how the visitor uses the Facebook Products, information about transactions made on Facebook Products, or information about the people, Pages, accounts, hashtags, and groups with which the visitor is connected .

Device information such as device attributes, identifiers, network and connections, and cookie data.

Information from partners that advertisers, app developers and publishers contact Facebook through the Facebook Business Tools they use, including: the social plugins (such as the “Like” button), Facebook login or the Facebook pixel, can send information. These partners provide Facebook with information about the visitor’s off-Facebook activities.

In addition, Facebook uses cookies that are set on the visitor’s end device when the Facebook page is accessed, regardless of whether the visitor is logged into his Facebook account or not. In addition, Facebook also processes the information stored in the cookies when a person visits the Facebook services, services provided by other members of the Facebook group of companies and services provided by other companies using the Facebook services . In addition, other entities such as Facebook partners and other third parties on the Facebook Services may use cookies to provide services to Facebook or the companies that advertise on Facebook. Further information on the use of cookies by Facebook can be found in the Facebook Cookie Policy: https://de-de.facebook.com/policies/cookies/

When you access a Facebook page, the IP address assigned to your device is transmitted to Facebook. According to information from Facebook, this IP address is made anonymous (in the case of “German” IP addresses) and deleted after 90 days. Facebook also stores information about its users’ end devices (in particular as part of the “registration notification” function); it may be possible for Facebook to assign IP addresses to individual users.

If you want to avoid this, you should log out of Facebook or deactivate the “remember me” function, delete the cookies on your device and exit and restart your browser. In this way, Facebook information that directly identifies you can be deleted. This allows you to use our Facebook page without revealing your Facebook ID. If you access interactive functions of the page (like, comment, share, news, etc.), a Facebook login screen appears. After you have logged in, you will be recognized again by Facebook as a specific user.

Information on how you can manage or delete existing information about you can be found on the following Facebook support pages: https://de-de.facebook.com/about/privacy.

For more information about the types of information Facebook processes, see the Facebook Data Policy: https://de-de.facebook.com/policy.php

b) How is the information processed by Facebook shared with others?

Facebook works with third-party partners who help Facebook provide and improve its products or who use Facebook Business Tools to grow business. Facebook can share information with the following third-party partners:

partners using Facebook analytics services;

advertisers;

partners for measurements;

Partners offering goods and services in Facebook Products;

vendors and service providers;

researchers and scientists;

law enforcement agencies or legal requests.

For more information about the data that Facebook may share with third-party partners, see the Facebook Data Policy : https://de-de.facebook.com/policy.php

c) How does Facebook process and transmit data as part of its global services?

Facebook shares information globally, both internally among the Facebook Companies and externally with its partners and with those individuals or organizations that the visitor connects with and shares with around the world. Data can also be transmitted to the USA or other third countries that do not have an adequate level of data protection and processed there. In this respect, Facebook uses standard data protection clauses approved by the European Commission or relies on the adequacy decisions issued by the European Commission with regard to certain countries.

Further information on data transmissions by Facebook can be found in the Facebook data policy: https://de-de.facebook.com/policy.php

3. Data Erasure and Storage Duration

Facebook stores data until it is no longer needed to provide its services and Facebook products, or until the user’s Facebook account is deleted, whichever comes first. This is a case-by-case determination and depends on things such as the nature of the data, why it is being collected and processed, and the relevant legal or operational storage needs.

Further information on data deletion and storage duration can be found in the Facebook Data Policy : https://de-de.facebook.com/policy.php

With regard to the storage period of cookies set by Facebook, you can find more information in the Facebook Cookie Policy: https://de-de.facebook.com/policies/cookies/

This privacy statement was created with the support of DataGuard.