We are pleased that you are visiting our website. Protecting and securing your personal information while using our website is very important to us. Therefore, we would like to inform you about what personal data we collect during your visit to our website and for what purposes it is used.

This privacy policy applies to the online offerings of DEFEBA GmbH & Co. KG, which are accessible under the domain www.defeba.de and various subdomains ("our website").

Who is responsible and how can I reach you?

Responsible

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR):

DEFEBA GmbH & Co. KG
Oesterende 34
25782 Schalkholz
Phone: 04838-7855-0
Email: info@defeba.de

Data Protection Officer:
Datensicherheit Nord GmbH
Phone: 04841-8968-20
Email: t.holst@datensicherheit-nord.de

What is this about?

This privacy policy fulfills the legal requirements for transparency in the processing of personal data. This includes all information relating to an identified or identifiable natural person, such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website. Information from which we cannot (or can only with disproportionate effort) link to your person, e.g., through anonymization, is not considered personal data. The processing of personal data (e.g., collecting, querying, using, storing, or transmitting) always requires a legal basis and a defined purpose.

Personal data that have been stored will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further retention. We inform you in the individual processing operations about the specific storage periods or criteria for storage. Regardless, we store your personal data in individual cases for the assertion, exercise, or defense of legal claims and in the presence of legal retention obligations.

Who gets my data?

We only share your personal data, which we process on our website, with third parties if this is necessary for fulfilling the purposes and is covered by the legal basis in each case (e.g., consent or protection of legitimate interests). Additionally, in individual cases, we may share personal data with third parties if it serves the assertion, exercise, or defense of legal claims. Possible recipients can then be, for example, law enforcement agencies, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website, who process personal data on our behalf according to Art. 28 GDPR, these can be recipients of your personal data. Further information on the use of order processors and web services is provided in the overview of individual processing operations.

Do you use cookies?

Cookies are small text files that are stored on your device's browser during your visit to our websites. Alternatively, information can also be stored in your browser's local storage. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to perform various analyses so that, for example, we can recognize the browser you use when you visit our website again and transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our online offer more user-friendly and effective for you by understanding your use of our website and determining your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device, cannot run programs, and do not contain viruses.

We inform you about the respective services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the cookie settings or the Consent Manager of this website.

We currently use only necessary cookies.

What rights do I have?

Under the provisions of the legal regulations of the General Data Protection Regulation (GDPR), you, as the data subject, have the following rights:

• Right of access by the data subject pursuant to Art. 15 GDPR to your stored data, including meaningful information on the details of the processing, as well as a copy of your data;
• Right to rectification pursuant to Art. 16 GDPR of inaccurate or incomplete data stored by us;
• Right to erasure pursuant to Art. 17 GDPR of data stored by us, insofar as processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
• Right to restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is contested by you, the processing is unlawful, we no longer need the data and you refuse their deletion because you need them for the establishment, exercise, or defense of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
• Right to data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1)(a) GDPR or on the basis of a contract pursuant to Art. 6 (1)(b) GDPR, and these are processed by us using automated procedures. You receive your data in a structured, common, and machine-readable format, or we transmit the data directly to another controller, insofar as this is technically feasible;
• Right to object pursuant to Art. 21 GDPR to the processing of your personal data, insofar as these are processed on the basis of Art. 6 (1)(e) or (f) GDPR, and there are reasons for this arising from your particular situation, or if the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing can be demonstrated, or if the processing is for the establishment, exercise, or defense of legal claims. If the right to object does not exist in individual processing operations, this is indicated there;
• Right to withdraw pursuant to Art. 7 (3) GDPR your given consent with effect for the future;
• Right to lodge a complaint pursuant to Art. 77 GDPR with a supervisory authority if you believe that the processing of your personal data violates the GDPR. You can usually contact the supervisory authority of your usual place of residence, your place of work, or our company headquarters.

How are my data processed in detail?

Below we inform you about the individual processing operations, the scope, and purpose of the data processing, the legal basis, the obligation to provide your data, and the respective storage duration. Automated decision-making, including profiling, does not take place.

Provision of the Website

Type and scope of processing

When calling up and using our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called logfile:

• IP address of the requesting computer;
• Date and time of access;
• Name and URL of the retrieved file;
• Website from which access is made (referrer URL);
• The browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

Our website is not hosted by us but by a service provider who processes the aforementioned data on our behalf according to Art. 28 GDPR.

Purpose and legal basis

The processing is carried out to protect our predominant legitimate interest in displaying our website and ensuring its security and stability based on Art. 6 (1) lit. f GDPR. The collection of data and storage in log files is mandatory for the operation of the website. A right to object to processing does not exist due to the exception according to Art. 21 (1) GDPR. Insofar as further storage of the log files is legally required, the processing is based on Art. 6 (1) lit. c GDPR. There is no legal or contractual obligation to provide the data; however, calling up our website without providing the data is technically not possible.

Storage duration

The aforementioned data will be stored for the duration of the display of the website and for technical reasons beyond that for a maximum of 7 days.

Presences on Social Media Platforms

We maintain so-called fan pages, accounts, or channels on the networks listed below to provide you with information and offers within social networks and to offer you additional ways to contact us and learn about our offers. Below, we inform you about the data we or the respective social network process about you in connection with the call-up and use of our fan pages/accounts.

Data we process from you

If you want to contact us via messenger or via direct message through the respective social network, we usually process your username with which you contact us and, if necessary, store further data provided by you as far as this is necessary for the processing/response of your concern.

The legal basis is Art. 6 (1) sentence 1 f) GDPR (processing is necessary for the protection of the legitimate interests of the controller).

(Static) Usage Data that we receive from the social networks

We receive automatically provided statistics concerning our accounts via insights functionalities. The statistics include, among other things, the total number of page views, likes, details on page activities and post interactions, reach, video views/views, as well as information on the proportion of men/women among our fans/followers.

The statistics contain only aggregated data that cannot be related to individual persons. They are not identifiable for us through this.

What data the social networks process from you

To view the contents of our fan pages or accounts, you do not have to be a member of the respective social network, and a user account for the respective social network is not necessary.

However, please note that the social networks capture and store data from website visitors without user accounts when calling up the respective social network (e.g., technical data to display the website to you) and use cookies and similar technologies, over which we have no influence. Details can be found in the privacy policies of the respective social network (see the corresponding links above). If you want to interact with the content on our fan pages/accounts, e.g., comment, share, or like our postings/posts, and/or want to contact us via messenger functions, prior registration with the respective social network and the provision of personal data are required.

We have no influence on the data processing by the social networks during your use. According to our knowledge, your data is stored and processed in connection with the provision of the services of the respective social network, further for the analysis of user behavior (using cookies, pixels/web beacons, and similar technologies), based on which interest-based advertising is played out both within and outside the respective social network. It cannot be excluded that your data is also stored by the social networks outside the EU/EEA and passed on to third parties.

Information including the exact scope and purposes of processing your personal data, the duration of storage/deletion, and guidelines on the use of cookies and similar technologies during registration and use can be found in the privacy policies/cookie policies of the social networks. There you will also find information about your rights and options to object.

Facebook Page

When visiting our Facebook page, Facebook (Meta) captures, among other things, your IP address and other information present in the form of cookies on your PC. This information is used to provide us, as the operators of the Facebook pages, with statistical information about the use of the Facebook page. Further information is provided by Facebook at the following link: https://facebook.com/help/pages/insights.

Using the transmitted statistical information, we cannot draw conclusions about individual users. We only access these to respond to the interests of our users and continuously improve and secure the quality of our online presence.

We collect your data via our fan page only to possibly provide for communication and interaction with us. This collection usually includes your name, message content, comment content, and the profile information you have made "public."

The processing of your personal data for our purposes mentioned above is based on our legitimate economic and communicative interest in offering an information and communication channel according to Art. 6 (1) f) GDPR. Should you as a user have given consent to the respective provider of the social network for data processing, the legal basis of the processing extends to Art. 6 (1) a), Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to have full access to your data. Therefore, the provider can directly take appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.) and implement them. Thus, asserting corresponding rights is most effective directly against the respective provider.

We are jointly responsible with Facebook for the personal content of the fan page. Data subject rights can be asserted at Meta Platforms Ireland Ltd. as well as with us.

The primary responsibility for the processing of Insights data lies with Facebook according to GDPR, and Facebook fulfills all obligations from the GDPR regarding the processing of Insights data. Meta Platforms Ireland Ltd. provides the essence of the Page Insights supplement to the data subjects.

We do not make decisions regarding the processing of Insights data and the storage duration of cookies on user devices.

Further information can be found directly at Facebook (Supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Further information, including the exact scope and purposes of processing your personal data, the duration of storage/deletion, and guidelines on the use of cookies and similar technologies during registration and use, can be found in the privacy policies/cookie policies of Facebook:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
https://www.facebook.com/policies/cookies

Instagram Page

When visiting our Instagram page, Instagram (Meta) captures, among other things, your IP address and other information present in the form of cookies on your PC. This information is used to provide us, as the operators of the Instagram pages, with statistical information about the use of the Instagram page. Further information is provided by Instagram at the following link (Note: by clicking the following link, you will be redirected to the website of the social network Facebook, also part of the Meta group. The information provided via the link is equally applicable to the social network Instagram): https://facebook.com/help/pages/insights

Using the transmitted statistical information, we cannot draw conclusions about individual users. We only access these to respond to the interests of our users and continuously improve and secure the quality of our online presence.

We collect your data via our fan page only to possibly provide for communication and interaction with us. This collection usually includes your name, message content, comment content, and the profile information you have made "public."

The processing of your personal data for our purposes mentioned above is based on our legitimate economic and communicative interest in offering an information and communication channel according to Art. 6 (1) f) GDPR. Should you as a user have given consent to the respective provider of the social network for data processing, the legal basis of the processing extends to Art. 6 (1) a), Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to have full access to your data. Therefore, the provider can directly take appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.) and implement them. Thus, asserting corresponding rights is most effective directly against the respective provider.

We are jointly responsible with Instagram for the personal content of the fan page. Data subject rights can be asserted at Meta Platforms Ireland Ltd. as well as with us.

The primary responsibility for the processing of Insights data lies with Instagram according to GDPR, and Instagram fulfills all obligations from the GDPR regarding the processing of Insights data. Meta Platforms Ireland Ltd. provides the essence of the Page Insights supplement to the data subjects.

We do not make decisions regarding the processing of Insights data and the storage duration of cookies on user devices.

Further information can be found directly at Instagram (Supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Further information, including the exact scope and purposes of processing your personal data, the duration of storage/deletion, and guidelines on the use of cookies and similar technologies during registration and use, can be found in the privacy policies/cookie policies of Instagram: https://help.instagram.com/519522125107875/?helpref=uf_share
These details can also be viewed in the help section of Instagram's website via the following link: https://help.instagram.com/581066165581870