Data protection information regarding the use of our social media channels
We are pleased to welcome you to our social media channels and delighted that you are interested in Roto and our products and services. To ensure that you feel safe and comfortable visiting our social media channels, we take the protection of your personal data and the confidential handling of this data extremely seriously.
With this information about data protection, we would therefore like to inform you about how we process, store and use your personal data when you visit our social media channels.
If you have any questions about how your personal data is handled, please contact us using the contact details shown below.
It may be necessary to make changes to our privacy policy on account of technical developments, changes to our social media channels, the legal situation or for other reasons. We therefore reserve the right to amend this data protection information at any time and ask that you regularly check it for the latest information.
Our social media channels are operated by:
Roto Frank Fenster- und Türtechnologie GmbH
Wilhelm-Frank-Platz 1
70771 Leinfelden-Echterdingen
Germany
E-Mail: info@roto-frank.com
represented by the Company Management:
Marcus Sander (Chairman)
Christian Seller (CFO)
Please direct any enquiries to the above address, addressed to the "Data protection officer", or to dataprotectionftt-de@roto-frank.com.
General information regarding data processing
Certain data processing operations, such as customer correspondence, are undertaken by companies within the Roto Group. Data is therefore regularly transferred within the group. As a rule, this transfer is based on an agreement on commissioned data processing. In other cases, Article 6(1f) GDPR is the legal basis for the transfer, whereby our legitimate interest lies in efficient design of our processes and offers.
Moreover, data is only transferred if this is required to fulfil the purposes listed below, for example where support for our channel is provided by a commissioned agency.
Please note that the data that is processed when using social platforms and networks may, in certain circumstances, be processed outside of the European Economic Area. In these cases, we ensure that, before your personal data is transferred, the recipient has established an appropriate level of data protection that is comparable with the standards within the EU. This can be achieved, for example, by using EU standard agreements or Binding Corporate Rules or special agreements to which the company can be subject.
We process your data on our systems as far as this is required to fulfil the purposes specified below or where there are statutory retention obligations. Once these periods have ended, your data is erased without delay.
In addition to the right to withdraw the consent that you granted us, you are entitled to the following additional rights where the respective prerequisites are present:
- Right of access by the data subject to your personal data that has been saved by us in accordance with Article 15 GDPR,
- Right to rectification of inaccurate personal data or to the completion of incomplete personal data in accordance with Art. 16 GDPR,
- Right to erasure of your data that has been saved by us in accordance with Article 17 GDPR, provided that no legal or contractual retention periods or other legal obligations and/or rights to continued storage are to be complied with,
- Right to restriction of processing of your data in accordance with Art. 18 GDPR,
- Right to data portability in accordance with Art. 20 GDPR
- Right to lodge a complaint with a supervisory authority.
In accordance with the requirements of Article 21(1) GDPR, you can object to the data processing for reasons that arise due to the specific situation of the data subject.
The aforementioned general right to object shall apply for all processing purposes described in this data protection information, which are processed on the basis of Article 6 (1f) GDPR or for the purposes of direct marketing.
When you visit our fan page, your profile information and information about the visit is primarily processed by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin, Ireland (hereinafter referred to as "Facebook Ireland"). In this case, data is processed even if you do not have a Facebook account or are not logged in. You can find all other information about this in Facebook's Data Policy.
In doing so, we process the data of visitors to our fan page, in particular, information about user interactions (e.g. likes and comments), public profile information, demographic and statistical data, as well as data that is transferred to us as part of messages and comments.
In the view of the Court of Justice of the European Union (CJEU), we, as the operator of a fan page, are jointly responsible with Facebook Ireland for processing your personal data. You can find the CJEU's ruling from 5th June 2018 here, and the ruling from 29th July 2019 here. The shared responsibility shall affect in particular the use of the "Facebook Insights" functions, or more precisely the collection, storage and further processing of the Insights data. Facebook Ireland is responsible for collecting and storing the data; Roto only receives anonymised evaluations of the Insights data. Our company does not make any decisions regarding the processing of Insights data.
The use of your personal data for advertising purposes is a main focus for Facebook in particular. We use the statistics function in order to find out more about visitors to our fan page. Using this function enables us to adapt our content to specific target groups. This way, we can also use the demographic information about the age and origin of users, for instance, although we cannot link these details to a specific individual.
The parties have concluded an agreement on shared responsibility. For processing Insights data, it was agreed that Facebook Ireland shall assume the obligation to grant the rights of the data subjects and the required duties to provide information in accordance with Article 13 and 14 GDPR. Data protection rights can be can be asserted at Facebook Ireland as well as at Roto. We will forward all inquiries from data subjects affected by the processing for which Facebook Ireland is responsible to Facebook Ireland for processing.
The personal data of visitors to our Facebook fan page shall be processed on the basis of our legitimate interest in accordance with Article 6(1f) GDPR. Our legitimate interest is to safeguard communication with our customers and the dissemination of news regarding our products among our customers.
You can object to Facebook processing your data here.
When you visit the platform, your profile information and information about the visit is primarily processed by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin, Ireland (hereinafter referred to as "Facebook Ireland"). In this case, data is processed even if you do not have a Instagram account or are not logged in. You can find all other information about this in Instagram's Data Policy.
We process the data of visitors to our profile, in particular, information about user interactions (e.g. likes and comments), public profile information, demographic and statistical data, as well as data that is transferred to us as part of messages and comments.
The use of your personal data for advertising purposes is a main focus for Facebook in particular. We use the statistics function in order to find out more about visitors to our profile. Demographic and statistical data that is part of the "Insights" data helps us to adapt our content to specific target groups. In this case, this concerns aggregated data for us – it is not possible for us to identify individuals.
The personal data of visitors to our Instagram account shall be processed on the basis of our legitimate interest in accordance with Article 6(1f) GDPR. Our legitimate interest is to safeguard communication with our customers and the dissemination of news regarding our products among our customers.
You can object to Instagram processing your data here.
When you visit the platform, your profile information and information about the visit is primarily processed by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as "LinkedIn"). In this case, data is processed even if you do not have a LinkedIn account or are not logged in. You can find all other information about this in LinkedIn's Data Policy.
We process the data of visitors to our profile, in particular, information about user interactions (e.g. "liked" information, reactions, shared items and comments), public profile information (e.g. position, employer), statistical data, as well as data that is transferred to us as part of messages and comments.
The use of your personal data for advertising purposes is a main focus for LinkedIn in particular. We only use the statistics function in order to obtain information about our profile and how users interact with our profile. This data provides us with information about visits to our profile, demographic data regarding followers and visitors, or information about the performance of updates. However, all of this data is purely statistical for us – we are unable to assign it to individual persons.
The personal data of visitors to our LinkedIn profile shall be processed on the basis of our legitimate interest in accordance with Article 6(1f) GDPR. Our legitimate interest is to safeguard communication with our customers, the image of our company as an employer and the dissemination of news from our company among our customers.
You can object to LinkedIn processing your data here.
When you visit the platform, your profile information and information about the visit is primarily processed by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany (hereinafter referred to as "XING"). In this case, data is processed even if you do not have a XING account or are not logged in. You can find all other information about this in XING's Data Policy.
We process the data of visitors to our profile, in particular, information about user interactions (e.g. "liked" information, shares and comments), public profile information (e.g. position, employer), statistical data, as well as data that is transferred to us as part of messages and comments.
The use of your personal data for advertising purposes is a main focus for XING in particular. We only use the statistics function in order to obtain information about our profile and how users interact with our profile. This data provides us with information about visits to our profile, the number of impressions or how frequently we are named as an employer of choice. However, all of this data is purely statistical for us – we are unable to assign it to individual persons.
The personal data of visitors to our XING profile shall be processed on the basis of our legitimate interest in accordance with Article 6(1f) GDPR. Our legitimate interest is to safeguard communication with our customers, the image of our company as an employer and the dissemination of news from our company among our customers.
You can object to XING processing your data here.
YouTube
When you visit the platform, your profile information and information about the visit is primarily processed by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google Ireland"). In this case, data is processed even if you do not have a Google account or are not logged in. You can find all other information about this in Google's Data Policy.
We process the data of visitors to our account, in particular information about user interactions (e.g. likes, comments and shares), user names, and demographic and statistical data.
The use of your personal data for advertising purposes is a main focus for Google in particular. We use the statistics function in order to find out more about our viewers. We gain insights into the performance of our videos and the demographics of our viewers. In this case, this concerns purely statistical data for us – it is not possible for us to identify individuals.
The personal data of visitors to our YouTube account shall be processed on the basis of our legitimate interest in accordance with Article 6(1f) GDPR. Our legitimate interest is to safeguard communication with our customers, the public image of our company and the promotion of our product range.
You can object to Google processing your data here.