Privacy policy

We are pleased that you are visiting our website. The protection and security of your personal information whilst using our website is very important to us. For this reason, we would like to take this opportunity to inform you about what kinds of personal data we collect from you when you visit our website and the purposes for which we use this data. This Privacy Policy applies to the France Deutschland Development GmbH website, which is accessible under the domain www.fra-de.com as well as various subdomains (collectively ‘our website’).

Who is responsible and how do I reach them?

Controller responsible for processing personal data within the meaning of the EU General Data Protection Regulation (GDPR) France Deutschland Development GmbH Brandenburgische Str. 32 10707 Berlin No data protection officer is required to be appointed in accordance with applicable law.

What’s the purpose of this document?

This Privacy Policy meets the legal requirements for transparency with regard to the processing of personal data. Such data comprises all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behaviour when visiting a website. Information with which we are not able to identify you personally (or only with an extraordinary degree of effort), e.g. as a result of anonymisation, does not comprise personal data. Processing personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose. Personal data that has been retained is deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further retaining this data. Below, we will inform you about the specific storage periods or criteria for storage in relation to specific processing operations. This notwithstanding, we store your personal data in specific cases in order to establish, exercise or defend legal claims or to comply with statutory retention obligations.

Who receives my data?

We will only share your personal data that we process on our website with third parties if necessary for the fulfilment of the relevant purpose and if covered by an applicable legal basis in a specific case (e.g. based on consent or the pursuit of our legitimate interests). In addition, we share personal data with third parties in specific cases in order to establish, exercise or defend legal claims. Potential recipients may include, for example, law enforcement agencies, lawyers, auditors, courts, etc. In cases where we use service providers to operate our website who process personal data on our behalf as contract processors in accordance with Art. 28 GDPR, such third parties may also be recipients of your personal data. For more information on the use of processors and web services, please refer to the discussion of specific processing operations below.

Do you use cookies?

Cookies are small text files that are sent by us to the browser on your device when you visit our website and are stored there. As an alternative to using cookies, information may also be stored in local storage on your browser. Some features of our website will not be available without the use of cookies and/or local storage (technically necessary cookies). Other cookies, however, enable us to perform various analyses so that we are able, for example, to recognise the browser you are using when you visit our website again and to transmit a variety of information to us (non-essential cookies). With the aid of cookies, we are able to make our website more user-friendly and effective, amongst other things, for example by analysing your use of our website and determining your preferred settings (e.g. country and language settings). In cases where third parties process information via cookies, they collect the information directly from your browser. Cookies do not cause any harm to your device. They cannot run programs and do not contain viruses. We will provide information about the respective services for which we use cookies in the discussion of specific processing operations below. Detailed information on the cookies used can be found in the cookie settings or in the Consent Manager for this website.

What rights do I have?

You have the following rights as a data subject pursuant to the applicable provisions of the General Data Protection Regulation (‘GDPR’):

Access pursuant to Art. 15 GDPR to data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
Rectification pursuant to Art. 16 GDPR of incorrect or incomplete data stored by us;
Erasure pursuant to Art. 17 GDPR of data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims;
Restriction of processing pursuant to Art. 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its erasure and we no longer need the data, but you need this to establish, exercise or defend legal claims or you have objected to processing in accordance with Art. 21 GDPR;
Data portability pursuant to Art. 20 GDPR, insofar as you provide us with personal data within the scope of consent pursuant to Art. 6(1)(a) GDPR or on the basis of a contract pursuant to Art. 6 (1)(b) GDPR and we perform such processing using automated means. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another controller as far as this is technically feasible.
Objection pursuant to Article 21 GDPR with regard to the processing of your personal data, provided that such processing is performed on the basis of Article 6(1)(e), (f) GDPR and your objection is on grounds relating to your particular situation or the objection is to direct marketing. The right to object does not apply if there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or such processing is to establish, exercise or defend legal claims. Where the right to object does not apply to specific processing operations, this will be indicated below.
Withdrawal pursuant to Art. 7(3) GDPR of any consent granted with effect for the future.
To lodge a complaint pursuant to Article 77 GDPR with a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or our headquarters.

How will be data be processed specifically?

We will inform you about the specific processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and respective storage periods, below. We do not use automated individual decision-making, including profiling.

Provision of the website Type and scope of processing

Every time you access and use our website, we collect personal data transmitted by your browser automatically to our server. The following information is temporarily stored in a so-called log file:

IP address of the inquiring computer;
Date and time of access;
Name and URL of retrieved files;
Website from which access is made (referrer URL);
The browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

We do not host our website, but rather this is done by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.

Purpose and legal basis

This processing is performed on the basis of our compelling interest in the display and security of our website as well as its stable operation in accordance with Art. 6(1)(f) GDPR. The collection of data and storage of data in log files is absolutely necessary for the operation of the website. There is no right to object to this processing owing to the exception provided in Article 21(1) GDPR. To the extent that further retention of the log files is required by law, processing is performed on the basis of Art. 6(1)(c) GDPR. There is no legal or contractual obligation to provide the respective data, but it is technically impossible to access our website without providing such data.

Retention period

The data referred to above will be stored for as long as you are visiting our website and, for technical reasons, for a maximum of 28 days.

Contact form Type and scope of processing

On our website, you have the ability to contact us using a form we have provided. The information collected in fields marked as mandatory is required to process your enquiry. In addition, you may voluntarily provide additional information that you feel is necessary for us to be able to process your contact request. Your personal data will not be shared with third parties when you use our contact form.

Purpose and legal basis

Processing your data when you use our contact form is carried out for the purposes of communicating with you and processing your request on the basis of your consent in accordance with Art. 6(1)(a) GDPR. In cases where your enquiry relates to an existing contractual relationship with us, processing is carried out for purposes of performing such contract on the basis of Art. 6(1)(b) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing information requested in the fields marked as mandatory. Please contact us by other means if you do not wish to provide this information to us.

Retention period

If you use the contact form on the basis of your consent, we retain data collected in connection with each enquiry for a period of three years commencing on the resolution of your enquiry or until you withdraw your consent.

Newsletter Type and scope of processing

If you register on our website to receive our newsletter, we collect your e-mail address [as well as your name…] and store this information together with the date of registration and your IP address. You will then receive an e-mail in which you must confirm your subscription to the newsletter (double opt-in). If you do not confirm registration within [XX hours], it will automatically expire and your data will not be processed for purposes of emailing the newsletter. We use a service in connection with sending the newsletter that processes your personal data on our behalf in accordance with Art. 28 GDPR. This data will not be shared with third parties.

Purpose and legal basis

We process your data related to sending newsletters on the basis of your consent in accordance with Art. 6(1)(a) GDPR. By unsubscribing from the newsletter, you may withdraw your consent at any time with effect for the future in accordance with Art. 7(3) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.

Retention period

After registering to receive our newsletter, we retain the related data for a maximum of 72 hours until the registration is confirmed. After successful confirmation, we retain your data until you withdraw your consent (unsubscribe from the newsletter) and beyond that for a maximum of 28 days for technical reasons.

CDNJS Type and scope of processing

We use CDNJS to properly deliver the content of our website. CDNJS is a service provided by Cloudflare, Inc., which acts as a content delivery network (CDN) on our website. A CDN helps to provide the content of our online offerings, especially files such as graphics or scripts, faster with the aid of regionally or internationally distributed servers. When you access such content, you connect to servers operated by Cloudflare, Inc., where your IP address and, potentially, browser data such as your user agent are transmitted. This data will only be processed for the purposes described above and to maintain the security and functionality of CDNJS.

Purpose and legal basis

Use of the content delivery network is based on our legitimate interests, i.e. our interest in the secure and efficient provision, as well as the optimisation, of our online offerings according to Art. 6(1)(f) GDPR.

Retention period

We have no control over the specific retention period for data following processing. This is determined by Cloudflare, Inc. For more information, please see the CDNJS Privacy Policy: https://www.cloudflare.com/privacypolicy/.

Cloudflare CDN Type and scope of processing

We use Cloudflare CDN to properly deliver the content of our website. Cloudflare CDN is a service provided by Cloudflare, Inc., which acts as a content delivery network (CDN) on our website. A CDN helps to provide the content of our online offerings, especially files such as graphics or scripts, faster with the aid of regionally or internationally distributed servers. When you access such content, you connect to servers operated by Cloudflare, Inc., where your IP address and, potentially, browser data such as your user agent are transmitted. This data will only be processed for the purposes described above and to maintain the security and functionality of Cloudflare CDN.

Purpose and legal basis

Retention period

We have no control over the specific retention period for data following processing. This is determined by Cloudflare, Inc. For more information, please see the Cloudflare CDN Privacy Policy: https://www.cloudflare.com/privacypolicy/.

Consensu Type and scope of processing

We use Consensu to properly deliver the content of our website. Consensu is a service provided by Interactive Advertising Bureau Europe A.I.S.B.L., which acts as a content delivery network (CDN) on our website. A CDN helps to provide the content of our online offerings, especially files such as graphics or scripts, faster with the aid of regionally or internationally distributed servers. When you access such content, you connect to servers operated by Interactive Advertising Bureau Europe A.I.S.B.L., Rond-Point Robert Schumanplein 11, 1040 Brussels, Belgium, where your IP address and, potentially, browser data such as your user agent are transmitted. This data will only be processed for the purposes described above and to maintain the security and functionality of Consensu.

Purpose and legal basis

Retention period

We have no control over the specific retention period for data following processing. This is determined by Interactive Advertising Bureau Europe A.I.S.B.L. For more information, please see the Consensu Privacy Policy: https://www.iab.com/privacy-policy/.

Google Analytics Type and scope of processing

We use Google Analytics, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offerings. This includes, for example, the number of times our online offer is called up, sub-pages visited and the length of time visitors spend on the site. Google Analytics uses cookies and other browser-related technologies to analyse user behaviour and to recognise users. This information is used, amongst other things, to compile reports on website activity.

Purpose and legal basis

We process data with the aid of Google Analytics for the purpose of optimising our website and for marketing purposes on the basis of your consent in accordance with Art. 6(1)(a) GDPR.

Retention period

We have no control over the specific retention period for data following processing. This is determined by Google Ireland Limited. For more information, please see the Google Analytics Privacy Policy https://policies.google.com/privacy.

Google CDN Type and scope of processing

We use Google CDN to properly deliver the content of our website. Google CDN is a service provided by Google Ireland Limited, which acts as a content delivery network (CDN) on our website. A CDN helps to provide the content of our online offerings, especially files such as graphics or scripts, faster with the aid of regionally or internationally distributed servers. When you access such content, you connect to servers operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, where your IP address and, potentially, browser data such as your user agent are transmitted. This data will only be processed for the purposes described above and to maintain the security and functionality of Google CDN.

Purpose and legal basis

Retention period

We have no control over the specific retention period for data following processing. This is determined by Google Ireland Limited. For more information, please see the Google CDN Privacy Policy: https://policies.google.com/privacy.

Google DoubleClick Type and scope of processing

We have integrated DoubleClick by Google components into our website. DoubleClick is a Google brand, under which specialised online marketing solutions are primarily marketed to advertising agencies and publishers. DoubleClick by Google transmits data to the DoubleClick server with each impression as well as based on clicks or other activities. Each such data transmission triggers a cookie request to the data subject’s browser. DoubleClick sets a cookie in your browser if the browser accepts this request. DoubleClick uses a cookie ID that is required for technical processing. The cookie ID is needed, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplicate placements. In addition, the cookie ID makes it possible for DoubleClick to record conversions. Conversions are recorded, for example, when a DoubleClick ad has previously been displayed to a user and the user subsequently makes a purchase on the advertiser’s website using the same web browser. A cookie from DoubleClick does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier is used to identify campaigns you have already been in contact with on other websites. In connection with this service, Google is provided access to data that Google also uses to generate commission statements. Amongst other things, Google can see that you have clicked on certain links on our website. In such cases, your data will be shared with the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Additional information, and the applicable privacy policies for DoubleClick by Google, may be accessed at https://policies.google.com/privacy abgerufen werden.

Purpose and legal basis

We process your data with the aid of the DoubleClick cookie for the purpose of optimising and displaying advertising on the basis of your consent in accordance with Art. 6(1)(a) GDPR. You provide your consent by setting the use of cookies (cookie banner/Consent Manager), with which you can also revoke your consent at any time with effect for the future in accordance with Art. 7(3) GDPR. The cookie is used, amongst other things, to place and display user-relevant advertising and to generate reports on or improve advertising campaigns. Furthermore, the cookie is used to avoid multiple displays of the same advertisement. Every time you access an individual page on our website on which a DoubleClick component has been integrated, the respective DoubleClick component causes your browser to automatically transmit data to Google for purposes of online advertising and to calculate commissions. There is no legal or contractual obligation to provide your data. It is possible to visit our website without restriction if you do not grant us your consent; however, not all functions may be fully available.

Retention period

We have no control over the specific retention period for data following processing. This is determined by Google Ireland Limited. For more information, please see the Google DoubleClick Privacy Policy: https://policies.google.com/privacy. Google Fonts Type and scope of processing We use Google Fonts, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to provide fonts for our online offerings. To obtain these fonts, you connect to servers operated by Google Ireland Limited and your IP address will be transmitted as part of this process. Purpose and legal basis Use of Google Fonts is based on our legitimate interests, i.e. our interest in the uniform provision, as well as the optimisation, of our online offerings according to Art. 6(1)(f) GDPR. Retention period We have no control over the specific retention period for data following processing. This is determined by Google Ireland Limited. For more information, please see the Google Fonts Privacy Policy: https://policies.google.com/privacy. Google Maps Type and scope of processing We use the Google Maps mapping service to provide directions. Google Maps is a service provided by Google Ireland Limited that displays a map on our website. When you access such content on our website, you connect to servers operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, where your IP address and, potentially, browser data such as your user agent are transmitted. This data will only be processed for the purposes described above and to maintain the security and functionality of Google Maps. Purpose and legal basis Use of Google Maps is based on our legitimate interests in accordance with Art. 6(1)(f) GDPR, i.e. our interest in making it easier for you to find locations mentioned on our website. Retention period We have no control over the specific retention period for data following processing. This is determined by Google Ireland Limited. For more information, please see the Google Maps Privacy Policy: https://policies.google.com/privacy. Google Tag Manager Type and scope of processing We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through a single interface and allows us to control the exact integration of services on our website. This allows us to flexibly integrate additional services for purposes of evaluating user access to our website. Purpose and legal basis Use of Google Tag Manager is based on our legitimate interests, i.e. our interest in the optimisation of our services in accordance with Art. 6(1)(f) GDPR. Retention period We have no control over the specific retention period for data following processing. This is determined by Google Ireland Limited. For more information, please see the Google Tag Manager Privacy Policy: https://www.google.de/tagmanager/use-policy.html. Google reCAPTCHA Type and scope of processing We have integrated Google reCAPTCHA components into our website. Google reCAPTCHA is a service provided by Google Ireland Limited that enables us to distinguish whether a contact request originates from a natural person or has been submitted automatically by a program. When you access such content, you connect to servers operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, where your IP address and, potentially, browser data such as your user agent are transmitted. In addition, Google reCAPTCHA records the user’s dwell time and mouse movements to distinguish automated requests from human ones. This data will only be processed for the purposes described above and to maintain the security and functionality of Google reCAPTCHA. Purpose and legal basis Use of this service is based on our legitimate interests, i.e. our interest in securely transmitting forms in accordance with Art. 6(1)(f) GDPR. Retention period We have no control over the specific retention period for data following processing. This is determined by Google Ireland Limited. For more information, please see the Google reCAPTCHA Privacy Policy: https://policies.google.com/privacy?hl=en-US. JSDelivr CDN Type and scope of processing We use JSDelivr CDN to properly deliver the content of our website. JSDelivr CDN is a service provided by Prospect One, which acts as a content delivery network (CDN) on our website. A CDN helps to provide the content of our online offerings, especially files such as graphics or scripts, faster with the aid of regionally or internationally distributed servers. When you access such content, you connect to servers operated by Prospect One, Krolewska 65a, Krakow, Malopolskie 30-081, Poland, where your IP address and, potentially, browser data such as your user agent are transmitted. This data will only be processed for the purposes described above and to maintain the security and functionality of JSDelivr CDN. Purpose and legal basis Use of the content delivery network is based on our legitimate interests, i.e. our interest in the secure and efficient provision, as well as the optimisation, of our online offerings according to Art. 6(1)(f) GDPR. Retention period We have no control over the specific retention period for data following processing. This is determined by Prospect One. For more information, see the JSDelivr CDN privacy policy: https://www.jsdelivr.com/privacy-policy-jsdelivr-net. ProvenExpert CDN Type and scope of processing We use ProvenExpert CDN to properly deliver the content of our website. ProvenExpert CDN is a service provided by Expert Systems AG, which acts as a content delivery network (CDN) on our website. A CDN helps to provide the content of our online offerings, especially files such as graphics or scripts, faster with the aid of regionally or internationally distributed servers. When you access such content, you connect to servers operated by Expert Systems AG, Quedlinburger Str. 1, 10589 Berlin, Germany, where your IP address and, potentially, browser data such as your user agent are transmitted. This data will only be processed for the purposes described above and to maintain the security and functionality of ProvenExpert CDN. Purpose and legal basis Use of the content delivery network is based on our legitimate interests, i.e. our interest in the secure and efficient provision, as well as the optimisation, of our online offerings according to Art. 6(1)(f) GDPR. Retention period We have no control over the specific retention period for data following processing. This is determined by Expert Systems AG. For additional information, please see the ProvenExpert CDN Privacy Policy: https://www.provenexpert.com/de-de/datenschutzbestimmungen/. Social networking and links We maintain so-called ‘fan pages’ or accounts or channels on the networks referred to below in order to provide you with information and offerings within social networks and to offer you additional ways of contacting us and learning about our offerings. Below, we will inform you about what data we, or the respective social network, process concerning you when you access and/or use our fan pages/accounts. Data we process from you If you wish to contact us via messenger or direct message via the respective social network, we generally process your user name and, if applicable, retain additional data provided by you to the extent necessary for processing/answering your request. The legal basis is Art. 6(1)(f) GDPR (processing is necessary in pursuit of the legitimate interests of the controller). (Statistical) Usage data we receive from social networks We receive automated statistics related to our accounts via Insights functionalities. The statistics include, but are not limited to, total page views, likes, page activity and post interactions, reach, video views, and the percentage of men/women among our fans/followers. The statistics contain only aggregated data and cannot be associated with any specific persons. We are not able to identity you using this data. What data social networks process concerning you In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and, accordingly, no user account on the relevant social network is required. Please note, however, that the social networks also collect and store data from website visitors who do not have a user account when the respective social network is accessed (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies, over which we have no control. For details, please refer to the privacy policy of the respective social network (see relevant links provided above). Prior registration with the respective social network, and the provision of personal data, is required in the event you wish to interact with content on our fan pages/accounts, e.g. comment on, share or like our postings/contributions and/or contact us via messenger functions. We have no influence on data processing performed by social networks during your use of such networks. To our knowledge, your data is stored and processed in particular in connection with the provision of services offered by the respective social network, for the analysis of user behaviour (by placing cookies, pixel/web beacons and similar technologies) on the basis of which advertising tailored to your interests is displayed both within and outside the respective social network. It is possible that your data may be stored by social networks outside the EU/EEA and shared with third parties. Information on, amongst other things, the exact scope and purposes for which your personal data is processed, the retention period/erasure as well as guidelines on the use of cookies and similar technologies when registering and using social networks may be found in the privacy policy/cookie policy of the respective social networks. Information about your rights and opportunities to object may be found there as well. Facebook When you visit our Facebook page, Facebook collects, amongst other things, your IP address and other information that is contained in cookies on your PC. This information is used to provide us, as operators of the relevant Facebook pages, with statistical information about use of our Facebook page. Facebook provides additional information on this topic at the following link: https://facebook.com/help/pages/insights. We are not able to identify specific users by means of statistical information transmitted to us. We use this information solely to respond to the interests of our users and to continuously improve and ensure the quality of our online offerings. We collect your data via our fan page solely for purposes of providing opportunities for communicating and interaction. As a rule, data that is collected comprises your name, message content, comment content, and the profile information you have set to ‘public’. Processing your personal data for our above-mentioned purposes is based on our legitimate business and communications-related interest in providing a channel for information and communications in accordance with Article 6(1)(f) GDPR. If you have given your consent to such data processing to the provider of the relevant social network in your capacity as a user, the legal basis for processing also includes Art. 6(1)(a) and Art. 7 GDPR. Our ability to access your data is limited in light of the fact that the actual data processing is performed by the social network provider. Only social network operators are authorised to have full access to your data. Accordingly, only the provider is able to directly initiate and undertake appropriate measures to satisfy your user rights (request for access, request for erasure, objection, etc.). Accordingly, the most effective means for you to exercise such rights is by contacting the provider concerned. We are joint controllers together with Facebook with regard to personal content on the fan page. Rights of data subjects may be exercised by contacting us or Facebook Ireland. According to the GDPR, Facebook is primarily responsible for processing Insights data and Facebook complies with all obligations under the GDPR in relation to processing Insights data; Facebook Ireland provides essential information concerning the Page Insights supplement to data subjects. We do not make any decisions regarding the processing of Insights data and any other information described in Art. 13 GDPR, including legal basis, identity of the controller and the retention period for cookies on user devices. You can obtain further information directly from Facebook (Supplemental Agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum. Instagram When you visit our Instagram page, Instagram collects, amongst other things, your IP address and other information that is contained in cookies on your PC. This information is used to provide us, as operators of the relevant Instagram pages, with statistical information about use of our Instagram page. Instagram provides additional information on this topic at the following link: https://facebook.com/help/pages/insights. We are not able to identify specific users by means of statistical information transmitted to us. We use this information solely to respond to the interests of our users and to continuously improve and ensure the quality of our online offerings. We collect your data via our fan page solely for purposes of providing opportunities for communicating and interaction. As a rule, data that is collected comprises your name, message content, comment content, and the profile information you have set to ‘public’. Processing your personal data for our above-mentioned purposes is based on our legitimate business and communications-related interest in providing a channel for information and communications in accordance with Article 6(1)(f) GDPR. If you have given your consent to such data processing to the provider of the relevant social network in your capacity as a user, the legal basis for processing also includes Art. 6(1)(a) and Art. 7 GDPR. Our ability to access your data is limited in light of the fact that the actual data processing is performed by the social network provider. Only social network operators are authorised to have full access to your data. Accordingly, only the provider is able to directly initiate and undertake appropriate measures to satisfy your user rights (request for access, request for erasure, objection, etc.). Accordingly, the most effective means for you to exercise such rights is by contacting the provider concerned. We are joint controllers together with Instagram with regard to personal content on the fan page. Rights of data subjects may be exercised by contacting us or Facebook Ireland. According to the GDPR, Instagram is primarily responsible for processing Insights data and Instagram complies with all obligations under the GDPR in relation to processing Insights data; Facebook Ireland provides essential information concerning the Page Insights supplement to data subjects. We do not make any decisions regarding the processing of Insights data and any other information described in Art. 13 GDPR, including legal basis, identity of the controller and the retention period for cookies on user devices. You may obtain further information directly from Instagram (Supplemental Agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum. YouTube Video Type and scope of processing We have integrated YouTube Video into our website. YouTube Video is a component of the online video platform provided by YouTube, LLC, where users can upload content, share it over the internet and receive detailed statistics. YouTube Video allows us to integrate content from the platform into our website. YouTube Video uses cookies and other browser-related technologies to analyse user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse the activity of the listened-to content and to generate reports. If a user is registered with YouTube, LLC, YouTube Video can associate any videos played with their profile. When you access such content, you connect to servers operated by YouTube, LLC, where your IP address and, potentially, browser data such as your user agent are transmitted. Purpose and legal basis Use of the service is based on our legitimate interests, i.e. our interest in providing platform-independent content in accordance with Art. 6(1)(f) GDPR. Retention period We have no control over the specific retention period for data following processing. This is determined by YouTube, LLC. For more information, please see the YouTube Video Privacy Policy: https://policies.google.com/privacy.