Facebook privacy politics
​
I. Foreword
We are pleased that you are visiting our page “Villa pero - an artist‘s home - Pašman island” (hereinafter “Facebook page”) and would like to inform you in this privacy policy about how personal data is processed in connection with your visit or interactions with our Facebook page or its content. Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”).
The legal basis for data protection can be found in the General Data Protection Regulation (GDPR)
II. controller
A controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. If two or more controllers jointly determine the purposes and means of the processing, they are joint controllers.
If you transmit personal data to us via our Facebook page and we alone decide on the purposes and means of processing, the controllers are
​
Carolin Engels & Igor Dakovic
Angelestraße 63
88214 Ravensburg
(hereinafter “we”, “us”) is the sole controller for the processing.
Insofar as personal data is processed in connection with our Facebook page and Facebook alone decides on the purposes and means of processing, Meta Platforms Ireland Ltd (hereinafter “Meta”) 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland is the sole controller of the processing.
Insofar as personal data is processed by Meta and us in connection with our Facebook page or its content and we contribute to the decision on the purposes and means of this processing, Meta and we are joint controllers within the meaning of Art. 26 para. 1 sentence 1 GDPR and in accordance with the decision of the European Court of Justice of June 5, 2018.
We assume that the scope of joint responsibility extends exclusively to the processing of so-called “insights data”. Insights data are personal data under the GDPR that are collected and processed in connection with a visit to or an interaction of persons with a page and its content, insofar as this is done - under the influence and control of the person responsible for the page - for the purpose of creating and evaluating “page insights”
Page Insights are statistics that Meta provides to us (hereinafter “Page Statistics”).
We and Meta have stipulated in the Page Insights Controller Addendum (hereinafter “Controller Agreement”) within the meaning of Art. 26 para. 1 sentence 2 GDPR that Meta assumes primary responsibility for the fulfillment of all obligations with regard to the processing of Insights data and in particular for the exercise of data subject rights in accordance with the GDPR. The Controller Agreement supplements the Guidelines for Pages, Groups and Events and the Terms of Use that we have agreed to as part of the operation of our Facebook page. By operating our Facebook page, we implicitly agree to the agreement regarding the controller.
​
III Data Protection Officer
You can contact Meta‘s data protection officer using the online contact form provided on the Facebook platform.
​
IV. Scope of the processing of personal data
​
1. information on data processing by Meta
Meta‘s Data Policy specifies the categories of personal data that are processed when using Meta Products (see I.), describes in general terms the purposes for which this data is used (see II.) and specifies the categories of recipients to whom this data may be disclosed (see III., IV. and VIII.). Under the link to the data policy provided, you will also find information on the legal basis for processing this data (see V.) and information on how you can withdraw your consent to the processing of personal data. Further information on the respective legal basis can be found here. In the Data Policy, you will find information on how you can exercise your rights of access, rectification, portability and erasure vis-à-vis Meta (see VI.)
Under this point you will also find information about your right to object to certain processing of personal data. You can find more information on the right to object in this help article. In the Data Policy, you will also find information about the duration for which personal data is stored and information about the criteria for determining this duration (see VII.). The Data Policy refers to Meta‘s intention to transfer personal data to third countries if necessary (see IX.). According to Meta, the transfer takes place on the basis of the adequacy decisions issued by the European Commission within the meaning of Art. 45 para. 1 GDPR or approved standard contractual clauses within the meaning of Art. 46 para. 2 lit. c GDPR.
​
2. information on the use of cookies by Meta
When you visit our Facebook page and your browser allows cookies to be stored, Meta stores information in the form of small text files in your browser‘s memory (hereinafter “cookies”) and can access this information when you visit the Facebook platform or a website that integrates Facebook technologies. For more information on the purpose of the cookies used, the integration of these cookies by other websites and your control options in this regard, please refer to Meta‘s cookie policy. A detailed overview of the cookies used by Meta is available in the linked cookie policy by clicking on the “Cookies” link under “Why do we use cookies?”.
We would like to point out that Meta is able to track your user behavior (across devices for registered users) on other websites beyond the Facebook platform by means of the cookies used. This applies both to persons registered with the Facebook platform and to persons not registered there. In particular, information about you is transmitted to Meta when you visit websites that include a “Like” button.
We would also like to point out that we have no influence on the data processing carried out by Meta in connection with cookies. It is also possible to visit our Facebook page if you configure your browser so that no cookies are stored by the Facebook platform. Information on how to adjust the settings for cookies in your browser can usually be found in the help section of the browser you are using.
If you are registered or logged in to the Facebook platform and would like to prevent Meta from linking your visit to our Facebook page to your user account, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies on your device and close and restart your browser.
Meta has assured us that no personal data created directly from cookie information is used for the page statistics we use.
3. data processing for interactions on our Facebook page
Our Facebook page offers you the opportunity to react to our posts, comment on them, create a post yourself and send us private messages. Please check carefully what personal data you share with us via Facebook. If you would like to prevent Facebook from processing personal data that you have transmitted to us, please contact us by other means.
a) Scope of data processing In addition to the content you transmit, we have access to information about your profile, your likes and your posts, depending on your privacy settings. You can find out how to change your privacy settings in this help article.
b) Legal basis for data processing We process your data when you contact us or interact with our website or its content on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.
c) Purpose of data processing We process the data you provide in this context and which may be accessible to us in order to safeguard our legitimate interests in communicating with customers and interested parties, which predominate in the context of a balancing of interests. Our interest lies in offering you a platform on which we can display current information and with the help of which you can address your request to us and we can respond to your request as quickly as possible. This also constitutes our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
d) Duration of data storage Your data will, as far as possible, be deleted when we cease to operate our Facebook page. If Meta continues to store this data, it will be stored exclusively in accordance with the provisions of its data policy and terms of use.
4. data processing for statistical purposes
For our Facebook page, we use page statistics provided by Meta, which provide us with information about visitors to our Facebook page and their interactions with our Facebook page and its content. a) Contribution to the decision on the means and purposes of processing We have no influence on the creation of page statistics and cannot prevent their generation during the operation of our Facebook page. In particular, there is no parameterization or other instruction on our part to Meta to process personal data in a certain way for the creation of page statistics. In the agreement regarding the controller, it was determined that only Meta can make and implement decisions regarding the processing of Insights data. Our contribution to the decision on the means and purposes of processing Insights Data is therefore limited to the objectives of controlling or promoting our activities in connection with the operation of our Facebook page, for the purpose of which we can evaluate the page statistics provided to us by Meta and based on Insights Data.
b) Scope of data processing Meta explains in the information on Page Insights data which data is used to create the page statistics we use. In principle, this data is only made available to us in anonymized form. However, if you have set your “Like” information for pages to public, we may be able to assign this information to your profile. Meta provides us with page statistics based on the aforementioned Insights data. The exact content of the page statistics and the available views can be found in the explanations of the page statistics. According to Meta, changing the views listed there does not lead to any additional data processing. The site statistics are only used by us within the scope of the above-mentioned functions provided by Meta and available to us. There is no transfer or other further processing of this data.
Meta has declared to us that page statistics do not show any information about people who are not registered or logged in to the Facebook platform.
c) Legal basis for data processing We assume that the processing of Insights data by Meta for the provision of the page statistics used by us in the context of the fulfillment of contractual services in connection with the contract concluded between Meta and the data subject regarding the terms of use of the Facebook platform pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR. In the case of persons with limited legal capacity, we assume that Meta may carry out the processing to safeguard a legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. An overview of the interests cited by Meta in this context and further information on their legal basis can be found here.
We process the page statistics provided to us and the Insights data collected for their creation under joint responsibility in order to safeguard our legitimate interests in improving our information offering in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. For the Insights data processed under joint responsibility, only data of persons who have agreed to the Terms of Use and Meta‘s Data Policy as part of their registration with the Facebook platform are processed. Meta‘s Data Policy refers to the purpose of this processing under the heading “Partners who use our analytics services”.
d) Purpose of data processing The purpose of processing the Insights data collected under joint responsibility is to compile page statistics. These page statistics may be analyzed by us in order to understand how visitors interact with our Facebook page and thus serve to improve the information offered to visitors to our Facebook page. The page statistics are used by us to track trends. We do not use page statistics to draw conclusions about individual persons. These purposes also include our legitimate interests in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
e) Duration of data storage The site statistics we use include Insights data for a period of two years and will not be processed by us thereafter. Any further storage of this data by Meta will be governed exclusively by the provisions of Meta‘s Data Policy and Terms of Use.
​
V. Rights of data subjects
We have summarized the rights of data subjects for you below. The full legal texts can be found in the articles mentioned. This summary does not give rise to any rights over and above those set out in the GDPR.
Data subjects have the following rights vis-à-vis the controller
- Right to withdraw consent (Art. 7 para. 3 GDPR): You can revoke your consent to the processing of data once given at any time with effect for the future.
- Right to information (Art. 15 GDPR):
You can request information about whether your personal data is being processed. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period or criteria for this, the existence of a right to rectification, erasure, restriction of processing, objection or the existence of the right to lodge a complaint. You can also request information about the origin of data that was not collected from you. You can also request to be informed whether there is automated decision-making, whether data is transferred to a third country or to an international organization and on the basis of which guarantees this is done. You may request a copy of the personal data concerning you, provided that this does not adversely affect the rights and freedoms of others.
- Right to rectification (Art. 16 GDPR):
You can request the immediate correction of incorrect personal data or, taking into account the purposes of processing, the completion of your stored personal data.
- Right to erasure (Art. 17 GDPR): You may request the deletion of your stored personal data if the purpose of the processing has ceased to exist due to the passage of time or other reasons, you have withdrawn your consent or objected to the processing and there are no overriding reasons for the processing or other legal bases, the legal basis for the data processing is missing or has ceased to exist and the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims. If we have made your data public, we are obliged to take reasonable steps to inform each recipient that you have requested the deletion of all links to or copies of the personal data concerned.
- Right to restriction of processing (Art. 18 GDPR):
You have a right to restriction of processing if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data; the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; we no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims, or if you have objected to processing pursuant to Section 23 KDG and it is not yet certain whether our legitimate grounds override your grounds.
- Right to data portability (Art. 20 GDPR): You have the right to receive the personal data that you have provided to us on the basis of your consent or a contract concluded with us, which is processed using automated procedures, in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, provided that this does not adversely affect the rights and freedoms of other persons and is technically feasible.
- Right to object (Art. 21 GDPR):
You have the right to object, on grounds relating to your particular situation, to processing which we carry out for the purposes of our legitimate interests, except where we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. You have the right to object at any time to processing that we carry out for direct marketing purposes. Your data may then no longer be processed for these purposes.
- Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes data protection regulations.
VI Amendment of these data protection provisions
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.