data protection Instagram | Kroatien

Instagram privacy politics

I. Foreword

Thank you for visiting our websites https://www.instagram.com/villa_pero_croatia/ and https://www.instagram.com/atelierhaus.no.17/ (hereinafter referred to as “Instagram page”) and we would like to inform you in this privacy policy about how personal data is processed in connection with your visit or interactions with our Instagram pages or their content. Instagram is an online service for sharing photos and videos that belongs to Facebook. Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”).

The legal basis for data protection can be found in the General Data Protection Regulation (GDPR).

II Controller

A controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

If you transmit personal data to us via our Instagram page and we alone decide on the purposes and means of processing, the controller is

Carolin Engels and Igor Dakovic

Angelestraße 63

88214 Ravensburg

Villa.pero.pasman@gmail.com (hereinafter “we”, “us”) is the sole controller for the processing.

Insofar as personal data is processed in connection with our Instagram page and Facebook alone decides on the purposes and means of processing, Meta Platforms Ireland Ltd (hereinafter “Meta”) 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland is the sole controller of the processing.

III Data Protection Officer

You can contact Meta‘s data protection officer using the online contact form provided on the Facebook platform.

IV Scope of the processing of personal data

1. information on data processing by Facebook Ireland

The Instagram Privacy Policy specifies the categories of personal data that are processed when using Meta Products (see I.), describes in general terms the purposes for which this data is used (see II.) and specifies the categories of recipients to whom this data may be disclosed (see III., IV.). Under the link to the data policy provided, you will also find information on the legal basis for processing this data (see V.) and information on how you can withdraw your consent to the processing of personal data. Further information on the respective legal basis can be found here. In the Data Policy, you will find information on how you can exercise your rights of access, rectification, portability and erasure against Meta (see VI.). Under this point, you will also find information about your right to object to certain processing of personal data. You can find more information about your control options in this help article. In the Data Policy you will also find information about the duration for which personal data is stored and information about the criteria for determining this duration and the possibility of blocking or deleting Instagram accounts (see VII.). The Data Policy refers to Meta‘s intention to transfer personal data to third countries if necessary (see IX.). According to Meta, the transfer takes place on the basis of the adequacy decisions issued by the European Commission within the meaning of Art. 45 para. 1 GDPR or approved standard contractual clauses within the meaning of Art. 46 para. 2 lit. c GDPR.

2. information on the use of cookies by Facebook Ireland

If you visit our Instagram page and your browser allows cookies to be stored, Meta stores information in the form of small text files in your browser‘s memory (hereinafter “cookies”) and can access this information when you visit the Facebook platform or a website that integrates Facebook technologies. For more information on the purpose of the cookies used, the integration of these cookies by other websites and your control options in this regard, please refer to the information on Instagram cookies.

We would like to point out that Meta is able to track your user behavior (across devices for logged-in users)

can also be tracked beyond the Instagram platform on other websites. This applies both to persons registered with the Instagram platform and to persons not registered there.

We would also like to point out that we have no influence on the data processing carried out by Meta in connection with cookies. It is also possible to visit our Instagram page if you configure your browser so that no cookies are stored by the Facebook platform. Information on how to adjust the settings for cookies in your browser can usually be found in the help section of the browser you are using.

If you are registered or logged in to the Instagram or Facebook platform and want to prevent Meta from linking your visit to our Facebook page to your Instagram or Facebook user account, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies on your device and close and restart your browser.

3. data processing for interactions on our Instagram page

Our Instagram page offers you the opportunity to react to our posts, comment on them and send us private messages. Please check carefully what personal data you share with us via our Instagram page. If you would like to avoid Facebook processing personal data that you have transmitted to us, please contact us by other means.

a) Scope of data processing In addition to the content you submit, depending on your privacy settings, information about your profile, your likes and your posts will be visible to us. You can find out how to change your privacy settings in this help article.

b) Legal basis for data processing We process your data when you contact us or interact with our site or its content on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

c) Purpose of data processing We process the data you provide and which may be accessible to us in the interest of communicating with you. We would like to offer you a platform on which we can give you an insight into our company and our activities and with the help of which you can quickly get in touch with us.

This also constitutes our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

d) Duration of data storage Your data will, as far as possible, be deleted when we cease to operate our Instagram page. Any further storage of this data by Meta will be governed exclusively by the provisions of the Instagram Privacy Policy and Instagram Terms of Use.

4. processing of anonymized data for statistical purposes

We have set up our Instagram page as a business profile and receive anonymized page statistics (“Instagram Insights”) provided by Meta, which provide us with statistical insights about visitors to our Instagram page and their interactions with our Instagram page and its content. We do not contribute to the decision on the means and purposes of processing event data used to create page statistics and cannot prevent the creation of statistics. The statistics include the following information:

- Reach, page views, dwell time for video posts - Interactions such as marking a post with “Like”, commenting on or sharing posts - Demographic information on age, gender and location It is not possible for us to link back to individuals who triggered these events. If you have any questions about the personal data that Facebook processes to compile the statistics, you can send a request to Meta‘s data protection officer.

V. Processing of anonymized data for statistical purposes

We have set up our Instagram page as a business profile and use anonymized page statistics (“Instagram Insights”) provided by Facebook Ireland, which provide us with insights about visitors to our Instagram page and their interactions with our Instagram page and its content. We do not contribute to the decision on the means and purposes of processing event data used to generate page statistics. The statistics include the following information:

Reach, page views, time spent on video posts

Interactions such as marking a post with “Like”, commenting on or sharing posts

Demographic information on age, gender and location

We use this data to identify trends. It is not possible for us to link back to the people who triggered these events.

VI Rights of data subjects

We have summarized the rights of data subjects for you below. The full legal texts can be found in the articles mentioned.This summary does not give rise to any rights beyond those set out in the GDPR.

Data subjects have the following rights vis-à-vis the controller

- Right to withdraw consent (Art. 7 para. 3 GDPR): You can revoke your consent to the processing of data once given at any time with effect for the future.

- Right to information (Art. 15 GDPR):

You can request information about whether your personal data is being processed.In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period or criteria for this, the existence of a right to rectification, erasure, restriction of processing, objection or the existence of the right to lodge a complaint.You can also request information about the origin of data that was not collected from you.You can also request to be informed whether there is automated decision-making, whether data is transferred to a third country or to an international organization and on the basis of which guarantees this is done.You may request a copy of the personal data concerning you, provided that this does not adversely affect the rights and freedoms of others.- Right to rectification (Art. 16 GDPR):You may request the immediate rectification of inaccurate personal data or, taking into account the purposes of the processing, the completion of your stored personal data.- Right to erasure (Art. 17 GDPR):

You can request the deletion of your stored personal data if the purpose of the processing has ceased to exist due to the passage of time or other reasons, if you have revoked your consent or objected to the processing and there are no overriding reasons for the processing or other legal bases, if the legal basis for the data processing is missing or has ceased to exist and the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.If we have made your data public, we are obliged to take reasonable steps to inform each recipient that you have requested the deletion of all links to or copies of the personal data concerned.- Right to restriction of processing (Art. 18 GDPR):

You have a right to restriction of processing if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data; the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; we no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims, or if you have objected to processing pursuant to Section 23 KDG and it is not yet certain whether our legitimate grounds override your grounds.

- Right to data portability (Art. 20 GDPR): You have the right to receive the personal data that you have provided to us on the basis of your consent or a contract concluded with us, which is processed using automated procedures, in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, provided that this does not adversely affect the rights and freedoms of other persons and is technically feasible.

- Right to object (Art. 21 GDPR):

You have the right to object, on grounds relating to your particular situation, to processing which we carry out for the purposes of our legitimate interests, except where we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. You have the right to object at any time to processing that we carry out for direct marketing purposes. Your data may then no longer be processed for these purposes.

- Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes data protection regulations.

VII Amendment of these data protection provisions

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.