- Scope of the Privacy Policy
- Who is responsible for processing your Personal Data?
- How do we collect Personal Data from you?
- How and why do we use your Personal Data?
- With whom do we share your Personal Data?
- How long do we keep your Personal Data?
- International Data Transfers
- Data Subject Rights
- Questions, concerns and support – With whom and how can you get in touch?
At Terra Mater Studios GmbH (“Company” or “we” or “our”), we place the highest priority on respecting your data privacy. This privacy policy (“Policy”) describes how we collect and process information from which you can be directly or indirectly identified (“Personal Data”) when you interact with us through our digital offerings (including our website, social media channels, events, or other products and services). It also describes how your Personal Data is used, shared, and protected, the choices you have regarding your Personal Data and how you can contact us.
For some of our products or services, the way in which we may use or collect your Personal Data may differ from what is set forth in this Policy; for such cases we will clearly link you to any dedicated policies within this Policy.
We may change this Policy from time to time. If we make any important changes to this Policy (for example changes that affect the Personal Data we collect, or how or why we use it), then we will inform you about those changes and the date of the changes at the top of this Policy.
The respective Company responsible for the processing of your Personal Data (“Data Controller”) will depend on how you interact with us, and where you are located in the world. The respective Data Controller is included within each data processing activity in this Policy.
For certain products or services, we and another third party may jointly determine how your Personal Data is used (“Joint Controllers”) for the purposes identified in this Policy. Whenever we act as a Joint Controller, we act based on a specific arrangement that sets out the distribution of agreed roles and responsibilities of each party for compliance with their obligations. Such joint controllership arrangements govern in particular:
- How and which Joint Controller shall provide the information to data subjects on the underlying data processing;
- Which Joint Controller shall be the designated point of contact for communication with data subjects and supervisory authorities; and,
- Which Joint Controller shall be responsible for the notification of a personal data breach to supervisory authorities and data subjects.
Further details regarding Joint Controllerships are provided in the specific section for the respective Personal Data processing activity.
There are several ways we may collect your Personal Data depending on how you interact with us. Below are several examples. However, for more detailed information on each category of Personal Data we collect, please visit the section “How and why do we use your Personal Data?”.
- Personal Data you provide us directly: You may provide us with your Personal Data directly, for example when you use our website, participate in our events or promotions, subscribe to our newsletters, purchase our products or services, or communicate with us through one of our social media platforms.
- Personal Data we collect automatically: When you use our website, we may automatically collect certain types of information, such as information about your visit or page interactions.
- Personal Data we receive from other sources: We may also receive your information about you from other sources if you use our website, or services. We are also working closely with third parties (including for example sub-contractors in technical services), business and sponsorship partners and may receive information about you from them (including information that is publicly available).
Here you will find detailed information about the different ways in which we process Personal Data when you use our products or services, in particular which categories of Personal Data we collect and with which third parties (if any) we share the Personal Data.
A. OUR WEBSITE
i. Provision of the Website (Creation of Log Files)
Purpose of Data Processing
You can visit or use our website without having to create a user account and actively disclose your Personal Data. However, each time you visit of our website, your browser automatically transmits certain information to us. Such information is stored by us in so-called server log files (log files).
We may process your Personal Data for the following purposes, including to:
- Provide and deliver our website and to guarantee the functionality of our website;
- Optimize our website (e.g., to improve loading times);
- Ensure the security and stability of our IT systems.
Legal Basis for Data Processing
The temporary storage and processing of this Personal Data is based on our legitimate interests to ensure the stability and functionality of our website.
Categories of Personal Data
The following Personal Data may be collected:
- Browser information (e.g., IP address, browser type and version, operating system and interface used, language and version of the browser software, etc.);
- Date and time of access and time zone difference to Greenwich Mean Time (GMT);
- Volume of data transmitted in bytes;
- Websites from which the user’s system accesses our website;
- Websites accessed by the user’s system via our website;
- Access status / HTTP status code.
Data Recipient(s)
Your Personal Data may be transferred to:
- IT service providers (e.g., hosting providers, cloud service providers, etc.);
- Backup and disaster recovery specialists.
Data Controller
The Data Controller of the data processing is the company named in the imprint.
Storage Duration
In as much as the Personal Data are stored in log files, these files will only be retained for as long as necessary for the respective data processing.
ii. Cookies and Similar Technologies
When you visit our website, we process Personal Data using cookies and similar technologies (e.g., tags, web beacons, local/session storage, and JavaScript) (hereinafter collectively “Cookies”). Cookies are small text files that are stored on your end device (PC, laptop, tablet, or smartphone). These text files are downloaded by your browser when you visit our website for the first time. When you visit a website again with the same device or browser, the Cookie and the information stored in it are either sent back to the website that created them (first party Cookie) or sent to another website to which it belongs (third-party Cookie). As a result, the website “recognizes” that it is the same user and adjusts the display of content on the website.
Our cookie settings automatically appear at the first visit of our website. You can set your personal preferences within the cookie settings. Unless the use of a Cookie is absolutely necessary for example for technical reasons, you may accept or decline the use of such Cookies. You can change your cookie settings any time via the cookie settings in the footer of the website. Cookies already stored can be deleted at any time. If Cookies are deactivated for our website, it is possible that you will not be able to take full advantage of all the functions of the website.
We use Cookies for the following purposes:
- To provide basic functions of the website and provide any services requested by you, e.g., to save your cookie settings or to offer secure areas for logged-in users (more on this in detail under “Essential Cookies”);
- For the professional presentation of the content of our website, e.g., by integrating map material video services (for more on this see ” External Media”);
a. Essential Cookies
Purpose of Data Processing
We use Essential Cookies to:
- Administer our website for internal operations, including troubleshooting purposes and to understand any errors you may encounter on our website;
- Provide basic functions for our website;
- Keep our website safe and secure and to help manage and administer our IT systems; and,
- Improve use and content of our website to ensure that the content is presented in the most effective way for you and your devices.
Legal Basis for Data Processing
The temporary storage and processing of Personal Data is based on our legitimate interests to:
- Provide our products or services to you, including fully functional website and the services you require;
- Ensure that our website and IT are secure and are being used in an appropriate manner.
Categories of Personal Data, Storage Duration and Categories of Data Recipient(s)
You can find further information about which Essential Cookies we use, as well as what categories of Personal Data we process, for how long we store and to which third parties we transfer them in the cookie settings on the website.
Data Recipients
Your Personal Data will be transferred to IT service providers (e.g., hosting providers, cloud service providers, consent management providers, log-in service providers).
Data Controller
The Data Controller for the Personal Data processing is the company named in the imprint of the this website.
b. External Media
On our website, we integrate content from third-party providers to provide you with an engaging user experience. The following section provides you with information concerning the data processing activities resulting from the use of such embedded third-party content. In a first step, we provide you with general information on the use of third-party embeds applicable to several third-party embed providers. This is followed by more detailed information on the processing activities regarding specific third-party content, which is of particular importance to us.
i) General Information on External Media embeds
Purpose of the Data Processing
On our website, we integrate interactive third-party content, applications, or plug-ins (together “Content”) to provide an engaging user experience.
Examples of such Content include interactive maps, video players or social media plug-ins. Subject to your consent, third parties who provide the Content may collect Personal Data about your use of such Content and may process information from you, which will be used by them in accordance with their own privacy policies. We therefore recommend that you also read the privacy notices and information of the respective third-party content provider as detailed below.
We process Personal Data in relation to the use of third party embeds for the following purposes, including to:
- Improve use and content of our website, to ensure that the content is presented in the most effective way for you and your devices;
- Provide a consistent experience across devices and platforms.
The third-party providers of this Content collect the Personal Data mentioned for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, although you must contact the respective third-party provider of the Content to exercise this right.
Legal Basis for Data Processing
The processing of this Personal Data is based on your consent. You can withdraw your consent at any time and without giving any reasons. However, the withdrawal of consent does not affect the lawfulness of the processing before the withdrawal.
Third-party embeds set Cookies on your browser to store Personal Data. We therefore recommend that you read the section about Cookies in this Policy as well as the cookie policy of the respective embed provider.
Categories of Personal Data
The Personal Data collected in relation to the use of third party embeds may include:
- IP address;
- Referrer URL (the webpage that sends visitors to our website using a link);
- Information about the operating system and its interface;
- Cookie-based data (for example Cookies set to ensure the workability of social plugins);
- User device information (language settings, location, browser type and version);
- Date and time of the request;
- Time zone difference to Greenwich Mean Time (GMT);
- Content of the request (specific page);
- Access status/HTTP status code;
- Location.
Data Recipient(s)
If you consent to the use of our external media embeds, your Personal Data may be shared with the third party providing the embed. For an overview of the third-party embeds in use, see cookie settings of the website.
Data Controller
Depending on the specific third-party embed, we either:
- acts as a Joint Controller with the respective company providing the third-party content for the collection and disclosure by transmission to the company providing the third-party content of the Personal Data. Regarding the further processing activities both Data Controllers act as independent Data Controllers respectively. Concerning further processing activities performed by the company providing the third-party content, such as the potential processing for market research purposes, this company acts as an independent Data Controllers; for further information, please consult the privacy policy of the respective company; or,
- acts as an independent Data Controllers for the data processing activities. The respective company providing the third-party content shall act as independent Data Controllers for the data processing activities performed by the company. For further information, please consult the privacy policy of the respective company.
Storage Duration
As regards storage duration of any third-party cookies that are set within the third-party embed, please refer to the privacy policy of the respective company providing the third-party content.
ii) Specific Third-Party Service Embeds
This section provides you with information on third-party embeds of specific third-party providers. For further information, please consult the privacy policy of the third-party content provider as linked below.
YouTube (Privacy Policy of Google available here)
Purpose of the Data Processing
On our website, we integrate YouTube videos to provide an engaging user experience. With the help of our embedded videos, we can provide you helpful content in addition to our texts and images. YouTube is a video portal operated by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). When you visit a page on our website that contains an embedded YouTube video, your browser automatically connects to the servers of YouTube/Google. Thereby, certain data are transferred (depending on the settings).
We will process this information to:
- Provide a useful and meaningful experience on our website;
- Improve the use and quality on our website.
Subject to your consent, Google LLC, which is providing this content, may collect and process personal data from you in accordance with their privacy policy.
Legal Basis for Data Processing
The processing of this Personal Data is based on your consent. You can withdraw the consent at any time and without giving reasons; however, the withdrawal of consent does not affect the lawfulness of the processing before the withdrawal.
YouTube also sets Cookies on your browser to store Personal Data, we therefore recommend you read our Policy carefully and look at Google’s privacy policy.
Categories of Personal Data
The following Personal Data may be collected depending on if you are logged into your YouTube account:
- IP address;
- Referrer URL;
- Date, time and language of the request;
- Access status/HTTP status code;
- YouTube account data (including session duration, approximate location, browser type).
Data Recipients
If you consent to the use of YouTube, your Personal Data may be shared with:
Google LLC
1600 Amphitheatre Parkway
Mountain View
CA 94043
USA
Google operates data centers globally.
Google uses standard contractual clauses adopted by the EU Commission as basis for data transfers to recipients outside the EEA. These clauses oblige Google to comply with the EU’s level of data protection when processing relevant data outside the EEA.
Data Controller
The Data Controller of the data processing is the company named in the imprint of the website.
If your Personal Data is collected and forwarded via the embedded YouTube content, Google LLC acts as independent Data Controller for the data processing performed by Google. If you have any questions about Google’s data collection and processing, you can contact the company directly or consult the privacy policy of Google.
Storage Duration
As regards storage duration of the third parties, please refer to Google’s YouTube’s privacy policy.
Promotions and Sweepstakes
Purpose of the Data Processing
We offer you the opportunity to participate in our activations and/or promotions (hereinafter “Promotion(s)”). Such Promotions are organized either by us or through a third-party cooperation partner.
We process the Personal Data you provide to us when taking part in the Promotion for the following purposes, including to:
- Administer and carry out the Promotion, such as the drawing of winners and the sending of a prize, or the registration and participation in a Promotion;
- Communicate with you and keep you up to date about our activities and events (subject to your prior consent if legally required); for example, to inform you via email or social media about products and services that may interest you; and,
- Manage any concerns or requests on your behalf relating to the Promotion.
Participation in our Promotions is always voluntary. However, to participate in our Promotions, it is necessary that you provide us with a minimum of Personal Data and that we process this Personal Data.
This Personal Data may also include content that you generate (User-Generated Content). Depending upon what you decide to share with us, such Personal Data may include a photo or video of you and other people (subject to their consent) being part of the published content.
If we organize a Promotion through a third-party cooperation partner, we may also share your Personal Data with the cooperation partner, who may also process your Personal Data while administering and carrying out the Promotion. We therefore recommend that you also read the Privacy Policy of the respective cooperation partner.
Legal Basis for Data Processing
The data processing for the execution of the Promotion is carried out based on the necessity to perform the contract.
Categories of Data
The Personal Data we may process in connection with the participation in our Promotions may include:
- First and last name;
- Email address;
- Postal address (to send prizes);
- Phone number;
- User generated content, depending on what you decide to share with us (e.g., answer options you have chosen, uploaded photos, videos, contributions, texts, social media posts, audios, etc.);
- Any communication in connection with the Promotion.
Data Recipient(s)
Depending on the type of Promotion, your Personal Data may be shared with the following recipients:
- Cooperation partners (with whom we carry out joint Promotions or who provide us with prizes, so we recommend that you also read the privacy policies of the respective cooperation partner);
- IT service providers;
- Shipping providers.
Data Controller
The Data Controller is the company named in the Promotion terms and conditions. To the extent we act as a Joint Controller, we will inform you as part of the registration process.
Storage Duration
We only keep Personal Data for as long as needed to achieve the purposes of the data processing.
iv) Consumer Requests
Contact Us
Purpose of the Data Processing
Should you need to contact us, for example for information, to exercise your privacy rights or to submit a concern, we offer you various ways to get in touch such as via email, postal mail, or by telephone. Your request will be forwarded to the responsible department.
We shall process your Personal Data to:
- Provide an efficient customer care service and manage any concerns or requests on your behalf;
- Provide and improve our products and services you have requested.
Legal Basis for Data Processing
The data processing in connection with contacting us for information, disclosure or complaint purposes is based on our legitimate interest. Our legitimate interest is to:
- Process your requests in a customer-friendly and service-oriented manner;
- Provide our products and services to you;
- Better understand how you use our products, services and website and to make improvements;
- To make any necessary disclosures in response to requests which we are legally required to comply with to law enforcement or any regulatory authorities or bodies.
If you are contacting us in connection with the conclusion of a contract, in a pre-contractual context, or in connection with the direct fulfillment of a contract, the Personal Data will be processed for the purpose of performing the contract.
The data processing in connection with the exercise of your data subject rights is carried out for the compliance with a legal obligation.
Categories of Data
Contacting us is always voluntary. For us to properly process your request and thus be able to help you, you must provide us with a certain minimum of Personal Data, and we must process this Personal Data. Without this minimum required data processing, we are not able to process your request.
Depending on how you contact us, we process the following categories of Personal Data:
- First name and last name;
- Email address;
- Content of the message or reason for contacting.
Data Recipient(s)
Depending on how the contact is made and on what request you have, your Personal Data may be shared with the following recipients:
- IT service providers (e.g., hosting providers, cloud service providers);
- Social media networks;
- Shipping providers;
- Cooperation partners.
Data Controller
The Data Controller is the Company whom you contacted.
Storage Duration
We only keep your Personal Data for as long as needed to achieve the purposes of the data processing.
v) Job Applications
You can find information on how we process your Personal Data within the respective recruitment policy here that will be provided to you as part of the job application process.
B. SOCIAL MEDIA PLATFORMS
General Information
In addition to our website, we operate social media profiles on various social media platforms to familiarize you better with our products and services. Our social media profiles are operated on various social media platforms including, Facebook, YouTube, X and Instagram.
Purpose of the Data Processing
To the extent that we process your Personal Data via our social media profiles, we process it to:
- Communicate with you and keep you up-to-date and make recommendations to you about products and services that may interest you;
- Improve use and content of our profiles to ensure that it is presented in the most effective manner for you;
- To manage our relationship with you and to communicate with you regarding our products and services;
- To provide a consistent experience across devices and platforms by matching information collected from you and provided by you on one device or platform with information collected from and provided by you on other devices and platforms;
- To understand the effectiveness of the advertising we serve to you and others and to deliver relevant advertising to you. Furthermore, we use your information when communicating with you through social media to build and maintain our social media profiles.
Further information regarding each respective social media platform, including any storage periods and whether Company acts a (joint) Data Controller with the third party operating the social media platform, is detailed below.
Company’s Facebook Social Media Profile
(Privacy Policy of Facebook available here and Cookie Policy of Facebook available here)
Purpose of the Data Processing
We operate social media profiles on Facebook for the various purposes listed above, to engage with you, inform you about our events and activities and improve your experience across devices and platforms.
If you want to know exactly how Facebook uses the data for its own purposes which it collects from your visit, how long Facebook stores this data and whether data from a visit to the Facebook page is passed onto third parties, please consult Facebook’s privacy policy.
Legal Basis for Data Processing
Our data processing is based on our legitimate interest to:
- Provide optimized and customer-orientated offerings to you on our operated social media profiles;
- Better understand how you use our products and services; and
- Effectively communicate and conduct social analytics and content performance;
- Remain aware of updated market practice to ensure that we are offering a service which is competitive and meets the expectations of our consumers.
If you want to learn about which legal basis Facebook uses, please consult Facebook’s privacy policy.
Categories of Data
We process the following Personal Data:
- Your Facebook username;
- Direct messages you send us through our Facebook pages;
- Your activity on our Facebook pages through Facebook Insights.
Facebook processes Personal Data about your account, your IP address and the end devices you use. The Personal Data you enter on our Facebook profile page, such as comments, videos, pictures, likes, public messages, etc., are published by Facebook and are at no time used or processed by us for other purposes.
Use of Insights and Cookies on Facebook
In addition, we use the “Facebook Insights” function which shows statistical information (such as gender and age distribution) on the use of our Facebook profile. Facebook Insights refer to demographic data, for example, which target group interact most with our Facebook Page or which content on the Facebook Page was visited, shared or liked when and how often etc. We have no control over the generation and presentation of Facebook Insights, but we receive the data in aggregated form and use it to improve our marketing activities and our external presence. We cannot draw any conclusions about individuals by using Facebook Insights.
Facebook uses cookies and storage technologies. If you are logged into Facebook as a user, there will be a cookie with your Facebook ID on your device. This enables Facebook to understand that you have visited this site and how you have used it. If you want to avoid this, you should log out of Facebook or deactivate the “remember me” function, delete the cookies on your device and exit and restart your browser. In this way, Facebook information that can be used to identify you directly is deleted. This allows you to use our Facebook page without revealing your Facebook ID. More information can be found in Facebook’s cookie guideline.
Data Recipient(s)
If you are in the EEA, your Personal Data will be processed by:
Facebook Ireland Ltd.
4 Grand Canal Square Grand Canal Harbour
Dublin 2
Ireland
However, please note that when using Facebook, Personal Data may also be processed outside the EEA and may be transferred to Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, US.
If the Personal Data is transferred to the USA, the data transfer is based on the existence of standard contractual clauses.
Data Controller
When you visit our Facebook social media page, Personal Data is processed by us and by Facebook. The respective Company operating the Facebook profile is a Joint Controller with Facebook for the data processing operations. To the extent possible, we have concluded agreements on Joint Controllership with Facebook.
Facebook assumes the data protection obligations towards you as the user, such as information on data processing, and is the contact person for your rights. This follows from the fact that Facebook has direct access to the relevant information on the social media profile and the processing of your Personal Data. However, you are also welcome to contact us via the contact details described in our Policy if this should become necessary and we will then forward the request to Facebook, if necessary.
Company’s Instagram Social Media Profile
(Privacy Policy of Instagram available here)
Purpose of the Data Processing
We operate Instagram social media profiles for the various purposes listed above, to engage with you, inform you about our events and activities and improve your experience across devices and platforms.
If you want to know exactly how Instagram uses the Personal Data for its own purposes which it collects from your visit, how long Instagram stores this Personal Data and whether Personal Data from a visit to the Instagram page is passed onto third parties, please consult Instagram’s privacy policy. There you will also find information about contact options for Instagram and the setting options for advertisements.
Legal Basis for Data Processing
Our data processing is based on our legitimate interest to:
- Provide optimized and customer-orientated offerings to you on our operated social media profiles;
- Better understand how you use our products and services you want; and
- Effectively communicate and conduct social analytics and content performance;
- Remain aware of updated market practice to ensure that we are offering a service which is competitive and meets the expectations of our consumers.
If you want to learn about which legal basis Instagram uses, please consult Instagram’s Privacy Policy.
Categories of Data
We process the following Personal Data:
- Your Instagram username;
- Direct messages you send us through our Instagram pages;
- Your activity on our Instagram pages through Instagram Insights.
Instagram processes Personal Data about your account, your IP address and the end devices you use. The Personal Data you enter on our Instagram profile page, such as comments, videos, pictures, likes, public messages, etc., are published by Instagram and are at no time used or processed by us for other purposes.
Use of Insights and Cookies on Instagram
In addition, we use the “Instagram Insights” function which shows statistical information (such as gender and age distribution) on the use of our Instagram profile. Instagram Insights refer to demographic data, for example, which target group interact most with our Instagram Page or which content on the Instagram Page was visited, shared or liked when and how often etc. We have no control over the generation and presentation of Instagram Insights, but we receive the data in aggregated form and use it to improve our marketing activities and our external presence. We cannot draw any conclusions about individuals by using Instagram Insights.
Instagram uses cookies and storage technologies. If you are logged into Instagram as a user, there will be a cookie with your Instagram ID on your device. This enables Instagram to understand that you have visited this site and how you have used it. If you want to avoid this, you should log out of Instagram or deactivate the “remember me” function, delete the cookies on your device and exit and restart your browser. In this way, Instagram information that can be used to identify you directly is deleted. This allows you to use our Instagram page without revealing your Instagram ID. More information can be found in Instagram’s privacy policy.
Data Recipient(s)
Your Personal Data will be processed by:
Instagram Inc. 1601
Willow Road, Menlo Park
CA, 94025
USA
If the Personal Data is transferred to the USA, the data transfer is based on the existence of standard contractual clauses.
Data Controller
When you visit our Instagram social media page, Personal Data is processed by us and by Instagram. The respective Company operating the Instagram profile is a Joint Controller with Instagram for the data processing operations. To the extent possible, we have concluded agreements on Joint Controllership with Instagram, in particular the Page Controller Addendum of Facebook Ireland Ltd which can be found here.
Instagram assumes the data protection obligations towards you as the user, such as information on data processing, and is the contact person for your rights. This follows from the fact that Instagram has direct access to the relevant information on the social media profile and the processing of your Personal Data. However, you are also welcome to contact us via the contact details described in our Policy if this should become necessary and we will then forward the request to Instagram, if necessary.
Company’s X Social Media Profile
Privacy Policy of X available here
Purpose of the Data Processing
We operate X social media profile(s) for the various purposes listed above, to engage with you, inform you about our events and activities and improve your experience across devices and platforms.
If you want to know exactly how X uses the Personal Data for its own purposes which it collects from your visit, how long X stores this Personal Data and whether Personal Data from a visit to the X page is passed onto third parties, please consult X’s privacy policy. There you will also find information about contact options for X and the setting options for advertisements.
Legal Basis for Data Processing
Our data processing is based on our legitimate interest to:
- Provide optimized and customer-orientated offerings to you on our operated social media profiles;
- Better understand how you use our products and services you want; and
- Effectively communicate and conduct social analytics and content performance;
- Remain aware of updated market practice to ensure that we are offering a service which is competitive and meets the expectations of our consumers.
If you want to learn about which legal basis X uses, please consult X’s Privacy Policy.
Categories of Data
We process the following Personal Data:
- Your X username;
- Direct messages you send us through our X pages;
- Your activity on our X pages through X Analytics service.
X processes Personal Data about your account, your IP address and the end devices you use. The Personal Data you enter on our X social media page, such as comments, videos, pictures, likes, public messages, etc., are published by X and are at no time used or processed by us for other purposes.
X Analytics and Cookies on X
X may use analysis tools such as X or Google Analytics for evaluation, however we have no influence on the use of such tools by X. Only certain, aggregated data about the tweet activity, such as the number of profile or link clicks through a specific tweet, can be viewed by us via our account.
In addition, X receives information when you view content, for example, even if you have not created an account. This so-called “log data” can be the IP address, the browser type, the operating system, information about the previously accessed website and the pages you accessed, your location, your mobile phone provider, the end device you are using (including device ID and application ID), the search terms you use and cookie information.
You have options for restricting the processing of your Personal Data in the general settings of your X account and under “Privacy and security”. In addition, you can restrict access from X to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in the setting options there. However, this depends on the operating system used.
Data Recipient(s)
If you are in the EEA, your Personal Data will be processed by:
X Internet Unlimited Company
Attn: Data Protection Officer
One Cumberland Place, Fenian Street
Dublin 2, D02 AX07 IRELAND
However, please note that when using X, Personal Data may also be processed outside the EEA and may be transferred to:
X Corp.
Attn: Privacy Policy Inquiry
865 FM 1209, Building 2
Bastrop, TX 78602
If the Personal Data is transferred to the USA, the data transfer is based on the existence of standard contractual clauses.
Data Controller
When you visit our X social media page, Personal Data is processed by us and by X.
X has released Controller-Controller Terms which are available here and which state that Company and X are independently responsible for dealing with any user-related requests or matters involving the data protection authorities.
Company’s LinkedIn Social Media Profile
Privacy Policy of LinkedIn available here
Purpose of the Data Processing
We operate our LinkedIn social media profile for the various purposes listed above, to engage with you, inform you about our events and activities and improve your experience across devices and platforms.
If you want to know exactly how LinkedIn uses the Personal Data for its own purposes which it collects from your visit, how long LinkedIn stores this Personal Data and whether data from a visit to the LinkedIn page is passed onto third parties, please consult LinkedIn´s privacy policy. There you will also find information about contact options for LinkedIn and the setting options for advertisements.
Legal Basis for Data Processing
Our data processing is based on our legitimate interest to:
- Provide optimized and customer-orientated offerings to you on our operated social media profiles;
- Better understand how you use our products and services you want; and
- Effectively communicate and conduct social analytics and content performance;
- Remain aware of updated market practice to ensure that we are offering a service which is competitive and meets the expectations of our consumers.
If you want to learn about which legal basis LinkedIn uses, please consult LinkedIn’s privacy policy.
Categories of Data
We process the following Personal Data:
- Your LinkedIn username;
- Direct messages you send us through our LinkedIn page.
LinkedIn processes Personal Data about your account, your IP address and the end devices you use. The Personal Data you enter on our LinkedIn social media page, such as comments, public messages, etc., are published by X and are at no time used or processed by us for other purposes.
Use of Insights and Cookies on LinkedIn
In addition, we use the “LinkedIn Insights” function which shows statistical information (such as gender and age distribution) on the use of our LinkedIn profile. LinkedIn Insights refer to demographic data, for example, which target group interact most with our LinkedIn Page or which content on the LinkedIn Page was visited, shared or liked when and how often etc. We have no control over the generation and presentation of LinkedIn Insights, but we receive the data in aggregated form and use it to improve our marketing activities and our external presence. We cannot draw any conclusions about individuals by using LinkedIn Insights. More information on LinkedIn Insights can be found in LinkedIn´s privacy policy.
LinkedIn uses cookies and storage technologies. If you are logged into LinkedIn as a user, there will be a cookie with your LinkedIn ID on your device. This enables LinkedIn to understand that you have visited this site and how you have used it. If you want to avoid this, you should log out of Instagram or deactivate the “remember me” function, delete the cookies on your device and exit and restart your browser. In this way, LinkedIn information that can be used to identify you directly is deleted. This allows you to use our LinkedIn page without revealing your LinkedIn ID. More information can be found in LinkedIn’s privacy policy.
Data Recipient(s)
If you are in the EEA, your Personal Data will be processed by:
LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
However, please note that when using LinkedIn, Personal Data may also be processed outside the EEA and may be transferred to:
LinkedIn Inc.
605 W Maude Ave
Sunnyvale
CA 94085
USA
If the Personal Data is transferred to the USA, the data transfer is based on the existence of standard contractual clauses.
Data Controller
When you visit our LinkedIn social media page, Personal Data is processed by us and by LinkedIn. The respective Company operating the LinkedIn profile is a Joint Controller with LinkedIn for the data processing operations. To the extent possible, we have concluded agreements on Joint Controllership with LinkedIn, in particular the LinkedIn Joint Controller Addendum of LinkedIn Ireland Unlimited Company which can be found here.
LinkedIn assumes the data protection obligations towards you as the user, such as information on data processing, and is the contact person for your rights. This follows from the fact that LinkedIn has direct access to the relevant information on the social media profile and the processing of your Personal Data. However, you are also welcome to contact us via the contact details described in our Policy if this should become necessary and we will then forward the request to LinkedIn, if necessary.
Company’s YouTube Social Media Profile
Privacy Policy of Google available here.
Purpose of the Data Processing
We operate YouTube social media profile(s) for the various purposes listed above, to engage with you, inform you about our events and activities and improve your experience across devices and platforms.
If you want to know exactly how YouTube uses the Personal Data for its own purposes which it collects from your visit, how long YouTube stores this Personal Data and whether data from a visit to the YouTube page is passed onto third parties, please consult Google’s privacy policy. There you will also find information about contact options for YouTube and the setting options for advertisements.
Legal Basis for Data Processing
Our data processing is based on our legitimate interest to:
- Provide optimized and customer-orientated offerings to you on our operated social media profiles;
- Better understand how you use our products and services you want; and
- Effectively communicate and conduct social analytics and content performance;
- Remain aware of updated market practice to ensure that we are offering a service which is competitive and meets the expectations of our consumers.
If you want to learn about which legal basis YouTube uses, please consult Google’s privacy policy.
Categories of Data
We process the following Personal Data:
- Your YouTube username;
- Direct messages you send us through our YouTube pages;
- Your activity on our YouTube pages through YouTube Analytics service.
YouTube processes Personal Data about your account, your IP address and the end devices you use. The Personal Data you enter on our YouTube social media page, such as comments, public messages, etc., are published by YouTube and are at no time used or processed by us for other purposes.
Use of Analytics and Cookies on YouTube
In addition, we use the “YouTube Analytics” function which shows statistical information (such as gender and age distribution) on the use of our YouTube profile. YouTube Analytics refer to demographic data, for example, the visits to our site, the reach of contributions, the average length of video views, information about the countries and cities our visitors come from and statistics about the gender ratios of our visitors etc. We have no control over the generation and presentation of YouTube Analytics, but we receive the data in aggregated form and use it to improve our marketing activities and our external presence. We cannot draw any conclusions about individuals by using YouTube Analytics. More information can be found in Google’s privacy policy.
YouTube uses cookies and storage technologies. If you are logged into YouTube as a user, there will be a cookie with your YouTube ID on your device. This enables YouTube to understand that you have visited this site and how you have used it. If you want to avoid this, you should log out of YouTube or deactivate the “remember me” function, delete the cookies on your device and exit and restart your browser. In this way, YouTube information that can be used to identify you directly is deleted. This allows you to use our YouTube page without revealing your YouTube ID. More information can be found in Google’s privacy policy.
Data Recipient(s)
If you are in the EEA, your Personal Data will be processed by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
However, please note that when using YouTube, Personal Data may also be processed outside the EEA and may be transferred to:
Google LLC
1600 Amphitheater Parkway
Mountain View
CA94043
USA
If the Personal Data is transferred to the USA, the data transfer is based on the existence of standard contractual clauses.
Data Controller
When you visit our YouTube social media page, Personal Data is processed by us and by YouTube
YouTube has released Controller-Controller Terms which are available here and which state that Company and YouTube are independently responsible for dealing with any user-related requests or matters involving the data protection authorities.
C. NEWSLETTERS AND OTHER PROMOTIONAL MESSAGES
Purpose of the Data Processing
We offer various promotional messages that contain news, offers and other information about our products, services, as well as suggestions for participation in events or promotions, such as sweepstakes or online surveys. You can subscribe to our newsletters free of charge at any time.
For the newsletter distribution, we use – where legally required – the so-called double opt-in procedure. This means that we will only send you the newsletter if you have previously given your consent to activate the sending of the newsletter. To do so, we will send you an email in which we ask you to confirm that you would like to receive our newsletter by clicking on a link. This procedure also serves to verify whether the email address submitted is yours.
We process your Personal Data to:
- Communicate with you and keep you up to date with our products or services and make recommendations that may interest you;
- Manage our relationship with you and to communicate with you regarding our services;
- Perform tracking of the effectiveness of our newsletters, including the analysis of opening rates, click rates and bounce rates using aggregated and pseudonymized data.
If you no longer wish to subscribe to our newsletters, you can unsubscribe at any time by clicking on the unsubscribe link that is included in every newsletter.
Legal Basis for Data Processing
The data processing is based on your consent. A given consent may be withdrawn at any time without giving reasons. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Categories of Data
If you subscribe to one of our newsletters, we may process the following categories of Personal Data:
- First name and last name;
- Country of residence;
- Email address.
Data Recipient(s)
Your Personal Data may be shared with the following recipients:
- IT service providers (cloud hosting providers);
- Newsletter tool service provider.
Data Controller
The Data Controller is the company named in the imprint of the respective website or app on which you subscribe to the newsletter.
Storage Duration
We only keep Personal Data for as long as needed to achieve the purposes of the data processing.
You can find detailed information on whom we may share your Personal Data under the respective data processing activity listed under section 4. Whenever we share your Personal Data with a supplier or service provider, these will be required to meet our standards on processing information and security. The information we provide them, including your Personal Data, will only be provided in connection with the performance of their function. They will not be permitted to use your Personal Data for any purposes other than those outlined in this Policy.
In addition to any listed data recipients, we may need to also share your Personal Data with the categories of data recipients listed below.
i. Within the Company Group
We may share and disclose your Personal Data within the (Company Group) for the purposes outlined under each respective data processing activity at section 4 of this Policy, or as required (e.g., to fulfil any contractual or legal obligations). If we share your Personal Data, we shall ensure compliance with any applicable data privacy legislation and, wherever necessary, conclude appropriate contracts for such intercompany data transfers within the Company Group.
ii. Courts and Authorities
If we are required to do so by law or by enforceable governmental or court order, we may also disclose your information to governmental authorities (e.g., tax authorities, law enforcement agencies, regulatory agencies, etc.) or courts to the extent necessary.
We keep your Personal Data only for as long as necessary for our business purposes or for legal or regulatory requirements; but never longer than three years following a period of inactivity. How long we need your Personal Data depends on what we are using it for, as set out in this Policy.
If we no longer need your Personal Data, we will delete it or make it anonymous by removing all details that identify you. If we have asked for your permission to process your Personal Data and we have no other lawful grounds to continue with that processing, and you withdraw your permission, we will delete your Personal Data.
If you object or opt-out of receiving direct marketing communications from us, we will remove your contact details and marketing permissions to ensure that you do not receive any future marketing communications from us.
In all cases, we will continue to protect your Personal Data in accordance with this Policy and will routinely refresh our information to ensure that we keep it up to date.
Given that the internet is a global environment, using the internet to collect and process Personal Data often involves the transmission of data on an international basis. While we generally endeavor to store the Personal Data, we collect about you through our website in your region (for example for European visitors, in the EEA), it is possible that your Personal Data may be transferred to recipients outside your region (where data protection laws may be different for example in the USA), including within the (Company Group).
If such an international data transfer takes place, we have implemented safeguards and data protection solutions (for example EU standard data protection clauses, plus supplementary measures) to ensure that your information is adequately protected in any third countries that do not have an adequate level of data protection as recognized by the European Commission. You can find the EU Commission’s decision and the standard contractual clauses here. If you want more information or a copy of the standard contractual clauses used in each specific situation listed above, please contact us at any time for this purpose, by emailing us at the addresses indicated at the bottom of this Policy.
For those third countries that have an assured adequate level of data protection in line with that of the EU, the European Commission has issued so-called adequacy decisions. This means that you have the same or similar legal remedies as in the EU.
As a data subject, you have certain data subject rights. Please note that you are not necessarily entitled to these rights without limitation, but only in accordance with applicable legal provisions. For example, your data subject rights may be limited if the rights and freedoms of others are affected. You can assert your data subject rights against the responsible Data Controller. You can contact us at any time for this purpose, by emailing us at the addresses indicated at the bottom of this Policy.
i. Right to Withdraw Consent
If we process your Personal Data based on your consent, you are entitled to withdraw your consent at any time. From receipt of your withdrawal, we will no longer process your Personal Data. However, the withdrawal of your consent does not affect the legitimacy of the processing that took place up to the time of the withdrawal.
ii. Right to Access Information
You can request information about whether we process your Personal Data. If you do so, you can obtain information about this Personal Data, in particular about the purpose of the processing, the categories of Personal Data being processed about you, the recipients, storage period and origin of this Personal Data, the rights to which you are entitled in relation to this Personal Data and, in the event of transfer to a third country, the appropriate safeguards we have put in place. Upon request, we will also provide you with a copy of the Personal Data we process from you.
iii. Right to Rectification
If we process Personal Data about you that is inaccurate or incomplete, you may request it to be corrected or completed.
iv. Right to Erasure
You can request that we delete your Personal Data. We will delete your Personal Data if:
- It is no longer necessary for the purposes for which it was collected or otherwise processed;
- The processing is based on your consent, you withdraw your consent and there is no other legal basis for the processing;
- You object to the processing and there are no overriding legitimate grounds for the processing, or if you object to the processing for direct marketing purposes;
- Your data has been processed unlawfully;
The erasure of your Personal Data is necessary for us to comply with a legal obligation;
Your right to erasure does not exist if, for example, we need to process the Personal Data to comply with a legal obligation or to establish, exercise or defend legal claims.
v. Right to Restriction of Processing
In certain cases, you may request that we restrict the processing of your Personal Data without deleting it. This means that we will continue to store this Personal Data, but we will only process it with your consent, for the establishment, exercise or defense of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or of a Member State.
You have the right to restrict processing if:
- You contest the accuracy of your Personal Data until we have been able to verify this;
- You have objected to the processing of your Personal Data until it is determined whether legitimate grounds for the processing prevail;
- The processing is unlawful, but you refuse to have your Personal Data deleted;
We no longer need the Personal Data for the purpose of processing, but you need it to establish, exercise or defend legal claims.
vi. Right to Object
Even if your Personal Data is accurate and complete and is processed by us lawfully, you may object to the processing of your Personal Data at any time for reasons relating to your situation. You only have this right if we process this Personal Data based on our legitimate interests. In this case, we will no longer process your Personal Data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.
In addition, you can object if you receive direct marketing from us and no longer wish to receive it in the future. In such case, we will no longer process your Personal Data for these purposes.
vii. Right to Data Portability
If we process your Personal Data based on your consent or a contract concluded with you and the processing is carried out by automated means, you can request that we send you the Personal Data you have provided to us in a structured, commonly used and machine-readable format. Likewise, you may request that we transfer this Personal Data directly to another Data Controller, if this is technically feasible.
viii. Right to Lodge a Complaint
Although we make every effort to protect the privacy and integrity of your Personal Data, disagreements about how we process your Personal Data cannot be completely excluded. If you believe that the processing of your Personal Data violates applicable data protection law, in addition to contacting us, you are free to lodge a complaint with the competent data protection authority. The competence of the data protection authority is generally based on the registered office of the Data Controller. Within the EU, however, you can turn to any data protection authority of an EU member state, which will then forward your complaint to the competent authority.
If you have general questions relating to this Policy or about how we process your Personal Data, or if you would like to exercise any of your rights described in this Policy, you can contact us directly by emailing to dpo@terramater.com, or by writing to our postal address (https://www.terramater.at/contact/).
