Thank you for your interest in our Instagram page and our company. You have been referred to this page from our social media presence on Instagram because we would like to give you further information about the use of your personal data when using our social media presence.
The protection of your personal data is of great importance to us. We respect the statutory provisions on data protection and data security.
Therefore, we are happy to comply with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and the German Telemedia Act (Telemediengesetz – TMG).
Below you will find information regarding the collection and processing of your personal data when using our social media presence on Instagram and how that such data is handled.
2. Responsible Party
Vegshelf UG (haftungsbeschränkt), Leopoldstraße 49, 40211 Düsseldorf, Germany and the provider of Instagram, Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, are jointly responsible for the collection of data and processing thereof in connection with our social media presence on Instagram.
You can contact our Managing Director Mrs. Baiba Soika at the Vegshelf UG, Leopoldstraße 49, 40211 Düsseldorf, Germany, or under email@example.com.
The data provided to us by you will be used to address your queries, questions and messages and to enhance and optimize our social media presence and will be handled by us in compliance with all applicable data protection regulations.
However, keep in mind that the use of our social media presence leads to further processing of your personal data by Instagram, not necessarily limited to your interaction with us or our social media presence.
3. General processing of data
The processing and use of the data is based on statutory provisions which justify those operations on the grounds that the processing is necessary for the provision of the social media presence (Art. 6 para 1 b) GDPR), and/or Vegshelf has an overriding legitimate interest in ensuring and enhancing the functionality and error-free operation of the social media presence and that it is tailored to the users’ needs (Art. 6 para 1 f) GDPR).
We delete or anonymize the data without undue delay as soon as it is no longer needed for the purposes mentioned below.
3.1. Communication with us
If you contact us, we will use your name, eventually your username and further data provided by you to answer your query.
The processing is based on statutory provisions, which allow us to process personal data, as far as it is necessary to answer your query (e.g. Art. 6 para. 1 b) GDPR) or because of our legitimate interest to provide you with the desired information (Art. 6 para. 1 f) GDPR).
After answering your query, we delete your query and all information within three years from the end of the calendar year in which your query was answered.
You can choose from different features which are offered on our social media presence to interact with other users, such as posting a comment, leaving a comment, and liking or sharing a post.
We would like to point out, that this part is public and therefore all information you post or provide for registration, can be seen by others. We cannot control how other users process this information. We especially cannot prevent others from sending you messages.
All data you provide for the community-features we process to ensure the correct functioning of these features. Without this data we are not able to offer you the community-features. The processing of this data is based on statutory provisions which allow us to process personal data, as far as it is necessary for the use of our services or the performance of a contract (e.g. Sec. 15 para. 1 TMG; Art. 6 para. 1 b) GDPR), or because it constitutes a legitimate interest, to make the use of our features as easy and efficient as possible (Art. 6 para 1 f) GDPR).
3.3. Community Management
We actively communicate with our growing community. We do this by responding to both private requests and public content posted on our Instagram presence or other public areas of Instagram that is directed at us or concerns our B2B platform.
In order to be able to react to the respective content, we collect these in our inbox, on our social media presence, as well as in other public spaces of Instagram. We may react accordingly, depending on the kind of content. For instance, we may approach the author in order to help with the activity on our B2B platform or consider feedback and reviews when improving our platform. Furthermore, we will improve our public relations work. The processing of this data is based on statutory provisions which allow us to process personal data because it constitutes a legitimate interest of ours to react appropriately to public communication which relates to us (Art. 6 para 1 f) GDPR).
Content that has been sent to us via a direct message, or posted on our social media presence or in other public spaces of the Instagram can be saved for an unlimited time. If you wish to delete content at any time, please send us an e-mail to the address noted above.
3.4. Social Media Listening
We observe publications with connection to plant-based food brands, foodservices and retail. To do so, we collect content published in the public spaces of Instagram with connection to this business sector.
Content with connection to this business sector will be stored and assessed in order to gain insight on the public discussion in regard to this business sector. We will utilize the gained insights in order to improve our own public communication and bring it into alignment with the public discussion. The processing of this data is based on statutory provisions which allow us to process personal data because it constitutes a legitimate interest of ours to improve our public communication by aligning it with the public discussion (Art. 6 para 1 f) GDPR).
Content with connection to the mentioned business sector collected in the public spaces of the social media platform can be saved for an unlimited time. If you wish to delete content at any time, please send us an e-mail to the address noted above.
4. Transfer of personal data
A disclosure of your personal data occurs in the following cases:
a. Personal data will be disclosed to criminal prosecution authorities as well as, if necessary, harmed third parties if necessary, to investigate illegal or abusive use of our services. However, this only occurs if there are specific indications for illegal use or misuse. A disclosure can also take place if this serves to enforce the terms and conditions for the use of our services or other agreements or if necessary, to assert, exercise or defend legal claims. Our legitimate interest for the processing is safeguarding the proper functioning of our social media presence and to assert, exercise or defend legal claims, as the case may be. We are also required by law to provide information to certain governmental agencies. These are the criminal prosecution authorities, public authorities that prosecute administrative misdemeanors sanctioned with fines and the tax authorities. Our legitimate interest for the processing is to prevent misuse, prosecute criminal offenses and to assert, exercise or defend legal claims, as the case may be (e.g. Art. 6 para. 1 f) GDPR).
b. For the fulfilment of our services we must rely on third party companies and external service providers under contractual relationships (“processor”). Categories of such processors can be agencies, fulfilment-service providers, and IT-Service providers. In such situations, information will be disclosed to these companies or individual persons, in order to enable further processing. We carefully select these external service providers and regularly examine them in order to make sure that your privacy is safeguarded. Processors are only allowed to use the data for the purposes determined by us. They are also obligated under contracts with us to treat your data exclusively in accordance with this data protection statement as well as the European and German laws on data protection. Within the framework of potential transfers described above, it might occur that the third party bound by instructions might process the data in states outside the EU (“third countries”).
c. Every disclosure of data to a party outside the EU is carried out in compliance with applicable data protection laws. To the extent the EU-Commission has not declared that a third country provides an adequate level of data protection, we will provide sufficient guarantees to establish an adequate protection of your data. For this purpose a contract with the processor might be concluded that incorporates the EU Standard Contract Clauses (http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm).
5. Your right as a data subject
As a data subject you have the right to obtain information at any time about the data stored about you. Furthermore, you have the right to rectify, right to erasure, a right to restriction of processing as well as potentially the right to data portability. Additionally, you have the right to complain to a data protection supervisory authority.
In Addition, you may object to data processing for reasons arising from your particular situation, if such processing of your personal data is based on Art. 6 para 1 e) or f) GDPR.
Should you have given your consent to the processing of your personal data, you can withdraw it at any time with effect for the future.
In these cases, or if you have any other questions or wishes in connection with regard to your personal data, please send an email or a letter to the address noted above.
Last updated: May 7, 2020