Data protection notice for social media channels (H_TE_DE)

December 2025 

 

This data protection notice applies to the processing of your personal data when operating our social media channels.

 

1  Data Controller 

We,  

Technoform Caprano + Brunnhofer GmbH 
Friedrichsplatz 8 
34117 Kassel, Germany 

Phone: +49 561-9583-200 
Email: info [at] technoform [dot] com (info[at]technoform[dot]com) 

maintain social media channels on the networks of LinkedIn, YouTube, X, XING, Facebook, Instagram. As the operator of these channels, we are controllers within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR), together with the respective network operators: 

  • LinkedIn: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, hereinafter: LinkedIn,
  • YouTube: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter: YouTube,
  • X: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, hereinafter: X,
  • Facebook: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, hereinafter: Facebook,
  • Instagram: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, hereinafter: Instagram. 

As joint controllers of these channels, we have concluded agreements with the network operators that regulate, among other things, the conditions for the use of channels and similar web presence. The following agreements are relevant in each case: 

For any questions regarding data protection in the above networks, feel free to contact us or the network operators at any time using the contact details above. 

 

We also have user accounts with the following network platforms: 

  • XING: New Work SE, Am Strandkai 1, 20457 Hamburg, Deutschland), im Folgenden: XING,
  • kununu: Kununu GmbH, Arabellastr. 23, 81925 München, Deutschland, im Folgenden: kununu. 

We have agreements with the network operators in place, which among other things, regulate terms and conditions for platform use. The network operators are responsible for data processing on these network platforms. The following agreements and information on data processing are applicable in each case: 

For any questions regarding data protection in the above network platforms, feel free to contact us or the network operators at any time using the contact details above. 

 

2  Purpose and legal basis 

We process your data on the basis of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and all other laws relevant to us in terms of data protection. 

2.1  Company presentation and communication 

We use our social media channels to communicate with our customers, prospects and users and to inform them about our range of services. The purposes of data processing are the presentation of our company and interaction with users of social networks. In this context, we may receive further information, e.g. as a result of user comments, private messages or because you follow us or share our content.  

The legal basis for data processing is our legitimate interest in a company presentation, information provision and communication (Art. 6 para. 1 lit. f GDPR), as well as the implementation of pre-contractual measures with interested parties (Art. 6 para. 1 lit. b GDPR).  

In case the data subject objects to data processing, we delete our own posts. The storage of data beyond this is subject to the rules of the network operators. You can adjust your privacy settings on the respective network platforms at any time. Further information on data processing by the network operators and on the setting and objection options can be found in the data protection declarations of the network operators. 

2.2  HR marketing 

We also use social media career networks for the purpose of recruitment. Based on the published information, we search for candidates for our vacancies and address them specifically as part of the personnel search.  

The processing of users' personal data is carried out on the basis of our legitimate interest in an optimized company presentation (Art. 6 (1) (f) GDPR), as well as on the basis of the implementation of pre-contractual measures with interested parties (Art. 6 (1) (b) GDPR). Further information on the processing of applicant data by us can be found in our data protection notice for job applicants. 

Information on data processing by the network operators and on the settings and objection options can be found in the privacy policies of the network operators. 

2.3  Insights and analytics data 

In connection with the operation of our social media channels, we use the analysis functions provided there to obtain statistical evaluations of the users of our social media channels. 

For this purpose, cookies and similar technologies such as pixels are used by the network operators when visiting our channels, and a unique user code is created in each case. This user code can be linked to the data of those users who are registered with the platform operators. The information stored on the user code is processed by the platform operators, in particular when the user accesses these services. Other entities, such as partners or even third parties, may also use cookies within these services to provide services to the companies advertising on the platforms. 

The legal basis for the processing of data after interaction with the content of our social media profiles by the users is Art. 6 (1) (f) GDPR in conjunction with Art. 6 (1) (a) GDPR in the event of consent by the users, which they may have given to the network operator. Information on data processing by the network operators and on the settings and objection options can be found in the privacy policies of the network operators. 

 

3  Recipients of personal data 

We will only pass on your data to third parties if this should become necessary for the fulfilment of the purpose. Furthermore, data may be passed on to authorities on the basis of legal provisions in accordance with Art. 6 (1) (c) and (e) GDPR. 

In addition, in various cases we engage processors in accordance with Art. 28 GDPR, who may receive data from us or have access to your data in connection with their service. In this context, data transfers outside the EU may also take place. In doing so, we make sure that there is either an EU adequacy decision for the destination country in question in accordance with Art. 45 GDPR or that we have concluded a contract with the service providers concerned on the basis of the standard data protection clauses in accordance with Art. 46 (2) (c) GDPR (https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en). 

Since the parent companies of LinkedIn, Google, X, Facebook, and Instagram are based in the United States of America, there is a possibility that the network operators may also process some of the information collected in the United States, an unsafe third country. The network operators are certified according to the EU-US Data Privacy Framework to ensure an appropriate level of data protection. 

 

4  Your rights 

You have the following rights against us in relation to personal data concerning you: 

  • Right to information (Art. 15 GDPR).
  • Right to rectification (Art. 16 GDPR).
  • Right to erasure (Art. 17 GDPR).
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR).
  • Right to object to processing (Art. 21 GDPR).
  • Right to withdraw consent (Art. 7 para. 3 GDPR).
  • Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). 

You can assert your rights as a data subject against us or directly against the respective network operator. 

 

5  Data protection officer 

We have appointed an external data protection officer: 

Stefan Pietsch 

Contact data: 

Pietsch IT GmbH 
Wilhelmshöher Straße 1 
34590 Wabern 

Phone: +49 5683-923440 
Email: datenschutz [at] pietsch-it [dot] de (datenschutz[at]pietsch-it[dot]de)  
Internet: www.pietsch-it.de 

 

6  Validity and modification of this data protection notice 

This data protection notice is currently valid (see status in the heading). Due to the further development of our offers or due to changes in legal or official requirements, it may become necessary to change this data protection notice.