Privacy policy for our social media presence

1. General

We maintain publicly accessible profiles on various social networking sites. Your visit to these profiles triggers a variety of data processing operations. Below, we provide you with an overview of which of your personal data we collect, use and store when you visit our profiles. Personal information is information that can be associated with you as a specific person (e.g., name, age, address, photos, email addresses, including IP addresses). We also inform you of your rights regarding the processing of your personal data. You are not required to provide us with your personal information. However, this may be necessary for certain features of our social networking profiles. If you do not provide us with your personal data, these features will not be available to you, or will only be available to you to a limited extent.

When you visit our profiles, your personal information is collected, used and stored not only by us, but also by the operators of the respective social network. This happens even if you do not have a profile on the social network in question. The individual data processing operations and their scope vary depending on the operator of the respective social network and are not necessarily traceable by us.

2. Responsible Body

The person jointly responsible for the operation of a social media page is the operator named in each case and the

REMA TIP TOP AG
Gruber Street 65
85586 Poing/Germany
Phone: +49 8121 707-17100
Email: info@tiptop.de

You can reach our privacy officer at

Bernhard Brunner
Project 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg

Email: anfrage@projekt29.de
Phone: 0941-2986930

Further information about us and our handling of personal data can be found in the privacy policy of our website at https://rema-tiptop.de/en/privacy-policy/ For details about the collection and storage of your personal data as well as the type, scope and purpose of its use by the operator of the respective social network, please refer to the data protection declarations of the respective operator.

• Facebook: The joint controller is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. You can view Facebook's privacy policy at https://www.facebook.com/about/privacy/update?ref=old_policy
• Instagram: Joint controller is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. You can view Instagram’s privacy policy at https://help.instagram.com/155833707900388
• YouTube: The joint controller is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The YouTube privacy policy can be found at: https://www.gstatic.com/policies/privacy/pdf/20230701/4jko9ma5/google_privacy_policy_en.pdf .
• LinkedIn: The joint controller is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The LinkedIn privacy policy can be found at: https://www.linkedin.com/legal/privacy-policy?_l=de_DE .

3. Information on the Collection of Personal Data

3.1. Facebook-Seite

We operate this website as a communication and information channel to provide information about our offers. Personal data is processed in accordance with Article 6(1)(f) of the General Data Protection Regulation on the basis of our legitimate interest in using this contemporary information and interaction opportunity with users and visitors to the site.

We would like to point out that you use this Facebook page and its functions at your own responsibility. This applies in particular to the use of interactive functions (e.g., commenting, sharing, rating).

Processing of personal data by Facebook:

When you visit our Facebook page, Facebook collects your IP address and other information stored on your computer in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more detailed information on this at the following link: https://www.facebook.com/business/help/2287863711300965?id=939256796236247

The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union. Facebook describes in general terms what information it receives and how it is used in its data use guidelines. There you will also find information about how to contact Facebook and how to set your advertising preferences. The data use guidelines and the information required under Article 13(1)(a) and (b) of the GDPR are available at the following link: http://de-de.facebook.com/about/privacy.

In what way Facebook uses data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties, is not conclusively and clearly stated by Facebook and is not known to us.

When you access a Facebook page, the IP address assigned to your device is transmitted to Facebook. According to Facebook, this IP address is anonymized (in the case of "German" IP addresses) and deleted after 90 days. Facebook also stores information about its users' devices (e.g., as part of the "login notification" feature); this may enable Facebook to assign IP addresses to individual users.
If you are currently logged in to Facebook as a user, a cookie with your Facebook ID is stored on your device. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. Facebook buttons embedded in websites enable Facebook to record your visits to these websites and assign them to your Facebook profile. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out of Facebook or deactivate the "stay logged in" function, delete the cookies on your device, and close and restart your browser. This will delete Facebook information that can be used to identify you directly. This allows you to use our Facebook page without revealing your Facebook ID. When you access interactive features of the page (like, comment, share, message, etc.), a Facebook login screen will appear. After logging in, you will once again be recognizable to Facebook as a specific user.

Since personal data is transferred to the US, additional safeguards are required to ensure the level of data protection provided by the GDPR. To ensure this, we have agreed on standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA. Further information from the third-party provider on data protection, including the legal basis on which Facebook Ireland relies, as well as information on how you can manage or delete information about you, can be found on the following Facebook website: https://de-de.facebook.com/about/privacy.

Processing of data by us:
Statistical data of various categories is available to us via the so-called "Insights" of the Facebook page. These statistics are generated and provided by Facebook. As the operator of the page, we have no influence on their generation and presentation. We cannot disable this function or prevent the generation and processing of the data. For a selectable period of time and for the categories of fans, subscribers, people reached, and interacting people, Facebook provides us with the following data relating to our Facebook page:

• Total number of page views and activities, post interactions ("likes," comments, shared content, clicks on links, etc.), (post) reach, video views, replies,
• proportion of men and women,
• Origin in terms of country and city,
• Language
• views and clicks in the shop,
• clicks on route planners,
• Clicks on phone numbers.

Data on Facebook groups linked to our Facebook page is also provided in this way. Due to the constant development of Facebook, the availability and processing of data is subject to change, so we refer you to Facebook's privacy policy mentioned above for further details. We use this data, which is available in aggregated form, to make our posts and activities on our Facebook page more attractive to users. For example, we use the distribution by age and gender to tailor our approach and the preferred visiting times of users to optimize the timing of our posts. Information about the type of devices used by visitors helps us to adapt the visual design of our posts. In accordance with Facebook's Terms of Use, which every user has agreed to when creating a Facebook profile, we can identify the subscribers and fans of the page and view their profiles and other information they have shared.

User rights:
Under the agreement on joint responsibility concluded between us and Facebook, Facebook Ireland assumes primary responsibility under the GDPR for the processing of Insights data and fulfills all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR, and Articles 32 to 34 GDPR). In addition, Facebook Ireland will make the essence of this Page Insights supplement available to the data subjects.

Please feel free to contact us or Facebook if you have any questions. Under the agreement between us and Facebook, we will forward your request to Facebook immediately if Facebook alone is responsible for fulfilling your rights as a data subject. Facebook Ireland will respond to requests in accordance with our obligations under this Page Insights Addendum.

3.2. Instagram-Seite

We operate this website as a communication and information channel to provide information about our offers. Personal data is processed in accordance with Article 6(1)(f) of the General Data Protection Regulation on the basis of our legitimate interest in using this contemporary information and interaction opportunity with users and visitors to the site.

We would like to point out that you use this Instagram page and its functions at your own responsibility. This applies in particular to the use of interactive functions (e.g., commenting or rating).

When you visit our Instagram page, Facebook collects, among other things, your IP address and other information stored on your device in the form of cookies. This information is used to provide us, as the operator of the Instagram page, with statistical information about the use of the Instagram page. The data collected about you in this context is processed by Facebook and may be transferred to countries outside the European Union. Facebook describes in general terms what information it receives and how it is used in its privacy policy. There you will also find information about how to contact Facebook and how to adjust your advertising settings. The privacy policy is available at the following link: https://help.instagram.com/519522125107875

Facebook does not conclusively and clearly state how it uses the data from visits to Instagram pages for its own purposes, to what extent activities on the Instagram page are assigned to individual users, how long Facebook stores this data, and whether data from a visit to the Instagram page is passed on to third parties, and we do not know this.

When you access an Instagram page, the IP address assigned to your device is transmitted to Facebook. According to Facebook, this IP address is anonymized (in the case of "German" IP addresses) and deleted after 90 days. Facebook also stores information about its users' devices (for example, as part of the "login notification" feature); this may enable Facebook to assign IP addresses to individual users. If you are currently logged in to Instagram as a user, will place a cookie with your Instagram ID on your device. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Instagram pages. Instagram buttons embedded in websites enable Facebook to track your visits to these websites and assign them to your Instagram profile. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out of Instagram or deactivate the "stay logged in" function, delete the cookies on your device, and close and restart your browser. This will delete Instagram information that can be used to identify you directly. This allows you to use our Instagram page without revealing your Instagram ID. When you access interactive features on the page (likes, comments, messages, and more), an Instagram login screen will appear. After logging in, you will once again be recognizable to Instagram as a specific user.

Since personal data is transferred to the USA, additional protective measures are required to ensure the level of data protection provided by the GDPR. To ensure this, we have agreed on standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA. Further information from the third-party provider on data protection and information on how you can manage or delete information about you can be found in the Instagram help section at the following address: https://help.instagram.com/196883487377501.

3.3. YouTube-Seite

We operate this website as a communication and information channel to provide information about our offers. Personal data is processed in accordance with Article 6(1)(f) of the General Data Protection Regulation on the basis of our legitimate interest in using this contemporary information and interaction opportunity with users and visitors to the site.

We would like to point out that the use of this YouTube channel and its functions is at your own risk. This applies in particular to the use of the "Discuss" function. For more information about what data is processed by Google and how it is used, please see the Google Privacy Policy: https://policies.google.com/privacy?hl=en&gl=de#infocollect.

We have no control over the type and extent of data processed by Google, the nature of the processing and usage, or the sharing of this data with third parties. Moreover, we have no effective means of control in this regard. By using Google, your personal data is collected, transmitted, stored, disclosed, and used by Google. Additionally, regardless of your place of residence, your data is transferred to, stored, and used in the United States, Ireland, and any other country where Google LLC operates. It is transferred to companies affiliated with Google as well as to other trusted companies or individuals who process this data on Google's behalf. On one hand, Google processes data you voluntarily enter, such as your name, username, email address, and telephone number. It also processes the content you create, upload, or receive from others when using the services. This includes, for example, photos and videos you store, documents and spreadsheets you create, and comments you write on YouTube videos. On the other hand, Google also analyzes the content you share to determine your areas of interest, stores and processes confidential messages you send directly to other users, and can determine your location based on GPS data, information from wireless networks, or your IP address in order to deliver advertisements or other content.

For analysis purposes, Google may use analytics tools such as Google Analytics. We have no control over Google's use of such tools and were not informed about any potential use. If tools of this kind are employed by Google for our YouTube channel, we neither commissioned nor supported their use in any way. Additionally, the data obtained from this analysis is not made available to us. Only the subscribers' profiles can be viewed by us through their account. Furthermore, we have no means to prevent or disable the use of such tools on your YouTube channel.

Finally, Google also receives information when you view content, even if you haven't created an account. This so-called "log data" may include your IP address, browser type, operating system, information about the website you previously visited and the pages you accessed, your location, your mobile network provider, the device you used (including device ID and application ID), the search terms you used, and cookie information.

You have the option to restrict the processing of your data within your Google account's general settings. In addition to these tools, Google also provides specific privacy settings for YouTube. For more information, please refer to Google's Product Privacy Guide on data protection at https://policies.google.com/technologies/product-privacy?hl=de&gl=de.

For further information on these points, please refer to Google's Privacy Policy under the term "Privacy Settings": https://policies.google.com/privacy?hl=en&gl=de#infochoices.

We also process your data when you communicate with us via YouTube. Although we do not collect any data about your YouTube account ourselves, the information you enter on YouTube—especially your username and the content published under your account—is processed by us in that we may respond to your comments and posts in the "Discussions" section. The data you freely publish and share on YouTube can thus be incorporated into our offerings and made accessible to our followers.

3.4. LinkedIn-Seite

We operate this website as a communication and information channel to provide information about our offers. Personal data is processed in accordance with Article 6(1)(f) of the General Data Protection Regulation on the basis of our legitimate interest in using this contemporary information and interaction opportunity with users and visitors to the site.

We would like to point out that you use this LinkedIn page and its features at your own risk. This especially applies to the use of interactive functions (for example, if you post a comment, click a Like button, share a post, send us a message, visit the page, or engage in any other interaction on our LinkedIn page).

We have no control over the type and extent of data processed by LinkedIn, the nature of processing and usage, or the sharing of this data with third parties. Likewise, we do not have any effective control measures in this regard. By using LinkedIn, your personal data is collected, transferred, stored, disclosed, and used by LinkedIn.

You can limit the processing of your data in the general settings of your LinkedIn account. Additionally, on mobile devices (smartphones, tablets), you can restrict LinkedIn's access to contact and calendar data, photos, location data, and more in the respective settings. However, this is dependent on the operating system you are using.

Since personal data is transmitted to the USA, additional safeguards are required to ensure the data protection level under the GDPR. To achieve this, we have agreed on standard data protection clauses with the provider in accordance with Art. 46(2)(c) of the GDPR. These clauses obligate the data recipient in the USA to process the data in accordance with the level of protection in Europe. In cases where even this contractual extension cannot ensure compliance, we will endeavor to secure additional arrangements and commitments from the recipient in the USA.

Further information on these points can be found in LinkedIn's Privacy Policy: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

You can find information on the available personalization and privacy settings here: https://www.linkedin.com/help/linkedin/answer/a1337839/?lang=en-US

We also process your data when you communicate with us via LinkedIn. By analyzing the visits and interactions on our LinkedIn page, we obtain usage profiles and statistics. The visitor statistics created are transmitted to us exclusively in anonymized form. We do not have access to the underlying data. LinkedIn also uses this information to create demographic and geographic analyses and make them available to us. All of this information helps companies better understand which posts interest users, enabling them to interact more effectively with their target audience or place better advertisements.

3.5 Use of Meta Pixel, LinkedIn Insight Tag, and comparable tracking technologies

In connection with our social media activities, we use tracking technologies such as Meta Pixel (formerly Facebook Pixel) and LinkedIn Insight Tag or server-side tracking methods (e.g., Meta Conversions API or LinkedIn Server Events) to measure the effectiveness of our advertising campaigns and optimize our social media activities.

In particular, the following data is processed:

• IP address
• Device and browser information
• Cookie information or similar identifiers
• Pages visited and interactions
• Hashed contact information (e.g., email address) for server-side tracking, if applicable

This data may be transmitted to the respective platform operators (Meta Platforms Ireland Limited or LinkedIn Ireland Unlimited Company).

Legal basis

Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG, insofar as information is stored or read on your device by the technologies.

Joint responsibility

Insofar as the integration of tracking technologies results in processing for the platform operators' own purposes (e.g., creation of usage profiles, display of personalized advertising), joint responsibility exists in accordance with Art. 26 GDPR.

Third country transfer

It cannot be ruled out that personal data may be transferred to the USA in the course of using the services.

The transfer is based on the EU-US Data Privacy Framework (Article 45 GDPR) or, if necessary, on standard data protection clauses in accordance with Article 46(2)(c) GDPR.

Revocation

You can revoke your consent at any time with future effect using our consent management tool.

4. Contact Through a Social Media Channel

If you use our profiles on social media networks to contact us (for example, by creating your own posts, reacting to one of our posts, or sending us private messages), the data you provide is processed by us solely for the purpose of being able to communicate with you. The legal basis for the data collection is Article 6(1)(a) and (b) of the GDPR. We delete stored data as soon as its retention is no longer necessary or upon your request for deletion; in cases where there are statutory retention obligations, we limit the processing of the stored data accordingly.

5. Your Rights as a Data Subject

As a data subject, you have the following rights:

• You have the right, pursuant to Article 15 of the GDPR, to receive information from us about the processing of your personal data.
• You have the right, pursuant to Article 16 of the GDPR, to request the immediate correction of any inaccurate personal data concerning you and/or the completion of incomplete personal data.
• You have the right, pursuant to Article 17 of the GDPR, to request the immediate deletion of personal data concerning you.
• You have the right, pursuant to Article 18 of the GDPR, to request the restriction of the processing of data concerning you.
• You have the right, pursuant to Article 20 of the GDPR, to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• You have the right, pursuant to Article 21 of the GDPR, to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, provided that the processing is based on overriding interests or that your data is used for direct marketing purposes.
• You have the right to withdraw your consent to the processing of your data at any time, without affecting the lawfulness of the processing carried out prior to the withdrawal based on your consent.
• You have the right to lodge a complaint with a supervisory authority regarding our processing of your data.