Privacy policy for our social media presences

1. General

We maintain publicly accessible profiles on various social networking sites. Your visit to these profiles triggers a variety of data processing operations. Below, we provide you with an overview of which of your personal data we collect, use and store when you visit our profiles. Personal information is information that can be associated with you as a specific person (e.g., name, age, address, photos, email addresses, including IP addresses). We also inform you of your rights regarding the processing of your personal data. You are not required to provide us with your personal information. However, this may be necessary for certain features of our social networking profiles. If you do not provide us with your personal data, these features will not be available to you, or will only be available to you to a limited extent.

When you visit our profiles, your personal information is collected, used and stored not only by us, but also by the operators of the respective social network. This happens even if you do not have a profile on the social network in question. The individual data processing operations and their scope vary depending on the operator of the respective social network and are not necessarily traceable by us.

2. Responsible Body

The person jointly responsible for the operation of a social media page is the operator named in each case and the

REMA TIP TOP AG
Gruber Street 65
85586 Poing/Germany
Phone: +49 8121 707-17100
Email: info@tiptop.de

You can reach our privacy officer at

Bernhard Brunner
Project 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg

Email: anfrage@projekt29.de
Phone: 0941-2986930

Further information about us and our handling of personal data can be found in the privacy policy of our website at https://rema-tiptop.de/en/privacy-policy/ For details about the collection and storage of your personal data as well as the type, scope and purpose of its use by the operator of the respective social network, please refer to the data protection declarations of the respective operator.

• YouTube: The joint controller is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The YouTube privacy policy can be found at: https://www.gstatic.com/policies/privacy/pdf/20230701/4jko9ma5/google_privacy_policy_en.pdf .
• LinkedIn: The joint controller is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The LinkedIn privacy policy can be found at: https://www.linkedin.com/legal/privacy-policy?_l=de_DE .

3. Information on the Collection of Personal Data

3.1 YouTube Page

We operate this website as a communication and information channel to provide information about our offers. Personal data is processed in accordance with Article 6(1)(f) of the General Data Protection Regulation on the basis of our legitimate interest in using this contemporary information and interaction opportunity with users and visitors to the site.

We would like to point out that the use of this YouTube channel and its functions is at your own risk. This applies in particular to the use of the "Discuss" function. For more information about what data is processed by Google and how it is used, please see the Google Privacy Policy: https://policies.google.com/privacy?hl=en&gl=de#infocollect.

We have no control over the type and extent of data processed by Google, the nature of the processing and usage, or the sharing of this data with third parties. Moreover, we have no effective means of control in this regard. By using Google, your personal data is collected, transmitted, stored, disclosed, and used by Google. Additionally, regardless of your place of residence, your data is transferred to, stored, and used in the United States, Ireland, and any other country where Google LLC operates. It is transferred to companies affiliated with Google as well as to other trusted companies or individuals who process this data on Google's behalf. On one hand, Google processes data you voluntarily enter, such as your name, username, email address, and telephone number. It also processes the content you create, upload, or receive from others when using the services. This includes, for example, photos and videos you store, documents and spreadsheets you create, and comments you write on YouTube videos. On the other hand, Google also analyzes the content you share to determine your areas of interest, stores and processes confidential messages you send directly to other users, and can determine your location based on GPS data, information from wireless networks, or your IP address in order to deliver advertisements or other content.

For analysis purposes, Google may use analytics tools such as Google Analytics. We have no control over Google's use of such tools and were not informed about any potential use. If tools of this kind are employed by Google for our YouTube channel, we neither commissioned nor supported their use in any way. Additionally, the data obtained from this analysis is not made available to us. Only the subscribers' profiles can be viewed by us through their account. Furthermore, we have no means to prevent or disable the use of such tools on your YouTube channel.

Finally, Google also receives information when you view content, even if you haven't created an account. This so-called "log data" may include your IP address, browser type, operating system, information about the website you previously visited and the pages you accessed, your location, your mobile network provider, the device you used (including device ID and application ID), the search terms you used, and cookie information.

You can limit the processing of your data in the general settings of your Google account. In addition to these tools, Google also provides specific privacy settings for YouTube. For more information, please refer to Google's Product Privacy Guide on data protection in Google products: https://policies.google.com/technologies/product-privacy?hl=en&gl=de.

For further information on these points, please refer to Google's Privacy Policy under the term "Privacy Settings": https://policies.google.com/privacy?hl=en&gl=de#infochoices.

We also process your data when you communicate with us via YouTube. Although we do not collect any data about your YouTube account ourselves, the information you enter on YouTube—especially your username and the content published under your account—is processed by us in that we may respond to your comments and posts in the "Discussions" section. The data you freely publish and share on YouTube can thus be incorporated into our offerings and made accessible to our followers.

3.2 LinkedIn Page

We operate this website as a communication and information channel to provide information about our offers. Personal data is processed in accordance with Article 6(1)(f) of the General Data Protection Regulation on the basis of our legitimate interest in using this contemporary information and interaction opportunity with users and visitors to the site.

We would like to point out that you use this LinkedIn page and its features at your own risk. This especially applies to the use of interactive functions (for example, if you post a comment, click a Like button, share a post, send us a message, visit the page, or engage in any other interaction on our LinkedIn page).

We have no control over the type and extent of data processed by LinkedIn, the nature of processing and usage, or the sharing of this data with third parties. Likewise, we do not have any effective control measures in this regard. By using LinkedIn, your personal data is collected, transferred, stored, disclosed, and used by LinkedIn.

You can limit the processing of your data in the general settings of your LinkedIn account. Additionally, on mobile devices (smartphones, tablets), you can restrict LinkedIn's access to contact and calendar data, photos, location data, and more in the respective settings. However, this is dependent on the operating system you are using.

Since personal data is transmitted to the USA, additional safeguards are required to ensure the data protection level under the GDPR. To achieve this, we have agreed on standard data protection clauses with the provider in accordance with Art. 46(2)(c) of the GDPR. These clauses obligate the data recipient in the USA to process the data in accordance with the level of protection in Europe. In cases where even this contractual extension cannot ensure compliance, we will endeavor to secure additional arrangements and commitments from the recipient in the USA.

Further information on these points can be found in LinkedIn's Privacy Policy: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

You can find information on the available personalization and privacy settings here: https://www.linkedin.com/help/linkedin/answer/a1337839/?lang=en-US

We also process your data when you communicate with us via LinkedIn. By analyzing the views and interactions on our LinkedIn page, we obtain usage profiles and statistics. The visitor statistics generated are exclusively transmitted to us in anonymized form. We do not have access to the underlying data. Additionally, demographic and geographic analyses are created based on the information collected by LinkedIn and made available to us. With all of this information, companies can better understand which posts interest users, thereby enhancing their interaction with their target audience or running more effective advertisements.

4. Contact Through a Social Media Channel

If you use our profiles on social media networks to contact us (for example, by creating your own posts, reacting to one of our posts, or sending us private messages), the data you provide is processed by us solely for the purpose of being able to communicate with you. The legal basis for the data collection is Article 6(1)(a) and (b) of the GDPR. We delete stored data as soon as its retention is no longer necessary or upon your request for deletion; in cases where there are statutory retention obligations, we limit the processing of the stored data accordingly.

5. Your Rights as a Data Subject

As a data subject, you have the following rights:

• You have the right, pursuant to Article 15 of the GDPR, to receive information from us about the processing of your personal data.
• You have the right, pursuant to Article 16 of the GDPR, to request the immediate correction of any inaccurate personal data concerning you and/or the completion of incomplete personal data.
• You have the right, pursuant to Article 17 of the GDPR, to request the immediate deletion of personal data concerning you.
• You have the right, pursuant to Article 18 of the GDPR, to request the restriction of the processing of data concerning you.
• You have the right, pursuant to Article 20 of the GDPR, to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• You have the right, pursuant to Article 21 of the GDPR, to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, provided that the processing is based on overriding interests or that your data is used for direct marketing purposes.
• You have the right to withdraw your consent to the processing of your data at any time, without affecting the lawfulness of the processing carried out prior to the withdrawal based on your consent.
• You have the right to lodge a complaint with a supervisory authority regarding our processing of your data.