Social Media Privacy Policy
Price4Parts Platform
1. Introduction
It is very important to us to handle the data of visitors to our company page on Facebook in a trustworthy manner and to protect it as best as possible. For this reason, we make every effort to meet the requirements of the GDPR.
In the following, we explain to you how we process your data on our company page. For this purpose, we use language that is as clear and transparent as possible so that you can truly understand what happens to your data.
2. Operator of the Company Profile and Contact Details of the Data Protection Officer
2.1 Operator of the Company Profile and Controller
The company profile on Facebook price4parts is operated by: price4parts GmH
Responsible for the data processing on our company profile is the controller within the meaning of the GDPR. That is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
As the social media platform Facebook is operated by Meta Platforms Ireland Limited with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, we are jointly responsible with Meta for the processing of personal data pursuant to Art. 26 para. 1 GDPR as joint controllers. This relates in particular to the creation of Page Insights, regarding which we have concluded an agreement with Meta, which is explained in more detail below. Likewise, you will find below information on the extent to which personal data is processed by which controller, for which purpose and on which legal basis this takes place.
You can reach our controller at:
price4parts GmH
Freiheit 27 46348 Raesfeld
info@price4parts.com
You can reach Meta Platforms Ireland Limited at:
By post:
Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Ireland. Online contact with Meta’s Data Protection Officer regarding Facebook:
https://www.facebook.com/help/contact/540977946302970.
Online contact for questions about the privacy policy:
https://www.facebook.com/help/contact/1650115808681298.
2.2 Data Protection Officer
We have appointed a Data Protection Officer for our company. You can reach this person at:
simply Legal GmbH
Sebastian Schenk
Burkarderstr. 36, 97082 Würzburg
dpo@dieter-datenschutz.de
3. General Information
3.1 Processing of Personal Data and Other Terms
Data protection applies to the processing of personal data. Personal means all data by which you can be personally identified. That is, for example, the IP address of the device (PC, laptop, smartphone, etc.) in front of which you are currently sitting. Such data is processed when ‘something happens to it’. When visiting a website, for example, the IP address is transmitted by the browser to the provider of the website operator and stored there automatically. That is then processing (pursuant to Art. 4 No. 2 GDPR) of personal data (pursuant to Art. 4 No. 1 GDPR). These and further statutory definitions can be found in Art. 4 GDPR.
3.2 Data Protection – Our View
Data protection is more than just an inconvenient obligation for us! Personal data has great value, and careful handling of it should be a matter of course in our digitized world.
In addition, as a visitor to our company profile on Facebook, you should be able to decide for yourself what happens to your data, when, and by whom. That is why we undertake to comply with all statutory provisions, collect only the data necessary for us, and of course treat it confidentially.
3.3 Applicable Provisions / Laws – GDPR, BDSG and TDDDG
The scope of data protection is governed by laws. In this case, these are the GDPR (General Data Protection Regulation) as a European regulation and the BDSG (Bundesdatenschutzgesetz) as a national law.
In addition, the TDDDG supplements the provisions of the GDPR insofar as the use of cookies is concerned.
3.3.1 Legal Bases
The processing of personal data always requires a legal basis. The GDPR provides for the following possibilities in Art. 6 para. 1 sentence 1:
a) The data subject has given consent to the processing of his or her personal data for one or more specific purposes;
b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
c) processing is necessary for compliance with a legal obligation to which the controller is subject;
d) processing is necessary in order to protect the vital interests of the data subject or of another natural person;
e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Below in section 1.4 we will state the specific legal basis for the respective processing of personal data.
3.3.2 Your Rights
The GDPR equips you with comprehensive rights. We have agreed with Meta in this regard that Meta is responsible for making it possible for you to exercise the rights to which you are entitled under the GDPR. These are, for example, free access regarding the origin, recipients and purpose of your stored personal data. In addition, you may request rectification, portability or erasure of the data and have a right to object to the processing of your data and to restriction of that processing. Furthermore, you may withdraw consents given at any time.
We have likewise agreed with Meta that the Irish Data Protection Commission (see under https://www.dataprotection.ie/) is the lead supervisory authority which monitors the processing of the Page Insights. You furthermore always have the right to lodge a complaint with the competent data protection supervisory authority.
How these rights look in detail and how they are to be exercised can be found in the last section of this Privacy Policy.
3.4 Disclosure and Erasure of Data
The disclosure and erasure of data are likewise important and sensitive topics. That is why we would like to inform you briefly in advance about our general approach in this regard.
A disclosure of data takes place if on the basis of a legal basis and only then if this is indispensable. This may in particular be the case where a so-called processor is involved and a processing agreement pursuant to Art. 28 GDPR has been concluded.
We erase your data when the purpose and the legal basis for the processing cease to apply and, moreover, no other statutory obligations stand in the way of erasure. Art. 17 GDPR also provides a ‘good’ overview of this. It should be noted that it follows from our agreement with Meta regarding the Page Insights that only Meta is authorized to decide on the processing thereof at its sole discretion. From Meta’s privacy policy, however, it can be inferred that they pursue the same approach as we do with regard to the erasure of personal data.
Further information:
https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
Please take all further information from this Privacy Policy and, in the case of specific questions, contact the controller.
4. Data Processing on Our Company Profile
By visiting our company profile on Facebook, we process personal data about you.
In the following, we provide an overview of which data we process for which purpose and on which legal basis this takes place:
4.1 Data Collection upon Accessing the Company Page
When visiting our Facebook profile and interacting with us, we process personal data of users. This comprises, on the one hand, the publicly accessible information from the user profiles, such as name, profile picture or interests, which become accessible to us through interactions such as liking, commenting or sharing. On the other hand, we also process personal data contained in posts, comments or direct messages in order to respond to user inquiries or to react to feedback.
The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest consists in providing relevant and appealing content and ensuring the use and functionality of our Facebook profile. This processing enables us to optimize the user experience and to promote a high degree of interactivity on our platform.
In addition, we process personal data where it arises in the context of inquiries via Facebook that relate to the performance of a contract or to pre-contractual measures. In these cases, processing takes place pursuant to Art. 6 para. 1 lit. b GDPR, as it is necessary in order to fulfill our contractual obligations, for example in the context of customer service.
Through the processing of this data, we ensure that we can respond efficiently to the needs of our users while at the same time maintaining the technical and content-related function of our Facebook profile.
4.2 Processing of Personal Data and Cookies by Meta
When visiting our Facebook profile, the IP address assigned to your terminal device is transmitted to Meta. According to information from Meta, this IP address is anonymized (in the case of “German” IP addresses). In addition, Meta stores information about the terminal devices of its users, which among other things serves to detect login attempts; Meta may thereby be able to assign IP addresses to individual users.
If you as a user are currently logged in to Facebook, a cookie with your Facebook identifier is located on your terminal device. This enables Meta to trace that you visited this page and how you used it. Via Meta buttons embedded in websites, it is possible for Meta to record your visits to those websites and assign them to your Facebook profile. On the basis of this data, content or advertising tailored to you can be offered.
Further information:
https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
4.3 Insights and Data Processing in Joint Controllership with Meta
As explained in the Meta privacy policy under “How do we use your information?” (https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect), Meta also collects and uses information in order to provide analytics services, so-called Insights, for page operators. This also applies to our Facebook profile.
Insights are aggregated statistics that are created on the basis of certain interactions of visitors with pages and the content associated with them and are logged by the Meta servers. These include, among other things, the following information:
How many people see our products, services or content, such as posts, videos, Facebook pages, listings, shops and advertisements (when the advertising is shown on Meta products) and interact with them; How people interact with our content, websites, apps and services; Which group of people interacts with our content or which group of people uses our services.
Meta provides us with aggregated reports and insights that give us information on how well our content, features, products and services perform. In doing so, we do not obtain access to personal data, but only to the aggregated reports.
For the evaluation of reach, we can make settings or apply corresponding filters with regard to the selection of a time period, the consideration of a particular post as well as demographic groupings. This data is anonymized. Inferences regarding particular persons are not possible for us.
The processing of this data serves the purpose of analyzing our reach and adapting our content and advertisements to user interests so that they can derive the greatest possible benefit from them. On the basis of the evaluations of this data, we can recognize how our content, our profile and our advertising are consumed. In this way, we can create target-group-appropriate content and place advertising in order to better market our company and our services.
The processing is based on our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.
With regard to the processing of personal data in the course of the so-called Insights, processing takes place in joint controllership with Meta pursuant to Art. 26 para. 1 GDPR. For this purpose, we have concluded a corresponding agreement with Meta, which can be viewed here: (https://www.facebook.com/legal/terms/page_controller_addendum.).
Further information about the Insights:
https://de-de.facebook.com/legal/terms/page_controller_addendum.
You can find the complete privacy policy of Facebook here:
https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
5. What Else Is Important
In conclusion, we would like to inform you comprehensively and in detail about your rights and tell you how you will be informed about changes to data protection requirements.
5.1 Your Rights in Detail
5.1.1 Right of Access pursuant to Art. 15 GDPR
You may request information as to whether personal data about you is being processed. If that is the case, you may request further information about the nature and manner of the processing. A detailed list can be found in Art. 15 para. 1 lit. a to h GDPR.
5.1.2 Right to Rectification pursuant to Art. 16 GDPR
This right comprises the rectification of inaccurate data and the completion of incomplete personal data.
5.1.3 Right to Erasure pursuant to Art. 17 GDPR
This so-called ‘right to be forgotten’ gives you the right, under certain conditions, to request erasure of the personal data by the controller. This is generally the case when the purpose of the data processing has ceased to apply, when consent has been withdrawn, or the original processing took place without a legal basis. A detailed list of grounds can be found in Art. 17 para. 1 lit. a to f GDPR. This “right to be forgotten” furthermore corresponds to the obligation of the controller under Art. 17 para. 2 GDPR to take appropriate measures to bring about a general erasure of the data.
5.1.4 Right to Restriction of Processing pursuant to Art. 18 GDPR
This right is tied to the conditions pursuant to Art. 18 para. 1 lit. a to d.
5.1.5 Right to Data Portability pursuant to Art. 20 GDPR
This governs the fundamental right to receive one’s own data in a commonly used form and to have it transmitted to another controller. However, this applies only to the data of processing based on consent or contract pursuant to Art. 20 para. 1 lit. a and b and insofar as this is technically feasible.
5.1.6 Right to Object pursuant to Art. 21 GDPR
You may in principle object to the processing of your personal data. This applies in particular where your interest in objecting outweighs the legitimate interest of the controller in the processing and where the processing relates to direct marketing and or profiling.
5.1.7 Right to “Decision in the Individual Case” pursuant to Art. 22 GDPR
You have in principle the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. However, this right also finds limitations and additions in Art. 22 para. 2 and 4 GDPR.
5.1.8 Further Rights
The GDPR contains comprehensive rights regarding the notification of third parties as to whether or how you have asserted rights under Art. 16, 17, 18 GDPR. However, this only insofar as this is also possible or feasible with reasonable effort.
At this point we would like to remind you again of your right to withdraw a consent given pursuant to Art. 7 para. 3 GDPR. The lawfulness of the processing carried out up to that point is, however, not affected thereby.
In addition, we would also like to draw your attention to your rights under Sections 32 et seq. BDSG, which, however, are for the most part substantively congruent with the rights just described.
5.1.9 Right to Lodge a Complaint pursuant to Art. 77 GDPR
You also have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that processing of personal data concerning you infringes this Regulation.
5.2 What If Tomorrow the GDPR Is Abolished or Other Changes Take Place?
The current status of this Privacy Policy is 10.07.2026. From time to time it is necessary to adapt the content of the Privacy Policy in order to react to factual and legal changes. We therefore reserve the right to amend this Privacy Policy at any time. We will publish the amended version in the same place and recommend that you read the Privacy Policy regularly.
Created with the kind support of Dieter macht den Datenschutz
1. Introduction
It is very important to us to handle the data of visitors to our company page on Instagram in a trustworthy manner and to protect it as best as possible. For this reason, we make every effort to meet the requirements of the GDPR.
In the following, we explain to you how we process your data on our company page. For this purpose, we use language that is as clear and transparent as possible so that you can truly understand what happens to your data.
2. Operator of the Company Profile and Contact Details of the Data Protection Officer
2.1 Operator of the Company Profile and Controller
The company profile on Instagram price4parts is operated by: price4parts GmH.
Responsible for the data processing on our company profile is the controller within the meaning of the GDPR. That is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
As the social media platform Instagram is operated by Meta Platforms Ireland Limited with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, we are jointly responsible with Meta for the processing of personal data pursuant to Art. 26 para. 1 GDPR as joint controllers. This relates in particular to the creation of Page Insights, regarding which we have concluded an agreement with Meta, which is explained in more detail below. Likewise, you will find below information on the extent to which personal data is processed by which controller, for which purpose and on which legal basis this takes place.
You can reach our controller at:
price4parts GmH
Freiheit 27 46348 Raesfeld
info@
You can reach Meta Platforms Ireland Limited at:
By post:
Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Ireland. Online contact with Meta’s Data Protection Officer regarding Instagram:
https://www.facebook.com/help/contact/540977946302970.
Online contact for questions about the privacy policy: https://www.facebook.com/help/contact/1650115808681298.
2.2 Data Protection Officer
We have appointed a Data Protection Officer for our company. You can reach this person at:
simply Legal GmbH
Sebastian Schenk
Burkarderstr. 36, 97082 Würzburg
dpo@dieter-datenschutz.de
3. General Information
3.1 Processing of Personal Data and Other Terms
Data protection applies to the processing of personal data. Personal means all data by which you can be personally identified. That is, for example, the IP address of the device (PC, laptop, smartphone, etc.) in front of which you are currently sitting. Such data is processed when ‘something happens to it’. When visiting a website, for example, the IP address is transmitted by the browser to the provider of the website operator and stored there automatically. That is then processing (pursuant to Art. 4 No. 2 GDPR) of personal data (pursuant to Art. 4 No. 1 GDPR). These and further statutory definitions can be found in Art. 4 GDPR.
3.2 Data Protection – Our View
Data protection is more than just an inconvenient obligation for us! Personal data has great value, and careful handling of it should be a matter of course in our digitized world.
In addition, as a visitor to our company profile on Instagram, you should be able to decide for yourself what happens to your data, when, and by whom. That is why we undertake to comply with all statutory provisions, collect only the data necessary for us, and of course treat it confidentially.
3.3 Applicable Provisions / Laws – GDPR, BDSG and TDDDG
The scope of data protection is governed by laws. In this case, these are the GDPR (General Data Protection Regulation) as a European regulation and the BDSG (Bundesdatenschutzgesetz) as a national law.
In addition, the TDDDG supplements the provisions of the GDPR insofar as the use of cookies is concerned.
3.3.1 Legal Bases
The processing of personal data always requires a legal basis. The GDPR provides for the following possibilities in Art. 6 para. 1 sentence 1:
a) The data subject has given consent to the processing of his or her personal data for one or more specific purposes;
b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
c) processing is necessary for compliance with a legal obligation to which the controller is subject;
d) processing is necessary in order to protect the vital interests of the data subject or of another natural person;
e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Below in section 1.4 we will state the specific legal basis for the respective processing of personal data.
3.3.2 Your Rights
The GDPR equips you with comprehensive rights. We have agreed with Meta in this regard that Meta is responsible for making it possible for you to exercise the rights to which you are entitled under the GDPR. These are, for example, free access regarding the origin, recipients and purpose of your stored personal data. In addition, you may request rectification, portability or erasure of the data and have a right to object to the processing of your data and to restriction of that processing. Furthermore, you may withdraw consents given at any time.
We have likewise agreed with Meta that the Irish Data Protection Commission (see under https://www.dataprotection.ie/) is the lead supervisory authority which monitors the processing of the Page Insights. You furthermore always have the right to lodge a complaint with the competent data protection supervisory authority.
How these rights look in detail and how they are to be exercised can be found in the last section of this Privacy Policy.
3.4 Disclosure and Erasure of Data
The disclosure and erasure of data are likewise important and sensitive topics. That is why we would like to inform you briefly in advance about our general approach in this regard.
A disclosure of data takes place if on the basis of a legal basis and only then if this is indispensable. This may in particular be the case where a so-called processor is involved and a processing agreement pursuant to Art. 28 GDPR has been concluded.
We erase your data when the purpose and the legal basis for the processing cease to apply and, moreover, no other statutory obligations stand in the way of erasure. Art. 17 GDPR also provides a ‘good’ overview of this. It should be noted that it follows from our agreement with Meta regarding the Page Insights that only Meta is authorized to decide on the processing thereof at its sole discretion. From Meta’s privacy policy, however, it can be inferred that they pursue the same approach as we do with regard to the erasure of personal data.
Further information:
https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
Please take all further information from this Privacy Policy and, in the case of specific questions, contact the controller.
4. Data Processing on Our Company Profile
By visiting our company profile on Instagram, we process personal data about you.
In the following, we provide an overview of which data we process for which purpose and on which legal basis this takes place:
4.1 Data Collection upon Accessing the Company Page
When visiting our Instagram profile and interacting with us, we process personal data of users. This comprises, on the one hand, the publicly accessible information from the user profiles, such as name, profile picture or interests, which become accessible to us through interactions such as liking, commenting or sharing. On the other hand, we also process personal data contained in posts, comments or direct messages in order to respond to user inquiries or to react to feedback.
The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest consists in providing relevant and appealing content and ensuring the use and functionality of our Instagram profile. This processing enables us to optimize the user experience and to promote a high degree of interactivity on our platform.
In addition, we process personal data where it arises in the context of inquiries via Instagram that relate to the performance of a contract or to pre-contractual measures. In these cases, processing takes place pursuant to Art. 6 para. 1 lit. b GDPR, as it is necessary in order to fulfill our contractual obligations, for example in the context of customer service.
Through the processing of this data, we ensure that we can respond efficiently to the needs of our users while at the same time maintaining the technical and content-related function of our Instagram profile.
4.2 Processing of Personal Data and Cookies by Meta
When visiting our Instagram profile, the IP address assigned to your terminal device is transmitted to Meta. According to information from Meta, this IP address is anonymized (in the case of “German” IP addresses). In addition, Meta stores information about the terminal devices of its users, which among other things serves to detect login attempts; Meta may thereby be able to assign IP addresses to individual users.
If you as a user are currently logged in to Instagram, a cookie with your Instagram identifier is located on your terminal device. This enables Meta to trace that you visited this page and how you used it. Via Meta buttons embedded in websites, it is possible for Meta to record your visits to those websites and assign them to your Instagram profile. On the basis of this data, content or advertising tailored to you can be offered.
Further information:
https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
4.3 Insights and Data Processing in Joint Controllership with Meta
As explained in the Meta privacy policy under “How do we use your information?” (https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect), Meta also collects and uses information in order to provide analytics services, so-called Insights, for page operators. This also applies to our Instagram profile.
Insights are aggregated statistics that are created on the basis of certain interactions of visitors with pages and the content associated with them and are logged by the Meta servers. These include, among other things, the following information:
How many people see our products, services or content, such as posts, videos, Instagram pages, listings, shops and advertisements (when the advertising is shown on Meta products) and interact with them; How people interact with our content, websites, apps and services; Which group of people interacts with our content or which group of people uses our services.
Meta provides us with aggregated reports and insights that give us information on how well our content, features, products and services perform. In doing so, we do not obtain access to personal data, but only to the aggregated reports.
For the evaluation of reach, we can make settings or apply corresponding filters with regard to the selection of a time period, the consideration of a particular post as well as demographic groupings. This data is anonymized. Inferences regarding particular persons are not possible for us.
The processing of this data serves the purpose of analyzing our reach and adapting our content and advertisements to user interests so that they can derive the greatest possible benefit from them. On the basis of the evaluations of this data, we can recognize how our content, our profile and our advertising are consumed. In this way, we can create target-group-appropriate content and place advertising in order to better market our company and our services.
The processing is based on our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.
With regard to the processing of personal data in the course of the so-called Insights, processing takes place in joint controllership with Meta pursuant to Art. 26 para. 1 GDPR. For this purpose, we have concluded a corresponding agreement with Meta, which can be viewed here: (https://www.facebook.com/legal/terms/page_controller_addendum.).
Further information about the Insights:
https://de-de.facebook.com/legal/terms/page_controller_addendum.
You can find the complete privacy policy of Instagram here:
https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
5. What Else Is Important
In conclusion, we would like to inform you comprehensively and in detail about your rights and tell you how you will be informed about changes to data protection requirements.
5.1 Your Rights in Detail
5.1.1 Right of Access pursuant to Art. 15 GDPR
You may request information as to whether personal data about you is being processed. If that is the case, you may request further information about the nature and manner of the processing. A detailed list can be found in Art. 15 para. 1 lit. a to h GDPR.
5.1.2 Right to Rectification pursuant to Art. 16 GDPR
This right comprises the rectification of inaccurate data and the completion of incomplete personal data.
5.1.3 Right to Erasure pursuant to Art. 17 GDPR
This so-called ‘right to be forgotten’ gives you the right, under certain conditions, to request erasure of the personal data by the controller. This is generally the case when the purpose of the data processing has ceased to apply, when consent has been withdrawn, or the original processing took place without a legal basis. A detailed list of grounds can be found in Art. 17 para. 1 lit. a to f GDPR. This “right to be forgotten” furthermore corresponds to the obligation of the controller under Art. 17 para. 2 GDPR to take appropriate measures to bring about a general erasure of the data.
5.1.4 Right to Restriction of Processing pursuant to Art. 18 GDPR
This right is tied to the conditions pursuant to Art. 18 para. 1 lit. a to d.
5.1.5 Right to Data Portability pursuant to Art. 20 GDPR
This governs the fundamental right to receive one’s own data in a commonly used form and to have it transmitted to another controller. However, this applies only to the data of processing based on consent or contract pursuant to Art. 20 para. 1 lit. a and b and insofar as this is technically feasible.
5.1.6 Right to Object pursuant to Art. 21 GDPR
You may in principle object to the processing of your personal data. This applies in particular where your interest in objecting outweighs the legitimate interest of the controller in the processing and where the processing relates to direct marketing and or profiling.
5.1.7 Right to “Decision in the Individual Case” pursuant to Art. 22 GDPR
You have in principle the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. However, this right also finds limitations and additions in Art. 22 para. 2 and 4 GDPR.
5.1.8 Further Rights
The GDPR contains comprehensive rights regarding the notification of third parties as to whether or how you have asserted rights under Art. 16, 17, 18 GDPR. However, this only insofar as this is also possible or feasible with reasonable effort.
At this point we would like to remind you again of your right to withdraw a consent given pursuant to Art. 7 para. 3 GDPR. The lawfulness of the processing carried out up to that point is, however, not affected thereby.
In addition, we would also like to draw your attention to your rights under Sections 32 et seq. BDSG, which, however, are for the most part substantively congruent with the rights just described.
5.1.9 Right to Lodge a Complaint pursuant to Art. 77 GDPR
You also have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that processing of personal data concerning you infringes this Regulation.
5.2 What If Tomorrow the GDPR Is Abolished or Other Changes Take Place?
The current status of this Privacy Policy is 10.07.2026. From time to time it is necessary to adapt the content of the Privacy Policy in order to react to factual and legal changes. We therefore reserve the right to amend this Privacy Policy at any time. We will publish the amended version in the same place and recommend that you read the Privacy Policy regularly.
Created with the kind support of Dieter macht den Datenschutz
1. Introduction
It is very important to us to handle the data of visitors to our company page on LinkedIn in a trustworthy manner and to protect it as best as possible. For this reason, we make every effort to meet the requirements of the GDPR.
In the following, we explain to you how we process your data on our company page. For this purpose, we use language that is as clear and transparent as possible so that you can truly understand what happens to your data.
2. Operator of the Company Profile and Contact Details of the Data Protection Officer
2.1 Operator of the Company Profile and Controller
The company profile on LinkedIn price4parts is operated by: price4parts GmH.
Responsible for the data processing on our company profile is the controller within the meaning of the GDPR. That is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
As the social media platform LinkedIn is operated by LinkedIn Ireland Unlimited Company with its registered office at Wilton Place, Dublin 2, Ireland, we are jointly responsible with LinkedIn for the processing of personal data pursuant to Art. 26 para. 1 GDPR as joint controllers. This relates in particular to the creation of Page Insights, regarding which we have concluded an agreement with LinkedIn, which is explained in more detail below. Likewise, you will find below information on the extent to which personal data is processed by which controller, for which purpose and on which legal basis this takes place.
You can reach our controller at:
price4parts GmH
Freiheit 27 46348 Raesfeld
info@price4parts.com
Den VerantwortlichenDen/Die Verantwortliche*n of LinkedIn Ireland Unlimited Company can be reached at:
By post:
For users within the European Union (EU), the European Economic Area (EEA) and Switzerland:
LinkedIn Ireland Unlimited Company, Attn: Legal Department (Datenschutzrichtlinie und Nutzungsvereinbarung), Wilton Plaza, Wilton Place, Dublin 2, Ireland
For users outside the designated countries:
LinkedIn Corporation, Attn: Legal Department (Datenschutzrichtlinie und Nutzungsvereinbarung), 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA
Online contact with the Data Protection Officer of LinkedIn Ireland Unlimited Company:
https://www.linkedin.com/help/linkedin/ask/TSO-DPO.
Online contact for questions about the privacy policy:
https://www.linkedin.com/help/linkedin/ask/ppq.
Data Protection Officer
We have appointed a Data Protection Officer for our company. You can reach this person at:
simply Legal GmbH
Sebastian Schenk
Burkarderstr. 36, 97082 Würzburg
dpo@dieter-datenschutz.de
3. General Information
3.1 Processing of Personal Data and Other Terms
Data protection applies to the processing of personal data. Personal means all data by which you can be personally identified. That is, for example, the IP address of the device (PC, laptop, smartphone, etc.) in front of which you are currently sitting. Such data is processed when ‘something happens to it’. When visiting a website, for example, the IP address is transmitted by the browser to the provider of the website operator and stored there automatically. That is then processing (pursuant to Art. 4 No. 2 GDPR) of personal data (pursuant to Art. 4 No. 1 GDPR). These and further statutory definitions can be found in Art. 4 GDPR.
3.2 Data Protection – Our View
Data protection is more than just an inconvenient obligation for us! Personal data has great value, and careful handling of it should be a matter of course in our digitized world.
In addition, as a visitor to our company profile on LinkedIn, you should be able to decide for yourself what happens to your data, when, and by whom. That is why we undertake to comply with all statutory provisions, collect only the data necessary for us, and of course treat it confidentially.
3.3 Applicable Provisions / Laws – GDPR, BDSG and TDDDG
The scope of data protection is governed by laws. In this case, these are the GDPR (General Data Protection Regulation) as a European regulation and the BDSG (Bundesdatenschutzgesetz) as a national law.
In addition, the TDDDG supplements the provisions of the GDPR insofar as the use of cookies is concerned.
3.3.1 Legal Bases
The processing of personal data always requires a legal basis. The GDPR provides for the following possibilities in Art. 6 para. 1 sentence 1:
a) The data subject has given consent to the processing of his or her personal data for one or more specific purposes;
b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
c) processing is necessary for compliance with a legal obligation to which the controller is subject;
d) processing is necessary in order to protect the vital interests of the data subject or of another natural person;
e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Below in section 1.4 we will state the specific legal basis for the respective processing of personal data.
3.3.2 Your Rights
The GDPR equips you with comprehensive rights. We have agreed with LinkedIn in this regard that LinkedIn is responsible for making it possible for you to exercise the rights to which you are entitled under the GDPR. This comprises, for example, free access regarding your processed personal data. In addition, you may request rectification, amendment or erasure of the data and have a right to object to the processing of your data and to restriction of that processing. Furthermore, you may withdraw consents given at any time.
We have likewise agreed with LinkedIn that the Irish Data Protection Commission (see under https://www.dataprotection.ie/) is the lead supervisory authority which monitors the processing of the Page Insights. You furthermore always have the right to lodge a complaint with the competent data protection supervisory authority.
How these rights look in detail and how they are to be exercised can be found in the last section of this Privacy Policy.
3.4 Disclosure and Erasure of Data
The disclosure and erasure of data are likewise important and sensitive topics. That is why we would like to inform you briefly in advance about our general approach in this regard.
A disclosure of data takes place if on the basis of a legal basis and only then if this is indispensable. This may in particular be the case where a so-called processor is involved and a processing agreement pursuant to Art. 28 GDPR has been concluded.
We erase your data when the purpose and the legal basis for the processing cease to apply and, moreover, no other statutory obligations stand in the way of erasure. Art. 17 GDPR also provides a ‘good’ overview of this. It should be noted that it follows from our agreement with LinkedIn regarding the Page Insights that only LinkedIn is authorized to decide on the erasure thereof at its sole discretion. From LinkedIn’s privacy policy, however, it can be inferred that they pursue the same approach as we do with regard to the erasure of personal data.
Further information:
https://de.linkedin.com/legal/privacy-policy.
Please take all further information from this Privacy Policy and, in the case of specific questions, contact the controller.
4. Data Processing on Our Company Profile
By visiting our company profile on LinkedIn, we process personal data about you.
In the following, we provide an overview of which data we process for which purpose and on which legal basis this takes place:
4.1 Data Collection upon Accessing the Company Page
When visiting our company page on LinkedIn and when interacting with our content, we process personal data of users. This data comprises the publicly accessible information from the user profiles, such as the name, the profile picture and, where applicable, further details that become accessible to us through interactions such as likes, comments or the sharing of posts. In addition, we process personal data contained in direct messages or comments in order to respond to user inquiries or to address feedback.
The legal basis for this data processing is formed by Art. 6 para. 1 lit. f GDPR, as we have a legitimate interest in promoting interaction on our company page, providing relevant content and optimizing the user experience. Through the processing of this data, we can ensure the functionality of our page and better respond to the needs and interests of our community.
In addition, we process personal data where it arises in the context of inquiries or messages via LinkedIn in connection with the performance of a contract or pre-contractual measures. In these cases, processing takes place pursuant to Art. 6 para. 1 lit. b GDPR, as it is necessary for the fulfillment of our contractual obligations, for example in the context of customer service.
Through the processing of this data, we ensure that we can respond efficiently to the needs of our users while at the same time maintaining the technical and content-related function of our LinkedIn profile.
4.2 Processing of Personal Data and Cookies by LinkedIn
LinkedIn itself processes personal data of users in order to personalize the platform, improve the user experience and adapt security as well as advertisements. In doing so, LinkedIn collects data such as IP addresses, device information, browser types, interactions with the platform as well as location data insofar as these are shared. LinkedIn uses this information to ensure the functioning and security of its services, to provide user-relevant content and advertising, and to further develop the platform. The legal bases for these data processing activities are Art. 6 para. 1 lit. b GDPR (performance of a contract) for the provision and personalization of the services and Art. 6 para. 1 lit. f GDPR (legitimate interest) for the security and further development of the platform. For this purpose, LinkedIn uses cookies and similar technologies that store and analyze usage data in order to design and improve the platform more efficiently.
Further information:
https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
4.3 Insights and Data Processing in Joint Controllership with LinkedIn
LinkedIn also uses information in order to provide analytics services, so-called Page Insights, for page operators. This also applies to our LinkedIn profile.
Insights are aggregated statistics that are created based on the interactions of visitors with our company page and the content published thereon and are recorded by the LinkedIn servers. These include information such as the number of page views, interactions such as “Like” indications or comments as well as demographic details about the visitors (e.g. occupational group, industry or geographic region).
LinkedIn provides us with reports and analyses that help us better understand the reach and effectiveness of our content. We do not obtain access to personal data of users, but only to aggregated, anonymized reports. Through these evaluations, we can align our content more specifically with the interests of our target group and design our company page in an appealing manner. The data processing is based on our legitimate interest in the analysis and improvement of our corporate communication pursuant to Art. 6 para. 1 lit. f GDPR.
With regard to the processing of personal data in the course of the Page Insights, processing takes place in joint controllership with LinkedIn pursuant to Art. 26 para. 1 GDPR. For this purpose, we have concluded a corresponding agreement with LinkedIn that defines the respective responsibilities.
Further information on the joint controllership and on the data processing by LinkedIn can be viewed here:
https://legal.linkedin.com/pages-joint-controller-addendum.
You can find the complete privacy policy of LinkedIn here:
https://de.linkedin.com/legal/privacy-policy.
5. What Else Is Important
In conclusion, we would like to inform you comprehensively and in detail about your rights and tell you how you will be informed about changes to data protection requirements.
5.1 Your Rights in Detail
5.1.1 Right of Access pursuant to Art. 15 GDPR
You may request information as to whether personal data about you is being processed. If that is the case, you may request further information about the nature and manner of the processing. A detailed list can be found in Art. 15 para. 1 lit. a to h GDPR.
5.1.2 Right to Rectification pursuant to Art. 16 GDPR
This right comprises the rectification of inaccurate data and the completion of incomplete personal data.
5.1.3 Right to Erasure pursuant to Art. 17 GDPR
This so-called ‘right to be forgotten’ gives you the right, under certain conditions, to request erasure of the personal data by the controller. This is generally the case when the purpose of the data processing has ceased to apply, when consent has been withdrawn, or the original processing took place without a legal basis. A detailed list of grounds can be found in Art. 17 para. 1 lit. a to f GDPR. This “right to be forgotten” furthermore corresponds to the obligation of the controller under Art. 17 para. 2 GDPR to take appropriate measures to bring about a general erasure of the data.
5.1.4 Right to Restriction of Processing pursuant to Art. 18 GDPR
This right is tied to the conditions pursuant to Art. 18 para. 1 lit. a to d.
5.1.5 Right to Data Portability pursuant to Art. 20 GDPR
This governs the fundamental right to receive one’s own data in a commonly used form and to have it transmitted to another controller. However, this applies only to the data of processing based on consent or contract pursuant to Art. 20 para. 1 lit. a and b and insofar as this is technically feasible.
5.1.6 Right to Object pursuant to Art. 21 GDPR
You may in principle object to the processing of your personal data. This applies in particular where your interest in objecting outweighs the legitimate interest of the controller in the processing and where the processing relates to direct marketing and or profiling.
5.1.7 Right to “Decision in the Individual Case” pursuant to Art. 22 GDPR
You have in principle the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. However, this right also finds limitations and additions in Art. 22 para. 2 and 4 GDPR.
5.1.8 Further Rights
The GDPR contains comprehensive rights regarding the notification of third parties as to whether or how you have asserted rights under Art. 16, 17, 18 GDPR. However, this only insofar as this is also possible or feasible with reasonable effort.
At this point we would like to remind you again of your right to withdraw a consent given pursuant to Art. 7 para. 3 GDPR. The lawfulness of the processing carried out up to that point is, however, not affected thereby.
In addition, we would also like to draw your attention to your rights under Sections 32 et seq. BDSG, which, however, are for the most part substantively congruent with the rights just described.
5.1.9 Right to Lodge a Complaint pursuant to Art. 77 GDPR
You also have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that processing of personal data concerning you infringes this Regulation.
5.2 What If Tomorrow the GDPR Is Abolished or Other Changes Take Place?
The current status of this Privacy Policy is 10.07.2026. From time to time it is necessary to adapt the content of the Privacy Policy in order to react to factual and legal changes. We therefore reserve the right to amend this Privacy Policy at any time. We will publish the amended version in the same place and recommend that you read the Privacy Policy regularly.
Created with the kind support of Dieter macht den Datenschutz.