Privacy policy for our LinkedIn Profile

Privacy Policy

Below we inform you about the data processing activities on our LinkedIn profile on https://linkedin.com and educate you about your rights. We are committed to complying with legal data protection requirements and strive to always consider the principles of data avoidance and data minimization.

1. Name and Address of the Data Controller and the Data Protection Officer

EcoControl GmbH
Martinstr. 42-44
73728 Esslingen
Germany
Phone: +49 (0) 711/2090 8200
Email: datenschutz@EcoControl.de
Website: https://www.EcoControl.online

Hereinafter referred to as: “We”
The Data Protection Officer of the Data Controller can be reached as follows:

SiDIT GmbH
Email: info@sidit.de
Website: www.sidit.de

2. Definitions

We have designed our privacy policy based on the principles of clarity and transparency. If there are any uncertainties regarding the use of different terms, you can view the corresponding definitions here.

3. Legal Basis for Processing Personal Data

We process your personal data, such as your first and last name, email address, and IP address, etc., only if there is a legal basis for doing so. In accordance with the General Data Protection Regulation (GDPR), the following legal grounds may apply:

Art. 6 para. 1 sentence 1 lit. a GDPR: The data subject has given consent to the processing of their personal data for one or more specific purposes.
Art. 6 para. 1 sentence 1 lit. b GDPR: The processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract.
Art. 6 para. 1 sentence 1 lit. c GDPR: The processing is necessary for compliance with a legal obligation to which the controller is subject.
Art. 6 para. 1 sentence 1 lit. d GDPR: The processing is necessary to protect vital interests of the data subject or another natural person.
Art. 6 para. 1 sentence 1 lit. e GDPR: The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Art. 6 para. 1 sentence 1 lit. f GDPR: The processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party, unless overridden by the interests or fundamental rights and freedoms of the data subject, particularly where the data subject is a child.

We will, however, always point out the legal basis for processing your personal data at the relevant points in this privacy policy.

For more detailed information on processing by LinkedIn, you can refer to LinkedIn’s privacy policy: https://de.linkedin.com/legal/privacy-policy.

4. Disclosure of Personal Data

The disclosure of personal data is also a processing activity as defined in the previous section. However, we would like to inform you separately about the disclosure of data to third parties. Protecting your personal data is very important to us. For this reason, we are particularly cautious when it comes to disclosing your data to third parties.

Personal data will only be disclosed to third parties when there is a legal basis for processing. For example, we may disclose personal data to individuals or companies that act as processors on our behalf according to Art. 28 GDPR. A processor is anyone who processes personal data on our behalf – in particular, under our instruction and control.

In accordance with the requirements of the GDPR, we conclude a contract with each of our processors to ensure that they comply with data protection regulations and provide comprehensive protection for your data.

Please note that LinkedIn Ireland Unlimited Company may also disclose your data to third parties. However, we have no control over this. For further information, you can refer to LinkedIn’s privacy policy: https://de.linkedin.com/legal/privacy-policy.

5. Storage Duration and Deletion

We store all personal data that you transmit to us only as long as necessary to fulfill the purposes for which the data was provided or as required by law. Upon fulfillment of the purpose and/or expiration of the statutory retention periods, we will delete or block the data.

Information about data storage by LinkedIn Ireland Unlimited Company can be found in their privacy policy: https://de.linkedin.com/legal/privacy-policy.

6. Collection and Storage of Personal Data and Their Purpose and Use

Below, we explain the data processing activities carried out by us. For data processing by LinkedIn Ireland Unlimited Company, please refer to their privacy policy https://de.linkedin.com/legal/privacy-policy.

a) Data Processing during Interactions with Our Account

We only receive personal data from you when you take an active action, e.g., when you like, post, share, comment, send us a direct message, or perform other interactions. This also includes when you use specific hashtags or we share your LinkedIn posts.

When you interact with us, data processing usually takes place as we can view your account and thereby gain access to personal data such as your username, profile picture, or the date and time of the interaction.

Please do not share sensitive personal data with us via the LinkedIn platform, such as information about your health, religious beliefs, or sexual orientation.

We process this personal data solely for the purposes pursued on LinkedIn:

Displaying and operating our LinkedIn company page
Responding to messages sent privately to us
Reacting to your publicly shared posts (such as articles, videos, images, etc.) where you mention or tag us
Responding to your publicly addressed comments on posts

We do not create profiles of you or combine this personal data with other data we have from you.

Data from interactions with our account is used by us to provide relevant content to visitors of our LinkedIn page and to allow you to use our LinkedIn page and its functionalities. This is in our legitimate interest according to Art. 6 para. 1 sentence 1 lit. f GDPR.

Responding to your direct messages and comments on posts is justified under Art. 6 para. 1 lit. b GDPR.

In individual cases, we may need your consent for the processing of your personal data according to Art. 6 para. 1 lit. a GDPR, for example, if a post we publish includes a photo or video of you. In that case, we will explain further details about this data processing when seeking your consent.

Further information on data processing by the platform operator can be found in LinkedIn’s privacy policy: https://de.linkedin.com/legal/privacy-policy.

b) Data Processing for Page-Insights

We process aggregated statistics and insights from LinkedIn (so-called Page Insights), which provide us with information on how people interact with our company page, e.g., whether a member is a follower. This includes, among other things, information about the number of people or accounts who view, react to, or comment on our posts, as well as aggregated demographic and other information that helps us understand interactions with our page or account.

Page Insights provided to us by LinkedIn consist of aggregated data, and LinkedIn does not provide us with personal data of members in relation to Page Insights. We also have no ability to link Page Insights to individual members.

When we run advertisements, we receive reports about the types of people who view our ads and the success of our ads. No personally identifiable information is shared with us unless the individual has consented to such processing. To help us understand our audience better, LinkedIn provides us with general demographic and interest-based information. We also receive information from LinkedIn about which of our ads led to a purchase or action being taken.

The processing of this data serves the purpose of analyzing our reach and tailoring our content and advertisements to user interests. With these analyses, we can understand how our content, profile, and advertising are consumed. This helps us create targeted content and ads to better market our company and services. This is in our legitimate interest according to Art. 6 para. 1 sentence 1 lit. f GDPR.

This processing of your personal data in connection with Page Insights is carried out jointly with LinkedIn Ireland Unlimited Company. We have entered into a joint controller agreement with LinkedIn Ireland Unlimited Company (https://legal.linkedin.com/pages-joint-controller-addendum).

For LinkedIn’s responsibility:

LinkedIn Ireland Unlimited Company
Wilton Place,
Dublin 2, Ireland

You can contact LinkedIn Ireland Unlimited Company via this form:
https://www.linkedin.com/help/linkedin/solve

The Data Protection Officer of LinkedIn Ireland Unlimited Company can be reached via this form:
https://www.linkedin.com/help/linkedin/ask/TSO-DPO

You can find LinkedIn’s full privacy policy here:
https://de.linkedin.com/legal/privacy-policy.

7. Rights of the Data Subject

You have the following rights:

a) Right to Information

You have the right under Art. 15 GDPR to request information about the personal data we process about you. This right to information includes details about:

The purposes of processing
The categories of personal data
The recipients or categories of recipients to whom your data has been or will be disclosed
The planned duration of storage or at least the criteria for determining the duration of storage
The existence of the right to rectification, deletion, restriction of processing, or objection
The existence of a right to lodge a complaint with a supervisory authority
The source of your personal data, if it was not collected from you
The existence of automated decision-making, including profiling, and where applicable, meaningful information about the logic involved

If it concerns joint responsibility with LinkedIn (see “Data Processing for Page-Insights”), LinkedIn Ireland Unlimited Company is responsible for handling your rights as a data subject. You can contact LinkedIn Ireland Unlimited Company via this form:
https://www.linkedin.com/help/linkedin/solve