Processing of personal data by OEKO-TEX®

OEKO-TEX® will only process personal data in the context of competitions. Details are collected exclusively for the purpose of determining the winners and delivering prizes. The winners will be notified by OEKO-TEX® via private message and requested to provide a valid postal address. The details collected are: first name, surname and postal address (street, house number, postcode, city).

In accordance with article 6 (1) lit. a GDPR, the legal basis for the processing of personal data is provided by consent to the processing of data for the purposes specified here.

OEKO-TEX® competitions are not connected with Facebook or Instagram and are not sponsored, supported or organised by Facebook or Instagram in any way. Facebook and Instagram will not receive the information provided; only OEKO-TEX® will receive this information. OEKO-TEX® will not pass on your data to third parties. Personal data are processed by OEKO-TEX® exclusively for the purpose of determining the winner of the competition. We will only pass on your personal data to service providers or partner companies who assist us in delivering the prizes to the winners (commissioned data processing in accordance with art. 28 GDPR). For their part, these companies are obliged to comply with the data protection regulations. Particularly strict data protection regulations apply to commissioned data processing; in particular, these companies may only use the data to fulfil tasks carried out on our behalf. OEKO-TEX® is responsible for ensuring that these companies comply with the data protection regulations and has concluded corresponding commissioned data processing agreements with the service providers.

Your data will be deleted as soon as the winner has received the prize and the competition is therefore over.

Processing of personal data by Facebook

In its judgement of 5/6/2018, the European Court of Justice (ECJ) ruled that the operator of a Facebook page, together with Facebook, is jointly responsible for the processing of personal data.

The following data are collected as a user of Facebook:

· Advertising (analysis tools, trackers and personalised advertising)

· Creation and evaluation of user profiles

· Market research and marketing analyses

Facebook Inc. is the American parent company of Facebook Ltd. Ireland and is certified under the EU-U.S. Privacy Shield. This means that Facebook undertakes to comply with the data protection guidelines at the European level and to implement them. This can be viewed here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

We have no influence on or insight into Facebook's compliance with these guidelines. We cannot rule out the possibility of risks and transfers of user data in third countries.

Use of cookies by Facebook

When you visit the Facebook page, Facebook may save information on your computer in the form of cookies. Cookies are small files that are transferred to your browser by a web server and saved on your hard drive. Only the internet protocol address is saved - no personal data. This information stored in the cookies is used to recognise you automatically the next time you visit our website, which makes it easier for you to use. The legal basis for the use of cookies is provided by a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

Of course, you can also visit the Facebook page without accepting cookies. If you do not want your computer to be recognised the next time you visit the page, you can reject the use of cookies by changing the settings in your browser to "Block cookies". The procedure for doing so can be found in the operating instructions for your respective browser. However, your ability to use some areas of our website may be limited if you reject the use of cookies.

Facebook's privacy policy contains further information on data processing:  https://www.facebook.com/about/privacy/

Opt-out options can be set here

https://www.facebook.com/settings?tab=ads and here http://www.youronlinechoices.com.

Collection of statistical data by Facebook

Facebook provides us with statistical data via Facebook Insights. This application can be used to discover further information on the demographics, location or consumer behaviour of potential customers. Facebook Insights analyses the audience reached with an advertising message. The corresponding data can then be displayed either for all Facebook users or for the fans of a page as well as for a defined custom audience. The insights then provide more detailed information:

· Demographic information: age, gender, relationship status, etc.

· Page likes: information about fans of other Facebook pages

· Location and language setting of users

· Telephone number

· Activity of selected users

· Proportion of men and women

· Job titles

· Route planner

According to Facebook, all data that can be viewed in Insights is aggregated and anonymous for advertisers. As a result, no conclusions can be drawn about individual persons. We use these data in aggregated form in order to make the posts and activities on our page more attractive for each user. For example, we use the distribution by age and gender to enable adapted communication and the times of day when users are online in order to optimise the timing of posts on this Facebook page. Information about the types of devices used by visitors helps us to adapt the posts to them in terms of their appearance and design. In accordance with the Facebook terms of use, which each user agrees to when creating a Facebook profile, we can identify subscribers and fans of the page and view their profiles and other information shared by them.

Data subject rights of users

Unfortunately, we cannot meet our information obligations under Art. 13 EU GDPR, as only Facebook has full access to your user data. If you wish to exercise your rights as a data subject, please contact Facebook directly here.

If we have access to your data, e.g. when conducting competitions on Facebook, please contact us at any time if you wish to find out which of your personal data we store or to request the correction or deletion of this data.

Your rights include the following:

Right of access:

You can request information from us as to whether and to what extent we process your data.

Right to rectification:

If we process personal data concerning you that is incomplete or incorrect, you can request that we correct or complete it at any time.

Right to erasure:

You can request that we erase your data if we process such data unlawfully or if the processing disproportionately interferes with your legitimate protection interests. Please note that there may be reasons that prevent an immediate erasure, e.g. in the case of legally regulated storage obligations.

Regardless of whether you exercise your right to erasure, we will immediately and completely erase your data, provided that this is not prevented by legal or statutory storage obligations.

Right to restriction of processing:

You can request that we restrict the processing of your data if

- you contest the accuracy of the data, for a period enabling us to verify the accuracy of the data;

- the processing of the data is unlawful, but you oppose the erasure of the data and request the restriction of their use instead;

- we no longer need the data for the intended purpose, but you still require this data for the exercise or defence of legal claims, or;

- you have objected to the processing of data.

Right to data portability:

You have the right to obtain from us the data you provide in a structured, common and machine-readable format and the right to have this information transmitted to another controller without hindrance from us, provided that

- we process this data on the basis of revocable consent granted by you or for the performance of a contract between us, and

- this processing is carried out through the use of automated processes.

If technically feasible, you can request that we transmit your data directly to another controller.

Right to object:

If we process your data on the basis of a legitimate interest, you can object to this data processing at any time; this also applies to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. You can object to the processing of your data for the purpose of direct marketing at any time without giving reasons.

Right to lodge a complaint:

If you are of the opinion that we are violating German or European data protection law when processing your data, please contact us so that we can clarify any questions. Of course, you also have the right to contact the supervisory authority responsible for you, i.e. the respective State Office for Data Protection Supervision.

If you wish to assert one of the aforementioned rights against us, please contact our Data Protection Officer. In cases of doubt, we can request additional information to confirm your identity.

If you require assistance or have any other questions, please contact us by e-mail at info@oekotex.com. If you no longer wish for the data processing described here to be carried out in future, please cancel the connection between your user profile and our page by using the “Unlike page” and/or “Unfollow this page” functions.