Joint controllers: 

Nahverkehrsservice Sachsen-Anhalt GmbH (hereafter "NASA“)
Am Alten Theater 4
39104 Magdeburg

Phone: +49(0)391-536310
Webseite: www.nasa.de
E-Mail: datenschutz@nasa.de

and

Meta Platforms Ireland Ltd.  (hereafter"Meta“)
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland

as joint controllers pursuant to Art. 26 GDPR.

Data Protection Officer of NASA:

Mrs Meggie Dachner

DATA 4.0 Gesellschaft für Datenschutz und Datensicherheit mbH
Dornbergsweg 2
38855 Wernigerode

E-Mail: m.dachner@data40.de

Data Protection Officer of Meta Platforms Ireland Ltd:

https://www.facebook.com/help/contact/540977946302970

Nahverkehrsservice Sachsen-Anhalt GmbH - hereinafter referred to as NASA - uses the technical services and the "Instagram" platform of Meta Platforms Ireland Ltd. for its public relations work. The principal place of business of the platform operator is in the USA (Meta Platforms Inc.).

NASA would like to expressly point out to users of its Instagram pages that they use the site and its functions in their own interest. This applies in particular to interactive functions such as commenting, sharing, rating content and using the news function.

Up-to-date information and contact details for NASA can also be found on the website www.nasa.de.

Information regarding the collection of user data by Instagram, how it is used and for what purposes it is used is described by Meta in its own data policy at https://privacycenter.instagram.com/policy/.

It is expressly noted that NASA has no influence on the data processing by Meta Platforms Inc. and Meta Platforms Ireland Ltd. This applies in particular to the nature and extent of the processing, use, dissemination and transfer of user data to third parties. Therefore, no effective controls can be applied.

Type of Data

When our Instagram fan page is accessed, Meta collects information from users that they themselves or third parties have posted on the social network or that is automatically collected and processed. This includes in particular

• voluntarily provided profile information (e.g. profile name, location, contact information, address book contacts, school name and location, occupation, registered family members, registered (spouse) partner, photos and videos).
• content created, shared and viewed, posts, comments, videos
• confidential messages or communications and content exchanged with other users
• external recognition features (if facial recognition is enabled), e.g. to recognise people in pictures and videos
• metadata from posts and recordings, such as location, date, and environmental information
• information about friends and linked accounts
• time, frequency and length of sessions
• interests and groups, as well as activities and interactions
• Meta-products used, such as camera
• payment and account information (for purchases or transactions on Instagram), e.g. credit card number, other card information, other account and authentication information, billing, shipping and contact information
• IP address, information about (wireless) networks used, GPS data
• Device information from computers, tablets, phones, connected TVs and other internet-connected devices in use, e.g. device attributes, device operations, identifiers, device signals, device settings data, networks and connections used.

Use of the Data

In addition to the aforementioned user data, Meta processes in particular shared content and posts relating to personal interests and favourite topics. The data is analysed by Meta and used for the following purposes, among others

• personalised advertising and promotions
• providing and sharing information across different devices and other products of the Provider
• statistical reporting and analysis
• user profiling and tracking
• advertising to friends, businesses or people in the vicinity, e.g. using location information from devices used, device location, IP address, places visited or events held
• product research and development (market research)
• use of facial recognition technology

How to manage or delete your existing data is explained in more detail in the Instagram help section help.instagram.com.

Through the components and features built into the social network and by setting cookies, visits are recorded and associated with your profile. Based on the content and topics viewed, Meta can offer personalised advertising to users.

How cookies are used and what further control options are available to you are described in more detail in the Cookie Policy help.instagram.com/1896641480634370.

NASA can only rely on the information and details provided by Instagram itself for the enumeration and data processing shown. There are no control or verification mechanisms in place. Therefore, it cannot be ruled out that additional personal data may be collected and processed for other purposes.

Sharing of data

The data and information processed by Instagram is shared within the Meta group of companies and with other Meta companies and business partners.

Regardless of where you live, the data will be stored and processed on servers located in countries where Meta does business. The transfer and use of your personal data in insecure third countries and the risks associated with this cannot be excluded.

In addition, third parties such as business partners, advertisers, vendors, service providers, researchers, academics and law enforcement agencies may receive and process your information for their own purposes.

Further information and privacy choices

The extent to which Meta uses your personal data from visits to Facebook pages for its own purposes is not clearly answered by the platform operator. It is also not sufficiently clear how long this data is stored and to which companies or authorities it may be disclosed.

If you have any questions about the management of your data, you can contact Meta via the help section at https://www.facebook.com/help/contact/1994830130782319.

We recommend that you regularly review and adjust your own privacy preferences. This allows you to control what content is shared with other users, manage tags, and report potential violations of your privacy.

The following tips can help you protect your privacy:

• Keep your personal contact information private and only share the information and personal details you want to share on social networks
• Don't confirm requests from other Instagram users you don't know, and always check who you're adding as a follower.
• If necessary, limit the visibility of your profile so that not everyone can immediately see your posts and information.
• Always think about what content and private "moments" you want to share on social networks. Also protect people, such as children and minors, who may not be able to decide for themselves whether they want to be online.
• Applications and apps are potential "data collectors" and can spy on personal information and pass it on to the developer or third parties. Do not give applications unrestricted access to your contacts, photos or location.
• Remain polite and always observe netiquette when communicating online. Don't be provoked. Most comments on Instagram pages are public.  

You can access Instagram's privacy settings here: https://help.instagram.com/811572406418223/?helpref=uf_share

Please note that there is no interest in collecting and processing your data for analysis or marketing purposes.

Nevertheless, certain personal data may be processed by NASA.  This includes, but is not limited to, data that you provide to Instagram yourself, such as your profile picture, profile name and email address. If you use the interactive features on our Facebook page, such as liking, commenting, rating, tagging yourself and other users, or sending messages, your information will appear on our page and will be processed. This means that this information may also be available to other users. 

NASA uses your information to respond to messages or to contact and communicate with you. The legal basis for data processing is our legitimate interest according to Art. 6 para.1 (f) GDPR. Your data will be deleted at the end of the conversation, unless there are legal retention periods preventing the deletion or it is necessary for the preservation of evidence. You may object to the processing of your data at any time.

If you no longer wish to have your data processed by NASA in the future, please adjust your profile settings accordingly and, if necessary, deactivate the subscription to our Instagram fan pages. This will remove the link between our pages and your profile. Please note that comments or posts may still be visible.

Behavioural Analysis "Instagram Insights Data"

The data and interactions of visitors to our Instagram pages are also used, among other things, to provide statistical analysis and aggregate data to the page operators. This is known as "Instagram insights" and may be based on personal information.

This data is generated based on user visits and interactions on our Instagram pages and is provided by Meta. NASA has not commissioned this analysis from Meta, nor has it directly influenced the scope of the processing. A technical adjustment to disable the "Instagram Insights" feature is currently not possible.

Meta has also required the site operators to provide an adequate legal basis for the processing of personal "Insights data" in accordance with the General Data Protection Regulation. According to Art. 6 para. 1 (f) GDPR, the data processing serves to protect our legitimate interest in optimising and improving our public relations work.

More information about Instagram Insights can be found at https://help.instagram.com/ipad-app/788388387972460.

Questions about NASA's Instagram pages can be sent in writing to datenschutz@nasa.de. You may exercise your rights of access, blocking, erasure and portability, rectification or restriction of processing, as well as the right to object.  

However, as only Meta has full access to your data, we recommend that you contact the platform operator directly for information requests or other questions regarding your data subject rights: https://privacycenter.instagram.com/policy/?section_id=13-HowToContactMeta.  

You also have the right to lodge a complaint with the supervisory authority responsible for Meta Platforms Ltd. or with the supervisory authority in your country.