Joint Controllers:

Nahverkehrsservice Sachsen-Anhalt GmbH (hereafter "NASA“)
Am Alten Theater 4
39104 Magdeburg

Phone: +49(0)391-536310
Webseite: www.nasa.de
E-Mail: datenschutz@nasa.de

and

Meta Platforms Ireland Ltd.  (hereafter "Meta“)
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland

as joint controllers pursuant to Art. 26 GDPR.

Data Protection Officer of NASA:

Mrs Meggie Dachner

DATA 4.0 Gesellschaft für Datenschutz und Datensicherheit mbH
Dornbergsweg 2
38855 Wernigerode

E-Mail: m.dachner@data40.de

Data Protection Officer of Meta Platforms Ireland Ltd:

https://www.facebook.com/help/contact/540977946302970

Nahverkehrsservice Sachsen-Anhalt GmbH - hereinafter referred to as NASA - uses the technical services and the "Facebook" platform of Meta Platforms Ireland Ltd. for its public relations work. The principal place of business of the platform operator is in the USA (Meta Platforms Inc.).

NASA would like to expressly point out to users of its Facebook pages that they use the site and its functions in their own interest. This applies in particular to interactive functions such as commenting, sharing, rating content and using the news function.

Up-to-date information and contact details for NASA can also be found on the website www.nasa.de.

Information regarding the collection of user data by Facebook, how it is used and for what purposes it is used is described by Meta in its own data policy at https://www.facebook.com/policy.php

It is expressly noted that NASA has no influence on the data processing by Meta Platforms Inc. and Meta Platforms Ireland Ltd. This applies in particular to the nature and extent of the processing, use, dissemination and transfer of user data to third parties. Therefore, no effective controls can be applied.

Type of Data

When our Facebook fan page is accessed, Meta collects information from users that they themselves or third parties have posted on the social network or that is automatically collected and processed. This includes in particular

• voluntarily provided profile information (e.g. profile name, location, contact information, address book contacts, school name and location, occupation, registered family members, registered (spouse) partner, photos and videos).
• content created, shared and viewed, posts, comments, videos
• confidential messages or communications and content exchanged with other users
• external recognition features (if facial recognition is enabled), e.g. to recognise people in pictures and videos
• metadata from posts and recordings, such as location, date, and environmental information
• information about friends and linked accounts
• time, frequency and length of sessions
• interests and groups, as well as activities and interactions
• Meta-products used, such as camera
• payment and account information (for purchases or transactions on Instagram), e.g. credit card number, other card information, other account and authentication information, billing, shipping and contact information
• IP address, information about (wireless) networks used, GPS data
• Device information from computers, tablets, phones, connected TVs and other internet-connected devices in use, e.g. device attributes, device operations, identifiers, device signals, device settings data, networks and connections used.

Use of the Data

In addition to the aforementioned user data, Meta processes in particular shared content and posts relating to personal interests and favourite topics. The data is analysed by Meta and used for the following purposes, among others

• personalised advertising and promotions
• providing and sharing information across different devices and other products of the Provider
• statistical reporting and analysis
• user profiling and tracking
• advertising to friends, businesses or people in the vicinity, e.g. using location information from devices used, device location, IP address, places visited or events held
• product research and development (market research)
• use of facial recognition technology

When you interact with NASA's Facebook page by liking, commenting, sharing or sending messages, Facebook prompts you to log in to your personal profile or register. Once you have successfully logged into your account, you are uniquely identifiable to Facebook. As a result, your data and interactions will be processed by the platform operator and merged with your user profile.

How you can manage or delete your existing data is explained in more detail in the Facebook help section at https://www.facebook.com/help/356107851084108?ref=dp.

If you are logged in to Facebook when you visit our fan page, Facebook recognises that you have accessed the page and how you use it. It also records the duration of your visit. If you do not want the provider to record details of your use, you should log out of Facebook or permanently disable the "stay logged in" feature. You should also view and delete any cookies on the device you are using.

The Facebook components, buttons and widgets embedded in websites, and the setting of cookies, record visits to websites and associate them with a specific Facebook profile. Based on the content and topics viewed on the websites, Meta can provide personalised advertising to users.
For more information about the use of cookies and other control options available to you, please see our cookie policy at https://www.facebook.com/policies/cookies/.

Meta also receives personal data and information from website visitors who do not have a Facebook profile. This is so-called "log data" such as cookie information, IP address, browser and type, operating system, device, device ID, application ID, mobile operator, location information, websites visited and search terms used.

NASA can only rely on the information and details provided by Facebook itself for the enumeration and data processing shown. There are no control or verification mechanisms in place. Therefore, it cannot be ruled out that additional personal data may be collected and processed for other purposes.

Sharing of data

The data and information processed by Facebook is shared within the Meta group of companies and with other Meta companies and business partners.

Regardless of where you live, the data will be stored and processed on servers located in countries where Meta does business. The transfer and use of your personal data in insecure third countries and the risks associated with this cannot be excluded.

In addition, third parties such as business partners, advertisers, vendors, service providers, researchers, academics and law enforcement agencies may receive and process your information for their own purposes.

Further information and privacy choices

The extent to which Meta uses your personal data from visits to Facebook pages for its own purposes is not clearly answered by the platform operator. It is also not sufficiently clear how long this data is stored and to which companies or authorities it may be disclosed.

If you have any questions about the management of your data, you can contact Meta via the help section at https://www.facebook.com/help/contact/1994830130782319.

We recommend that you regularly review and adjust your own privacy preferences. This allows you to control what content is shared with other users, manage tags, and report potential violations of your privacy.

The following tips can help you protect your privacy:

• Keep your personal contact information private and only share the information and personal details you want to share on social networks.
• Do not confirm friend requests from other Facebook users you do not know, and always check who you are adding to your contact list.
• Limit the visibility of your profile so that your posts and information are not immediately visible to everyone. If necessary, disable your profile's searchability.
• Always control and question what content and private "moments" you want to share on social networks. Also protect people, such as children and minors, who may not be able to decide for themselves whether they want to be online.
• Applications and apps are potential "data collectors" and can spy on personal information and pass it on to the developer or third parties. Do not give applications unrestricted access to your contacts, photos or location.
• Remain polite and always observe netiquette, even when communicating on the Internet. Do not be provoked. Most comments on Facebook pages are public, even to people who are not logged into Facebook.  

You can access Facebook's privacy settings at https://www.facebook.com/help/238318146535333?helpref=hc_global_nav.

Please note that there is no interest in collecting and processing your data for analysis or marketing purposes.

Nevertheless, certain personal data may be processed by NASA.  This includes, but is not limited to, data that you provide to Facebook yourself, such as your profile picture, profile name and email address. If you use the interactive features on our Facebook page, such as liking, commenting, rating, tagging yourself and other users, or sending messages, your information will appear on our page and will be processed. This means that this information may also be available to other users. 

NASA uses your information to respond to messages or to contact and communicate with you. The legal basis for data processing is our legitimate interest according to Art. 6 para. 1 (f) GDPR. Your data will be deleted at the end of the conversation, unless there are legal retention periods preventing the deletion or it is necessary for the preservation of evidence. You may object to the processing of your data at any time.

If you no longer wish to have your data processed by NASA in the future, please adjust your profile settings accordingly and, if necessary, deactivate the subscription to our Facebook fan pages. This will remove the link between our pages and your profile. Please note that comments or posts may still be visible.

Behavioural Analysis "Page Insights Data"

The data and interactions of visitors to our Facebook pages are used, among other things, to provide statistical analysis and aggregate data to page operators. This is known as "page insights data" and may be based on personally identifiable information.

This data is generated from the visits and interactions of users on the Facebook page and is provided by Meta. NASA has not commissioned these analyses from Meta, nor has it directly influenced the scope of the processing. A technical adjustment to disable the Page Insights feature is currently not possible.

Meta has also required the site operators to provide a suitable legal basis for the processing of the personal "Insights" data in accordance with the General Data Protection Regulation. According toArt. 6 para. 1 (f) GDPR, the data processing serves to protect our legitimate interest in optimising and improving our offers on Facebook.

Insofar as the data provided by you to NASA is also or exclusively processed by Facebook, Meta is the data controller within the meaning of the GDPR in addition to NASA. In this respect, the data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR.

The agreement is available at https://www.facebook.com/legal/terms/page_controller_addendum.

Information on "Site Insight Data" is available at https://www.facebook.com/legal/terms/information_about_page_insights_data.

You can opt out of having your data processed for advertising purposes at any time by changing or adjusting the advertising settings in your Facebook user account at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

Questions about NASA's Facebook fan pages can be sent in writing to datenschutz@nasa.de. You may exercise your rights of access, blocking, erasure and portability of data, rectification or restriction of processing, as well as the right to object. 

However, as only Meta has full access to your data, we recommend that you contact the platform operator directly if you have any requests for information or other questions regarding your rights as a data subject. Meta provides relevant information on their privacy policy at https://www.facebook.com/policy.php under the heading "What is our legal basis for processing your information, and what are your rights?"

You also have the right to lodge a complaint with the supervisory authority responsible for Meta Platforms Ltd. or with the supervisory authority in your country.