Social Media privacy policy

At EMDESK, data protection is a matter of great importance. As a part of our general Privacy Policy, this Social Media privacy policy describes how we handle your data on the social media platforms in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

1. Controller responsible

The Controller responsible for the data processing in accordance with the GDPR and further applicable data protection regulations is EMDESK GmbH. Our address and contact details can be found here.

EMDESK operates on the following social media platforms:

When you visit our social media pages, your data is processed not only by us, but also by the responsible social media provider as the responsible party.

We would like to inform you that we have limited influence over the social media providers. Where we can influence and set data processing parameters, we will work to the best of our ability to ensure that the operator of the social media platform processes data in accordance with data protection regulations. However, there are many cases when we cannot influence the data processed by the social media platform operator and we cannot say exactly what kind of data the operator is processing.

2. Data processing and legal basis

Through our social media pages, we can communicate with you and provide you with professionally oriented information. We may receive additional data from you through your comments, shared images, messages and reactions, which we then process to respond to or contact you. This data is never used by us for any other purposes. Where necessary, we reserve the right to remove your content. When the social media platform enables, we may share your content on our website.

The legal basis for this data processing activities is Art. 6 para. 1 sent. 1(f) GDPR aimed at our legitimate interests, e.g. in improving the service, building public relations, and presentation to the outside world.

If you wish to object to a particular data processing that we have influence over, please contact us. We will then consider any objection to your data processing that concerns us. If you wish to exercise your right to object to the social media platform, please contact them directly.

If you send us an enquiry via the social media platform, we may direct you to an alternative, secure channel of communication that guarantees confidentiality, depending on the response required. You always have the option of sending a confidential enquiry to the address specified on our contact page.

3. Data processing by the social media platform provider

The social media platform providers use web-tracking techniques. Web tracking can occur whether you are logged in or registered within the social media platforms. As mentioned earlier, we cannot disable or influence the web-tracking practices of the social media platforms.

We would like to inform you that the social media platform providers may use your data to assess your behaviour, preferences, relationships, etc. Unfortunately, we have no influence on the processing of your data by any social media platform operators.

Please refer to the privacy policy statements of the social media providers to get more information on data processing, objection options, and the agreement pursuant to Art. 26 GDPR (if applicable and concluded):

4. Your rights as a data subject

According to the GDPR, you have the following rights with regard to the processing of your personal data by EMDESK GmbH:

Right of access (Art. 15 GDPR):

This article establishes your right to obtain confirmation as to whether personal data concerning you is being processed. If so, you have the right to access this personal data.

Right to rectification and erasure (Art. 16 and 17 GDPR):

This article establishes your right to demand, without undue delay, that inaccurate personal data about you be corrected and, if necessary, that incomplete personal data be supplemented. In addition, you have the right to request the deletion of personal data concerning you without undue delay if one of the reasons listed in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR):

This article establishes your right to request restriction of processing if one of the conditions listed in Art. 18 GDPR applies. For example, when the accuracy of the personal data is disputed by the data subject or when the processing is unlawful and the data subject objects to the erasure of the personal data.

Right to data portability (Art. 20 GDPR):

This article establishes your right to receive personal data concerning you in a structured, shared and machine-readable format or to request the transfer of such data to a third party if one of the cases listed in Art. 20 GDPR applies.

Right to object (Art. 21 GDPR):

This article establishes your right to object to data processing at any time for reasons arising from your particular situation, if data is collected on the basis of Art. 6 para. 1 sent. 1(f) GDPR.

We will then stop processing your personal data unless there are compelling reasons worthy of protection for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legitimate claims.

5. Right of appeal to a supervisory authority

If you consider that the processing of data concerning you violates data protection regulations, you have the right to lodge a complaint with a supervisory authority (in accordance with Art. 77 GDPR). In particular, the right of appeal may be lodged with a supervisory authority in the Member State in which you reside, at your place of work, or at the place of the alleged infringement.


Updates and expert insights straight to your mailbox