Status June 2023
Table of contents
- I. PRINCIPLES
- Right to rectification, erasure or restriction of processing of your personal data;
- Recht auf Berichtigung, Löschung oder Einschränkung der Verarbeitung Ihrer personenbezogenen Daten;
- Right to object to processing which serves the legitimate interest of us or Facebook, a public interest or profiling, unless we or Facebook can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims;
- Right to data portability;
- Right of appeal to a supervisory authority;
- Right to revoke your consent to the collection, processing and use of your personal data at any time with effect for the future.
1. Joint controllers for the processing of personal data
The purposes and means of processing personal data when visiting our Facebook page https://www.facebook.com/rosebikes ("Facebook page") are jointly determined by us, ROSE Bikes GmbH, Schersweide 4, 46395 Bocholt, Germany ("ROSE Bikes GmbH") and Meta Platforms Ireland Ltd ("Facebook") within the meaning of art. 26 of the EU General Data Protection Regulation (GDPR). This results from the fact that, as the operator of the Facebook page, by setting up such a page, we give Facebook the opportunity to place cookies on the computer or any other device as soon as a person visits a Facebook page, regardless of whether this person has a Facebook account.
Facebook assumes primary responsibility under the GDPR for the processing of Insights data within the framework of joint responsibility and fulfils all obligations under the GDPR with regard to the processing of Insights data (including articles 12 and 13 GDPR, articles 15 to 22 GDPR and articles 32 to 34 GDPR). In addition, Facebook makes the essence of this Page Insights addendum available to the data subjects (the corresponding "Page Insights Controller Addendum" can be found here: https://www.facebook.com/legal/terms/page_controller_addendum).
We would like to point out that you use the Facebook page and its functions on your own responsibility. This applies in particular to the use of interactive functions (such as commenting, sharing, rating).
2. Name and address of the joint controllers
a) The primarily responsible controller is:
Meta Platforms Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland
b) Another controller is:
ROSE Bikes GmbH
Phone: +49 2871 2755-55
3. Contact options for the data protection officer of the primary controller Facebook
You can contact the data protection officer of the primary controller Facebook at the following link:
4. Name and address of the data protection officer of the other controller
You can reach our data protection officer at
Dachauer Str. 65
Phone: +49 89 7400 45840
5. Legal basis for the processing of personal data
Whenever we obtain the consent of the data subject for the processing of personal data, art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis for the processing of personal data.
For the processing of personal data necessary for the performance of a contract to which the data subject is party, art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which we or Facebook are subject, art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another individual require the processing of personal data, art. 6 para. 1 sentence 1 lit. d GDPR is the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company, Facebook or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for processing.
6. Possibility of objection and removal
As a visitor, you have the option of withdrawing your consent to the processing of personal data at any time (see also Rights of data subjects). If you contact us by e-mail, you can object to the storage of your personal data at any time.
The collection of data for the provision of the Facebook page and the storage of data in log files is absolutely necessary for the operation of the Facebook page. Consequently, there is no possibility of objection on your part.
7. Rights of the data subjects
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controllers:
If you wish to exercise your rights, you can address your request to us as well as to Facebook. For example, you can use the contact options listed above. If you contact us, we will forward your enquiry to Facebook if it concerns questions relating to the processing of Insights data. Facebook will respond to requests in accordance with our obligations under the Page Insights Addendum.
II. PROCESSING OF PERSONAL DATA BY ROSE Bikes GmbH
1. Purpose of data processing
We maintain online presences within social networks in order to communicate with you there and to inform you about our products, events and news. When you visit our Facebook page (regardless of whether you are logged into your Facebook account or not), your browser transmits for technical reasons certain data to the web server for which Facebook is responsible. Facebook also uses "cookies". Cookies are small text files that are stored in the memory of your end device via your browser. Cookies set by Facebook are intended, among other things, to enable us, as the operator of the Facebook page, to obtain statistics that Facebook creates based on visits to this page for the purpose of managing the marketing of our activities.
2. Description and scope of data processing
As the operator of the Facebook page, we can use the Facebook Page Insights function, which Facebook makes available to us free of charge as a non-negotiable part of the user relationship, to obtain anonymised statistical data concerning you as a visitor to our Facebook page. This data is collected with the help of cookies set by Facebook, each of which contains a unique user code that Facebook stores on the end device. The user code, which can be linked to the login data of users who are registered with Facebook, is collected and processed when the Facebook page is accessed.
In particular, as a fan page operator, we may receive demographic data provided by Facebook about the target group – and thus the processing of this data – such as trends with regard to age, gender, relationship status and professional situation, information about the lifestyle and interests of the target group and information about the purchases and online purchasing behaviour of you as a visitor to our site, the categories of goods or services that interest you most, as well as geographical data that provides information about where to carry out special promotions or organise events and thus generally enables us to make the information offer as targeted as possible.
Although the visitor statistics compiled by Facebook are transmitted to us as the operator of the Facebook page exclusively in anonymised form, the compilation of these statistics is based on the prior collection – through the cookies set by Facebook on the end device – and the processing of your personal data for these statistical purposes. Further information on Facebook Page Insights can be found at:
Data on the Facebook groups linked to our Facebook page is also provided in this way. Due to the constant development of Facebook, the availability and processing of the data changes, so that we refer to the Facebook data protection information mentioned in the previous paragraph and below under "PROCESSING OF PERSONAL DATA BY FACEBOOK" for further details.
In addition to this automatically collected anonymised data, we also process the data that you have voluntarily provided to us, e.g. in the context of comments on posts or by contacting us.
3. Data deletion and retention period
The personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also be necessary if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we are subject. The data will also be blocked or deleted if a retention period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
III. PROCESSING OF PERSONAL DATA BY FACEBOOK
- Provision, personalisation and improvement of Facebook products;
- Provision of measurements, analyses and other Facebook services;
- Promoting protection, integrity and security;
- Communication with Facebook users;
- Research and innovation for social purposes.
- Partners who use Facebook analytics services;
- Partners for measurements;
- Partners who offer goods and services in Facebook products;
- Suppliers and service providers;
- Researchers and scientists;
- Law enforcement authorities or legal enquiries.
1. Purpose of data processing
According to their own statements, Facebook processes personal data of you as a visitor for the following purposes:
Further information on the purposes of data processing by Facebook can be found in the Facebook data policy:
Further information on Facebook's legitimate interests with regard to the processing of personal data can be found here:
2. Description and scope of data processing
a) What types of information does Facebook process?
In order to provide Facebook products, it is necessary for Facebook to process information about you. The types of information collected by Facebook depend on how you as a visitor use the Facebook products. The following information may be processed by Facebook:
Things done and provided by you and others, such as information about how you use the Facebook products, information about transactions made on Facebook products or information about you as a person, pages, accounts, hashtags and groups you are connected to.
Device information such as device attributes, identifiers, network and connections as well as cookie data.
Information from partners, whereby advertisers, app developers and publishers can send Facebook information via the Facebook business tools they use, including the social plugins (such as the "like" button), Facebook login or the Facebook pixel. These partners provide Facebook with information about your activities as a visitor outside of Facebook.
When you access a Facebook page, the IP address assigned to your end device is transmitted to Facebook. According to Facebook, this IP address is anonymised (for "German" IP addresses) and deleted after 90 days. Facebook also stores information about the end devices (in particular as part of the "login notification" function); this may enable Facebook to assign IP addresses to individual users such as you.
If you want to avoid this, you should log out of Facebook or deactivate the "stay logged in" function, delete the cookies on your device and close and restart your browser. In this way, Facebook information is deleted that can be used to directly identify you. This allows you to use our Facebook page without revealing your Facebook identification. When you access interactive functions on the page (like, comment, share, message, etc.), a Facebook login screen appears. After logging in, you will once again be recognisable to Facebook as a specific user.
Information on how you can manage or delete information about you can be found on the following Facebook support pages:
For more information on the types of information that Facebook processes, please refer to the Facebook data policy:
b) How is the information processed by Facebook shared with others?
Facebook works with third-party partners who help Facebook provide and improve its products or who use Facebook business tools to grow their business. Facebook may share information with the following third-party partners:
Further information on the data that Facebook may share with third-party partners can be found in the Facebook data policy:
c) How does Facebook process and transmit data as part of its global services?
Facebook shares information worldwide, both internally between Facebook companies and externally with its partners and with people or organisations you connect with and share with around the world. Data may also be transferred to the USA or other third countries that do not have an adequate level of data protection and may be processed there. In this regard, Facebook uses standard data protection clauses approved by the European Commission or relies on the adequacy decisions issued by the European Commission with regard to certain countries. Further information on data transfers by Facebook can be found in the Facebook data policy:
3. Data deletion and retention period
Facebook stores data until it is no longer needed to provide its services and Facebook products or until the Facebook account is deleted, whichever comes first. This is a case-by-case decision and depends on things like the type of data, why it is being collected and processed, and the relevant legal or operational storage needs. Further information on data deletion and storage duration can be found in the Facebook data policy: