Privacy Information
Social Media

‍I. Registration on Social Media Platforms

On the social media platforms where we maintain a presence for our company, users can register by providing their personal data. The data is entered into a form and transmitted to and stored by the platform provider. Registration on the respective social media platforms is voluntary on the part of the user. We would like to point out that each user uses our social media profiles and their features at their own risk. This applies in particular to the use of interactive features, such as commenting, sharing, or rating. When visiting our social media profiles, the platform provider collects user information—such as the IP address—from the user’s device. Our company is not involved in the processing of personal data when users utilize interactive features or during the registration process on social media platforms. Information regarding the legal basis for data processing, the purpose of data processing, the duration of storage, requests for access, and the right to object and have data erased can be found in the privacy policies of the respective platform providers.

For all further processing of personal data, joint responsibility applies in accordance with Article 26 of the EU General Data Protection Regulation (EU GDPR). Please refer to Sections II through VI for the privacy policy applicable to our company.

II. Company Privacy Notice

1. Name and Contact Information of the Data Controller

The data controller is the entity that, alone or jointly with others, determines the purposes and means of the processing of personal data. The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection regulations, is:

Tatajuba Solutions GmbH

Represented by: Stefan Hauser

Strascheg Center for Entrepreneurship

Heßstr. 89 | 80797 München | Deutschland

Tel.: +49 162 777 5238 | E-Mail: info@simply-solve.com | Internetseite: www.simply-solve.com

2. Contact Information for the Data Protection Officer

We have appointed an external Data Protection Officer:

BerIsDa GmbH | Internetseite: www.berisda.de  

You can contact the Data Protection Officer by mail at Tatajuba Solutions GmbH, Attn: Data Protection Officer, Heßstr. 89, 80797 Munich, or by email at datenschutz@berisda.de.

III. General Information on Data Processing

1. Scope of Personal Data Processing

The data controller collects and uses personal data from its users (hereinafter also referred to as “data subject,” “affected person,” or “visitor”) only to the extent necessary to provide the social media page and to enable user interaction. Your personal data is generally collected directly from you, for example, when you contact us.

2. Legal Basis for the Processing of Personal Data

To the extent that the data controller obtains the data subject’s consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data. For any transfer to a non-secure third country, processing is carried out on the basis of Article 49(1), sentence 1, letter a of the GDPR. If you have consented to the storage of cookies or to access to information on your device, data processing is additionally carried out on the basis of Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1), sentence 1, subparagraph (b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

In cases where the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1), first sentence, subparagraph (d) of the GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of the controller or a third party, and the interests, fundamental rights, and fundamental freedoms of the data subject do not override the former interest, Article 6(1), first sentence, subparagraph (f) of the GDPR serves as the legal basis for the processing.

If special categories of data are processed pursuant to Article 9(1) of the GDPR, one or more of the legal bases listed in this section, in conjunction with one or more of the exceptions set forth in Article 9(2) of the GDPR, serve as the legal basis.

If data is processed on the basis of one of the legal grounds listed here in conjunction with Article 9(2) of the GDPR, a separate notice will be provided for the respective processing (text block).

3. Data Deletion and Retention Period

The data subject’s personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies, or if the data subject revokes their consent, or objects to the processing. Data may also be retained if this is provided for by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

4. Necessity of Providing Personal Data

The provision of your personal data is generally not required by law or contract. There is no obligation to provide such data. However, failure to provide it may result in your inability to use certain features and other processing activities on our social media pages. We recommend that you provide only the personal data that is necessary, for example, to process your inquiry.

IV. Rights of the Data Subject

When we process your personal data, you, as the data subject, have the following rights vis-à-vis us as the data controller:

1. Right of access, Art. 15 GDPR

Subject to applicable legal provisions, you have the right at any time to receive (free of charge) information about your personal data that has been collected and stored. This includes, among other things, information about the purposes of processing, the source and recipients of the data, the retention period, and the existence of various rights.

2. Right to Rectification, Art. 16 GDPR

You have the right to request that the data controller rectify (including by completing) your data if the personal data concerning you that is being processed is inaccurate or incomplete for the purposes of processing. The data controller must carry out the rectification without undue delay.

3. Right to erasure, Art. 17 GDPR

You may request the erasure of your personal data at any time under the conditions set forth in Art. 17 GDPR, unless there are still circumstances that entitle or oblige the controller to continue processing your personal data (such as statutory retention obligations).

4. Right to Restriction of Processing, Art. 18 GDPR

If the legal requirements are met, you may request a restriction on the processing of your personal data within the scope of Art. 18 GDPR.

5. Right to be informed, Art. 19 GDPR

If your personal data has been processed by recipients to whom the controller has disclosed the data, the controller is obligated to inform those recipients of your requests regarding rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You may request that the controller inform you of these recipients.

6. Right to Data Portability, Art. 20 GDPR

If you have provided us with personal data and such data is processed automatically based on your consent or on a contract, you have the right, within the scope of Art. 20 GDPR, to have the data you provided transferred, provided that this does not infringe upon the rights and freedoms of others. The data will be provided in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.

7. Right to Object, Art. 21 GDPR

You have the right to object to the processing of your data at any time, provided that the processing is based on a balancing of interests. This is the case when the controller relies on public interest or its legitimate interest as the basis for processing (see Art. 6(1), first sentence, lit. e and f). The prerequisite is that you assert reasons arising from your particular situation that override the controller’s interest. The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Article 21(2) of the GDPR contains a specific, derogatory provision for cases where your personal data is used for direct marketing. In such cases, you have the right to object to the processing of your personal data at any time without any further conditions. The personal data concerning you will no longer be processed for the purpose of direct marketing. To the extent that profiling is associated with direct marketing, you may also object to it.

You have the option to exercise your right to object in connection with the use of information society services by means of automated procedures that utilize technical specifications.

8. Automated Decision-Making in Individual Cases, Art. 22 GDPR

Pursuant to Art. 22 GDPR, you have the right not to be subject to decisions that produce legal effects concerning you or similarly significantly affect you based solely on automated processing—including profiling. Exceptions may apply if appropriate measures to protect your personal data are in place, if there are necessary contractual provisions or a legal requirement, or if you have given your explicit consent.

9. Right to Withdraw Your Consent, Art. 7(3) GDPR

You have the right to withdraw your consent to the processing of your personal data at any time. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal. You may submit your withdrawal by email or by mail to the data controller.

10. Right to File a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority—in particular, in the Member State of your residence, your workplace, or the location of the alleged infringement—if you believe that the processing of your personal data violates the GDPR.

The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision. However, if you are located in another federal state or outside of Germany, you may also contact the data protection authority in that location.

V. Email Contact

1. Description and Scope of Data Processing

Email addresses are provided on the social media pages we use and in our signatures, through which you can contact us. In this case, the user’s personal data transmitted via email is stored.

In this context, the data is not disclosed to third parties. The data is used exclusively for the purpose of handling the conversation.

2. Legal Basis for Data Processing

The legal basis for processing the data transmitted when sending an email is Article 6(1)(f) of the GDPR. If the purpose of the email contact is to conclude a contract, the legal basis for processing is Article 6(1)(b) of the GDPR.

3. Purpose of Data Processing

We process personal data solely for the purpose of handling the contact request. This also constitutes the necessary legitimate interest in processing the data.

4. Retention Period

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data sent via email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.

5. Right to Object and Right to Erasure

If a user contacts us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of establishing contact will be deleted in this case.

VI. Contact via a Social Media Platform (Contact Form, Chat)

On some social media platforms, it is possible to contact us directly through the service (for example, via a contact form or chat). If a user takes advantage of this option, the data entered in the input form is processed in the systems of the respective service, transmitted to us, and stored on the systems of the respective platform provider. The use of a social media platform to contact us is voluntary on the part of the user. The data protection regulations of the respective service generally apply to the processing of personal data that takes place when contacting us via the systems of a social media platform.

1. Description and Scope of Data Processing

In order to process your inquiry, it may be necessary for your personal data to be processed internally by Tatajuba Solutions GmbH. The following regulations apply to the internal processing of your message by Tatajuba Solutions GmbH:

2. Legal Basis for Data Processing

The legal basis for processing data to handle a user’s inquiry is Article 6(1), first sentence, subparagraph (f) of the GDPR. If the purpose of the contact is to enter into a contract, the legal basis for the processing is Article 6(1), first sentence, subparagraph (b) of the GDPR.

3. Purpose of Data Processing

The internal processing of personal data that we have received through the contact options on social media platforms serves solely to handle the contact request.

4. Retention Period

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data entered via the contact form, this is the case once the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.

5. Right to Object and Right to Erasure

If a user’s personal data is processed internally to handle the inquiry, the user may object at any time to the storage of their personal data by Tatajuba Solutions GmbH. In such a case, the conversation cannot be continued. All personal data stored internally by the company in the course of establishing contact will be deleted in this case.

VII. LinkedIn

Name and address of the data controllers:

The joint data controllers responsible for operating this LinkedIn page, within the meaning of the EU General Data Protection Regulation and other data protection laws, are:

LinkedIn Ireland Unlimited Company (hereinafter "LinkedIn")

Wilton Place

Dublin 2

Irland

‍

and

Our company (see II. – 1.)

1. Information About Our Use of LinkedIn

We operate this page to draw attention to our services, job openings, and products, and to get in touch with you. You can find more information about us, our activities, our company, etc., on our website.

As the operator of this LinkedIn page, we have no interest in collecting or further processing your personal data for analytical or marketing purposes.

The operation of this LinkedIn page, including the processing of users’ personal data, is based on our legitimate interests in providing a modern and supportive platform for information and interaction for and with our users and visitors, in accordance with Article 6(1) sentence 1(f) of the GDPR.

2. Processing of Personal Data by LinkedIn

LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA, is the U.S.-based parent company of LinkedIn Ireland Unlimited Company. From a data protection perspective, the headquarters of LinkedIn’s parent company is located in a third country.

The General Data Protection Regulation (GDPR) stipulates that the transfer of personal data—whether already processed or to be processed after its transfer to a third country or an international organization—is permitted only if a level of data protection comparable to that required by the GDPR is ensured.

LinkedIn is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an (individual) agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States (based on an adequacy decision by the European Commission pursuant to Article 45(1) and (3) of the GDPR). Every company certified under the DPF commits to complying with these data protection standards. You can find the list of certified companies at: https://www.dataprivacyframework.gov/list. There, you can search by provider name and view the certification directly.

If you are logged into your LinkedIn account, you allow LinkedIn to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your LinkedIn account.

If you have questions about your rights regarding LinkedIn, please contact LinkedIn directly. You can find your general rights under the GDPR in Section IV of this Privacy Policy.

For more information on how user data is handled, please see LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy

V

‍