Privacy policy
1. Description of data processing and types of data
When you visit our social media pages, data relating to you is processed. Data protection is a high priority for epi, which is why we would like to inform you below about what data we collect, for what purpose we process this data and how we do this.
1.1. Resposibility
We, epi, Bayerstr. 83, 80335 Munich, operate the following social media page:
We are partly responsible for the data collection and processing described below and the respective operators of the network platform ("platforms") are partly responsible. For certain processing operations, we and the platform operators also act as joint controllers.
You can find our contact details in the Imprint.
1.2. Scope and purpose data processing
Purpose of data processing
The purpose of data processing by us on our pages is to inform users about services, factual topics, institute news and interaction with visitors to the websites on these topics as well as to answer corresponding queries, praise and criticism.
We only reserve the right to delete content if this should be necessary. We may share your content on our site if this is a function of the platform and communicate with you via the platform.
Data processing is carried out in the legitimate interest of conducting public relations work for our institute and being able to communicate with you.
The operator has no influence on the processing of your data by epi in the context of visitor communication.
As already mentioned, where the platform provider gives us the opportunity, we make sure that our pages are as data protection compliant as possible.
Recipients/categories of recipients
The data you enter on our pages, such as comments, videos, images, likes, public messages, etc., are published by the platform for this purpose and are not used or processed by us for any other purpose at any time. We only reserve the right to delete illegal content if this should be necessary. This is the case, for example, with posts that violate the law or are illegal, hate comments, offensive comments (explicitly sexual content) or attachments (e.g. images or videos) that may violate copyrights, personal rights, criminal laws or the ethical principles of epi.
We may share your content on our site if this is a function of the platform and communicate via social networks. If you send us an enquiry on the platform, we may also refer you to other, secure communication channels that guarantee confidentiality, depending on the required response. You always have the option of sending confidential enquiries to to our address stated in the legal notice or by email to info@patentepi.org.
With regard to data that you send us in a confidential manner (e.g. by private message function, letter or e-mail), we do not pass on the data to third parties outside epi.
Exceptionally, data is processed on our behalf by processors. These are carefully selected, audited by us and contractually bound in accordance with Art. 28 GDPR.
Should it be necessary to pass on your personal information in individual cases, we will inform you of this in advance and obtain your consent.
Storage period/criteria for determining the storage period
All personal data that you send to us by secure message in response to enquiries (suggestions, praise or criticism) will be deleted or securely anonymised by us no later than 90 days after the final reply has been sent to you. The 90-day retention period is due to the fact that you as a customer may occasionally contact us again about the same matter after a reply and we may then need to refer to the previous correspondence. Experience has shown that, as a rule, there are no more queries about our replies after 90 days.
All public posts by you on this page will remain in the timeline indefinitely, unless we delete them due to an update of the underlying topic, a legal violation or violation of our guidelines, or you delete the post yourself.
We have no means of influencing the deletion of your data by the operator itself. The data protection provisions of the respective operator therefore apply in addition
2. Data processing under joint resposibility
We are jointly responsible for some of the processing activities with the respective operator of the social media platform.
Accordingly, we have concluded the necessary agreement, provided that the operator of the social media platform allows this
https://legal.linkedin.com/pages-joint-controller-addendum
The main elements of joint responsibility can be found in the following section.
3. Data processing by the operator of the social media platform
The operator of the social media platform uses web tracking methods. Web tracking can also take place regardless of whether you are logged in or registered with the social media platform.
We would therefore like to point out that it cannot be ruled out that the operator of the social media platform may use and evaluate your profile and behavioural data for its own purposes. We have no influence on the processing of your data by the operator of the social media platform. Please bear this in mind when using the social media platform.
For more information on data processing by the operator of the social media platform, configuration options to protect your privacy and other objection options, please refer to the operator's privacy policy.
4. Processing of the data in a third country
If we transfer data to recipients in a third country (based outside the European Economic Area), you can find this in the information on the recipients/categories of recipients in the description of the respective data processing. The European Commission certifies that some third countries have data protection standards comparable to those in the European Economic Area by means of so-called adequacy decisions. You can access a list of these countries at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en. If there is no comparable data protection standard in a country, we ensure that data protection is adequately guaranteed by other measures. This is possible, for example, through binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognised codes of conduct.
Your use of the platform may also result in your data being processed in a third country (located outside the European Economic Area) by the platform operator. Further information on the processing of your data in a third country, over which epi has no influence, can be found in the aforementioned data protection declarations of the platform operators.
5. How long does epi store this personal data?
We delete your personal data when it is no longer required for the aforementioned processing purposes and no statutory retention obligations prevent erasure.
6. Rights as a data subject
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, you have the right to request access to the personal data and information on the purposes of the processing or the categories of personal data concerned
Right to information
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, you have the right to request access to the personal data and information on the purposes of the processing or the categories of personal data concerned
Right of rectification
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, where necessary, the completion of incomplete personal data.
Right to restriction of processing
You have the right to request epi to restrict the processing of your personal data under certain circumstances, e.g. if you have objected to the processing, for the duration of a review.
Right to deletion
You also have the right to request the immediate deletion of your personal data under certain circumstances, e.g. if your personal data is no longer required for the purposes for which it was collected or if your personal data was collected unlawfully.
Right to object
If data is collected on the basis of data processing to protect legitimate interests, you have the right to object to the processing at any time on grounds relating to your particular situation.
You can assert your above-mentioned rights by sending an email to info@patentepi.org. We will then stop processing the personal data unless there are compelling legitimate grounds for further processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.
Contact details:
epi, Bayerstrasse 83, 80335 Munich, Germany, is responsible for data collection and processing.
You can assert your data protection rights here:
Anna Guggenberger
epi Secretariat
Bayerstrasse 83
80335 Munich, Germany
Phone: +49 89 242052-0
Fax: +49 89 242052-220
E-Mail: info@patentepi.org
Our data protection officer will be pleased to answer any queries and address any concerns you may have on all matters relating to data protection: datentenschutz süd GmbH
E-Mail: office@datenschutz-sued.de
Phone: +49 931 30 49 76 0
Additional information you can obtain from the website.