Privacy policy –Social Media
We maintain company profiles on LinkedIn, Instagram, Facebook, YouTube and X (formerly Twitter). We use these profiles to share information about awork, our services and our team, and to communicate with interested people. We also use social media platforms for paid advertising.
This notice explains how personal data is processed in connection with these activities, our responsibilities and your rights.
1. Controller and contact details
The controller responsible for the processing activities under our control is:
awork GmbH
Großer Burstah 36/38
20457 Hamburg
Germany
For privacy questions or to exercise your rights, contact us at [email protected].
You can contact our Data Protection Officer at:
PROLIANCE GmbH
Leopoldstraße 21
80802 Munich
Germany
Email: [email protected]
2. Personal data we process
The data we receive depends on how you use our profiles and the information you make available on the relevant platform. This may include:
- your name, username and publicly visible profile information;
- comments, messages, reactions and other interactions with our content;
- information you provide when contacting us;
- photos, videos and personal statements we publish;
- information and aggregated statistics about reach and interactions.
Public posts, comments and other public interactions may also be visible to other people. Please use our direct contact channels rather than public comments to share confidential information.
3. Communication and management of our profiles
When you contact us through a platform or interact with our posts, we process the available information to handle your request, answer questions and manage our profiles.
The legal basis is our legitimate interest in communicating with interested people and presenting our company under Article 6(1)(f) GDPR. If your request concerns entering into or performing a contract with you, we process the necessary data under Article 6(1)(b) GDPR.
You do not have to contact us through social media. You can also use the contact details provided on our website. Information is necessary to the extent that we cannot handle your request without it.
4. Photos, videos and personal statements
Our profiles include insights into our company, everyday work and our team. People may be identifiable in photos or videos or presented through names, professional information and personal statements.
We need an appropriate legal basis for these publications. Where publication is based on consent, the legal basis is Article 6(1)(a) GDPR, supplemented by Section 26(2) of the German Federal Data Protection Act (BDSG) for employees. The permitted scope of use depends on the consent given.
You can withdraw your consent at any time with effect for the future by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.
Publicly accessible content may be copied, shared or distributed outside the platform by other people. We have only limited control over those copies.
5. Reach and usage statistics
Platform providers make statistics available for company profiles, for example about views, reach and interactions. This information helps us understand how posts are received and improve our content.
The creation of these statistics may involve processing personal usage and profile data, even where we receive only aggregated results.
For certain processing activities, we and the platform provider act as joint controllers under Article 26 GDPR. This applies in particular to Facebook Page Insights and LinkedIn Page Insights. The relevant arrangements describe how responsibilities are allocated between us and the provider:
For LinkedIn Page Insights, LinkedIn takes responsibility in particular for informing affected members and handling their rights in relation to that processing. We cooperate in handling relevant requests.
You can also contact us about processing for which we are joint controllers. Joint responsibility for particular activities does not mean that we determine or control all processing carried out by the platform provider.
6. Paid advertising
We run paid advertisements on social media platforms to promote awork and our services. The platforms we use may vary between campaigns.
When displaying advertisements and measuring their effectiveness, platform providers may process profile, usage and interaction data. This may include information about whether an advertisement was displayed or clicked, or whether a video was watched. The providers explain this processing and the options for controlling personalised advertising in their privacy notices and account settings.
Our planning and management of advertising campaigns serves the promotion of our services. Where we process personal data on the basis of a balancing of interests, the legal basis is Article 6(1)(f) GDPR. Where consent is required for a particular processing activity, our advertising interests cannot replace that consent.
Tracking on our own website is a separate matter. It is governed by our website privacy notice and consent settings. Consent given to a social media platform does not automatically replace any consent required for tracking on our website.
7. Processing by platform providers
Platform providers also process data for their own purposes, including providing and securing their services, personalising content, analysing usage and advertising.
This may involve technical information such as IP addresses and device information, as well as profile, content and usage data. Information may be linked to your account if you are signed in. Certain data may also be processed even if you do not have an account.
The relevant providers for the European region include:
Platform
Provider
Further information
Facebook and Instagram
Meta Platforms Ireland Limited
Facebook Privacy Policy · Instagram Privacy Policy
LinkedIn Ireland Unlimited Company
YouTube
Google Ireland Limited
X
X Internet Unlimited Company
These notices also provide information about retention periods, advertising settings and ways to contact the providers.
8. Recipients and international processing
Within our company, access to personal data is limited to people who need it to manage our profiles, handle requests or perform other activities described in this notice.
The relevant platform providers receive and process data in connection with the use of their services. Publicly published content is also visible to other users and may be accessible outside the platform. Where we use supporting service providers, they receive only the data necessary for their tasks and are engaged under arrangements appropriate to their data protection role.
Use of the platforms may involve processing outside the European Union and the European Economic Area, particularly in the United States.
Such transfers may rely on adequacy decisions adopted by the European Commission or appropriate safeguards, such as EU Standard Contractual Clauses. For transfers to the United States, the EU–US Data Privacy Framework may apply where the recipient is appropriately certified and the transfer falls within the scope of that certification.
Details about transfers and the relevant safeguards are available in the providers’ privacy notices. You can request information about transfers under our responsibility and the safeguards used by contacting [email protected].
9. How long we retain data
We retain the personal data we process only for as long as necessary for the relevant purpose.
We delete messages and related information once your request has been fully handled and further retention is no longer necessary. Statutory retention obligations or the need to establish, exercise or defend specific legal claims may require longer retention.
We review publications containing personal data when their purpose no longer applies, consent is withdrawn or we receive a valid erasure request. If there is no legal basis for continued use, we remove the content from the areas we manage.
The retention of data by platform providers for their own purposes is governed by their respective privacy notices.
10. Your rights
Subject to the applicable legal conditions, you have the right to:
- access your personal data and information about its processing;
- have inaccurate data corrected and incomplete data completed;
- have your data erased;
- restrict processing;
- receive your data in a portable format.
You can withdraw consent at any time with effect for the future.
Where we process data on the basis of legitimate interests, you can object on grounds relating to your particular situation. You can object to the processing of your personal data for direct marketing at any time without giving specific reasons.
To exercise your rights, contact [email protected]. For processing under a platform provider’s responsibility, you can also contact that provider directly. Where processing is jointly controlled, we coordinate with the provider where necessary to handle your request.
You also have the right to lodge a complaint with a data protection supervisory authority, particularly the Hamburg Commissioner for Data Protection and Freedom of Information.
11. Updates to this notice
We update this privacy notice when our processing activities or the applicable legal requirements change.
All legal information
