Privacy Notice for Our Social Media Presences
We appreciate your interest in our social media presences. Protecting your privacy when processing personal data, as well as ensuring the security of all business-related information, is an important concern that we take into account in all of our business processes.
In accordance with the judgment of the European Court of Justice (ECJ) in case C-210/16, the operator of a Facebook fan page hosted on Facebook is considered jointly responsible with Facebook for the processing of personal data collected during a visit to that fan page. Since it cannot be ruled out that this reasoning also applies to other social media platforms, we would like to inform you below in general terms about the handling of your data when visiting our social media presences.
Controller pursuant to Art. 4 para. 7 GDPR:
BioSpring Gesellschaft für Biotechnologie mbH
Alt-Fechenheim 34
60386 Frankfurt am Main
Phone: +49 69 6605500 0
E-Mail: info@biospring.de
Our Data Protection Officer can be reached at: datenschutz@biospring.de or at the above postal address with the addition “Data Protection Officer”.
Social networks generally analyse your user behaviour extensively when you visit their websites or any website with integrated plug-ins (e.g. “Like” buttons or advertising banners). Because our social media presences are hosted on the websites of these social networks, visiting our pages triggers numerous data-processing operations relevant under data-protection law.
If you have an account with a social network and are logged in while visiting our page, the data collected will typically be directly associated with your existing account. We therefore recommend logging out of your social network account after each use.
However, your personal data may also be collected when you are not logged in or even if you do not have an account with the respective social network. In such cases, data collection may occur through cookies stored on your device or via the recording of your IP address.
The social networks store data about you as user profiles and may use these for advertising, market research, and/or the design of their websites according to user needs. Such analyses occur in particular (even for users not logged in) to display targeted advertising and to inform other users of the network about your activities.
If you have an account with the respective network, interest-based advertising can appear on all devices where you are or were logged in. You have the right to object to the creation of these user profiles; to exercise this right, please contact the operator of the respective social network.
We also recommend using the privacy settings offered by each social network to protect your data.
We have only limited - or in some cases no - influence over the data collected and processing operations carried out by social networks when you visit our pages. Likewise, we do not know the full extent of data collection, the purposes of processing, or the retention periods. For details, please consult the privacy policies of the relevant social networks.
§1 Your rights
(1) Below we inform you about your rights as a data subject under Art. 15 et seq. GDPR. You may exercise these rights at any time by contacting the relevant controller responsible for the data processing. Please note that although we share responsibility with the operators of social networks, we have no full control over their data-processing activities. Our ability to act is therefore largely determined by the corporate policies of each provider.
(2) Right of access
You have the right to request confirmation as to whether and which personal data about you are being processed. This includes information about the purposes of processing, any recipients to whom data have been disclosed, the planned storage duration, and, if applicable, the source of the data (if not collected directly from you). You are also entitled to receive a copy of your stored personal data.
(3) Right to rectification
You have the right to request correction of inaccurate data concerning you and completion of incomplete personal data.
(4) Right to erasure (“right to be forgotten”)
You have the right to request the deletion of your personal data. If your data have been made public, this includes the obligation—considering available technology and implementation costs—to inform other controllers processing such data that you request deletion of any links to, or copies or replications of, those data (Art. 17 para. 2 GDPR).
(5) Right to restriction of processing
You may request restriction of processing of your personal data. In such cases, further processing will only take place with your consent or for limited statutory purposes.
(6) Right to object to processing
If processing is based on a balance of interests (Art. 6 para. 1 lit. f GDPR), you have the right to object to such processing on grounds relating to your particular situation.
(7) Right to withdraw consent
If you have given consent for processing, you may withdraw it at any time. Withdrawal affects the lawfulness of processing after the time it is declared.
(8) Right to data portability
You have the right to receive data you have provided in a structured, commonly used, and machine-readable format and to transmit those data to another controller, including direct transfer where technically feasible.
(9) Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data-protection supervisory authority at any time, particularly in the member state of your residence, place of work, or the location of the alleged infringement.
§2 Processing of personal data by BioSpring GmbH
(1) We operate our social-media presences to raise awareness of our services and products, to interact with visitors and users, and to provide information that we consider useful.
(2) As the operator of these presences, we have no interest in collecting or further processing your personal data for individual analytics or marketing purposes. Beyond the data collected by the respective network operator, we do not collect additional personal data unless you contact us directly via the platform and voluntarily provide such data.
(3) To analyse visits and usage of our social-media presences, we use the analytic tools and statistics provided by each platform. These are made available to us only in anonymised form, meaning no personal conclusions can be drawn.
(4) The operation of our social-media presences, including the processing of personal and anonymised user data, is based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) in maintaining a contemporary and supportive communication and interaction channel with our users, and in evaluating and optimising our activities—balanced against the privacy interests of visitors.
(5) Data we collect directly through our presences are deleted from our systems once the purpose for storage ceases to apply, you request deletion, or you withdraw consent. Stored cookies remain on your device until they expire or you delete them. Mandatory statutory retention requirements remain unaffected.
We have no control over how long social-network operators store your data for their own purposes. Please consult the privacy notices of the respective platforms for details.
Social Networks in Detail
Meta’s privacy policy and information on managing your privacy settings on Facebook can be found at:
https://www.facebook.com/about/privacy/ https://www.facebook.com/help/1075880512458213/ , https://www.facebook.com/help/186325668085084 und https://m.facebook.com/help/238318146535333 .
You can manage opt-out preferences (so-called “Objection Options”) here:
https://www.facebook.com/settings?tab=ads
http://www.youronlinechoices.com
For data transfers to the United States, Meta relies on the EU–US Data Privacy Framework.
Details are available here:
https://www.facebook.com/legal/EU_data_transfer_addendum
Processing of Personal Data under Joint Responsibility of Meta and BioSpring GmbH
(1) Through the so-called Facebook Page Insights, we are able to access statistical data of various categories. These statistics are generated and provided by Meta. We, as the page operator, have no influence over the creation and display of this data and cannot disable this function or prevent the data processing involved.
(2) Page Insights are created on the basis of certain “events” recorded by Meta’s servers when people interact with Facebook pages and their associated content.
Such events include, among others:
Actions, such as:
- Viewing a page, post, video, story, or other page-related content
- Interacting with a story
- Subscribing to or unsubscribing from a page
- Liking or unliking a page or post
- Recommending a page in a post or comment
- Commenting on, sharing, or reacting to a post (including the type of reaction)
- Hiding or reporting a post as spam
- Hovering over a page link, name, or profile picture to preview content
- Clicking on the website, phone number, “Get Directions,” or other buttons on a page
- Viewing or responding to a page event (including the type of response), clicking on event ticket links
- Starting a Messenger conversation with the page
- Viewing or clicking on items in a page shop
Information about the action, the person performing it, and the browser/app used, such as:
- Date and time of the action
- Country/city (estimated via IP address or, for logged-in users, from profile data)
- Language code (from the browser’s HTTP header and/or language settings)
- Age/gender group (from the user profile, only for logged-in users)
- Previously visited websites (from the browser’s HTTP header)
- Whether the action was performed on a computer or mobile device (from the user agent or app attributes)
- Facebook user ID (only for logged-in users)
In addition, data about Facebook groups associated with our page are also provided to us in this way.
(3) Due to Facebook’s ongoing development, the availability and format of this data may change. For details, please refer to Meta’s privacy notices linked above.
(4) We use these aggregated statistics to learn more about visitors to our page and to make our posts and activities more appealing. For example, we may use demographic information (age and gender distribution) for tailored communication and user-preferred visiting times for optimised scheduling of posts. Device-type statistics help us adapt visual design and formatting.
According to Facebook’s terms of use, which each user accepts when creating a profile, we can identify subscribers and fans of our page and view their profiles and any information they have shared publicly.
Joint Controller Agreement between Meta and BioSpring GmbH
BioSpring GmbH and Meta have entered into an agreement under the “Page Insights Controller Addendum” supplementing our existing contractual relationship with Meta. This agreement defines which party fulfils which data-protection obligations in accordance with Article 26(1)–(2) GDPR.
Under this agreement, Meta assumes primary responsibility for the processing of Insights data and for compliance with all GDPR obligations regarding such processing (including Articles 12–13 GDPR, Articles 15–22 GDPR, and Articles 32–34 GDPR).
The Page Insights Controller Addendum can be viewed at: https://www.facebook.com/legal/terms/page_controller_addendum
We maintain a profile on Instagram.
The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Meta”).
Meta’s privacy notices and information on managing your privacy settings on Instagram can be found at:
For data transfers to the United States, Meta relies on the EU–US Data Privacy Framework.
Details are available here:
https://www.facebook.com/legal/EU_data_transfer_addendum
Processing of Personal Data under Joint Responsibility of Meta and BioSpring GmbH
(1) Meta provides us with aggregated statistics and insights to help us understand how people interact with our posts and other content on and off Instagram. We, as the operator of our Instagram profile, have no influence over the creation or presentation of this data and cannot disable this feature or prevent the underlying data processing.
(2) These analytics are created based on specific data and actions logged by Meta’s servers whenever individuals interact with pages or related content. Examples include:
- The number of people who viewed our posts
- The number of people who reacted to our posts
- The number of people who commented on our posts
- Aggregated demographic and other statistical information about these users
(3) As Instagram continues to evolve, the availability and format of these data may change. For further details, please refer to the privacy notices linked above.
(4) We use these aggregated statistics to gain insights into our profile’s audience and to make our posts and activities more relevant and appealing.
In accordance with Instagram’s terms of use, which every user accepts upon creating an account, we can identify followers of our profile and view their profiles and any publicly shared information.
We maintain a profile on LinkedIn.
The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
LinkedIn uses advertising cookies.
If you wish to deactivate LinkedIn advertising cookies, please use the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
LinkedIn’s privacy policy provides additional information on data processing:
https://www.linkedin.com/legal/privacy-policy
For data transfers to the United States, LinkedIn relies on the EU Commission’s Standard Contractual Clauses (SCCs).
Further details are available here:
Processing of Personal Data under Joint Responsibility of LinkedIn and BioSpring GmbH
(1) Through the so-called LinkedIn Page Insights, we are able to access statistical data of various categories. These statistics are created and provided by LinkedIn. As the operator of our company page, we have no influence over the generation or display of this data and cannot disable this feature or prevent the data processing.
(2) Page Insights are created based on the data you provide in your LinkedIn profile and your interactions with our company page, for example:
- Job title
- Country
- Industry
- Seniority level
- Company size
- Employment status
- Whether you follow our company page
(3) As LinkedIn continuously develops its services, the availability and presentation of these data may change. For more details, please refer to LinkedIn’s privacy notices linked above.
Joint Controller Agreement between LinkedIn and BioSpring GmbH
BioSpring GmbH and LinkedIn have entered into an agreement under the “Page Insights Joint Controller Addendum” supplementing our contractual relationship with LinkedIn.
This agreement specifies which party fulfils which data-protection obligations in accordance with Article 26 (1) and (2) GDPR.
The Page Insights Joint Controller Addendum is available at:
https://legal.linkedin.com/pages-joint-controller-addendum
YouTube
We maintain a profile on YouTube.
The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
Further information about Google’s processing of personal data can be found in Google’s privacy policy:
https://policies.google.com/privacy?hl=en&gl=en
For data transfers to non-secure third countries, Google relies on the EU–US Data Privacy Framework as well as on the European Commission’s Standard Contractual Clauses (SCCs).
Details can be found here:
https://policies.google.com/privacy/frameworks?hl=en
Last updated: September 23, 2025