/thyssenkrupp_logo_claim_d.svg){kind=logo}
Data protection information for our Social Media channels
Which information does this page provide for you?
thyssenkrupp AG (“we”/“us”) informs you about which data we collect from you when you use our social media channels, how we use it, and how you can object to the use of your data.
We ensure that we comply with the requirements of the applicable data protection laws. Below, we provide you with a detailed overview of how we handle your data and your rights.
1. Who is responsible for processing and who is the data protection officer?
The controller responsible for processing is
thyssenkrupp AG
thyssenkrupp Allee 1
45143 Essen
Germany
Phone: +49 201 844-0
Email: info@thyssenkrupp.com
You can contact the data protection officer of thyssenkrupp AG at datenschutzbeauftragter@thyssenkrupp.com.
2. What data do we process, for what purpose, and what is the legal basis?
We have our own presence on various social media platforms. This enables us to provide you with a wide range of multimedia content and to exchange ideas with you on important topics.
This notice also informs you about what data we collect from you on our social media platforms, how we use it, and how you can object to the use of your data.
Please refer to the respective data processing purposes and data categories in the respective offer, which is listed in more detail below. We carry out the activities we operate on social media, which are described in more detail below, on the legal basis of legitimate interests in corporate communications in accordance with Art. 6 (1) lit. f) GDPR.
In addition, we do not store or process any of your personal data, with the exception of competitions and user images:
Competitions/prize draws
In competitions/prize draws, the winners are announced publicly with their user names and asked to contact us by email within 14 days. Winners must provide us with their real name and address so that we can send them their prizes. We process this data exclusively for the purpose of conducting the competition. The respective conditions of participation apply to competitions. Emails containing addresses are generally deleted after 30 days, unless they are required for further prize notification. The legal basis for this processing in this case is the initiation or fulfillment of a contract in accordance with Art. 6 (1) (b) GDPR.
User images
If we have asked users for user images without obligation, we ask for their consent to repost their images on our respective social media sites. We store the declaration of consent and the image as a file with the user's details for verification purposes. The photos and declarations of consent are stored for as long as the photos are posted on the respective social media sites or until the consent is revoked. In the event of revocation, the image and the user's details will be deleted immediately.
The legal basis for this processing in this case is consent in accordance with Art. 6 (1) (a) GDPR.
Detailed data protection information for our Social Media channels
3. Who receives your data?
Service providers who process data on our behalf are carefully selected and contractually bound by us. The service providers work according to our instructions, which is ensured by appropriate contractual arrangements, technical and organizational measures, and supplementary controls.
Transfers to third countries outside the EU/EEA or to an international organization only take place with appropriate safeguards. These include the EU standard contractual clauses and an adequacy decision by the EU Commission.
We hereby point out that when data is processed by Meta (Facebook & Instagram), X, LinkedIn, YouTube, TikTok, and Bluesky, user data may be processed outside the European Union. This may result in risks for users, for example, because it could make it more difficult to enforce the rights of data subjects. For details, please refer to the privacy policy of the respective provider. With regard to US providers certified under the EU-US Data Privacy Framework, we would like to point out that they are committed to complying with the data protection standards of the European Union.
4. How long will your data be stored?
We only store your data for as long as it is necessary to fulfill the purpose for which it was collected (e.g., within the framework of a contractual relationship) or if this is required by law. Within the framework of a contractual relationship, we store your data at least until the contract has been completely terminated. The data will then be stored for the duration of the statutory retention periods.
5. What data protection rights can you assert as a data subject?
You have the right to request information about the data stored about you in accordance with Art. 15 GDPR. In addition, you can request the correction or deletion of your data in accordance with Articles 16 and 17 of the GDPR. You may also have the right to restrict the processing of your data in accordance with Article 18 of the GDPR and the right to data portability in accordance with Article 20 of the GDPR, provided that this does not affect the rights and freedoms of other persons.
If you have given us your consent to process your data, you can revoke this consent at any time without any formal requirements and without any adverse effects. Please note that the revocation has no effect on the lawfulness of the data processing that took place before the revocation and that it does not extend to data processing for which there is another legal basis and which may therefore be carried out without your consent.
Pursuant to Art. 77 GDPR, you also have the option of lodging a complaint with your competent data protection supervisory authority. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.
Information about your right to object pursuant to Art. 21 General Data Protection Regulation (GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) of the EU GDPR (data processing based on a balancing of interests); This also applies to any profiling based on this provision within the meaning of Article 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
The objection can be made informally and should be addressed to the responsible body or data protection officer named in section 2 of the privacy policy.
To exercise your rights, please contact the responsible body or data protection officer named in section 1 of this site.