We operate social media pages on the following platforms:
Besides us, there is the operator of the social media platform. This is another responsible party who processes data but over which we have only limited influence. Wherever we can influence the data processing parameters, we work – within the framework of the options available to us – toward privacy-friendly handling of the data by the operator of the social media platform. In many areas, however, we are unable to influence the data processing by the social media platform operator and also do not know exactly what data is processed.
The purpose of the data processing and legal basis:
The purpose of the data processing by AXA on these social media platforms is to inform customers about special offers, products, services, promotions, competitions, themes, and company news, and to interact with the visitors to the social media sites on these themes, as well as to respond to questions, praise, or criticism. Wherever the provider of the social media platform gives us the opportunity, we ensure that our social media pages are as compliant as possible with data protection legislation. As far as the statistics are concerned that are made available to us by the provider of the social media platform, we have only limited influence on these and cannot deactivate their collection. However, we make sure that we do not avail ourselves of any additional optional statistics.
Recipients:
Data you enter on our social media sites such as comments, videos, images, likes, public messages, etc. are published by the respective social media platform and are not used or processed by us at any time for any other purposes. We reserve only the right to delete unlawful content, should this be necessary. This includes, for example, posts that violate rights or are unlawful, hate comments, lewd comments (explicit sexual content) or attachments (e.g. images or videos) that may violate copyrights, personal rights, criminal law, or our ethics principles. Where appropriate, we share your content on our site if this is a function of the social media platform, and communicate with you via the social media platform. The legal basis is our legitimate interest in accordance with Art. 6 (1) (f) GDPR. The data processing is conducted in the interest of our public relations work and communication with you.
If you send us an inquiry on the social media platform, we may refer you, depending on the required answer, to a different, secure communication channel that guarantees confidentiality. You always have the option of sending us confidential inquiries. You will find our address in the section for the responsible parties (see question "Who can I contact at AXA?").
Retention period:
All personal information that you send us in connection with inquiries via secure message will be deleted or anonymized by us no later than 90 days after we have sent our last response. The retention period of 90 days is explained by the fact that it may occasionally occur that customers contact us again about the same matter after having received an answer. We can then refer back to the previous correspondence. Experience has shown that, in general, we no longer receive queries about our replies after 90 days.
All public posts by you on the social media pages remain on the timeline for an unlimited period unless we delete them due to the update of an underlying theme, a breach of the law, or a violation of our guidelines, or you delete the post yourself.
With regard to the deletion of your data by the operators themselves, we are unable to intervene. Here, the data protection provisions of the relevant operator apply additionally.
The purpose of the data processing by the operator of the social media platform:
The operator of the social media platform employs web-tracking methods. Web tracking is also possible regardless of whether you are registered or logged in to the social media platform. As mentioned above, we are unfortunately unable to influence the web-tracking methods of the social media platforms. We cannot, for example, turn off this function.
Please be aware: It cannot be excluded that the provider of the social media platform uses your profile and behavioral data, for example to evaluate your habits, personal relationships, preferences, etc. We have no influence over the processing or sharing of your data by the providers of social media platforms.
For more information on the processing of data by the providers of social media platforms and further objection options, please refer to the privacy/data policy of the provider:
Information pursuant to Art. 26 (1 and 2) GDPR:
A relationship according to Art. 26 (1) GDPR (joint responsibility) exists with the operator of the social media service. In this context, the operator manages the entire IT infrastructure of the service, maintains its own data protection provisions, maintains its own relationship with you (if you are a registered user of the social media service), and is also responsible, together with us, for the deletion of unlawful or inappropriate posts and content on the page. In addition, the operator is solely responsible for all questions regarding the data in your user profile to which we, as a company, have no access. The operator has no influence over the processing of your data carried out by us in the context of customer communication or competitions.
If you wish to exercise your rights concerning a specific instance of data processing over which we do have influence, please do not hesitate to contact us. We will check your request (e.g. request for information or objection) ourselves or forward it if necessary to the relevant social media platform if your request concerns data processing carried out by the operator of the social media network.
On our internet pages we also use social plugins, which are identifiable through the logo of the social networking site concerned. We use social plugins on the basis of our legitimate interests (i.e. the optimization and needs-oriented design of our website, provided GDPR is relevant, within the meaning of Article 6 (1) (f) GDPR).
