Privacy policy for social media channels and legal notice

Privacy Policy

I. General information

We appreciate your interest in our presence on the social media channels. We would like to give you an overview of what data is collected, used and stored by us on these channels and what rights you have with regard to this. Details on the social networks used by us can be found under section VI.

Social networks such as Facebook, Twitter, LinkedIn etc. can generally analyze your user behavior comprehensively when you visit their website, or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media channels triggers numerous data protection-related processing operations, which we would like to explain to you in more detail:

If you are logged into your social media account and visit our social media channel, the operator of the social media portal can assign this visit to your user account. However, there may be occasions when your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In such circumstances, this data collection takes place, for example, via cookies, which are stored on your terminal device or by collecting your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. By doing this, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising may be displayed on all devices on which you are or were logged in.

Please also note that we are unable to track all processing steps on the social media portals. Depending on the provider, further processing procedures may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

II. Responsible person and assertion of rights

If you visit one of our social media channels, we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (access to information, rectification, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).

Please note that it cannot be ruled out that the respective provider of the social media platform will use your profile and behavioral data, for example, to evaluate your habits, personal relationships, preferences, etc. This data may be used for other purposes. In this respect, we have no influence on the processing of your data by the provider of the social media platform, as it is determined by their corporate policy.

If you wish to assert your rights as a data subject against us, you can reach us at the following contact details:

Helmholtz Zentrum München
Deutsches Forschungszentrum für Gesundheit und Umwelt (GmbH)
Ingolstädter Landstr. 1
D-85764 Neuherberg
Tel.: 089/3187-0
E-Mail:
Website: www.helmholtz-muenchen.de

If you wish to assert your rights against one of the operators of the social media platforms, please contact them directly. A list of the social media channels operated by us can be found under section VI.

III. Name and address of the Data Protection Officer

You can reach our Data Protection Officer as follows:

Data Protection Officer of the Helmholtz Zentrums München
Werner Bergheim
Ingolstaedter Landstr. 1
D-85764 Neuherberg
E-mail:

IV. General information on data processing

1. Scope and purpose of the processing of personal data

The data you enter on our social media channels, such as comments, videos, images, likes, etc., are published by the respective social media platform and are not used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. If applicable, we share your content on our site if this is a function of the social media platform and communicate with you via the social media platform.

2. Legal basis for the processing of personal data

Our social media presences are intended to ensure the most comprehensive presence possible on the Internet and serve our public relations work. This is a legitimate interest within the meaning of Art. 6(1) point (f) GDPR. When contacting us via a social media platform, your inquiries will be processed with your consent and for the purpose of processing and handling the contact inquiry in accordance with Art. 6(1) point (a) and (b) GDPR. The analysis processes initiated by the social networks may be based on different legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6(1) point (a) GDPR).

3. Data deletion and storage duration

The personal data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer exists, you request us to delete it, or you withdraw your consent to its storage. Stored cookies remain on your end device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details on this, please contact the operators of the social networks directly (e.g., in their privacy policy, see section VI).

V. Disclosure of personal data

We will only pass on your personal data to third parties if:

  • You have given your express consent to do so in accordance with Art. 6(1) point (a) GDPR,
  •  the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6(1) point (f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
  • there is a legal obligation for the disclosure pursuant to Art. 6(1) point (c) GDPR, or
  • this is necessary for the processing of contractual relationships with you according to Art. 6(1) point (b) GDPR.

Any further transfer outside our company will not take place.

VI. Social networks in detail

1. Facebook

We have a profile on Facebook. The provider is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.We have concluded a joint controller agreement (Controller Addendum) with Facebook. This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook profile. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in:  https://www.facebook.com/settings?tab=ads.

For details and options for contacting Facebook as a data subject, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/.

2. Instagram

We have a profile on Instagram. The provider is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.For details and options for contacting Instagram as a data subject, please refer to Instagram's privacy policy:  http://instagram.com/legal/privacy/.

3. LinkedIn

We have a profile on LinkedIn. The provider is LinkedIn Corporation, 1000 W. Maude Ave, Sunnyvale, California 94085, USA.

For details and options for contacting LinkedIn as a data subject, please refer to LinkedIn's privacy policy:  https://www.linkedin.com/legal/privacy-policy/.

4. Twitter

We have a profile on Twitter. The provider is Twitter, Inc, 1355 Market Street #900, San Francisco, California 94103, USA.

For details and options for contacting Twitter as a data subject, please refer to Twitter's privacy policy: https://twitter.com/de/privacy.

5. YouTube

We have a channel on YouTube. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

For details and options for contacting Google as a data subject, please refer to Google's privacy policy:  https://policies.google.com/privacy?hl=de&gl=de.

6. Vimeo

We have a channel on Vimeo. The provider is Vimeo LLC, 555 West 18th Street, New York, New York 10011 - 2822, USA.Details and options for contacting Vimeo as a data subject can be found in the Vimeo privacy policy: https://vimeo.com/privacy.

VII. Rights of the data subject

Please read section “X. Rights of the data subject” in the following Privacy Statement: https://www.helmholtz-muenchen.de/datenschutz/index.html

 Legal notice

Read our legal notice here: https://www.helmholtz-muenchen.de/en/legal-notice/index.html