Data Protection Instagram

Data Protection Information about our Instagram account

As the operator of this Facebook page we, along with the operator of the Instagram social network, Facebook Ireland Ltd., are the Controllers within the meaning of Article 4, Number 7 of the General Data Protection Regulation (GDPR).

Personal data is processed by the controllers when you visit our Instagram account.

The following information tells you which data is processed at this time, the way it is processed and your rights with regard to the collection and processing of your data.

As the controller of this site we have concluded various agreements with Facebook which, among other matters, govern the conditions for the use of the Facebook site. The Nutzungsbedingungen von Facebook bzgl. des Instagram-Dienstes (the Facebook Terms of Use for the Instagram Service) and the other conditions and policy statement set out there are authoritative.

A. Our contact data and general matters relating to our data processing

Name and contact data of the controller
The controller within the meaning of data protection legislation for the collection and use of personal data is

DOG Deutsche Ophthalmologische Gesellschaft e.V.

Platenstrasse 1
80336 Munich
Phone: + 49 89 – 5505 7680
Fax: + 49 89 – 5505 76811

General Manager:
Dr Philip Gass

Statutory registered office of the DOG in Heidelberg
Deutsche Ophthalmologische Gesellschaft e.V.
Klingenteich Strasse 2
D-69117 Heidelberg

Association registration number Heidelberg District Court, VR 33105
Value Added Tax registration number: DE143294894

You can find further information about our Association in the imprint of our web-site

(Hereinafter: „DOG“ or „we“)

In collaboration with

Facebook Ireland Limited
4 Grand Canal Square
Dublin 2

Authorised representative: Gareth Lambe
Registered in Ireland (Companies Registration Office)
Commercial Register number 462932

You can contact Instragram by E-Mail: ( )
(Hereinafter: „Facebook“)

Contact data of the controller’s Data Protection Officer
Our Data Protection Officer is:

Thomas Heimhalt, DATENSCHUTZ perfect GbR, Wilhelm-Kolb-Straße 1a, D-76187 Karlsruhe, Phone +49 (0)721 / 966 388 3, Fax +49 (0)721 / 966 388 4, E-Mail

Use this link to contact the Data Protection Officer:
Kontaktaufnahme mit dem Datenschutzbeauftragten für Facebook Ireland Ltd. (Contact the Data Protection Officer of Facebook Ireland Ltd).

B. The extent of the processing of personal data via the Facebook fan site

Joint responsibility for data processing
We, as the operator of the Facebook fan page, and Facebook are jointly responsible for processing the personal data of the followers, fans, visitors, and users in connection with the fan page.

You can find information about the data processing of our company in our Datenschutzhinweisen (Data Protection information).

You will find information on how Facebook handles personal data for the Datenschutzrichtlinie (Data Policy).

You can access the agreement concluded between ourselves and Facebook on joint responsibility for data processing here (this agreement has been concluded for the Facebook fan pages, but in our opinion it is also to be applied in the same manner for the use of Instagram Insights because of the identical Insights function and the involvement of the identical parties):

A separate Data Protection Statement by Facebook on the function of Insights (further information on Insights is available in the next section of this statement) can be found here:

Use of Insights and cookies
We use Facebook’s Insights function in connection with the operation of the Instagram account to obtain anonymised statistical data on the users of our Instagram account. In order to make this possible, Facebook installs a cookie on the terminal of the user who visits our Instagram account. The cookie contains a unique user code and is active for a period of two years unless it is deleted earlier. The user code can be linked to the data of users who have registered with Facebook. The Instagram data policy contains all the information on data processing by Facebook when Instagram is used:

The information stored in the cookies is received by Facebook, recorded and processed, in particular if the user visits the Facebook services, services provided by other members of the Facebook group of companies, and services provided by other companies which use the Facebook services. In addition, other companies and organisations such as Facebook partners or even third parties can use cookies on the Facebook services in order to provide services to companies advertising on Facebook. More detailed information on the use of cookies by Facebook can be found in their Cookie-Richtlinie (Cookie Policy statement).

Purposes of the processing
The processing of the information is intended, on the one hand, to enable Facebook to improve its system of advertising it distributes via its network. It is also intended to enable us, as the operator of the Instagram account, to obtain statistics which Facebook compiles from the visits to our Instagram account. These statistics help us manage the marketing of our activity. For example, this enables us to learn about the profiles of the visitors who like our Instagram account or use specific content of the account so that we can provide them with more relevant content and develop functions which could be of greater interest to them.
Demographic and geographic analyses are prepared using the information which is collected and placed at our disposal to enhance our understanding of how we can come closer to achieving our objectives with our Instagram account. We can use this information to target and display interest-based advertisements without any direct knowledge of the visitor’s identity. If visitors use Facebook services (Facebook, Messenger, Instagram and WhatsApp) on several terminals, the data can be collected and analysed from all these terminals if visitors are registered and logged into their own profile.

The visitor statistics are only made available to us in anonymised form. We have no access to the underlying data. Only Facebook itself can access this data.

Legal basis and legitimate interests
We operate this Instagram account to present ourselves to and communicate with Instagram users and other interested persons who visit our Instagram account. Users’ personal data is processed on the basis of our legitimate interest in optimising the portrayal of our company (Article 6, paragraph 1, Letter f of the GDPR).

Data transmission
It is conceivable that some of the information which is collected is also processed outside the European Union by Facebook Inc. which is based in the USA. Facebook Inc. is certified under the US/EU Data Protection Agreement (the “Privacy Shield”) and is therefore obliged to comply with European data protection requirements.

We do not pass personal data to any third party.

Opportunities to object
By using Einstellungen für Werbepräferenzen (Settings for promotional preferences) Facebook users can influence the extent to which their user behaviour can be captured when visiting or using Facebook services, and therefore our Instagram account.

The Facebook-Einstellungen (Facebook settings) or the Formular zum Widerspruchsrecht (Right to object form) offers additional possibilities.

The processing of information by means of cookies used by Facebook can be prevented by disabling cookies from third parties or Facebook by means of your own browser settings.

C. Rights of data subjects

If your personal data is processed you are the “data subject” and you are entitled to the rights listed below.

One of the results of the agreements with Facebook which also cover joint responsibility is that it is more logical that requests for information and the assertion of the rights of data subjects are addressed directly to Facebook. The reason for this is that as the provider of the social network Instagram and all other Facebook services, only Facebook has direct access facilities to the necessary information and can therefore also initiate any necessary action or supply information.

Nevertheless if you should need our help in such matters, please feel free to contact us at any time using the contact information above.

The following applies to all your rights and questions:
If you contact us we will reply to your query ourselves to the extent that we are able as a result of our own data processing; we will also pass your query directly to Facebook with the request that they deal with it themselves as we have no access whatsoever to Facebook’s data processing.

The right to be informed
You have the right to receive a confirmation from us free of charge whether we are processing personal data relating to you. In this case you have the right to information about this personal data and other information which you can see in Article 14 of the GDPR.

The right to rectification
You have the right to require that we immediately correct inaccurate personal data relating to you. You also have the right – for the purposes set out above – to require additions to incomplete personal data – including by means of a supplementary declaration.

The right to erasure
You have the right to require the immediate deletion of personal data relating to you if one of the conditions of Article 17 of the GDPR is met.

The right to restrict processing
You have the right to require the restriction of processing if one of the conditions of Article 18 of the GDPR is met.

The right to information
If you have asserted the right to the correction, deletion or restriction of the processing to the controller, the latter is obliged to inform all recipients to which the personal data relating to you was disclosed about the correction or deletion of the data or about the restriction of the processing unless this proves to be impossible or is associated with disproportionate effort.

You have the right to be informed by the Controller about these recipients.

The right to data portability
You have the right to receive the personal data you sent to us relating to you in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller without hindrance from us if the conditions of Article 20 of the GDPR are met.

The right to object to processing because of a legitimate interest
In so far as we process personal data on by way of exception the basis of Article 6, Paragraph 1, Letter f) of the GDPR (therefore for reason of a legitimate interest,) you have the right, for reasons arising from your particular situation, to object at any time to processing of the personal data relating to you. If no compelling reasons worthy of protection can be demonstrated for the further processing which override your interests, rights and freedoms or if we are processing your data for the purposes of direct advertising we will cease processing your data (cf. Article 21 of the GDPR).

A technical process which you use, for example an unambiguous statement sent by technical means by your browser (a “do not track” message) is also deemed to be objections in within these meanings.

The right to revoke consent
You have the right at any time to revoke an agreement you have given for the collection and use of personal data with effect for the future. The lawfulness of the processing undertaken by reason of the consent you gave up to the time of its revocation is not affected.

Automatic decision-making including profiling
You have the right not to be subject to a decision based exclusively on automated processing – including profiling – which has a legal effect on you or which is significantly to your detriment in a similar manner unless the decision is necessary for the conclusion of an agreement between you and us, is admissible by reasons of provisions of law of the European Union or member states to which we are subject and these provisions of law contain reasonable measures to protect your rights, freedoms and legitimate interests, or the decision is taken with your express consent.

We do not take automated decisions of this nature.

Voluntary provision of data
If the provision of the personal data is stipulated by law or a contract, we will always point this out when the data is collected. The data we collect is sometimes necessary for the conclusion of a contract, to be specific, if we are unable to meet our contractual obligation to you or cannot adequately meet them in any other way. You are under no obligation to provide personal data. However, the failure to provide such information can mean that we are unable to perform or offer the service, action, measure or similar you require, or that it is impossible to conclude a contract with you.

The right to complain to a supervisory authority
Notwithstanding other rights, if you are of the opinion that the processing of personal data relating to you infringes data protection law, you have the right at all times to complain to a supervisory authority for data protection, particularly in the member state where you reside, where you work or the place of the alleged infringement.

Data Protection Information version: 06.03.2020