European Data Protection Supervisor to Aid the Commission
In the digital age, privacy and data protection have become paramount. This is especially true when it comes to social media platforms like Facebook. Here's a breakdown of the key rights Facebook users have under the General Data Protection Regulation (GDPR) when interacting with Facebook pages operated by other parties, such as Oberpfalz Medien.
- Right to Access: Users have the right to access their personal data held by Facebook and the page operator, enabling them to understand what data is being processed.
- Right to Rectification: Users can request correction of any inaccurate personal data.
- Right to Erasure ("Right to be Forgotten"): Users can request deletion of their personal data under certain conditions.
- Right to Restrict Processing: Users can ask for the limitation of personal data processing in certain situations.
- Right to Data Portability: Users have the right to receive their personal data in a structured, commonly used format and transfer it to another controller.
- Right to Object: Users can object at any time to processing of their personal data for direct marketing or on grounds relating to their particular situation.
- Right to Withdraw Consent: Consent for data processing must be freely given, specific, informed, and unambiguous. Users can withdraw consent at any time, which stops future processing based on that consent.
- Right to be Informed: Users must receive transparent information about how their data is collected, used, and transferred—including legal bases for international data transfers and any supplementary safeguards in place.
For Facebook, as the data controller or processor of user data, this means complying with transparency, allowing users to exercise their rights through accessible mechanisms, and implementing safeguards such as the right to object to AI training on personal data and data minimization measures.
Oberpfalz Medien, as an operator of a Facebook page, also carries GDPR responsibilities as a data controller or joint controller regarding data collected on the page. This includes providing privacy notices and respecting users’ rights as above.
Facebook collects data for advertising, user profile creation and evaluation, market research, and marketing analyses. The data in aggregated form is used by Facebook to make posts and activities on the page more appealing to each user individually. The legal basis for operating the Facebook page is based on legitimate interest pursuant to Art. 6 (1) lit. f EU-GDPR.
Facebook Ireland Ltd., located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible for the Facebook page of Oberpfalz Medien. According to the ruling of the European Court of Justice, the operator of a Facebook page is jointly responsible with Facebook for the processing of personal data.
Users have the right to information, rectification, deletion, restriction of processing, data portability, objection, and complaint right regarding their data. For more details, please visit our privacy policy at https://www.onzewebsite/datenschutz/. Further information, details, and product information can be found on our imprint at https://www.onzewebsite/impressum/.
- Although the use of technology in data-and-cloud-computing and cybersecurity has significantly increased the reach and influence of social media platforms like Facebook, it is crucial that family members understand their rights under the General Data Protection Regulation (GDPR), such as the right to access, rectify, erase, restrict processing, port data, object to processing, and withdraw consent, to ensure their personal data is protected and used responsibly.
- As data controllers or processors, both Facebook and operators of Facebook pages like Oberpfalz Medien have a responsibility to implement safeguards and respect the rights of users, including providing transparent information and complying with GDPR guidelines, to prevent potential privacy breaches and protect user data from unauthorized access.
