Privacy Policy for our Social Media Accounts

  • I. General

We maintain (publicly accessible) profiles in various social networks ("social media"). When you visit these profiles, it triggers a variety of data processing operations.

Below, we provide you with an overview of which of your personal data is collected, used and stored by which body when you visit one of our profiles.

Personal data is information that refers to you as a specific person (e.g. name, age, address, photos, email addresses and possibly your IP address as well). Furthermore, we will inform you about the rights that you have with regard to the processing of your personal data and who your point of contact is.

You are not obliged to provide us with your personal data. However, doing so may be necessary in order to access or use individual functionalities of our profiles in the respective social networks. These functionalities may not be available to you, or may be available only to a limited extent, if you do not provide us with your personal data.

Processing will not be used by Rheinmetall AG to create profiles of you. No automatic decision-making or profiling takes place. 

When you visit our social media profiles, your personal data will be collected, used and stored not only by us, but also by the operators of the respective social media platform. This happens even if you yourself do not have a profile in the respective social network. The individual data processing operations and their scope differ depending on the operator of the respective social network and cannot necessarily be tracked by us. Details about the collection and storage of your personal data and the type, scope and purpose of its use by the operator of the respective social network can be found in the privacy policy of the respective operator: 

  • The privacy policy for the social network, "Instagram", which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA, can be viewed at https://help.instagram.com/155833707900388 (accessed on 28/06/2021)


  • II. Information on the collection of personal data when operating a social media account on the platform of the respective provider
    1. Instagram

We maintain an Instagram account through which we provide information about MS Motorservice to interested parties. Visiting the profile triggers processing operations on the part of the platform operator, Facebook. "Instagram" is a social media platform owned by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. 

  1. Visiting our Instagram account

Visiting our Instagram profile triggers processing operations on the part of Instagram (Facebook). Instagram creates Custom Audience statistics. MS Motorservice receives these statistics in an anonymised form. We have no influence over the parameters.

Facebook provides various documents in this case. Where there is joint responsibility with Facebook, the joint responsibility agreement applies: https://www.facebook.com/legal/terms/page_controller_addendum.

In this agreement, Facebook undertakes to assume primary responsibility for the processing operations covered by the agreement.

In addition, Facebook considers further processing operations as commissioned processing where appropriate. Facebook provides corresponding documents on this subject: https://www.facebook.com/legal/terms/dataprocessing

To find out which specific processing operations qualify as joint responsibility or commissioned processing for Facebook, please contact Facebook's data protection officer. You can contact Facebook's data protection officer via the following link:


If you access our Instagram account, Instagram will process at least the following personal data and take sole responsibility for doing so:

  • Network and connections (IP address or connection speed; name of mobile or Internet service provider; language; time zone; mobile phone number; information about other devices nearby or in your network, if applicable)
  • Cookie data (authentication; security; website and product integrity; advertising, recommendations; insights and measurements; website features and services; performance; analytics and research; third-party websites and apps)
  • "Information and content you provide"
  • "Networks and connections"
  • "Your usage"
  • "Information about transactions made on our products"
  • "Things others do and information they provide about you"
  • Device information (type of device, such as computer, phone, connected TV and other devices)
  • Device attributes (operating system, hardware and software versions, battery level, signal strength, available storage space, browser type, app and file names and types, and plugins)
  • Device operations
  • Identifiers (device IDs and other identifiers)
  • Device signals (Bluetooth and Wi-Fi [access points], beacons and mobile phone masts nearby)

Instagram uses "cookies", which are stored on your terminal equipment when you visit our profile, even if you do not have your own Instagram profile or are not logged in with your profile while visiting our profile. These cookies allow Instagram or Facebook, respectively, to create user profiles based on your preferences and interests and to show you ads (within and outside the Facebook network, like Instagram) that are tailored to these profiles. As a rule, cookies remain on your terminal equipment until you delete them.

We obtain anonymous statistics from the abovementioned data that is collected and processed by Instagram. Based on this data, we can track the interest in our account on the respective platform.

More information on processing operations and cookies can be found at: https://www.instagram.com/legal/privacy/

  1. "Following" our Instagram account

If you follow our Instagram account, we will be able to track your Instagram username. We process this data for moderation purposes only. The legal basis for this processing is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. We have a legitimate interest in maintaining the integrity of the account.

Rheinmetall AG uses the Instagram account passively for information purposes only. Please do not post any personal data, especially sensitive data.

The data is stored for as long as your Instagram profile exists.

Pursuant to Art. 6(1)(a) GDPR, the legal basis for processing by Instagram may be your consent, which you may have given to the service provider upon registration. You may withdraw this consent from Facebook pursuant to Art. 7 (3)(1) GDPR at any time.

When you visit the Instagram platform, it is possible that your data will be processed outside the European Union, in particular in the USA. This may make it difficult or impossible to enforce your rights.

Facebook and Instagram comply with the European Commission's standard contractual clauses in the event of a transfer to the USA: https://www.facebook.com/help/566994660333381

  • III. Social media links

In addition to our accounts on social media platforms, we also provide links that can be used to access external social media platforms. We use graphics from the respective provider for this purpose. These graphics do not establish a connection to the social media networks. They are exclusively representations of the platforms in order to be able to easily reach the respective providers.

Only after clicking on the graphic will you be redirected to the network that you clicked on. Once you have been redirected, the social media provider collects information from you. It cannot be ruled out that your data will be transferred to the USA and possibly processed further. 

  • IV. Your rights as a data subject

As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:

  • Right of access (Art. 15 GDPR): In accordance with the legal requirements, you have the right to request information about whether and to what extent we process your personal data.
  • Right to rectification (Art. 16 GDPR: In accordance with the legal requirements, you have the right to request the completion or correction of incomplete or incorrect data concerning you.
  • Right to erasure (Art. 17 GDPR): In accordance with the legal requirements, you have the right to request that your personal data be deleted immediately. Note: The immediate deletion of your data may be precluded by statutory retention obligations or other justified reasons for retention.
  • Right to restriction of processing (Art. 18 GDPR): In accordance with the legal requirements, you have the right to request a restriction of the processing of your personal data.
  • Right to data portability (Art. 20 GDPR): In accordance with legal requirements, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and—if technically feasible—to request that it be transmitted to another controller.
  • Right to object (Art. 21 GDPR): In accordance with the legal requirements, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data provided that the data processing is carried out to protect legitimate interests (cf. Art. 6 [1] [e] or [f] GDPR).
  • If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
  • Right to withdrawal of consent (Art. 7 [3] GDPR): You have the right to withdraw given consent at any time, without giving reasons and with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint with a supervisory authority (Art. 77 [1] GDPR): In accordance with the legal requirements, you have the right to lodge a complaint with a data protection supervisory authority of your choice, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

Changes to our privacy policy

We reserve the right to amend this privacy policy occasionally so that it always meets the current legal requirements and also reflects any changes in our services. The privacy policy displayed at the time of any follow-up visits by you to our site is always the valid, applicable version.

Contacting our data protection officer

If you have any questions regarding the processing of your personal data, please feel free to contact our data protection officer directly. 

Rheinmetall AG
Rheinmetall Platz 1
40476 Düsseldorf