Data Privacy policy in connection with our use of social media (LinkedIn)

This data privacy policy applies to our social media presence on the social network LinkedIn of LinkedIn Ireland Unlimited Company (hereinafter also referred to as "platform operator") available at https://www.linkedin.com/company/hannover-re.

Our social media presence is operated under joint control with the platform operator in terms of data protection law. For the essential content of our corresponding agreement pursuant to Art. 26 GDPR on joint control with the platform operator, please refer to Section 12 of this data privacy policy below.

We would like to point out that you use the service of the platform operator (including the available functions) on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).

Even though we inform you about data protection at the platform operator under transparency aspects, this data privacy policy is limited to such data processing and purposes that are determined or carried out by us.

With regard to other data processing and purposes over which we have no influence and which are determined and carried out by the platform operator alone, we refer to the contact details below and linked data protection information of the platform operator.

If you have any further questions regarding data protection, please also refer to our General Data Privacy Policy in accordance with Art. 13 and 14 of the EU General Data Protection Regulation (GDPR) on our website.

You can contact our data protection officer by post at our address with the addition - Data Protection Officer - or by e-mail via our data protection group mailbox at datenschutz[at]hannover-re.com.

1. Controller for the data processing

Hannover Rück SE
Karl-Wiechert-Allee 50
30625 Hannover
Germany
Phone +49 511 5604-0
Fax +49 511 5604-1188
www.hannover-re.com

and

LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
www.linkedin.com

2. General information on data processing by the platform operator

When you visit our social media presence, the platform operator collects, among other things, your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us with statistical information about the usage of our social media presence.

The data collected about you in this context will be processed by the platform operator and may be transferred to countries outside the European Union or the European Economic Area. Which information the platform operator receives and how this information is used is described in general terms by the platform operator in its corresponding data privacy notices. There you will also find information on how to contact the platform operator, your rights as a data subject and how to place advertisements. The data protection information of the platform operator can be found under https://www.linkedin.com/legal/privacy-policy.

In which way the platform operator uses the data from your visit for its own purposes, to what extent activities on our social media presence are assigned to individual users, how long the platform operator stores this data and whether data from a visit to our social media presence is passed on to third parties can only be communicated to you by the platform operator for certain and is not conclusively known to us.

When you access our social media presence, the IP address assigned to your terminal device is transmitted to the platform operator. The platform operator also stores information about the terminal devices of its users (e.g. as part of the "login notification" function); if necessary, the platform operator may be able to assign IP addresses to individual users.

If you are currently logged on to the platform operator as a user, a cookie with an individual identifier is stored on your terminal device. This enables the platform operator to understand that you have visited this site and how you have used it. This also applies to all other pages of the platform operator (e.g. contacts or other company presences).

By means of buttons of the platform operator integrated into websites, it is possible for the platform operator to record your visits to these websites and to assign them to your profile on the platform. This data can be used to offer content or advertising tailored to your needs. If you want to avoid this, you should log out from the platform operator or deactivate the "stay logged in" function, delete the cookies on your device, close your browser and restart it. After a possible renewed registration, you will again be recognisable as a specific user by the platform operator.

4. Categories of data concerned

The personal data that you have provided to the platform operator is processed, in particular first and last name, profile image, function, country, industry, seniority, company size, possibly different profile name on the social network, interactions on the platform (e.g. follow, like, share) and times of the interactions. If you provide us with data directly, this may also be affected.

5. Origin, collection and processing of your data

If you have not provided us with personal data directly, the origin of the data is the platform operator, who collected the data from the users directly when they logged in/registered for the service. We process personal data by communicating with users (e.g. through employee news) or by recording the type and number of interactions on our social media presence. The specific type of processing depends on your particular interactions with our social media presence. In this respect we refer to the corresponding data privacy notices of the platform operator.

6. Duration of data storage

We have no influence on the deletion of your personal data by the platform operator. As long as you follow or interact with our social media presence, your data will be stored on the platform in a way visible to us. By deactivating your respective interaction or deleting your profile, you can ensure that the data is no longer accessible to us. Any storage beyond this does not take place through us. For further information, please refer to the relevant notes of the platform operator.

7. Transfer of data to a third country

Although the platform operator is based in Ireland, personal data is also transferred to the US and therefore to a so-called third country. In this case, the platform operator has agreed to carry out the transfer only if an adequate data protection guarantee in accordance with Articles 44 et seq. of the GDPR exists (e.g. Binding Corporate Rules or Standard Contractual Clauses of the European Commission). For detailed information on this, please see the contact details given above.

8. Rights of data subjects

You can request information about your personal data stored at the above address. In addition, under certain circumstances, you can demand the correction or deletion of your data. You may also have a right to restrict the processing of your data and a right to have the data you provide released in a structured, common and machine-readable format. You can revoke any consent you have given with effect for the future.

9. Right of objection

If we process your data to protect legitimate interests, you can object to this processing by contacting our data protection officer at the above address if your particular situation gives rise to reasons that speak against data processing. We will then no longer process your personal data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms. Or the processing serves the assertion, exercise or defence of legal claims.

10. Right of appeal

You have the possibility to address a complaint to the above-mentioned data protection officer or to a competent data protection supervisory authority.

The data protection supervisory authority responsible for us is

The State Commissioner for Data Protection of Lower Saxony
Prinzenstrasse 5
30159 Hannover

Phone: +49 (0511) 120 45 00
Fax: +49 (0511) 120 45 99
E-mail poststelle@lfd.niedersachsen.de

11. Use of "Page Insights"

We use the "Page Insights" function of the platform operator. When a LinkedIn user visits, follows, or engages with our presence on LinkedIn, LinkedIn processes the personal data provided by the user or arising from that use.

The "Page Insights" data provided by LinkedIn consists of aggregated data that cannot be easily traced back to individual users.

Essential content of the agreement of the joint controllers according to Art. 26 GDPR

The joint controllers have reached an agreement with the "Page Insights Joint Controller Addendum" in accordance with Art. 26 GDPR. This agreement applies if data subjects (members, users) from the European Economic Area and Switzerland are affected by the processing in question here. The agreement is available at https://legal.linkedin.com/pages-joint-controller-addendum.

LinkedIn guarantees the security of the processing of user data and the provision of "Page Insights" data by implementing appropriate technical and organisational measures. You can find further information here: https://security.linkedin.com.

Users can exercise their rights as data subjects through their account settings or by contacting LinkedIn directly.

LinkedIn agrees to assume responsibility under the EU Data Protection Regulation for the provision of the "Page Insights" function and will comply with all applicable obligations under the EU General Data Protection Regulation with respect to processing within the framework of "Page Insights" (including but not limited to Articles 12-22 and 32-34 of the GDPR).

This means that LinkedIn will, among other things, ensure that members are informed about the data processed. Furthermore, LinkedIn will support the right to information and deletion. LinkedIn will determine at its own discretion how to perform its obligations under this agreement.

As part of our responsibility, we will also comply with the applicable legal obligations, including the obligations arising from the EU General Data Protection Regulation.

The platform operator and we will cooperate in the processing of requests from data subjects.

Irrespective of the above-mentioned right of appeal to the data protection supervisory authority responsible for us, the platform operator and we determine as the so-called lead supervisory authority in accordance with Art. 56 GDPR: Irish Data Protection Commissioner, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland.

12. Subject to change

We reserve the right to change these data protection regulations at any time within the framework of the applicable laws.

Status June 2020