With this data protection notice, we inform you about the processing of your personal data and about your rights as a data subject in the context of our presence on social networks.
1. responsible person
Our social media presences are operated by
XOROS Home GmbH
Glockengießerwall 2
20095 Hamburg
Germany
info@xoros-home.de
+49 40 853 77 201
represented by: Niels Gundermann, Frank Ehlers
Data Protection Officer:
You can contact the person responsible for data protection in our organisation via info@xoros-home.de under the keyword "Data protection".
2. scope of application
This privacy policy informs you about the type, scope and purpose of the processing of personal data when using the following social media profiles of our company:
- Facebook company account: We operate a Facebook company account, but use it for purely technical purposes to manage the Facebook Ad Manager. We do not write our own posts via our Facebook company account and do not interact with other Facebook users.
- Instagram account: We run the two Instagram accounts instagram.com/99cubes.com/ and instagram.com/xoros_home_en/ and actively use them for posts, stories, reels and adverts, interact with other users and use lead forms to attract interested users to our offering.
- Youtube channel: We operate the YouTube channel youtube.com/@99cubes-en and use it to publish videos to inform about our services and provide general information via video.
- LinkedIn: We have a presence on LinkedIn at linkedin.com/company/xoros-home/ and use it to present the company, for contributions and for interaction with other users.
We are jointly responsible for the operation of our Facebook and Instagram accounts with Meta Platforms Ireland Limited (Block J, Serpentine Avenue, Dublin 4, Ireland, hereinafter: "Meta") within the meaning of Art. 26 GDPR. Further information on data processing by Meta and the contact details of the responsible persons at Meta can be found in Meta's privacy policy at facebook.com/about/privacy.
The provider of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Information on the processing of personal data by the provider can be found in the privacy policy at the following link: https://policies.google.com/privacy.
The provider of LinkedIn is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Information on the processing of personal data by LinkedIn can be found in the privacy policy at the following link: https://www.linkedin.com/legal/privacy-policy.
3. joint responsibility with Meta
Meta provides the Facebook and Instagram platforms and processes users' personal data. There is joint responsibility for certain processing (page insights, lead forms, etc.).
The agreement on joint responsibility ("Page Insights Controller Addendum") can be found here:
https://www.facebook.com/legal/terms/page_controller_addendum
Meta assumes primary responsibility for the processing of personal data in connection with the platform services; we receive anonymised statistics on access to our pages.
4. data processing on Facebook (Ad Manager)
Our Facebook company account is used exclusively for the placement and management of adverts.
We do not publish any contributions, comments, images or videos on Facebook.
We do not collect any personal data directly there - however, Meta automatically processes technical data (e.g. IP address, device information, user behaviour) when pages are accessed or interacted with.
Purpose: Control and evaluation of advertising campaigns
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in advertising and reach analysis)
5. data processing on Instagram
We operate our Instagram accounts for company presentation, customer communication and advertising. We or Meta process the following data in particular:
- Interactions: Comments, likes, direct messages
- Content: pictures, stories, reels, texts published by us
- Usage data: Call statistics ("Instagram Insights")
- Lead forms: If you fill out a form via corresponding adverts or our profile, we will receive the data provided there (name, e-mail address, telephone number, possibly other voluntary information).
Purposes of the processing:
- Answering enquiries
- Realisation of advertising measures
- Analysing the range
- Acquisition of interested parties (leads)
Legal bases:
- Art. 6 para. 1 lit. a GDPR (consent for lead forms)
- Art. 6 para. 1 lit. b GDPR (pre-contractual enquiries)
- Art. 6 para. 1 lit. f GDPR (public relations, marketing)
6. notes on lead forms
If you fill out a lead form via Instagram, your data will only be transmitted to us after you have actively given your consent to the use of your data.
We use the data exclusively for the purpose stated in the form (e.g. sending offers).
You can revoke your consent at any time with effect for the future (by e-mail to 99cubes@xoros-home.de).
7. data transfer to third countries
Some of the social media providers we use also process data outside the EU, in particular in the USA. Standard contractual clauses of the EU Commission apply to these transfers as a suitable guarantee of compliance with the level of data protection.
8. your rights as a data subject
You have the following rights vis-à-vis us:
- Information about your stored data (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing operations (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority
Please note: Most of the data processing is carried out by the providers we use themselves. You can therefore assert your rights directly against the providers we use.
Stand: 15.08.2025
