With this data protection notice, we inform you about the processing of your personal data and about your rights as a data subject in the context of our presence on social networks.
For all other processing of personal data, please refer to our general privacy policy at https://xoros-home.de/datenschutz/
1. responsible person
Our social media presences are operated by
XOROS Home GmbH
Glockengießerwall 2
20095 Hamburg
Germany
info@xoros-home.de
+49 40 853 77 201
represented by: Niels Gundermann, Frank Ehlers
Data Protection Officer:
You can contact the person responsible for data protection in our organisation via info@xoros-home.de under the keyword "Data protection".
2. scope of application
This privacy policy informs you about the type, scope and purpose of the processing of personal data when using the following social media profiles of our company:
- Facebook company account: We operate a Facebook company account. We do not write our own posts via our Facebook business account and do not interact with other Facebook users. However, we do place adverts on Facebook and also use lead forms to attract interested users to our offering. We use the Facebook Ad Manager for the technical management of advertising.
- Instagram account: We run the two Instagram accounts instagram.com/99cubes.com/ and instagram.com/xoros_home_en/ and actively use them for posts, stories, reels and adverts, interact with other users and use lead forms to attract interested users to our offering.
- Youtube channel: We operate the YouTube channel youtube.com/@99cubes-en and use it to publish videos to inform about our services and provide general information via video.
- LinkedIn: We have a presence on LinkedIn at linkedin.com/company/xoros-home/ and use it to present the company, for contributions and for interaction with other users.
We are jointly responsible for the operation of our Facebook and Instagram accounts with Meta Platforms Ireland Limited (Block J, Serpentine Avenue, Dublin 4, Ireland, hereinafter: "Meta") within the meaning of Art. 26 GDPR. Further information on data processing by Meta and the contact details of the responsible persons at Meta can be found in Meta's privacy policy at facebook.com/about/privacy.
The provider of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Information on the processing of personal data by the provider can be found in the privacy policy at the following link: https://policies.google.com/privacy.
The provider of LinkedIn is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Information on the processing of personal data by LinkedIn can be found in the privacy policy at the following link: https://www.linkedin.com/legal/privacy-policy.
3. joint responsibility with Meta
Meta provides the Facebook and Instagram platforms and processes users' personal data. There is joint responsibility for certain processing (page insights, lead forms, etc.).
The agreement on joint responsibility ("Page Insights Controller Addendum") can be found here:
https://www.facebook.com/legal/terms/page_controller_addendum
Meta assumes primary responsibility for the processing of personal data in connection with the platform services; we receive anonymised statistics on access to our pages.
4. data processing on Facebook
We operate our Facebook company account for the placement and management of adverts. Apart from adverts, we do not publish any posts, comments, images or videos on Facebook. We or Meta process the following data in particular::
- Interactions: Comments, likes, direct messages in the context of our adverts
- Content: Images, stories, reels, texts published by us in the context of advertisements
- Usage data: Call statistics for the adverts
- Lead forms: If you fill out a form via corresponding adverts or our profile, we will receive the data provided there (name, e-mail address, telephone number, possibly other voluntary information).
Purposes of the processing:
- Answering enquiries
- Realisation of advertising measures
- Analysing the range
- Acquisition of interested parties (leads)
Legal bases:
- Art. 6 para. 1 lit. a GDPR (consent for lead forms)
- Art. 6 para. 1 lit. b GDPR (pre-contractual enquiries)
- Art. 6 para. 1 lit. f GDPR (public relations, marketing)
5. data processing on Instagram
We operate our Instagram accounts for company presentation, customer communication and advertising. We or Meta process the following data in particular:
- Interactions: Comments, likes, direct messages
- Content: pictures, stories, reels, texts published by us
- Usage data: Call statistics ("Instagram Insights")
- Lead forms: If you fill out a form via corresponding adverts or our profile, we will receive the data provided there (name, e-mail address, telephone number, possibly other voluntary information).
Purposes of the processing:
- Answering enquiries
- Realisation of advertising measures
- Analysing the range
- Acquisition of interested parties (leads)
Legal bases:
- Art. 6 para. 1 lit. a GDPR (consent for lead forms)
- Art. 6 para. 1 lit. b GDPR (pre-contractual enquiries)
- Art. 6 para. 1 lit. f GDPR (public relations, marketing)
6. notes on lead forms
If you fill out a lead form via Facebook or Instagram, your data will only be transmitted to us after you have actively given your consent to the use of your data.
We use the data exclusively for the purpose stated in the form (e.g. sending offers, flyers and price lists).
7. use of Hubspot as a CRM system
We use the Hubspot CRM system to manage and process contact data collected via lead forms. HubSpot is a software company from the USA with a branch in Ireland as its European headquarters. Contact: Dublin (European HQ) 1 Sir John Rogerson's Quay, Dublin 2, Ireland, Phone: +353 1 518 7500.
The data entered in the lead forms is transferred to Hubspot and stored and processed there for the purpose of establishing contact, processing your enquiry and carrying out marketing and sales activities.
Further information can be found in Hubspot's privacy policy: https://legal.hubspot.com/de/privacy-policy
Legal bases:
- Art. 6 para. 1 lit. a GDPR (consent)
- Art. 6 para. 1 lit. b (pre-contractual measures)
- Art. 6 para. 1 lit. f (legitimate interest in efficient customer management and marketing).
8. data transfer to third countries
Some of the services and social media providers we use also process data outside the EU, in particular in the USA. Standard contractual clauses of the EU Commission apply to these transfers as a suitable guarantee of compliance with the level of data protection.
9. your rights as a data subject
You have the following rights vis-à-vis us:
- Information about your stored data (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing operations (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority
Please note: Most of the data processing is carried out by the providers we use themselves. You can therefore assert your rights directly against the providers we use.
Stand: 20.08.2025
