The use of this Instagram page may involve the processing of personal data due to the use of Instagram Insights. To make this processing comprehensible for you, we would like to provide you with an overview with the following information. In order to ensure fair processing, we would also like to inform you below about your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
General privacy information regarding Instagram
The moment you access our fan page, your browser establishes a connection with Instagram and transmits information. This data is transmitted, among other things:
For visitors who are not logged in or registered on Instagram:
- IP address: When a fan page is accessed, Instagram automatically detects the user’s IP address.
- Cookies: When you visit our fan page, cookies are automatically set. According to Instagram, the so-called ‘datr cookie’ is used to identify the web browser establishing the connection to the Instagram page and plays a key role in protecting the social network from ‘malicious activity’. The “datr cookie” is valid for two years, but can be deleted via your browser settings. The retention period for the “datr cookie” is two years.
For visitors who are registered with and logged in to Instagram:
- IP address: Instagram also collects the user’s IP address, even for logged-in visitors (see above)
- Cookies: In this case too, a “datr cookie” is set (see above). If you are an Instagram user and are logged into your Instagram account whilst visiting our “fan page”, the c_user cookie is also activated. Instagram links your visit to the “fan page” with your personal user account. This enables Instagram to track your user behaviour. The c_user cookie is stored for 30 days.
For further information on how Instagram processes your personal data, please refer to Instagram’s Privacy Policy at the following link: https://privacycenter.instagram.com/policy/?section_id=0-WhatIsThePrivacy.
Names and contact details of the data controllers for the fan page
The controllers within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations are
Town of
KitzingenKaiserstraße
13/1597318
KitzingenTelephone: +49 9321
20-0Email: rathaus@stadt-kitzingen.de
and
Meta Platforms Ireland Limited
, Merrion Road
Dublin 4
D04 X2K5, Ireland
Name and address of the Data Protection Officer
Please contact our data protection officer directly with all questions relating to data protection and data security:
Using Instagram Insights
Description and scope of data processing
Instagram provides every fan page operator with Insights on their page. Insights are summarised data that can provide the fan page operator with information about how people interact with their page. Page Insights may be based on personal data collected in connection with a visit or interaction of people on or with our page and its content.
In order to fulfil the requirements of Art. 26 GDPR regarding the joint responsibility of us and Meta Platforms Ireland, we have concluded an Insights addendum with Instagram. In this agreement, Instagram undertakes to assume primary responsibility under the GDPR for the processing of Insights data and to fulfil all obligations under the GDPR with regard to the processing of Insights data (including Art. 12 and 13 GDPR, Art. 15 to 22 GDPR and Art. 32 to 34 GDPR). Only Meta Platforms Ireland can make and implement decisions regarding the processing of Insights Data. Meta Platforms Ireland decides at its sole discretion how to fulfil its obligations under this Page Insights Addendum.
As the fan page operator, we ourselves do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, including the legal basis, identity of the controller and storage duration of cookies on user end devices.
Meta Platforms Ireland provides data subjects with the key details of the Page Insights supplement. Information from Instagram regarding the use of Page Insights and the personal data processed in this context can be found at the following link: https://www.facebook.com/help/instagram/788388387972460/.
Purpose and legal basis of data processing
The legal basis for the placement of Instagram Insights is your consent in accordance with Art. 6 para. 1 lit. a) GDPR, which results from the use of the Instagram platform. We use this to track and evaluate user movements on the fan page to optimise our own social media presence. This enables us to optimally tailor our fan page to the site visitors and to compile statistics on user behaviour.
Transfer to third countries
The use of Instagram Insights may result in data being transferred to a non-EU third country (USA). Meta is certified in accordance with the EU-U.S. Data Privacy Framework, which is equivalent to an adequacy decision by the European Commission for third country transfers to the USA.
Retention period
According to Instagram, it retains data until it is no longer needed to provide its services and products, or until the user’s account is deleted, whichever occurs first. According to Instagram, this depends on the circumstances of each individual case, in particular the type of data, the reasons for its collection and processing, and the relevant legal or operational storage requirements. Further information on data storage can be found at: https://de-de.facebook.com/privacy/policy?section_id=0-WhatIsThePrivacy
Your rights as a data subject
Right of access*
You have the right to request confirmation from us as to whether and which of your personal data is being processed.
Rectification/Erasure/Restriction of processing*
Furthermore, you have the right to demand that we
- inaccurate personal data concerning you are rectified immediately (right to rectification);
- personal data concerning you are erased immediately (right to erasure), provided that this does not conflict with any statutory retention period, and
- the processing is restricted (right to restriction of processing).
Right to data portability*
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
Right of withdrawal*
You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to object*
If the processing of personal data concerning you is necessary for the performance of a task carried out in the public interest (Art. 6 para. 1 lit. e) GDPR) or to safeguard our legitimate interests (Art. 6 para. 1 lit. f) GDPR), you have the right to object.
Automated decision-making in individual cases, including profiling*
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
- is necessary for the conclusion or fulfilment of a contract between you and us
- is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
- with your express consent.
This results from Art. 22 para. 1, 2 GDPR.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
In the cases referred to in (1) and (3), we will take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including, at a minimum, the right to request that the controller involve a person, to present your point of view and to contest the decision.
(Article 21(3) and (4) of the EU GDPR)
Right to lodge a complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, without prejudice to any other legal remedies. You can reach the supervisory authority responsible for us using the following contact details
The Bavarian State Commissioner for Data Protection
Postal address: P.O. Box 22 12 19, 80502 Munich
Address: Wagmüllerstraße 18, 80538 Munich
Phone: 089 212672-0
Fax: 089 212672-50
Online report: https://www.datenschutz-bayern.de/service/complaint.html
*You can assert your rights using the contact details provided above. We would like to point out that all requests from data subjects regarding Instagram Insights are processed by Meta Platforms Ireland. If you contact us directly with an enquiry, we will forward it to Meta Platforms Ireland.
Note regarding the privacy policy
Unless otherwise regulated, the use of all information we have about you is subject to this privacy policy.
The controller reserves the right to continuously adapt this privacy policy to the necessary security measures in line with technological developments and will announce any changes here.
As at August 2026