Last updated: 15 September 2026
This information applies to the optional zekahub social integration that may be used within zekahub products such as zekabooking, zekacommerce and EVS Manager. It does not generally apply to merely visiting zekahub.de and does not replace the product-specific privacy information of the relevant application or the privacy information of independent customers.
1. Controller
Abdulkadir Kavak
trading as zekahub IT-Dienstleistungen
Aufenangerstraße 5
44229 Dortmund
Germany
Email: info@zekahub.de
Phone: +49 176 2389 5759
2. zekahub's role in data processing
zekahub's data protection role depends on the specific processing activity. For its own contract, account, security and support data, zekahub processes personal data under its own responsibility.
Where zekahub social processes personal data exclusively on behalf of a business customer, zekahub may act as a processor within the meaning of Article 28 GDPR. In that case, the respective business customer as controller generally determines the purposes and essential means of the processing. The customer's privacy information and the agreed data processing terms then also apply.
3. Purpose and operation of the integration
zekahub social allows authorised business customers and their authorised users to connect their own social media accounts and business pages with a zekahub product. Depending on the enabled feature, Facebook Pages, professional Instagram accounts and TikTok accounts may in particular be connected, available accounts or pages may be retrieved, and content selected by the user may be published.
A connection is established only when an authorised user initiates the login and authorisation process with the relevant platform provider and grants the permissions displayed there.
4. Data that may be processed
Depending on the platform, granted permissions and feature used, the following data in particular may be processed:
- account and provider identifiers required to assign the connection
- IDs and names of authorised Facebook Pages or professional Instagram accounts, as well as TikTok account identifiers and, where enabled for the feature, profile information
- authorisation information and access tokens required for the technical connection
- publication content selected or created by the user, such as text, images, media URLs and publication times
- technical status, error and log data for operation, security and troubleshooting
- product-related assignment data so that the connection can be associated with the correct business customer or tenant
Passwords for Facebook, Instagram or TikTok accounts are not requested or stored by zekahub social.
5. Purposes of processing
The data is processed to provide the social media function enabled by the business customer, assign connected accounts, carry out publications initiated by the user, secure the connection technically, and detect errors and misuse.
6. Legal bases
Where zekahub processes data under its own responsibility, processing may in particular be necessary for the performance of a contract or pre-contractual measures under Article 6(1)(b) GDPR and for the secure and reliable provision, administration and prevention of misuse under Article 6(1)(f) GDPR. Where consent is required for a specific feature, it is obtained separately; the legal basis is then Article 6(1)(a) GDPR.
Where zekahub acts as a processor for a business customer, processing is carried out on the basis of that business customer's instructions and agreements. The data protection legal basis applicable to the business customer's processing depends on its specific use case.
7. Meta Platforms
Technical infrastructure provided by Meta is used for features involving Facebook and Instagram. For users in the European Economic Area, Meta Platforms Ireland Limited, Merrion Road, Ballsbridge, Dublin D04 X2K5, Ireland, is a central point of contact for processing by Meta.
When the connection process starts, the user is redirected to Meta. Login and approval of the requested permissions take place with Meta. When the user initiates a publication, the data required for that publication is transmitted to Meta. Where Meta processes data for its own purposes, Meta's current privacy information and terms apply.
Further information: Meta Privacy Policy.
8. TikTok
For features involving TikTok, zekahub social uses developer interfaces provided by TikTok. Authorised business customers and their authorised users can connect their own TikTok account and transmit content selected by the user to TikTok for publication. Login and approval of the required permissions take place with TikTok.
This may involve processing and transmitting to TikTok, in particular, TikTok account identifiers, authorisation information, access tokens, publication content, media URLs and technical status information. Where TikTok processes data for its own purposes, TikTok's current privacy information and terms apply.
Further information: TikTok Privacy Policy.
9. Processing outside the EU or EEA
In connection with services provided by Meta and TikTok, personal data may also be processed outside the European Union or the European Economic Area. Information about the transfer mechanisms and safeguards used can be found in the current privacy information of the respective platform provider.
10. No automatic use for advertising
The current integration is used for connections and publications initiated by the user. Data is not used solely because of the connection for an advertising or audience-targeting function operated by zekahub. If such a function is offered in the future, the required permissions, product information and privacy information will be supplemented before use.
11. Recipients and technical service providers
Data may be transferred, to the extent necessary, to technical service providers that support hosting, operation, security or support of zekahub products. Where legally required, service providers are contractually bound and receive only the data necessary for their tasks.
12. Storage period and disconnection
Connection data and access information are stored only for as long as they are required for the enabled integration. If the connection is disconnected in the relevant product, access information stored for continued use is deleted or technically invalidated unless legal, security-related or evidentiary reasons prevent the immediate deletion of individual data.
Content already published on Facebook, Instagram or TikTok is not automatically deleted by the respective platform provider when the connection is disconnected. Such content may need to be deleted separately through the relevant platform account or a designated management function.
13. Rights of data subjects
Subject to the statutory requirements, data subjects have in particular rights of access, rectification, erasure, restriction of processing, data portability and objection. Consent that has been given may be withdrawn at any time with effect for the future.
To exercise these rights, a message to info@zekahub.de is sufficient. Where zekahub processes data exclusively as a processor for a business customer, it may be necessary to coordinate the request with the responsible business customer.
14. Right to lodge a complaint
Data subjects have the right to lodge a complaint with a data protection supervisory authority. For the controller in North Rhine-Westphalia, the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW) is in particular competent.
15. Data deletion
Detailed instructions on disconnecting the social media connection and requesting deletion can be found under Data deletion for zekahub social.
16. Changes
This privacy information may be updated if features, providers used or legal requirements change. The version published at the relevant time applies.
The Terms of use for zekahub social also apply, together with the product-specific privacy and contractual information depending on the application used.