Data protection information ZOOM according to Art. 13 DSGVO
In this privacy notice, we explain our use of the video communication software “Zoom”. In particular, we point out that we do not record any data of the communication and use “Zoom” with end-to-end encryption. This ensures the confidentiality of the communication content. You can recognize the activation of end-to-end encryption in the current meeting by a green sign with a locked padlock in the upper left corner.
Responsible
The Zentrum für Europäischen Verbraucherschutz e. V. (Centre for European Consumer Protection in Europe – ZEV) is responsible for processing your personal data in connection with the use of Zoom.
Description of data processing, purposes and types of data
To conduct online meetings, video conferences and webinars (hereinafter: “Online Meetings”), we use the tool “Zoom”.
Depending on the type and scope of the use of “Zoom”, different types of data are collected or processed. These include in particular:
– Personal data (e.g. first and last name, email address, profile picture).
– Meeting metadata (e.g. date, time and duration of communication, name of the meeting, participant IP address)
– Device/hardware data
– Text, audio, and video data
– Connection data (e.g., phone numbers, country names, start and end times, IP addresses)
Below we would like to inform you in more detail about the scope of data processing.
Required data and functions
If you participate in an online meeting as an external participant, you will receive an access link from the host by e-mail. When you register for the online meeting, you must then enter your name and, if applicable, your e-mail address.
In addition, the tool collects user data that is required for the provision of the service. This includes in particular technical data about your devices, network and Internet connection, such as IP address, device type, operating system type and version, client version, camera type, microphone or speaker, type of connection.
Voluntary information and functions
You can provide additional information about yourself, but you do not have to. You are also free to use the chat function during the online meeting. You can also switch your camera and microphone on, off or mute yourself. By default, the camera and microphone are disabled at the beginning of a meeting.
When you use the chat function, the text entries you make are processed to display them in the “online meeting”. There is no logging of the chat. If you turn on your camera or microphone, data from your end device’s microphone and any end device video camera will be processed for the duration of the meeting.
Please note that any information you or others upload, provide, or create during an online meeting will be processed at least for the duration of the meeting. This includes, but is not limited to, chat/instant messages, files, whiteboards, and other information shared while using the service. Recordings will not be made.
Other functions
For more information on the processing of your data when using “Zoom”, a detailed list of the data collected and processed by “Zoom”, and the “Zoom” privacy notice, please visit: https://zoom.us/privacy
Legal basis for data processing
If you participate in an online meeting as an external participant, the processing of your data is based on Art. 6 para. 1 p. lit. b. DSGVO, provided that your participation in the online meeting is necessary for the performance of a contract concluded with you. The same applies if the implementation of the online meeting is necessary for the implementation of pre-contractual measures, which are carried out at your request.
If data processing in connection with the use of “Zoom” is not necessary for the fulfillment of a contract concluded with you or for the implementation of pre-contractual measures, it is carried out on the basis of Art. 6 (1) sentence 1 lit. f DSGVO. Our legitimate interest here is the maintenance of location-independent communication, the maintenance of business contacts and the provision of services owed.
If you also voluntarily provide personal information when using the tool or voluntarily use functions that are not mandatory, the associated data processing is based on your revocable consent pursuant to Art. 6 (1) sentence 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. Please note that processing that took place before the revocation is not affected by this.
Disclosure of your data
As a matter of principle, we do not pass on your data to third parties. Data will only be passed on if it is intended to be passed on, if you have expressly consented to the transfer in advance or if we are obliged or entitled to do so by law.
When processing your data, Zoom Video Communications Inc. supports us as an external service provider and processor within the meaning of Art. 28 DSGVO. As a processor, Zoom Video Communications Inc. processes your data strictly in accordance with instructions and on the basis of a separately concluded order processing agreement. In this context, the data processing may also take place outside the EU or the EEA. With regard to Zoom Video Communications Inc., an adequate level of data protection pursuant to Art. 46 (2) lit. c DSGVO can be assumed through the use of EU standard contractual clauses as well as other appropriate measures (establishment of end-to-end encryption and through the use of the data routing function; This is understood to mean the ability to determine for yourself through which data centers the data should flow during meetings and webinars.). We will gladly provide the concluded EU standard contractual clauses upon request.
Deletion of your data
As a matter of principle, we process your data only as long as it is necessary for the purposes for which it was collected. We do not record anything. Therefore, your data will not be stored.
Your rights as a data subject
In accordance with Art. 15 of the GDPR, you have the right to obtain information from the controller about the personal data concerning you, as well as the right to have inaccurate data corrected in accordance with Art. 16 of the GDPR, or to have it deleted if one of the reasons listed in Art. 17 of the GDPR applies, e.g. if the data is no longer required for the purposes pursued. You also have the right to restriction of processing if one of the conditions set out in Art. 18 DSGVO applies and, in cases covered by Art. 20 DSGVO, the right to data portability.
In cases where we process your personal data on the legal basis of Art. 6 (1) p. 1 lit. f DSGVO, you also have the right to object at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of the data concerning you violates data protection regulations. The right to lodge a complaint may in particular be asserted before a supervisory authority in the Member State of the data subject’s place of residence or the place of the alleged infringement.
Contact details of the data protection officer
In fulfilling our obligations under data protection law, we are supported by our data protection officer. The contact details of our data protection officer are:
Alexander Wahl
Zentrum für Europäischen Verbraucherschutz e.V.
Bahnhofsplatz 3
77694 Kehl
E-Mail: datenschutz@cec-zev.eu
