Privacy Notice for Microsoft Teams
Privacy Notice pursuant to Art. 13 GDPR
In this privacy notice, we explain our use of the video communication software “Teams Meetings” by Microsoft Corporation.
This privacy notice is addressed both to employees of Kleine Wolke Textilgesellschaft GmbH & Co. KG and to external persons.
Controller:
The controller responsible for processing your personal data in connection with the use of “Teams Meetings” is Kleine Wolke Textilgesellschaft GmbH & Co. KG, Herzogin-Cecilie-Allee 16/18, D-28217 Bremen, Tel.: +49 (0) 421 / 62 61 – 0, Fax: +49 (0) 421 / 62 61 – 392, Email: info@kleinewolke.com.
Description of the data processing, purposes, and types of data:
We use the “Teams Meetings” tool to conduct video conferences (hereinafter: “online meetings”).
Depending on the type and scope of use of “Teams Meetings,” different types of data are collected and processed. These include, in particular:
• Information about your person (e.g. first and last name, email address)
• Meeting metadata (e.g. date, time, and duration of the communication, name of the meeting, participant IP address)
• Device/hardware data (MAC addresses, client version)
• Text, audio, and video data
• Documents or records that you upload or send yourself
• Connection data (e.g. telephone numbers, country names, start and end times, IP addresses)
Below, we would like to provide you with more detailed information about the scope of data processing.
Required data and functions
If you participate in an online meeting as an external participant, you will receive an access link from the host by email. When registering for the online meeting, you can then provide your name and, if applicable, your email address.
In addition, the tool collects user data required to provide the service. This includes, in particular, technical data relating to your devices, your network, and your internet connection, such as IP address, MAC address, other device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and type of connection.
Voluntary information and functions
You may provide additional information about yourself, but you are not required to do so. In addition, you are free to use the chat function during an online meeting. You can also turn your camera and microphone on, off, or mute them yourself.
As a rule, no recording takes place. If we do wish to record individual sessions, we will do so only if the consent of all invited participants has been obtained in advance. If the consent of at least one person is not given, no recording will take place.
If you use the chat function, the text entries you make will be processed in order to display them in the “online meeting.” The chat is not logged.
You can also contact our company’s employees as an external Teams user via an online meeting or chat message. In the latter case, your user name and your text or document entry will be processed in order to display the message to the contacted person. You decide yourself whom you write to and what content the message should have (text or document). No text or document entries are logged outside online meetings.
Legal bases for data processing
If you participate in an online meeting as an external participant, your data will be processed on the basis of Art. 6(1) sentence 1 lit. b GDPR, provided that your participation in the online meeting is necessary for the performance of a contract concluded with us. The same applies if conducting the online meeting is necessary for the implementation of pre-contractual measures taken at your request.
If the data processing in connection with the use of “Teams Meetings” is not necessary for the performance of a contract concluded with us or for the implementation of pre-contractual measures, it will be carried out on the basis of Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest in this regard lies in maintaining location-independent communication, cultivating business contacts, and providing the services owed.
If, when using the tool, you also voluntarily provide information about yourself or voluntarily use functions that are not absolutely necessary, the associated data processing will be carried out on the basis of your revocable consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. You may revoke your consent at any time with effect for the future. Please note that processing carried out before the revocation is not affected by this.
Disclosure of your data
As a rule, we do not transmit your data to unauthorized third parties.
Microsoft Corporation supports us in processing your data as an external service provider and processor within the meaning of Art. 28 GDPR. As a processor, Microsoft Corporation processes your data strictly in accordance with instructions and on the basis of a separately concluded data processing agreement.
Deletion of your data
In the case of an online meeting, your data will only be stored in the system for the duration of the respective meeting. Recorded meetings are not deleted.
Text entries and documents sent outside online meetings are not deleted.
Your rights as a data subject
In accordance with Art. 15 GDPR, you have the right to obtain information from the controller about the personal data concerning you, as well as the right to rectification of inaccurate data in accordance with Art. 16 GDPR or to erasure, provided that one of the reasons stated in Art. 17 GDPR applies, for example if the data is no longer required for the purposes pursued. You also have the right to restriction of processing if one of the conditions set out in Art. 18 GDPR is met and, in the cases of Art. 20 GDPR, the right to data portability. In cases where we process your personal data on the legal basis of Art. 6(1) sentence 1 lit. f GDPR, you also have the right to object at any time on grounds relating to your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of the data concerning you violates data protection provisions. The right to lodge a complaint may be exercised in particular before a supervisory authority in the Member State of the data subject’s place of residence or the place of the alleged infringement.
Contact details of the data protection officer:
We are supported in fulfilling our data protection obligations by our data protection officer. The contact details of our data protection officer are: datenschutz nord GmbH, Konsul-Smidt-Straße 88, 28217 Bremen, Email: office@datenschutz-nord.de, Tel.: 0421 69 66 32-0