Data protection information for zoom meetings hosted by the Übersee-Museum Bremen

Data protection information according to Art. 13 DSGVO

Responsible:

The Übersee-Museum Bremen listed in the email signature to your invitation email is responsible for processing your personal data in connection with the use of Zoom.

Description of data processing, purposes and types of data

To conduct video conferences and webinars (hereinafter: “online meetings”), we use the tool “Zoom”. Depending on the type and extent of use of “Zoom”, various types of data are collected or processed. This includes in particular

  • Personal data (e.g. first and last name, e-mail address)
  • Meeting metadata (e.g. date, time and duration of communication, meeting name, participant IP address)
  • Device/hardware data (MAC addresses, client version)
  • Text, audio and video data
  • Connection data (e.g., phone numbers, country names, start and end times, IP addresses)

In the following, we would like to inform you in more detail about the scope of data processing

Required data and functions

If you participate in an online meeting as an external participant, you will receive an access link from the host by e-mail. When you register for the online meeting, you can then enter your name and, if applicable, your e-mail address.

In addition, the tool collects user data that is required for the provision of the service. This includes in particular technical data about your devices, your network and your Internet connection, such as IP address, MAC address, other device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, type of connection.

Voluntary information and functions

You can provide further information about yourself, but you do not have to. You are also free to use the chat function during the online meeting. You can also turn your camera and microphone on, off, or mute yourself. By default, the camera and microphone are disabled at the start of a meeting.

When you use the chat function, the text entries you make are processed in order to display them in the “online meeting”. There is no logging of the chat. If you switch on your camera or microphone, the data from the microphone of your terminal device and from any video camera of the terminal device will be processed for the duration of the meeting.

Please note that any information you or others upload, provide, or create during an online meeting will be processed at least for the duration of the meeting. This includes, in particular, chat/ instant messages and other information shared while using the service.

Other functions

For more information on the processing of your data when using “Zoom”, a detailed list of the data collected and processed by “Zoom”, and the “Zoom” privacy policy, please visit: https://zoom.us/dede/privacy.html.

Legal basis for data processing

If you participate in an online meeting as an external participant, your data will be processed on the basis of Art. 6 (1) p. 1 lit. b DSGVO, provided that your participation in the online meeting is necessary for the performance of a contract concluded with us. The same applies if the implementation of the online meeting is necessary for the implementation of pre-contractual measures that take place at your request.

If data processing in connection with the use of “Zoom” is not required for the fulfillment of a contract concluded with us or for the implementation of precontractual measures, it is carried out on the basis of Art. 6 (1) sentence 1 lit. f DSGVO. Our legitimate interest here is the maintenance of location-independent communication, the maintenance of business contacts and the provision of services owed.

If you also voluntarily provide personal information when using the tool or voluntarily use functions that are not mandatory, the associated data processing is based on your revocable consent pursuant to Art. 6 (1) sentence 1 lit. a DSGVO You can revoke your consent at any time with effect for the future. Please note that processing that took place before the revocation is not affected by this.

Sharing your data

As a matter of principle, we do not transfer your data to third parties. Data is only passed on if it is intended to be passed on, if you have expressly consented to the 3 transfer in advance, or if we are obliged or authorized to do so by law. Please note that content from “online meetings” as well as personal meetings is often used to communicate information with customers, interested parties or third parties and is therefore intended for disclosure.

When processing your data, Zoom Video Communications Inc. supports us as an external service provider and processor within the meaning of Art. 28 DSGVO As a processor, Zoom Video Communications Inc. processes your data strictly in accordance with instructions and on the basis of a separately concluded order processing agreement. . In this context, the data processing may also take place outside the EU or the EEA. . With regard to Zoom Video Communications Inc., an adequate level of data protection pursuant to Art. 46 (2) lit. c DSGVO can be assumed through the use of EU standard contractual clauses as well as other appropriate measures (establishment of end-to-end encryption). We will gladly provide the concluded EU standard contractual clauses upon request.

Deletion of your data

Your data is only stored in the system for the duration of the respective meeting. We do not record anything.

Your rights as a data subject

In accordance with Art. 15 of the GDPR, you have the right to obtain information from the controller about the personal data concerning you, as well as the right to have inaccurate data corrected in accordance with Art. 16 of the GDPR, or to have it deleted if one of the reasons listed in Art. 17 of the GDPR applies, e.g. if the data is no longer needed for the purposes pursued. You also have the right to restriction of processing if one of the conditions set out in Art. 18 DSGVO applies and, in cases covered by Art. 20 DSGVO, the right to data portability. In cases where we process your personal data on the legal basis of Art. 6 (1) p. 1 lit. f DSGVO, you also have the right to object at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of data relating to you violates data protection law. The right of complaint may in particular be asserted before a supervisory authority in the Member State of the data subject’s residence or the place of the alleged infringement.

Contact details of the data protection officer:

We are supported by our data protection officer in fulfilling our obligations under data protection law. The contact details of our data protection officer are:

datenschutz nord GmbH

Konsul-Smidt-Str. 88

28217 Bremen

E-Mail: office[at]datenschutz-nord.de

Web: www.datenschutz-nord-gruppe.de