We would like to inform you below about the processing of personal data in connection with the use of "Microsoft Teams."
PURPOSE OF PROCESSING
We use the tool "Microsoft Teams" to conduct conference calls, online meetings, and video conferences (hereinafter: "Online Meetings"). "Microsoft Teams" is a service provided by Microsoft Corporation.
CONTROLLER
The controller for data processing directly related to the conduct of "Online Meetings" is:
PEMA Vollkorn-Spezialitäten GmbH & Co. KG
Goethestraße 23
95163 Bad Weißenstadt
Germany
Note: Insofar as you visit the "Microsoft Teams" website, the provider of "Microsoft Teams" is responsible for that data processing. However, visiting the website is only necessary for downloading the software required to use "Microsoft Teams."
If you do not want to or cannot use the "Microsoft Teams" app, you may also use "Microsoft Teams" through your browser. In that case, the service is provided via the "Microsoft Teams" website.
WHAT DATA IS PROCESSED?
Various types of data are processed when using "Microsoft Teams." The scope of the data also depends on the information you provide before or during participation in an "Online Meeting."
THE FOLLOWING PERSONAL DATA IS SUBJECT TO PROCESSING:
User information:
Meeting metadata: e.g., date, time, meeting ID, phone numbers, location
Text, audio, and video data: You may have the option to use the chat function during an "Online Meeting."
In this respect, the text entries you make are processed in order to display them within the "Online Meeting." To enable the display of video and playback of audio, data from your device's microphone and, where applicable, from any camera on the device, is processed for the duration of the meeting. You can turn off or mute the camera or microphone yourself at any time via the "Microsoft Teams" app.
SCOPE OF PROCESSING
We use "Microsoft Teams" to conduct "Online Meetings." If we intend to record an "Online Meeting," we will inform you transparently in advance and — where required — ask for your consent.
Chat content is logged when using Microsoft Teams. We store chat content for a period of one month. If it is necessary for the purpose of documenting the results of an online meeting, we will log the chat content. However, this will generally not be the case.
No automated decision-making within the meaning of Art. 22 GDPR is used.
LEGAL BASIS FOR DATA PROCESSING
Insofar as personal data of employees of PEMA Vollkorn-Spezialitäten GmbH & Co. KG is processed, § 26 BDSG (German Federal Data Protection Act) is the legal basis for the data processing. Should personal data processed in connection with the use of "Microsoft Teams" not be required for establishing, carrying out, or terminating the employment relationship, but nevertheless be an essential component of using "Microsoft Teams," Art. 6 (1)(f) GDPR is the legal basis for the data processing. In such cases, our interest lies in the effective conduct of "Online Meetings."
Furthermore, the legal basis for data processing in the conduct of "Online Meetings" is Art. 6 (1)(b) GDPR, insofar as the meetings are conducted within the framework of contractual relationships.
Should no contractual relationship exist, the legal basis is Art. 6 (1)(f) GDPR. Here too, our interest lies in the effective conduct of "Online Meetings."
RECIPIENTS / DISCLOSURE OF DATA
Personal data processed in connection with participation in "Online Meetings" is generally not disclosed to third parties, unless it is specifically intended for disclosure. Please note that, as with in-person meetings, the content of "Online Meetings" often specifically serves to communicate information to customers, prospective customers, or third parties, and is therefore intended for disclosure.
Further recipients: The provider of "Microsoft Teams" necessarily gains knowledge of the aforementioned data, insofar as this is provided for under our data processing agreement with "Microsoft Teams."
DATA PROCESSING OUTSIDE THE EUROPEAN UNION
As a general rule, no data processing takes place outside the European Union (EU), as we have limited our storage location to data centers within the European Union. However, we cannot rule out that data routing may take place via internet servers located outside the EU. This may in particular be the case if participants in an "Online Meeting" are located in a third country.
However, the data is encrypted during transmission over the internet and is therefore protected against unauthorized access by third parties.
DATA PROTECTION OFFICER
ITs Hein GmbH
Kulmbacher Straße 27b
95460 Bad Berneck
We expressly point out that when using this email address, the content is not exclusively received by our data protection officer alone. If you wish to exchange confidential information, we therefore ask you to first contact us via this email address to arrange direct contact with the data protection officer.
YOUR RIGHTS AS A DATA SUBJECT
You have the right to information about the personal data concerning you. You may contact us at any time to request such information.
In the case of a request for information that is not made in writing, we ask for your understanding that we may require proof from you confirming that you are the person you claim to be.
You further have the right to rectification, erasure, or restriction of processing, insofar as you are legally entitled to this.
Finally, you have the right to object to processing within the scope of statutory provisions.
You also have a right to data portability within the framework of data protection requirements.
DELETION OF DATA
We generally delete personal data when there is no longer a need for further storage. Such a need may exist, in particular, where the data is still required to fulfill contractual obligations, or to assess and assert or defend against warranty and, where applicable, guarantee claims. In the case of statutory retention obligations, deletion is only considered after expiry of the respective retention period.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of personal data.
CHANGES TO THIS PRIVACY NOTICE
We revise this privacy notice in the event of changes to data processing or for other reasons that make this necessary. You will always find the current version on this website.