Data Protection Statement

Purpose of the processing

We use the "Zoom" tool to conduct conference calls, online meetings, video conferences and/or webinars (hereinafter: "Online Meetings"). "Zoom" is a service provided by Zoom Video Communications, Inc. which is based in the USA.

Person responsible

The responsible party for data processing directly related to the implementation of "Online Meetings" is the Humboldt University of Berlin, represented by the President, Prof. Dr.-Ing. Dr. Sabine Kunst, Unter den Linden 6, 10099 Berlin.

Note: As you call up the Internet site of "Zoom", the provider of "Zoom" is responsible for data processing. However, calling the Internet site is only necessary to use "Zoom" in order to download the software for using "Zoom".

You can use "Zoom" if you enter the respective meeting ID and, if applicable, further access data for the meeting directly in the "Zoom" app.

If you do not want to or cannot use the "Zoom" app, then the basic functions can also be used via a browser version, which you can also find on the "Zoom" website.

What data is processed?

Various types of data are processed when you use "Zoom". In this context, the scope of the data also depends on what data you provide before or when participating in an "online meeting".

The following personal data are subject to processing:

User details: first name, last name, telephone (optional), e-mail address, profile picture (optional), department (optional). Meeting metadata: Topic, description (optional), attendee IP addresses, device/hardware information.

If recording (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of online meeting chat.

For dial-in with the telephone: information on the incoming and outgoing call number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be stored.

Text, audio and video data: You may have the opportunity to use the chat, question or survey functions in an "online meeting". To this extent, the text entries you make are processed in order to display them in the "online meeting" and, if necessary, to log them. In order to enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device will be processed accordingly for the duration of the meeting. You can turn off or mute the camera or microphone yourself at any time via the "Zoom" applications.

To participate in an "online meeting" or to enter the "meeting room", you must at least provide information about your name.

Scope of processing

We use "Zoom" to conduct "online meetings". If we want to record "online meetings", we will transparently inform you in advance and - if necessary - ask for consent. The fact of the recording will also be displayed to you in the "Zoom" app. If it is necessary for the purposes of logging the results of an online meeting, we will log the chat content. However, this will generally not be the case. In the case of webinars, we may also process questions asked by webinar participants for purposes of recording and following up on webinars. If you are registered as a user with "Zoom", then reports of "online meetings" (meeting metadata, telephone dial-in data, questions and answers in webinars, survey function in webinars) may be stored by "Zoom" for up to one month. The possibility of software-based "attention monitoring" ("attention tracking") that exists in "online meeting" tools such as "Zoom" is deactivated. Automated decision-making within the meaning of Art. 22 DSGVO is not used.

Legal basis of data processing

As far as personal data of employees of the Humboldt-Universität zu Berlin are processed, § 26 BDSG is the legal basis for data processing. As far as personal data of students of Humboldt-Universität zu Berlin are processed, § 6 Abs. 1 Abs. 1 Satz BerlHG iVm § 1 Studierendendatenverordnung, as well as §§ 2, 10, 31 BerlHG iVm §§ 82a, 96-96d, 107a ZSP-HU are the legal basis of data processing.

If personal data is processed on the basis of consent, Art. 6 I lit. a DSGVO serves as the legal basis for processing operations.

If, in connection with the use of "Zoom", personal data is not required for the establishment, implementation or termination of the employment relationship, but is nevertheless an elementary component in the use of "Zoom", Art. 6 (1) (f) DSGVO is the legal basis for data processing. In these cases, our interest is in the effective implementation of "online meetings".

For the rest, the legal basis for data processing when conducting "online meetings" is Art. 6 (1) lit. b) DSGVO, insofar as the meetings are conducted in the context of contractual relationships. If there is no contractual relationship, the legal basis is Art. 6 para. 1 lit. e) DSGVO in conjunction with § 4 BerlHG for the performance of the university's tasks. Here, too, our interest is in the effective conduct of "online meetings".

Recipients / passing on of data

Personal data processed in connection with participation in "online meetings" is generally not passed on to third parties unless it is specifically intended to be passed on. Please note that the content of "online meetings", as well as personal meetings, is often used to communicate information with customers, interested parties or third parties and is therefore intended to be passed on.

Other recipients: The provider of "Zoom" necessarily receives knowledge of the above-mentioned data, insofar as this is provided for in the context of our order processing agreement with "Zoom". Data processing outside the European Union

"Zoom" is a service provided by a provider from the USA. Processing of personal data thus also takes place in a third country. We have concluded an order processing agreement with the provider of "Zoom" that meets the requirements of Art. 28 DSGVO. An adequate level of data protection is guaranteed on the one hand by the "Privacy Shield" certification of Zoom Video Communications, Inc. and on the other hand by the conclusion of the so-called EU standard contractual clauses.

Data protection officer

You can reach our data protection officers as follows: Tel: +49 (30) 2093-20020, e-mail: datenschutz@uv.hu-berlin.de, www.hu-berlin.de/de/datenschutz

Your rights as a data subject

You have the right to obtain information about the personal data concerning you. You can contact us for information at any time.

Deletion of data

As a matter of principle, we delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed in order to fulfill contractual services, to check and grant or ward off warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion will only be considered after expiry of the respective retention obligation. Right of complaint to a supervisory authority

You have the right to complain about the processing of personal data by us to a supervisory authority for data protection.

Changes to this data protection notice

We revise this data protection notice in the event of changes to data processing or other occasions that make this necessary. You will always find the current version on this website.