Privacy Policy
1. Name and address of the Controller
HWR Berlin
Badenstrasse 52
10825 Berlin
Represented by Andreas Zaby
praesident@hwr-berlin.de
2. Name and address of the official data protection officer
HiSolutions AG
Vitali Dick (data protection officer)
Badensche Str. 52
10825 Berlin
datenschutz@hwr-berlin.de
3. Data processing in the procedure “Recording of web conferences with MSTeams”
3.1. Purposes of processing
Personal data is processed for the following purposes:
- Recording of web conferences in online format using the Microsoft Teams web conference system
- The recording should enable the participants of the web conference to look at the web conference again afterwards, provided this is didactically important.
3.2. Microsoft Teams
We use Microsoft Teams for recording. Additional information on data protection in matters of teams can be found under the following link Data protection declaration MS 365 [1] .
3.3. Legal basis for processing
The legal basis for the processing is the consent of the participant, whose personal data is contained in the recording, to data processing in accordance with Article 6 (1) (a) GDPR. There is neither a contractual nor a legal obligation to provide the data. Consent is voluntary. It is deemed to have been granted to the participant if he takes part in the web conference. The lawfulness of the processing remains unaffected until the consent is revoked.
3.4. Types and Categories of Personal Data
We process the following categories and types of user data for the purposes stated in 3.1:
| Data category | Data types | Categories of data subjects | Required for |
| Records in the form of files | Video, audio and text data | Users of teams, employees, lecturers, lecturers, students, external users | The provision of the recording to the participant and use outside of the live session |
| Base data | Surname, first name, email address if applicable |
3.5. Deletion periods
We delete the personal data after the following periods:
| Data category | deletion period |
| Records, master data | a) As soon as the consent is revoked or
b) there is a blocking 12 months after the creation of the recording for saved recordings by means of an automatic script or c) after 180 days (students) or 60-90 days (employees, teachers) after leaving the HWR Berlin |
In addition, the data may be deleted as soon as the user exercises his right to delete the data in accordance with Art. 13 (2) b GDPR.
3.6. Recipients of the personal data and transfer of the data to a third country or an international organization
Within the university (internal recipients), the recordings can be processed by the respective recording initiator and other authorized persons. In addition, the IT department (administrators) has maintenance access to the records for maintenance and troubleshooting.
3.7. Profiling or Automated Decisions
HWR Berlin does not carry out any profiling or automated decisions.
4. General information on data processing
4.1. Scope of processing of personal data
In principle, we only process the personal data of our users to the extent that this is necessary.
4.2. Rights of the data subject
The person affected by the processing has rights in accordance with Art. 13 – 23 GDPR, which can be asserted against the HWR Berlin. An overview of the most important rights is listed below:
- Right to revoke consent according to Art. 7 (2) GDPR
- Right to information about data stored by the person responsible (HWR Berlin) according to Art. 15 DSGVO
- Right to correction of data stored by the person responsible (HWR Berlin) according to Art. 16 DSGVO
- Right to erasure of data stored by the person responsible (HWR Berlin) in accordance with Art. 17 GDPR
- Right to restriction of processing of data stored by the person responsible (HWR Berlin) in accordance with Article 18 GDPR
- Notification obligation in connection with the correction or deletion of personal data or the restriction of processing according to Art. 19 DSGVO
- Right to data portability according to Art. 20 GDPR
- Right to object to data processing if processing is required under Art. 6 (1) e GDPR to perform a task that is in the public interest or in the exercise of official authority or processing under Art. 6 (1) f GDPR is necessary to protect the legitimate interests of the person responsible or a third party according to Art. 21 DSGVO.
- Right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
- Right to notification according to Art. 34 GDPR of the person affected by a breach of the protection of personal data.
4.3. exercise of rights
If you would like to make use of your above rights, please contact the above-mentioned data protection officer or submit the request usingthe link [2] .
4.4. right of appeal
Those affected also have the right to complain to a supervisory authority about the HWR Berlin. The competent supervisory authority in the state of Berlin is
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
10969 Berlin
mailbox@datenschutz-berlin.de
4.5. data security
In order to protect the security of your data appropriately and comprehensively during processing and in particular during transmission, we use appropriate technical and organizational measures to ensure the security of your personal data, where necessary and based on the current state of the art. This includes in particular the restriction of access to the recording by logging in via the HWR account. The communication of the web browser and client with the Microsoft server is encrypted via https.
5. Status, changes and validity of the general data protection declaration
This general data protection declaration is dated 08/2022. We reserve the right to regularly update this data protection declaration in order to take current legal requirements and technical changes into account and to implement our services and offers in compliance with data protection regulations. We will inform you in the event of significant changes to the legal framework. If there are changes that require renewed consent, we will send you an adapted consent and data protection declaration.
[1] https://datenschutz.hwr-berlin.de/datenschutzerklaerungen/
[2] https://dsgvo2.ds-manager.net/jd8g73mg9/frage_meldung.html?key=5oZEoda8bochZmO9