Responsibility
Bitkom Servicegesellschaft mbH is responsible for processing your personal data in connection with your participation in a seminar:
Bitkom Servicegesellschaft mbH
Albrechtstraße 10
10117 Berlin
E-Mail: info@bitkom-service.de
You can address questions about the processing of your data to the data protection officer at any time:
datenschutz nord GmbH
Niederlassung Berlin
Kurfürstendamm 212
10719 Berlin
E-Mail: office@datenschutz-nord.de
Purposes and legal basis of data processing
When you register for a seminar, we process your data in order to prepare and conduct the seminar. The type and scope of data processing depends on the seminar you have booked. In principle, we process these categories of personal data in order to conduct a seminar: Name, e-mail address (private or business), telephone number (private or business), company, position, address (private or business), date of birth. Without this data, we will not be able to process your registration and conduct the seminar. We process your data for these purposes in particular:
Further information on the type and scope of the processing of personal data when participating in a seminar can be found in the General Terms and Conditions of Participation.
The legal basis for the described data processing is Art. 6 para. 1 lit. b GDPR (contract fulfillment, seminar implementation) and Art. 6 para. 1 lit. f GDPR (protection of legitimate interests, based on our interest in preparing seminars in the best possible way).
We use the online meeting software ‘Zoom’ as a virtual classroom to conduct online seminars (paid seminars, free live online seminars). ‘Zoom’ is a service provided by Zoom Video Communications, Inc., which is based in the USA. Online seminars can also be held using the online meeting software ‘Microsoft Teams’, a service provided by Microsoft Corporation, also based in the USA. The service of the respective online meeting software is made available to us as commissioned data processing (processing on our behalf). When participating in an online seminar, we process information about the user (name, email address, profile picture), communication content (text, audio and video data; for recordings, MP4 files of all video, audio and presentation recordings, M4A files of all audio recordings, text files of all online meeting chats) and meeting metadata (topic, description, device information, IP address). To enable video display and audio playback, data from your device's microphone and/or video camera is processed for the duration of an online meeting. You can deactivate or mute the camera and/or microphone at any time using the provider's online meeting software.
For more information on data processing, please refer to the privacy policies of Zoom: https://explore.zoom.us/de/privacy/ and Microsoft Teams: https://learn.microsoft.com/de-de/microsoftteams/teams-privacy.
The legal basis for the data processing described is Art. 6 para. 1 lit. b GDPR (contract fulfillment, seminar implementation) and Art. 6 para. 1 lit. f GDPR (protection of legitimate interests based on our interest in enabling and promoting cooperation between the participants of a seminar). Insofar as we record a live online seminar, this is done on the basis of Art. 6 para. 1 lit. a GDPR (consent).
To book and manage our seminars, we will create a user account for you in our Seminar Management System (SMS). The SMS is provided to us by plus-IT GmbH, based in Murnau am Staffelsee, as commissioned data processing (processing on our behalf). You can use your user account to book seminars, manage and evaluate your booked seminars, access seminar materials and documents, view notes, participate in surveys, make and manage group registrations, and maintain your user profile. In doing so, we process your personal data (name, contact details, date of birth, address, company, position, seminars booked, uploaded documents, notes, information on group members) in order to enable you to use the SMS and to fulfil the contract for seminar participation.
The legal basis for the described data processing is Art. 6 para. 1 lit. b GDPR (fulfilment of contract, seminar implementation) and Art. 6 para 1 lit. f GDPR (protection of legitimate interests, based on our interest in preparing seminars in the best possible way).
Via our SMS, we evaluate the seminar you attended. It is important for us to receive comments and suggestions for improvement from you in order to ensure the quality of our seminars and to continuously improve our seminars. Participation in a survey is voluntary. We always evaluate the data collected in a survey anonymously. Personal data is not analyzed unless this is part of the evaluation. We pass on the participants' feedback to the speaker of a seminar in anonymized form.
The legal basis for the data processing described is Art. 6 para. 1 lit. f GDPR (protection of legitimate interests based on our interest in ensuring the quality of our seminars and continuously improving our seminars).
After a seminar, we conduct surveys in order to obtain your opinion on a specific topic. We use the service “Dynamics 365 Customer Voice” of Microsoft Ireland Operations Limited, based in Dublin (Ireland), to conduct a survey. Alternatively, we also use the service “Slido” of sli.do s. r. o., based in Bratislava (Slovakia), or our SMS to conduct surveys. The services are made available to us as commissioned data processing (processing on our behalf). It is important for us to receive comments and suggestions from you on our seminars and other specifically named topics. Participation in a survey is voluntary. We generally evaluate the data collected in a survey in anonymized form. A personal evaluation does not take place unless the survey provides for this.
The legal basis for the data processing described is Art. 6 para. 1 lit. f GDPR (protection of legitimate interests based on our interest in ensuring the quality of our seminars and continuously improving our seminars).
We use your e-mail address provided in connection with the registration for a seminar for direct advertising for our own similar offers (information on further training offers). You will receive this information on our further education offers regardless of whether you have subscribed to our newsletter. In this way, we want to send you information about seminars from our range that may be of interest to you based on the seminars you have previously attended with us. If you do not wish to receive our information on further training offers, you can object to the use of your e-mail address for this purpose at any time without incurring any costs other than the transmission costs according to the basic rates. An informal message to the above-mentioned contact details is sufficient. Alternatively, you can also use the unsubscribe link contained in every e-mail.
The legal basis for the data processing described is Art. 6 para. 1 lit. f GDPR (protection of legitimate interests based on our interest in providing advertising to existing customers) and Section 7 para. 3 UWG (processing of your email address for direct marketing purposes).
We use the evaexam service to conduct online examinations. The service is provided to us by evasys GmbH, based in Lüneburg, Germany, as commissioned data processing (processing on our behalf). When participating in a seminar in which evaexam is used, we process user details (name, exam participant ID, personalized TAN) and exam data (seminar details, exam results) in evaexam. Further information on data processing can be found in the evasys data protection information: https://evasys.de/datenschutz/.
The legal basis for the data processing described is Art. 6 para. 1 lit. b GDPR (contract fulfillment, seminar implementation).
We use the services Miro and Conceptboard as a digital whiteboard to enable online collaboration between participants. The services are provided to us by RealtimeBoard, Inc., based in the USA, and by Conceptboard Cloud Service GmbH, based in Halle (Saale), as commissioned data processing (processing on our behalf). When participating in a seminar in which Miro or Conceptboard is used, we process in Miro or Conceptboard user details (user name chosen by the user, display name), user inputs (posts, uploaded documents) and metadata (device information, IP address). Further information on data processing can be found in Miro’s privacy policy at https://miro.com/legal/privacy-policy/ or Conceptboard’s privacy policy at https://conceptboard.com/de/privacy/.
The legal basis for the data processing described is Art. 6 para. 1 lit. b GDPR (contract fulfillment, seminar implementation) and Art. 6 para. 1 lit. f GDPR (protection of legitimate interests, based on our interest in enabling and promoting cooperation between the participants of a seminar).
Persons with a disability can apply for assistance during examinations to compensate for disadvantages or additional expenses caused by their disability (compensation for disadvantages). Suitable evidence must be submitted in order to receive compensation for disadvantages (medical certificate or severely disabled person's pass and a statement from your doctor including a description of the necessary compensation for disadvantages for the upcoming examination). We process the data submitted in order to check your entitlement to compensation for disadvantages and to decide on your application.
The legal basis for the described data processing is Art. 6 para. 1 lit. b GDPR (performance of contract, seminar implementation) and Art. 9 para. 2 lit. b GDPR in conjunction with Section 22 para. 1 no. 1 lit. a BDSG (exercise of rights arising from social security and social protection law and compliance with the relevant obligations) and Section 209 SGB IX.
Further information on the processing of your data
Within Bitkom Servicegesellschaft, access to your data is only granted to persons who need it to perform the tasks assigned to them. In addition, service providers or other persons who support us in the fulfillment of our tasks may have access to your data. These are service providers or persons in the following categories:
Service providers and speakers employed by us must meet special confidentiality requirements. They will only have access to your data to the extent and for the period of time required to fulfill their tasks.
To process your data, we use Zoom Video Communications, Inc. (USA), RealtimeBoard, Inc. (USA) and Microsoft Corporation (USA) as service providers located in third countries outside the European Union. Countries outside the European Union handle the protection of personal data differently than countries within the European Union. We have therefore taken special measures to ensure that your data is processed just as securely in third countries as it is within the European Union. Microsoft Corporation and Zoom Video Communications, Inc. are certified under the EU-U.S. Data Privacy Framework. This ensures an appropriate level of data protection when data is processed at Microsoft and Zoom in the USA.
We store your data until the purposes described in this data protection notice have been fulfilled, unless a longer retention period is required by law. As a rule, we delete your data after these periods or determine the period for deletion of your data according to these criteria:
Rights of the data subject
You can request information about your personal data processed by us in accordance with Art. 15 GDPR.
If your data is not (or is no longer) correct, you can request the correction of your data in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
In accordance with Art. 17 GDPR, you have the right to request the erasure of your data.
In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your data.
In accordance with Art. 21 GDPR, you have the right to object to the processing of your data on grounds relating to your particular situation. In the event of a justified objection, we will no longer process your data.
Objection to the processing of your data for direct marketing purposes
You have the right to object at any time to the processing of your data for direct marketing purposes. This also applies to profiling in connection with direct advertising. You can address your objection to us informally, preferably using datenschutz@bitkom.org.
You are entitled to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.
In accordance with Art. 20 GDPR, you have the right to receive personal data that you have provided to us in an electronic format.
You have the right to withdraw any consent you have given us to process your data at any time. The easiest way to withdraw your consent is to send an e-mail to datenschutz@bitkom.org. The withdrawal of consent does not affect the lawfulness of the processing of your data up to the time of withdrawal.