Schloss für grüner Tür
Data Protection Information

Participation in Bitkom Akademie Seminars

Overview of the processing of personal data when attending seminars on site or online

Responsibility

Controller

Bitkom Servicegesellschaft mbH is responsible for processing your personal data in connection with your participation in a seminar: 

Bitkom Servicegesellschaft mbH
Albrechtstraße 10
10117 Berlin
E-Mail: info@bitkom-service.de

Contact details of the data protection officer

You can address questions about the processing of your data to the data protection officer at any time:  

datenschutz nord GmbH
Niederlassung Berlin
Kurfürstendamm 212
10719 Berlin
E-Mail: office@datenschutz-nord.de 

Purposes and legal basis of data processing

Seminar registration and implementation

When you register for a seminar, we process your data in order to prepare and conduct the seminar. The type and scope of data processing depends on the seminar you have booked. In principle, we process these categories of personal data in order to conduct a seminar: Name, e-mail address (private or business), telephone number (private or business), company, position, address (private or business), date of birth. Without this data, we will not be able to process your registration and conduct the seminar. We process your data for these purposes in particular:

  • Sending of the registration confirmation and the seminar documents
  • Creation of a name badge for face-to-face seminars
  • Hotel booking for face-to-face seminars
  • Invoicing for chargeable seminars
  • Forwarding of participant data (surname, first name and seminar attended) to the employer for invoicing purposes
  • Support before, during and after a seminar
  • Creation of the participation list
  • Forwarding the list of participants to the speaker for optimal seminar preparation  
  • Creation of a certificate of participation or a certificate of attendance

Further information on the type and scope of the processing of personal data when participating in a seminar can be found in the General Terms and Conditions of Participation.

The legal basis for the described data processing is Art. 6 para. 1 lit. b GDPR (contract fulfillment, seminar implementation) and Art. 6 para. 1 lit. f GDPR (protection of legitimate interests, based on our interest in preparing seminars in the best possible way). 

Online seminars

We use the online meeting software ‘Zoom’ as a virtual classroom to conduct online seminars (paid seminars, free live online seminars). ‘Zoom’ is a service provided by Zoom Video Communications, Inc., which is based in the USA. Online seminars can also be held using the online meeting software ‘Microsoft Teams’, a service provided by Microsoft Corporation, also based in the USA. The service of the respective online meeting software is made available to us as commissioned data processing (processing on our behalf). When participating in an online seminar, we process information about the user (name, email address, profile picture), communication content (text, audio and video data; for recordings, MP4 files of all video, audio and presentation recordings, M4A files of all audio recordings, text files of all online meeting chats) and meeting metadata (topic, description, device information, IP address). To enable video display and audio playback, data from your device's microphone and/or video camera is processed for the duration of an online meeting. You can deactivate or mute the camera and/or microphone at any time using the provider's online meeting software.

For more information on data processing, please refer to the privacy policies of Zoom: https://explore.zoom.us/de/privacy/ and Microsoft Teams: https://learn.microsoft.com/de-de/microsoftteams/teams-privacy.

The legal basis for the data processing described is Art. 6 para. 1 lit. b GDPR (contract fulfillment, seminar implementation) and Art. 6 para. 1 lit. f GDPR (protection of legitimate interests based on our interest in enabling and promoting cooperation between the participants of a seminar). Insofar as we record a live online seminar, this is done on the basis of Art. 6 para. 1 lit. a GDPR (consent). 

Seminar Management System

To book and manage our seminars, we will create a user account for you in our Seminar Management System (SMS). The SMS is provided to us by plus-IT GmbH, based in Murnau am Staffelsee, as commissioned data processing (processing on our behalf). You can use your user account to book seminars, manage and evaluate your booked seminars, access seminar materials and documents, view notes, participate in surveys, make and manage group registrations, and maintain your user profile. In doing so, we process your personal data (name, contact details, date of birth, address, company, position, seminars booked, uploaded documents, notes, information on group members) in order to enable you to use the SMS and to fulfil the contract for seminar participation.

The legal basis for the described data processing is Art. 6 para. 1 lit. b GDPR (fulfilment of contract, seminar implementation) and Art. 6 para 1 lit. f GDPR (protection of legitimate interests, based on our interest in preparing seminars in the best possible way). 

Evaluation

Via our SMS, we evaluate the seminar you attended. It is important for us to receive comments and suggestions for improvement from you in order to ensure the quality of our seminars and to continuously improve our seminars. Participation in a survey is voluntary. We always evaluate the data collected in a survey anonymously. Personal data is not analyzed unless this is part of the evaluation. We pass on the participants' feedback to the speaker of a seminar in anonymized form.

The legal basis for the data processing described is Art. 6 para. 1 lit. f GDPR (protection of legitimate interests based on our interest in ensuring the quality of our seminars and continuously improving our seminars). 

Surveys

After a seminar, we conduct surveys in order to obtain your opinion on a specific topic. We use the service “Dynamics 365 Customer Voice” of Microsoft Ireland Operations Limited, based in Dublin (Ireland), to conduct a survey. Alternatively, we also use the service “Slido” of sli.do s. r. o., based in Bratislava (Slovakia), or our SMS to conduct surveys. The services are made available to us as commissioned data processing (processing on our behalf). It is important for us to receive comments and suggestions from you on our seminars and other specifically named topics. Participation in a survey is voluntary. We generally evaluate the data collected in a survey in anonymized form. A personal evaluation does not take place unless the survey provides for this.

The legal basis for the data processing described is Art. 6 para. 1 lit. f GDPR (protection of legitimate interests based on our interest in ensuring the quality of our seminars and continuously improving our seminars). 

Information on further training courses

We use your e-mail address provided in connection with the registration for a seminar for direct advertising for our own similar offers (information on further training offers). You will receive this information on our further education offers regardless of whether you have subscribed to our newsletter. In this way, we want to send you information about seminars from our range that may be of interest to you based on the seminars you have previously attended with us. If you do not wish to receive our information on further training offers, you can object to the use of your e-mail address for this purpose at any time without incurring any costs other than the transmission costs according to the basic rates. An informal message to the above-mentioned contact details is sufficient. Alternatively, you can also use the unsubscribe link contained in every e-mail.

The legal basis for the data processing described is Art. 6 para. 1 lit. f GDPR (protection of legitimate interests based on our interest in providing advertising to existing customers) and Section 7 para. 3 UWG (processing of your email address for direct marketing purposes). 

Newsletter on events of the Bitkom Group

When registering for a seminar, you have the option of subscribing to the Bitkom Group newsletter. The newsletter provides information about current events, seminars, activities and services of the Bitkom Group (Bitkom e.V., Bitkom Servicegesellschaft mbH and DFA Digital für alle gGmbH). If you provide us with your name, we will use it to address you personally. After submitting the registration form, you will receive a confirmation e-mail. The registration only becomes effective once you have clicked on the link in the confirmation e-mail. You can unsubscribe from the newsletter at any time. To do so, simply use the unsubscribe link at the end of each email.

The legal basis for the data processing described is Art. 6 para. 1 lit. a GDPR (consent). 

Online exams

We use the evaexam service to conduct online examinations. The service is provided to us by evasys GmbH, based in Lüneburg, Germany, as commissioned data processing (processing on our behalf). When participating in a seminar in which evaexam is used, we process user details (name, exam participant ID, personalized TAN) and exam data (seminar details, exam results) in evaexam. Further information on data processing can be found in the evasys data protection information: https://evasys.de/datenschutz/

The legal basis for the data processing described is Art. 6 para. 1 lit. b GDPR (contract fulfillment, seminar implementation). 

Digital whiteboard

We use the services Miro and Conceptboard as a digital whiteboard to enable online collaboration between participants. The services are provided to us by RealtimeBoard, Inc., based in the USA, and by Conceptboard Cloud Service GmbH, based in Halle (Saale), as commissioned data processing (processing on our behalf). When participating in a seminar in which Miro or Conceptboard is used, we process in Miro or Conceptboard user details (user name chosen by the user, display name), user inputs (posts, uploaded documents) and metadata (device information, IP address). Further information on data processing can be found in Miro’s privacy policy at https://miro.com/legal/privacy-policy/ or Conceptboard’s privacy policy at https://conceptboard.com/de/privacy/

The legal basis for the data processing described is Art. 6 para. 1 lit. b GDPR (contract fulfillment, seminar implementation) and Art. 6 para. 1 lit. f GDPR (protection of legitimate interests, based on our interest in enabling and promoting cooperation between the participants of a seminar). 

Compensation for disadvantages

Persons with a disability can apply for assistance during examinations to compensate for disadvantages or additional expenses caused by their disability (compensation for disadvantages). Suitable evidence must be submitted in order to receive compensation for disadvantages (medical certificate or severely disabled person's pass and a statement from your doctor including a description of the necessary compensation for disadvantages for the upcoming examination). We process the data submitted in order to check your entitlement to compensation for disadvantages and to decide on your application.

The legal basis for the described data processing is Art. 6 para. 1 lit. b GDPR (performance of contract, seminar implementation) and Art. 9 para. 2 lit. b GDPR in conjunction with Section 22 para. 1 no. 1 lit. a BDSG (exercise of rights arising from social security and social protection law and compliance with the relevant obligations) and Section 209 SGB IX. 

Further information on the processing of your data  

Access to personal data

Within Bitkom Servicegesellschaft, access to your data is only granted to persons who need it to perform the tasks assigned to them. In addition, service providers or other persons who support us in the fulfillment of our tasks may have access to your data. These are service providers or persons in the following categories:

  • Hosting service provider for the operation of our servers
  • Payment service providers and banks for the processing of payments
  • Service provider for the provision of a video conferencing system
  • E-mail dispatch service provider for sending e-mails in connection with your seminar participation and for sending mailings
  • Service provider for the provision of tools for conducting surveys and obtaining real-time feedback
  • Service provider for the implementation of online exams
  • Service provider for the provision of collaboration tools (digital whiteboard)
  • Speakers in preparation for a seminar
  • Your employer for the purpose of invoicing

Service providers and speakers employed by us must meet special confidentiality requirements. They will only have access to your data to the extent and for the period of time required to fulfill their tasks. 

Data processing outside the European Union

To process your data, we use Zoom Video Communications, Inc. (USA), RealtimeBoard, Inc. (USA) and Microsoft Corporation (USA) as service providers located in third countries outside the European Union. Countries outside the European Union handle the protection of personal data differently than countries within the European Union. We have therefore taken special measures to ensure that your data is processed just as securely in third countries as it is within the European Union.  Microsoft Corporation and Zoom Video Communications, Inc. are certified under the EU-U.S. Data Privacy Framework. This ensures an appropriate level of data protection when data is processed at Microsoft and Zoom in the USA. 

Storage duration

We store your data until the purposes described in this data protection notice have been fulfilled, unless a longer retention period is required by law. As a rule, we delete your data after these periods or determine the period for deletion of your data according to these criteria:

  • We delete data on your seminar participation five years after the end of a seminar.
  • We delete tax-relevant data (e.g. invoice data) after ten years.
  • We will delete newsletter data after you withdraw your consent.
  • We delete survey data that we have collected to evaluate a seminar three years after the end of a seminar.
  • We delete survey data that we have collected when you participate in a survey three years after the end of the survey.
  • We delete data relating to online examinations three years after the end of a seminar.
  • We delete data in the digital whiteboard after the end of a seminar. 

Rights of the data subject

Information

You can request information about your personal data processed by us in accordance with Art. 15 GDPR.

Correction

If your data is not (or is no longer) correct, you can request the correction of your data in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

Deletion

In accordance with Art. 17 GDPR, you have the right to request the erasure of your data.

Restriction of processing

In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your data. 

Contradiction

In accordance with Art. 21 GDPR, you have the right to object to the processing of your data on grounds relating to your particular situation. In the event of a justified objection, we will no longer process your data.

Objection to the processing of your data for direct marketing purposes
You have the right to object at any time to the processing of your data for direct marketing purposes. This also applies to profiling in connection with direct advertising. You can address your objection to us informally, preferably using datenschutz@bitkom.org

Right of appeal

You are entitled to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.

Data portability

In accordance with Art. 20 GDPR, you have the right to receive personal data that you have provided to us in an electronic format.

Revocation of your consent

You have the right to withdraw any consent you have given us to process your data at any time. The easiest way to withdraw your consent is to send an e-mail to datenschutz@bitkom.org. The withdrawal of consent does not affect the lawfulness of the processing of your data up to the time of withdrawal.