Data protection information

We would like to inform you below about the processing of personal data in connection with the use of „Microsoft Teams“.
 

Purpose of the processing

We use the "Microsoft Teams" tool to conduct conference calls, online meetings, video conferences and/or webinars (hereinafter referred to as "online meetings"). "Microsoft Teams" is a service of the Microsoft Corporation.

Controller

The controller for data processing that is directly related to the conduct of "online meetings" is

Keller GmbH, Carl-Keller-Str. 2-10, 49479 Ibbenbüren, Germany
Phone  +49 5451 850,  e-Mail: info@keller.de

Note: If you access the "Microsoft Teams" website, the provider of "Microsoft Teams" is responsible for data processing. However, accessing the website is only necessary for the use of "Microsoft Teams" in order to download the software for the use of "Microsoft Teams".

If you do not want to or cannot use the "Microsoft Teams" app, you can also use "Microsoft Teams" via your browser. The service will then also be provided via the "Microsoft Teams" website.

What data are processed?

Various types of data are processed when using "Microsoft Teams". The scope of the data also depends on which data you provide before or when participating in an "online meeting".

The following personal data are subject to processing:

User details: e.g. display name, e-mail address if applicable, profile picture (optional), preferred language
Meeting metadata: e.g. date, time, meeting ID, telephone numbers, location
Text, audio and video data: You may have the option of using the chat function in an "online meeting". In this respect, the text entries you make are processed in order to display them in the "online meeting". In order to enable the display of video and the playback of audio, the data from the microphone of your end device and from any video camera of the end device are processed accordingly for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time via the "Microsoft Teams" applications.

Scope of processing

We use "Microsoft Teams" to conduct "online meetings". If we want to record "online meetings", we will inform you transparently in advance and, if necessary, ask for your consent.

If it is necessary for the purposes of logging the results of an online meeting, we will log the chat content. However, this will not usually be the case.

Automated decision-making within the meaning of  Art. 22 GDPR is not used.

Legal basis for data processing

The legal basis for data processing when conducting "online meetings" is Art. 6 para. 1 lit. b) GDPR, insofar as the meetings are conducted within the framework of contractual relationships.

If, in connection with the use of "Microsoft Teams", personal data is not required for contractual relationships, but is nevertheless an elementary component of the use of "Microsoft Teams", Art. 6 para. 1 lit. f) GDPR is the legal basis for data processing. In these cases, we are interested in the effective implementation of "online meetings".

Even if there is no contractual relationship, the legal basis is Art. 6 para. 1 lit. f) GDPR. Here, too, we are interested in the effective implementation of "online meetings".

Recipients / transfer of data

Personal data that is processed in connection with participation in "online meetings" will not be passed on to third parties unless it is intended to be passed on. Please note that content from "online meetings" as well as face-to-face meetings is often used to communicate information with customers, interested parties or third parties and is therefore intended to be passed on.

Other recipients: The provider of "Microsoft Teams" necessarily receives knowledge of the above-mentioned data, insofar as this is provided for in the framework of our order processing contract with "Microsoft Teams".

Data processing outside the European Union

Data processing outside the European Union (EU) does not take place, as we have limited our storage location to data centers in the European Union. However, we cannot rule out the possibility that data is routed via internet servers located outside the EU. This may be the case in particular if participants in an "online meeting" are in a third country.

However, the data are encrypted during transport via the Internet and thus protected against unauthorized access by third parties.

Deletion of data

We generally delete personal data when there is no requirement for further storage. A requirement may especially exist if the data are still needed to fulfil contractual services, to check and grant or defend against warranty and guarantee claims. In the case of statutory retention obligations, deletion will only be considered after the expiry of the respective retention obligation.

Data protection officer (DPO)

We have appointed a data protection officer.

You can reach the DPO as follows:
SK-Consulting Group GmbH
Osterweg 2; 32549 Bad Oeynhausen, Germany
e-Mail: datenschutz@sk-consulting.com

Note on your rights

As a person affected of a data processing, you have the following rights under the Basic Data Protection Regulation (hereinafter also referred to as “rights of the persons affected”):

You have the right to request information as to whether or not we process your personal data. If we process your personal data, you have the right to request information about these personal data.

You have the right to ask us to correct your data if they are incorrect and/or incomplete. This right also includes the right to be completed by supplementary declarations or communications.

You have the right to demand the deletion of your personal data from us.

You have the right to restrict the processing of your personal data.

You have the right to request the data you have provided to us in a commonly used electronic format (e.g. as a PDF or Excel document).

If your data are processed for the purpose of performing public interest or legitimate interests, you may object to such processing. You must explain the reasons resulting from your particular situation for your objection.

Decisions made by us which have a legal consequence for you or which significantly affect you must not be based exclusively on automated processing of personal data. This also includes profiling. This prohibition does not apply as far as the automated decision

• for the conclusion or performance of a contract with you is required,
• is authorized by legal provisions, if these legal provisions contain appropriate measures to protect your rights and freedoms and your legitimate interests, or
• is made with your explicit approval.

You have the right to complain to a data protection supervisory authority about our processing of personal data.

Status: 01.08.2024