Privacy notice according to Art. 13 GDPR for participation in videoconferences with the WebEx application - Stiftung Preußischer Kulturbesitz

The recording of a video conference and the subsequent use of the recording are only permitted with the express consent of all participants. Secret recording is punishable as a violation of the confidentiality of the word according to Section 201 of the German Criminal Code (StGB) and is also subject to disciplinary measures for employees of the Stiftung Preußischer Kulturbesitz (Prussian Cultural Heritage Foundation).

Stiftung Preußischer Kulturbesitz (SPK)
Von-der-Heydt-Straße 16-18
10785 Berlin
Germany
Phone: +49 (0)30 266 412889
E-Mail: info@hv.spk-berlin.de
Website: www.preussischer-kulturbesitz.de

Data protection officer
Stiftung Preußischer Kulturbesitz
Von-der-Heydt-Straße 16-18
10785 Berlin
Germany
Phone: +49 (0)30 266 411414
E-Mail: Datenschutzbeauftragte@hv.spk-berlin.de

The video conference and the data processing serve the following purposes:

• the performance of employment contracts for internal and external employees of the SPK or the performance of service contracts or contracts for work and services for other agents. The legal basis for this is Art. 6 para. 1 lit. b GDPR.
• the implementation of pre-contractual measures, Art. 6 para.1 lit. b GDPR, i.e. to take steps at your request prior to entering into a contract, for example during the application process.
• the performance of public presentations by the various institutions of the SPK. The legal basis is then Art. 6 para. 1 lit. e GDPR in conjunction with § 3 para.1 StiftG.
• If, exceptionally, recordings of the video conference are made, this will only be done with your expressed consent. The legal basis is then Art. 6 para. 1 lit. a GDPR

To participate in an online meeting or enter the meeting-room you must at least provide your name. This may also be an alias.

During the use, the WebEx application processes the following personal data:

First name, last name, e-mail address,
Profile picture (optional)
Meeting Metadata:
Topic, description, attendee IP addresses, device/hardware information, e.g. browser
For recordings (optional):
MP4 file of all video, audio and presentation recordings,
M4A file of all audio recordings.
When dialing in via phone: incoming and outgoing phone number information, country name, start time and real time.

If necessary, further connection data such as the IP address of the device can be stored.

For further information on the processing of cookies, please refer to https://www.cisco.com/c/en/us/about/legal/privacy-full.html

The personal data will be deleted as soon as the purposes for which they were collected or otherwise processed are no longer necessary.

The recipients of the personal data are other participants in the video conference.

SPK conducts the videoconference by using Cisco Webex. Cisco Webex is a provider of video conferencing, IP telephony, instant messaging, file transfer and screen sharing.

All business-to-business collaboration products and services provided by Webex are part of the Cisco Collaboration Portfolio and are provided collectively by Cisco Systems as Software as a Service (SaaS).

The Cisco online privacy statement is available https://www.cisco.com/c/de_de/about/legal/privacy-full.html and here https://trustportal.cisco.com.

You can find all data security precautions and verified certifications on Cisco Webex at https://trustportal.cisco.com

This may result in data transfer to third countries. The video content is transmitted encrypted, so that access by the service provider is excluded. Your data will only be passed on in compliance with confidentiality and only if there is a legal basis for doing so.

You have a right of access to your personal data, a right to rectification, erasure or restriction of processing, a right to object to processing and a right to data portability.

In addition, you have the right to lodge a complaint with a data protection supervisory authority if you consider our processing of your personal data infringes the GDPR (Art. 77 GDPR). The Federal Commissioner for Data Protection and Freedom of Information (BfDI) is responsible for the Prussian Cultural Heritage Foundation.