Online meetings
We use the following applications to hold online and telephone conferences (hereinafter referred to as online meetings):
Webex from the provider Cisco
Cisco Systems, Inc, 170 West Tasman Dr, San Jose, CA 95134, USA.
Microsoft Teams from the provider Microsoft Inc.
Microsoft Ireland Operations Limited, South Country Business Park, Leopardstown, Dublin 18, Ireland
The following data may be processed as part of participation in an online meeting:
- Participant data (first name, surname, telephone number, email address),
- Metadata (topic of the online meeting, IP address, technical data of your device, operating system and browser type used)
- Chat data (text data for display and, if applicable, logging),
- Audio (recording data of the microphone), video (recording data of the video conference),
- in the case of recording (video, audio and screen sharing),
- Telephone usage (telephone number, country name, start and end time, IP address if applicable).
During the meeting, your participant data is generally visible to the other participants. You can adjust and prevent the transmission of your audio and video recordings using the settings available at any time during the meeting.
The data is processed on the basis of Art. 6 para. 1 lit. e GDPR i.V.m. § SECTION 3 BDSG. If the online meetings are held as part of an existing contractual relationship with you, the processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
There is an order processing agreement with both Cisco and Microsoft in accordance with Art. 28 GDPR. As part of the order processing, Cisco and Microsoft may obtain knowledge of the above-mentioned data in order to process it. We cannot rule out and have no influence on the processing of data in the USA.
Cisco: Insofar as data is transferred to Cisco in the USA, this is based on Art. 46 para. 2 lit. b GDPR. Cisco complies with binding internal data protection regulations that have been approved by the European supervisory authorities and also include technical precautions to protect data from unauthorised access. In this way, Cisco guarantees an appropriate level of data protection.
Microsoft Teams: If personal data is transferred to the USA, Microsoft is certified for the transfer from the EU to the USA. In accordance with the EU-U.S. Privacy Framework, data transfers can be based on the European Commission's adequacy decision of July 2023.
The conclusion of corresponding standard contractual clauses with Microsoft legitimises such data transfers to third countries. In addition, the data transfer is encrypted and is therefore protected against possible access by unauthorised third parties.
How the providers Cisco and Microsoft handle your data and to what extent Cisco and Microsoft also process your data independently can be found in the respective information provided by the providers. You will find the links below:
Cisco:
- Data protection information sheet
- Cisco data protection declaration
- Cisco privacy policy
Microsoft Teams:
- Privacy Policy
- Data protection information on Microsoft Teams
- Technical measures
Webinars
Our webinars give you the opportunity to find out about current developments on the global markets. We therefore offer free webinar series on various topics. We use the GotoWebinar platform of the provider LogMeIn (LogMeIn Ireland Limited, Bloodstone Building Block C, 70 Sir John Rogerson's Quay Dublin 2, in Ireland) to organise our webinars.
The following data is processed for the purpose of organising webinars
Participant data (first name, surname, telephone number, email address),
Metadata (IP address, technical data of your device, operating system and browser type used),
Participation data (start and end, questions asked, survey entries)
Chat data (text data for display and, if applicable, logging),
in the case of telephone use (telephone number, country name, start and end time, IP address if applicable).
The processing is carried out on the basis of Art. 6 para. 1 lit. e GDPR in conjunction with. § 3 BDSG.
There is an order processing contract with the service provider LogMeIn in accordance with Art. 28 GDPR. In addition to the data processing agreement, we have agreed the EU standard contractual clauses with LogMeIn. Insofar as data is forwarded to LogMeIn servers in the USA, this is based on Art. 46 para. 2 lit. c GDPR. Information on data processing by the service provider can be found in LogMeIn's privacy policy. You can also find information on the technical security measures on the LogMeIn website.
Processing of personal data when participating in face-to-face events
GTAI regularly (co-)organises face-to-face events. In order to organise and run the event, we need some personal data. The specific data required depends on the type of event. As a rule, it is the following data:
- Contact details (surname, first name, email address)
- Job title
- IP address for electronic registration, if applicable
- Photo and/or video recordings, if applicable
The collection, storage and processing takes place on the basis of Art. 6 para. 1 lit. e GDPR i.V.m. § 3 BDSG.
Photographs and video recordings are used for the purpose of public relations and reporting on the respective event. These may be published on our website, the websites of our cooperation partners, on social media channels and in the regional press in order to report on the respective event.
In accordance with Art. 21 GDPR, you may have the right not to be photographed or filmed. If you wish to assert this right, please contact the organiser.
The data will be stored for as long as it is necessary for the organisation and implementation of the event. It will then be deleted.
If a service provider is commissioned to organise the event, they will be carefully selected and commissioned. They are bound by our instructions and are checked regularly. If necessary, an order processing contract will be agreed with them in accordance with Art. 28 GDPR.
