Privacy Policy Recordings in Zoom X at the University of Applied Sciences Potsdam

Your online meeting/course will be recorded by the lecturer/host. If technical measures cannot be taken from the beginning to ensure that only information from the lecturer/host is recorded, personal data of the participants of the meeting whose audio and video streams and, if applicable, chat contributions are the subject of the recording will be processed.

The following privacy policy applies to the creation of the recording and the storage and processing of this data by the University of Applied Sciences Potsdam. In addition to the provisions of the GDPR, Sections 22 to 24 KunstUrhG apply to the use/publication of the image material. Information on this can be found at the end of the information on data protection.

Your lecturer/meeting host will inform you in each case whether and which data is to be recorded and how further processing is planned. As a rule, recording is only permitted on the basis of a declaration of consent. In connection with the declaration of consent, you will also regularly be provided with customised information on data protection by your lecturer/meeting host, from which you can obtain specific information, in particular with regard to the storage period and contact details for asserting data subject rights.

The general information on data protection for the processing of all personal data not related to the recording can be found on the pages of the University of Applied Sciences Potsdam on Zoom.

We process your personal data in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR) and the Brandenburg Data Protection Act (BbgDSG).

Contact

Responsible within the meaning of the General Data Protection Regulation is the

University of Applied Sciences Potsdam
represented by the President
Prof Dr Schmitt-Rodermund
Kiepenheuerallee 5
14469 Potsdam
E-mail address: praesidentin@fh-potsdam.de
Website

The data protection officer of the University of Applied Sciences Potsdam is

Sven Hirsch
University of Applied Sciences Potsdam
Kiepenheuerallee 5
14469 Potsdam
E-mail address: datenschutz@fh-potsdam.de
Website

Contact of the processing centre

If you have any questions or comments, please contact the University of Applied Sciences Potsdam IT Centre.

University of Applied Sciences Potsdam
Kiepenheuerallee 5
14469 Potsdam
E-mail address: it-service@fh-potsdam.de
Website

Purpose of data processing

The purpose of data processing is the publication of online courses in order to make them accessible to the limited circle of all students who are scheduled to participate in the course.

Legal basis for data processing

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a GDPR (consent).

Right of cancellation

You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Duration of data storage

The duration of data processing is determined by the following factors

• If the lecturer of your course plans to publish the recording including your personal information (audio and video streams, chat contributions if applicable), your data will be deleted if the course no longer needs to be made available for teaching purposes.
• If the lecturer plans to publish the course in which your personal information (audio and video streams, chat contributions if applicable) is removed or anonymised in advance, the duration of data storage is limited until your audio and video streams are deleted from the file intended for publication.

Please refer to the data protection information provided to you by your lecturer in connection with obtaining the declaration of consent for more detailed information on the storage period.

Transfer of data to third parties

The person responsible for the event or the host will inform you in the declaration of consent how the recording will be made available and for which group of people.

Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the data controller:

• You can request confirmation from the data controller as to whether personal data concerning you is being processed. If such processing is taking place, you can request information about and a copy of this data from the data controller in accordance with Art. 15 GDPR.
• You also have the right to rectification (pursuant to Art. 16 GDPR). If incorrect data is stored, you can adjust some of it yourself (self-collected profile data) or request the controller to do so. The controller will comply with the request if the correction is justified and appropriate.
• You have a right to erasure of the personal data concerning you (pursuant to Art. 17 GDPR). You have the right to have data erased that is actually incorrect or for which the controller has no further purpose. There is no right to erasure of data if the controller is obliged to retain the data for legal reasons or due to other obligations. The obligation to store data may also exist after de-registration. There is also no right to erasure if information was written by you and this is in the context of information from other users (e.g. forum posts).
• You have a right to restriction of processing by the controller (in accordance with Art. 18 GDPR). The controllers will ensure that, in the event of restriction, data is only accessible to those persons who absolutely need to see the data. They can use pseudonymisation and anonymisation for this purpose.
• You have the right to object to this processing (in accordance with Art. 21 GDPR). You can object to the further use of the data. This can only take effect in the future. The right to object is not an automatic obligation for the controller to erase the data. If the controllers have storage obligations for other reasons, they will consider this and inform you.
• You have a right to data portability (pursuant to Art. 20 GDPR). You have the right to receive data that you have created yourself in an electronic format that can be used elsewhere. This right is limited to data that may not be transferred to other organisations or that affects the rights of others, e.g. copyright.
• You also have the right to lodge a complaint with a supervisory authority (pursuant to Art. 77 GDPR). In the event of a breach of statutory provisions for the protection of data stored about you, you can contact the competent supervisory authority. (State Commissioner for Data Protection and for the Right of Access to Files, LDA, https://www.lda.brandenburg.de).

Please contact the processing organisation, the person responsible or the official data protection officer of the UAS Potsdam first (see point 2). In most cases, questions can be clarified and complaints resolved in this way.

Information on the Art Copyright Act

In principle, consent is required for the use/publication of image and film recordings (§ 22 KunstUrhG). Under the conditions of § 23 KunstUrhG, images can also be displayed without consent. This exception primarily covers portraits from the field of contemporary history and images of gatherings, processions and similar events in which the persons depicted have taken part.

Unlike under the GDPR, consent granted under Section 22 KunstUrhG for the publication of the image material is generally binding and irrevocable. Revocation is only possible for good cause. You must prove that the use of the image for a future publication would be unlawful due to a change in your attitude.