This English translation is provided for convenience only. The German version of this privacy information is legally binding.
With this privacy notice, we inform you about the processing of your personal data by us as well as about the rights to which you are entitled.
The specific responsibility for the respective data processing is determined in detail by the respective service and product descriptions and the associated contractual documents between the respective SHD company and you.
Marcel Erntges
Data Protection Officer
datenschutz@shd.de
We process personal data that we receive in connection with the initiation of a business relationship (e.g. inquiry, preparation of a quotation) or from the business relationship with you or our contractual partners. In particular, the following data is processed: master data, correspondence data (e.g. correspondence with you, customer support), billing data as well as advertising and sales data (e.g. for the promotion of products and services that may be of interest to our contractual partners).
a) On the basis of your consent to data processing (Art. 6(1)(a) GDPR) If and to the extent that you have given consent to the processing of personal data, the respective consent is the legal basis for the processing named therein. This applies, for example, to the receipt of electronic customer information. You may revoke consent at any time with effect for the future.
b) For the fulfillment of contractual obligations (Art. 6(1)(b) GDPR) Your data is processed for the initiation or performance of our contracts with you or our contractual partners, i.e. for example for the provision of our services. The specific purposes of the data processing are determined in detail by the respective service and product descriptions and the associated contractual documents.
c) Within the scope of a balancing of interests (Art. 6(1)(f) GDPR) Your data may also be used on the basis of a balancing of interests to safeguard the legitimate interests of us or third parties. This is done, for example, for the purpose of further developing services, systems and products, ensuring IT security and IT operations, advertising, market and opinion research, asserting legal claims and defending against legal disputes, preventing and investigating criminal offenses, as well as risk management and fraud prevention.
d) On the basis of legal requirements (Art. 6(1)(c) GDPR) We are subject to various legal obligations that entail data processing. These include, for example, tax laws as well as statutory bookkeeping requirements, the fulfillment of inquiries and requests from national or foreign supervisory or law enforcement authorities, as well as the fulfillment of tax law control and reporting obligations.
Within our company, your data is disclosed only to those departments of ours that require it for the fulfillment of contractual and statutory obligations or for the performance of their respective tasks (e.g. customer support, IT, sales and marketing). Beyond that, external parties receive your data without exception only if they have been contractually bound by us to their obligations as a processor (Art. 28 GDPR) and guarantee that they process your data in accordance with our instructions, or to bodies or persons to whom you have given us your consent to transfer data.
Your data is processed only within the European Union and states within the European Economic Area (EEA). Otherwise, you will always be informed separately in advance, including of the right to separately object to such a data transfer at any time.
We store your personal data only for as long as this is necessary for the provision of the contractual services associated with it. This includes, in addition to the duration of the actual business relationship, the data processing in connection with the initiation and performance of contracts. In addition, we are subject to various retention and documentation obligations, which arise, among other things, from the German Commercial Code (Handelsgesetzbuch) as well as from tax law provisions (Fiscal Code, Abgabenordnung, AO). The periods for retention or documentation specified therein are five to ten years. Finally, the storage period is also determined by the statutory limitation periods, which, for example under §§ 195 et seq. of the German Civil Code (Buergerliches Gesetzbuch, BGB), are generally three years, but in certain cases may also be up to 30 years.
Within the scope of our business relationship, you only need to provide the personal data that is necessary for the establishment, performance and termination of a business relationship, or which our contractual partners or we are legally obliged to collect. Otherwise, the conclusion of the contract or the performance of the contract is not possible.
For the establishment and performance of the business relationship, we generally do not use automated decision-making pursuant to Art. 22 GDPR. Should we use such procedures in individual cases, we will inform you separately about this.
Personal data that we receive in the course of performing the business relationship is not used for so-called "profiling" pursuant to Art. 4 No. 4 GDPR.
Under the respective statutory requirements, you have the right to request confirmation at any time as to whether we process personal data, and the right of access (Art. 15 GDPR, § 34 BDSG) to this personal data. In addition, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR, § 35 BDSG) and restriction of processing (Art. 18 GDPR), as well as the right to object at any time to the processing (Art. 21 GDPR) of personal data, or to revoke consent to data processing at any time, or to demand data portability (Art. 20 GDPR). In addition, you have the right to lodge a complaint with a supervisory authority in the event of data protection violations (Art. 77 GDPR, § 19 BDSG).
a) Right to object in individual cases
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing based on a balancing of interests). If you object, your personal data will no longer be processed unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
b) Right to object to processing of data for direct marketing purposes
Within the scope of the statutory provisions, we may also process your data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising, without this incurring any costs other than the transmission costs at the basic rates. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection may be made in any form. You will find the contact details under item 1.
With this privacy notice, we inform you about the processing of personal data in connection with the use of Microsoft Teams Live Events. Microsoft Teams Live Events is a service of Microsoft Corporation that enables video and meeting content to be broadcast to a large online audience. Live video streaming fosters the connection to participants before, during and after the live events, throughout the entire lifecycle of the occasion. With Microsoft Stream, Teams or Yammer, live events can be created wherever the audience, the team or the community is located.
The specific responsibility for the respective data processing is determined in detail by the respective service and product descriptions and the associated contractual documents between the respective SHD company and you.
SHD Solutions GmbH Rennweg 60 56626 Andernach
represented by Dietmar Meding (CEO) and Ralf Gentejohann (CFO)
Phone + 49 2632 295-0 Email info@shd.de
Note: If you access the Microsoft Teams Live Events website, the provider of Microsoft Teams Live Events (Microsoft Corporation) is responsible for the data processing. However, accessing the website is only necessary for using Microsoft Teams Live Events if Microsoft Teams Live Events is used online and not as a Microsoft Teams Live Events app (e.g. for Windows, MacOS, iOS or Android).
If you do not want to or cannot use the Microsoft Teams Live Events app, the functions are also available via a browser version, which is likewise provided via the Microsoft website.
Marcel Erntges Data Protection Officer
When using Microsoft Teams Live Events, various types of personal data are processed. The scope of the data also depends on which data you provide before or during participation in a "live event".
In particular, the following personal data is subject to processing:
• User information: first name, last name, email address, phone number (optional), profile picture (optional), department (optional), password (if "single sign-on" is not used);
• Metadata: meeting subject, description,
• Text, audio and video data: You may have the option to use the chat functions in a "live event". In this respect, the text entries you make are processed in order to display them in the "live event" and, if applicable, to log them. To enable the display of video and the playback of audio, the data from your device's microphone and from any video camera on your device is processed accordingly for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time;
If we intend to record "live events", we will inform you of this transparently in advance and ask for your consent. The fact that a recording is taking place will also be displayed to you in the Live Events app.
If a recording takes place, the following personal data is processed:
• MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the "live events meeting chat".
If it is necessary for the purposes of logging the results of a "live event", we will log the chat content. However, this will generally not be the case.
In the case of webinars, we may also process the questions asked by webinar participants for the purposes of recording and following up on webinars.
Purposes of processing
We use live events to conduct video conferences, telephone conferences, meetings and webinars as one-to-many communication.
Legal bases for processing
To the extent that personal data of SHD employees is processed, the data processing is carried out on the basis of § 26 BDSG. Should personal data not be necessary for the establishment, performance or termination of the employment relationship in connection with the use of Teams, but nevertheless be an essential component of using Teams, Art. 6(1)(f) GDPR is the legal basis for the data processing. Our interest in these cases lies in the effective conduct of "Teams meetings".
Vis-a-vis customers and prospective customers, the legal basis for the data processing in connection with the conduct of "live events" is Art. 6(1)(b) GDPR, provided that the meetings are conducted within the framework of contractual relationships or, at the request of the prospective customer, for the performance of pre-contractual measures.
In the case of recordings, the processing is carried out on the basis of consent pursuant to Art. 6(1)(a) GDPR, which is obtained in advance.
Personal data processed in connection with participation in "live events" is generally not disclosed to third parties, unless this data is expressly intended for disclosure. Within SHD, your data is disclosed by us only to the departments that require it for the fulfillment of contractual and statutory obligations or for the performance of their respective tasks (e.g. customer support, IT, sales and marketing).
The provider of Teams (Microsoft Corporation) necessarily gains knowledge of the aforementioned data, to the extent that this is provided for within the framework of our contractual relationship with Microsoft.
Within the scope of using Microsoft Teams Live Events, personal data is transferred to and stored at the European data centers of Microsoft Ireland Operations, Ltd. However, access by persons from a third country cannot be ruled out, since support may also be provided by Microsoft employees who are not based in the European Union. In doing so, we observe the special requirements of Art. 44 to 50 GDPR. The contract necessary for this (Microsoft Service Online Terms, "OST") has been concluded.
Other transfers of your personal data to recipients in so-called third countries, that is, to states outside the European Economic Area (EEA), or to international organizations, are not carried out by us.
Further information on data protection at Microsoft Corporation is available here:
https://privacy.microsoft.com/de-de/privacystatement
https://www.microsoft.com/de-de/trust-center
We store your personal data only for as long as this is necessary for the provision of the contractual services associated with it. This includes, in addition to the duration of the actual business relationship, the data processing in connection with the initiation and performance of contracts. In addition, we are subject to various retention and documentation obligations, which arise, among other things, from the German Commercial Code (Handelsgesetzbuch, HGB) as well as from tax law provisions (Fiscal Code, Abgabenordnung, AO). The periods for retention or documentation specified therein are five to ten years. Finally, the storage period is also determined by the statutory limitation periods, which, for example under §§ 195 et seq. of the German Civil Code (Buergerliches Gesetzbuch, BGB), are generally three years, but in certain cases may also be up to 30 years.
Within the scope of the employment relationship, you only need to provide the personal data that is necessary for the establishment, performance and termination of the employment relationship.
For the establishment and performance of the business relationship, we generally do not use automated decision-making pursuant to Art. 22 GDPR. Should we use such procedures in individual cases, we will inform you separately about this.
We do not process your data in an automated manner with the aim of evaluating certain personal aspects (so-called "profiling" pursuant to Art. 4 No. 4 GDPR).
Under the respective statutory requirements, you have the right to request confirmation at any time as to whether we process personal data, and the right of access (Art. 15 GDPR, § 34 BDSG) to this personal data. In addition, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR, § 35 BDSG) and restriction of processing (Art. 18 GDPR), as well as the right to object at any time to the processing (Art. 21 GDPR) of personal data, or to revoke consent to data processing at any time, or to demand data portability (Art. 20 GDPR). In addition, you have the right to lodge a complaint with a supervisory authority in the event of data protection violations (Art. 77 GDPR, § 19 BDSG).
With this privacy notice, we inform you about the processing of personal data in connection with the use of Microsoft Teams (hereinafter "Teams"). Teams is a service of Microsoft Corporation that combines chat, meetings, notes and attachments.
The specific responsibility for the respective data processing is determined in detail by the respective service and product descriptions and the associated contractual documents between the respective SHD company and you.
SHD Solutions GmbH Rennweg 60 56626 Andernach
represented by Dietmar Meding (CEO) and Ralf Gentejohann (CFO)
Phone + 49 2632 295-0 Email info@shd.de
Marcel Erntges Data Protection Officer
When using Teams, various types of personal data are processed. The scope of the data also depends on which data you provide before or during participation in a "Teams meeting".
In particular, the following personal data is subject to processing:
User information: first name, last name, email address, phone number (optional), profile picture (optional), department (optional), password (if "single sign-on" is not used);
Metadata: meeting subject, description,
Text, audio and video data: You may have the option to use the chat functions in a "Teams meeting". In this respect, the text entries you make are processed in order to display them in the "Teams meeting" and, if applicable, to log them. To enable the display of video and the playback of audio, the data from your device's microphone and from any video camera on your device is processed accordingly for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time;
If we intend to record "Teams meetings", we will inform you of this transparently in advance and ask for your consent. The fact that a recording is taking place will also be displayed to you in the Teams app.
If a recording takes place, the following personal data is processed:
MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the "Teams meeting chat".
If it is necessary for the purposes of logging the results of a "Teams meeting", we will log the chat content. However, this will generally not be the case.
In the case of webinars, we may also process the questions asked by webinar participants for the purposes of recording and following up on webinars.
Purposes of processing
We use Teams to conduct video conferences, telephone conferences, meetings and webinars (hereinafter "Teams meetings").
Legal bases for processing
To the extent that personal data of SHD employees is processed, the data processing is carried out on the basis of § 26 BDSG. Should personal data not be necessary for the establishment, performance or termination of the employment relationship in connection with the use of Teams, but nevertheless be an essential component of using Teams, Art. 6(1)(f) GDPR is the legal basis for the data processing. Our interest in these cases lies in the effective conduct of "Teams meetings".
Vis-a-vis customers and prospective customers, the legal basis for the data processing in connection with the conduct of "Teams meetings" is Art. 6(1)(b) GDPR, provided that the meetings are conducted within the framework of contractual relationships or, at the request of the prospective customer, for the performance of pre-contractual measures.
In the case of recordings, the processing is carried out on the basis of consent pursuant to Art. 6(1)(a) GDPR, which is obtained in advance.
Personal data processed in connection with participation in "Teams meetings" is generally not disclosed to third parties, unless this data is expressly intended for disclosure. Within SHD, your data is disclosed by us only to the departments that require it for the fulfillment of contractual and statutory obligations or for the performance of their respective tasks (e.g. customer support, IT, sales and marketing).
The provider of Teams (Microsoft Corporation) necessarily gains knowledge of the aforementioned data, to the extent that this is provided for within the framework of our contractual relationship with Microsoft.
Within the scope of using Microsoft Teams, personal data is transferred to and stored at the European data centers of Microsoft Ireland Operations, Ltd. However, access by persons from a third country cannot be ruled out, since support may also be provided by Microsoft employees who are not based in the European Union. In doing so, we observe the special requirements of Art. 44 to 50 GDPR. The contract necessary for this (Microsoft Service Online Terms, "OST") has been concluded.
Other transfers of your personal data to recipients in so-called third countries, that is, to states outside the European Economic Area (EEA), or to international organizations, are not carried out by us.
Further information on data protection at Microsoft Corporation is available here:
https://privacy.microsoft.com/de-de/privacystatement
https://www.microsoft.com/de-de/trust-center
We store your personal data only for as long as this is necessary for the provision of the contractual services associated with it. This includes, in addition to the duration of the actual business relationship, the data processing in connection with the initiation and performance of contracts. In addition, we are subject to various retention and documentation obligations, which arise, among other things, from the German Commercial Code (Handelsgesetzbuch, HGB) as well as from tax law provisions (Fiscal Code, Abgabenordnung, AO). The periods for retention or documentation specified therein are five to ten years. Finally, the storage period is also determined by the statutory limitation periods, which, for example under §§ 195 et seq. of the German Civil Code (Buergerliches Gesetzbuch, BGB), are generally three years, but in certain cases may also be up to 30 years.
Within the scope of the employment relationship, you only need to provide the personal data that is necessary for the establishment, performance and termination of the employment relationship.
For the establishment and performance of the business relationship, we generally do not use automated decision-making pursuant to Art. 22 GDPR. Should we use such procedures in individual cases, we will inform you separately about this.
We do not process your data in an automated manner with the aim of evaluating certain personal aspects (so-called "profiling" pursuant to Art. 4 No. 4 GDPR).
Under the respective statutory requirements, you have the right to request confirmation at any time as to whether we process personal data, and the right of access (Art. 15 GDPR, § 34 BDSG) to this personal data. In addition, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR, § 35 BDSG) and restriction of processing (Art. 18 GDPR), as well as the right to object at any time to the processing (Art. 21 GDPR) of personal data, or to revoke consent to data processing at any time, or to demand data portability (Art. 20 GDPR). In addition, you have the right to lodge a complaint with a supervisory authority in the event of data protection violations (Art. 77 GDPR, § 19 BDSG).