Data protection remains an important concern for us. In the following we will inform you how your data is processed in BigBlueButton and what rights you are entitled to. As the data controller, Forschungszentrum Jülich has implemented numerous technical and organisational measures to ensure that your personal data are protected as completely as possible.
The responsible body within the meaning of the data protection laws is:
Forschungszentrum Jülich GmbH Wilhelm-Johnen-Strasse
1.Processing purposes and legal basis
BigBlueButton is an online conferencing system designed for conference calls, video conferences and online meetings for collaboration. It can also be used to conduct webinars. Recordings of the meetings are possible.
Your personal data will be processed in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG-neu) and other relevant data protection regulations. The processing and use of individual data is required for the following purposes:
2. Categories of personal data processed by The following data is processed:
3. Who receives the data? We pass on your personal data within our company to the divisions, who need this data to fulfil contractual and legal obligations or to implement our legitimate interest.
4. Does a transfer of your data to a third country or to an international organisation take place? No data processing takes place outside the EU or the EEA. BigBlueButton is a service that is hosted independently at Forschungszentrum Jülich.
5. How long do we store your data? Non-recorded meetings: Data will be deleted after the meeting has ended. Recorded meetings: In the rare cases of a recording, we generally delete the personal data when there is no need for further storage, e.g. webinars. In addition, we are subject to various storage and documentation obligations, which result from the German Commercial Code (HGB) and the German Fiscal Code (AO), among others. The periods of retention and documentation stipulated there are up to ten years after the end of your activity at the research centre or the pre-contractual legal relationship.
6.To what extent is there automated decision-making in individual cases (including profiling)? As a responsible company, we refrain from an automated decision-making procedure or profiling in accordance with Article 22 GDPR.
7.Your Privacy Rights You have the right of access pursuant to Art. 15 GDPR, the right of rectification pursuant to Art. 16 GDPR, the right of deletion pursuant to Art. 17 GDPR, the right of restriction of processing pursuant to Art. 18 GDPR and the right of data transfer pursuant to Art. 20 GDPR. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR).
8.Your right to appeal to the competent supervisory authority
In addition, you have the right to appeal to the data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Postfach 20 04 44
Or contact directly our Data Protection Officer:
Frank Rinkens Forschungszentrum Jülich GmbH Wilhelm-Johnen-Strasse
9.Scope of your obligations to provide us with your data You only need to provide the data required for usage of the service or which we are legally obliged to collect. If we also request data from you, you will be informed of the voluntary nature of the information separately.