Data protection for online events

Information obligations according to GDPR for online events via Microsoft Teams

1. Processing-specific information
ATRON electronic GmbH is responsible for inviting you to an online event via ‘Microsoft Teams’.

Details on Microsoft's data protection information can be found here: https://www.microsoft.com/en-gb/privacy/privacystatement

2. Categories of data subjects
Participants in the online event via ‘Microsoft Teams’, e.g. employees of the controller, customers, interested parties

3. Categories of personal data that are processed
Various types of data are processed through the use of the online event via Microsoft Teams. The scope of the data depends on which data you disclose before or during participation in our online event.

The following personal data is subject to processing:
- Personal master data (first name, surname, email address)
- Communication data (e.g. activities in the chat, comments in discussions, Q&A sessions)
- Digital access and system log data

Further information on the data categories is available on request.

4. Origin of the personal data:
The personal data is actively transmitted or uploaded by the user himself as well as passively collected by the devices/systems used or generated when the system is used (e.g. log files).

5. The processing of personal data is carried out for the purpose:
- The personal data is processed for the purpose of organising the online event via ‘Microsoft Teams’. This also includes registration management and the invitation to the online event.
- If the online event is recorded by the organiser, personal data (in particular communication data) will be stored for the purposes of retrieval and, if necessary, further processing (e.g. publication for training purposes, information purposes). The creation of participant photos & chat histories are not part of a recording and publication.
- Personal data is processed to optimise operations and to ensure proper business operations. Processing is carried out for the purpose of improving communication and the provision (exchange of information) of services.
- We process the registration data and attendance information in order to be able to provide all participants with a link to the recording following the online event. The recording can also be shown and made available to other people interested in this topic.

6. Legal basis for the processing of the above-mentioned purposes:
- Art. 6 para. 1 lit. a GDPR (consent) for voluntarily transmitted data in the context of an online event, insofar as you have voluntarily transmitted your data in the context of the online event (name, chat function, etc.) or if a recording of the online event has been consented to.
- Art. 6 para. 1 lit. F GDPR (legitimate interest). The legitimate interest of the controller lies in being able to organise company-related online events, information events, etc. for which a personal appearance is not required. The controller also has a legitimate interest in ensuring IT security and identifying and penalising any misuse.

7. Recipients or categories of recipients of the personal data:
- Recordings in connection with participation in online events are made available to participants using the digital systems available to ATRON electronic GmbH.
- As part of the online event, personal data may become known among the participants of the online event. If the person concerned has activated their camera and/or microphone, data will be transmitted to all other participants.
- As a service provider, Microsoft necessarily obtains knowledge of the data insofar as this is provided for in the order processing contract with Microsoft
- In addition, Microsoft also processes personal data for its own purposes under its own responsibility. Microsoft will inform you about this separately.

8 Necessity of the data processing:
Participation in an online event is generally voluntary. Participants are not obliged to provide personal data, but the provision of data is necessary for the fulfilment of the above-mentioned purposes. Without the disclosure of personal data, the above-mentioned purposes cannot be adequately achieved, i.e. participation in an online event may then not be possible.

9. Duration of data storage:
Personal data and recordings are stored until cancellation.

10. Right of cancellation:
You have the right to withdraw your consent at any time without giving reasons. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.