Privacy policy Microsoft Teams
As part of the use of Microsoft Teams (“MS Teams“), we also process your personal data within the meaning of Art. 4 No. 1 GDPR (“data“). We are aware of the importance of the data entrusted to us. The protection of your privacy when processing your data is an important concern for us, which we take into account in our business processes.
- Responsible body
The controller pursuant to Art. 4 No. 7 GDPR for the processing of your data in connection with MS Teams is :
Benefitax GmbH Steuerberatungsgesellschaft Wirtschaftsprüfungsgesellschaft (“Benefitax” or “we“)
Hanauer Landstr. 148a
D-60314 Frankfurt
Phone +49 (0)69-25 62 27 60
Fax. +49 (0)69-25 62 27 611
E-mail: info@benefitax.de
- Type and scope of processing
When you participate in an “online meeting” with MS Teams, we collect the following information:
- Information about the user (in particular user name, e-mail address if applicable, telephone number if applicable, profile picture if applicable)
- Image and sound data
- Entries in the chat
- Show of hands
- Contents of your own screen when it is shared (if permitted in the video conference room)
- Data collected by the server (log files) on the operating system, IP address, browser type and version, language, date and time of use
It is also possible to enter pseudonyms when registering. You can probably also disguise your background.
Please note: You are neither legally nor contractually obliged to provide your data. However, you cannot participate in the online meeting without your data.
- Purpose and legal basis of data processing
Your data is collected for the purpose of holding telephone conferences, online meetings, video conferences and/or webinars (“online meetings“) with you.
The legal basis for data processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the effective conduct of “online meetings”. If the “online meeting” takes place within the framework of an existing client relationship or business relationship with Benefitax, the additional legal basis is Art. 6 para. 1 lit. b) GDPR.
- Recipients of your data
The video, image and audio recordings, documents and shared screens provided by you during the video conference are accessible to all other participants.
Another recipient of your data is Microsoft Ireland Operations Limited (“Microsoft“), One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Further information about Microsoft can be found at the following link: https://privacy.microsoft.com/de-de/privacystatement.
- Storage duration
The video conference will not be recorded by us.
- Third country transfer and automated decision-making
We use Microsoft Teams from Microsoft. It cannot be ruled out that your data may also be transferred outside the European Economic Area and thus outside the material scope of the GDPR as part of our processing operations. This applies in particular to the transfer of your data to and access to your data from the USA. There is no adequacy decision by the European Commission for the USA. A transfer of your data therefore takes place in accordance with Art. 46 para. 2 lit. c) GDPR generally on the basis of the standard contractual clauses of the European Commission. You can obtain a copy of the passages of the contracts concerning you from us. There is no automated decision-making.
- Your rights
In accordance with the provisions of the GDPR, you can assert the following rights against us
- Right to information (Art. 15 GDPR);
- Right to rectification (Art. 16 GDPR);
- Right to erasure (Art. 17 GDPR);
- Right to restriction of processing (Art. 18 GDPR);
- Right to data portability (Art. 20 GDPR).
In addition, you can object to the processing of your data described here for the purpose of safeguarding legitimate interests at any time with effect for the future in accordance with Art. 21 GDPR. If the processing is not for direct marketing purposes, you only have the right to object on grounds relating to your particular situation. You can also lodge a complaint with a supervisory authority at any time. The supervisory authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden.