Imprint

Thank you for your interest in our SpreeHub at HTW Berlin. The protection of your data is important to us. Therefore, we process the data you leave behind when visiting our websites only in accordance with the requirements of the relevant data protection regulations, in particular the General Data Protection Regulation and the Federal Data Protection Act.

Responsible

The website www.spreehub.berlin including all subpages is a service of the SpreeHub of HTW Berlin, represented by the President of the University of Applied Sciences, Treskowallee 8, 10318 Berlin (Imprint). The universities are responsible parties in the sense of Art. 5 II DSGVO. The following privacy policy applies only to this website and its subpages, but not to any linked third-party websites, such as the linked social media pages on Twitter or Facebook.

Subject of protection

The subject of protection is personal data, i.e. individual details about personal or factual circumstances of a specific or identifiable natural person. This includes, above all, information that allows conclusions to be drawn about your identity (e.g. information such as name, postal address, e-mail address, IP address or telephone number).

Collection of general data

Our website collects various general data and information with each call, which is stored in so-called log files of the server. This data includes, for example, your IP address, your browser type and version, your operating system, the Internet page from which you accessed our website, the sub-websites that are accessed via an accessing system on our website, the date and time of an access to our website and your Internet service provider.

We need the aforementioned data to correctly deliver the content of our website and to ensure the long-term functionality of our information technology systems and the technology of our website. The stored data is only evaluated for statistical purposes. Conclusions about your person are not drawn from the data, in particular the server log files are stored separately from your other personal data. Personal user profiles cannot be formed.

The processing of the data is based on Art. 6 I lit. b) DSGVO. According to this provision, the processing of personal data is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures. By using our site, you tacitly accept our offer to conclude a corresponding (free) usage contract. Furthermore, the processing is also justified via Art. 6 I lit. f) DSGVO, as we have a legitimate interest in the processing and your interests, fundamental rights and freedoms do not override it. The interest is to properly deliver our web offer and to protect the functionality of our systems.

Contact via the website

On our website, you will find various information for contacting us (e-mail, telephone) as well as contact forms through which you can send us inquiries. When you contact us, the personal data you provide is automatically stored. Such personal data transmitted on a voluntary basis will be stored for the purpose of processing or contacting you. This personal data will not be passed on to third parties. Contact data is used exclusively for processing the conversation. The legal basis for the processing of the data is Art. 6 I lit. b) DSGVO, insofar as the processing serves to initiate a contractual relationship. Otherwise, your consent (Art. 6 I lit. a) DSGVO) and our legitimate interest (Art. 6 I lit. f) DSGVO) in the processing serve as legal bases. The legitimate interest is that we would like to continue a conversation initiated by you.

 

In addition, data is used for the following purposes:

For event organization and participant management. This includes the sending of organizational information on the course of the event or any cancellation/postponement of the event, details on the program and event documents, admission control, creation of name badges and attendance lists, carrying out accreditations, issuing certificates of attendance, support during the event.

– for communication with registered participants in the course of the event.

– for internal documentation, how many participants have registered/participated, from which industry they come.

– we reserve the right to inform you about further events of SpreeHub and HTW Berlin via the mentioned email address. If you do not wish to receive this information, you can simply send us a cancellation mail to spree-hub@htw-berlin.de and we will delete you from our information mailing list. For events that we hold together with external cooperation partners, we reserve the right to also pass on the participant lists to the respective partner. Separate data protection information on digital events. We use the provider Zoom to conduct online meetings and webinars. The legal basis for the use of online meetings via “Zoom” is for Art. 6 para. 1 lit. b) DSGVO. In the case of webinars, it is Art. 6 para. 1 lit. f) DSGVO, unless a contractual relationship has arisen through participation in the webinar. We have chosen this provider because it runs stably and because, in order to participate in meetings/webinars at Zoom that they do not host themselves, you do not need your own Zoom account, but can use Zoom as a desktop application. To do this, simply click on the link in your invitation/registration email and, if necessary, enter the password that is included in the email. This will automatically take you to the live stream room. On the Zoom website you can test if your IT system is compatible with “Zoom”: https://zoom.us/test. We use the so-called “EU” cluster of Zoom. This means that the processing of personal data of meeting participants takes place exclusively in data centers in the European Union. In addition, Zoom has been committed to DSGVO compliance since April 2020. By generating our own Zoom account to host the events, we have concluded an order processing agreement with “Zoom” including the EU standard contractual clauses. As a matter of principle, there is no transfer of personal data to the USA or any other third country. Type and scope of data processing when participating in online meetings/webinars at Zoom:

When using Zoom, various types of participant data are processed. The type and scope of the data processed depends on the settings made by the host and the selected format (meeting or webinar).

In general, the following types of data are processed:

– Registration information:

First and last name; company name; email address; username and password if registering from your own Zoom account and organization ID, if available, if participating from a company-owned Zoom account.

– Registration options:

(a) Query how you became aware of SpreeHub with multiple response options. The answer is optional.

1. b) Query how you liked the event. This query is mandatory.

– Configuration and communication data:

Device name; geodata; IP address; “User Agent Identifier”; Operating System Type and Version; Client Version; Endpoint MAC addresses; Time zone; Domain name; Activity logs; Hardware type.

– If dialing in by telephone:

Incoming and outgoing phone number information; country name; start and end time; other connection information such as device IP address, if applicable.

– Participation information:

Title; description; date; time; duration; registration link, participation code, host name if applicable; dial-in method.

– Content during meeting/webinar:

If applicable, shared screen content, presentation materials, and other documents used as part of the meeting; if applicable, text, audio, and video; text input when using chat, question, or poll features

– If the meeting is recorded (with participant consent):

MP4 file of all video, audio, and presentation recordings; text file of online meeting chat.

– Other data provided voluntarily as part of the online meeting/webinar

 

Customizable configuration of meetings and webinars in our Zoom account:

Please note that the customizable settings for meetings and webinars in our account are as follows:

– If you are attending a meeting/webinar, you must provide your title, first and last name, company name, city, and email address as part of the webinar registration process. After successful registration, we will send you your access data or a link and password to participate in the event to the e-mail address you provided. You will also receive two reminder emails from us before the respective events (one day and one hour before the event starts).

– At the beginning, the video and audio recordings of all participants (except the hosts) are deactivated. However, you can activate them individually in the user menu at any time.

– Only authorized participants can share their screen, record meetings/webinars or save content.

– Messages in the chat log are allowed for all participants, but sharing documents is not. If content is shared that disrupts or impedes the meeting/webinar process, we reserve the right to remove the participant from the meeting/webinar.

– In the course of participating in a meeting/webinar, at least the configuration and communication data listed above will be automatically collected and processed by Zoom. Text, audio and video data are processed by Zoom only to the extent that you have activated your microphone and camera and/or use the chat, question or survey functions.

– By default, the names of the participants are only visible to us as hosts and, if applicable, to the speakers and moderators of the webinar, but not to other participants. This also applies if you use the chat, question or survey functions. If, on the other hand, you activate your camera and/or microphone function – for example, in the context of question rounds or spoken contributions – other participants will also be able to hear and/or see you. If you do not wish to do this, you are welcome to use the chat function for questions or other contributions.

– In individual cases, we may record a meeting/webinar in order to make the recording available to the participants afterwards or to publish it via our online presences. We will inform you of this in good time before the start of the webinar and you will have the option of agreeing to this or leaving the meeting/webinar. The fact of recording will also be indicated to you in the webinar window by a red icon as soon as and as long as the recording is running. While a webinar is being recorded, the audio and video features are disabled by default for all participants, so no participant data is captured by the recording. Chat histories are also not visible on recordings. Only after the recording has ended will the participants’ audio and video functions be unlocked, e.g. in Q&A sessions.

Purpose of processing:

The processing of the aforementioned data is basically only carried out in order to set up and conduct online meetings and webinars and to enable you to participate smoothly and effectively in such online meetings via the offered web service “Zoom” including the use of its functions.

The text file of chat histories will only be stored if and insofar as this is necessary for the purposes of logging the results of an online meeting or for the follow-up of a webinar. Otherwise, chat histories are not stored; they are then only visible during the online meeting and are no longer available after the meeting.

Some of our webinars are recorded in order to make them permanently available to participants as video files for follow-up purposes or to publish them via our online presences (e.g. website, social media presences) for marketing purposes. Webinars are only recorded in anonymized form, without any participant data being visible. If a recording is planned, all participants will be expressly informed of this before the start of the webinar.

Other online meetings will only be recorded if and to the extent that this is necessary for documentation and follow-up purposes. If a recording is intended, we will inform you of this in good time before the start of the meeting and – if necessary – ask for your consent. There will be no standard automatic recording.

Legal basis:

Insofar as webinars and other online meetings are held as part of the provision of our services to you (e.g., as part of our transfer services), Article 6 (1) sentence 1 lit. b DS-GVO is the legal basis for the associated processing of personal data of our contractual partners. Insofar as we obtain your consent for certain processing operations (e.g. when recording an online meeting), Article 6 (1) sentence 1 lit. a DS-GVO is the legal basis for the processing.

Storage period:

Your personal data processed in the context of your participation in webinars and other online meetings will only be stored by us for as long as is necessary for the aforementioned purposes and to fulfill legal retention obligations. We reserve the right to inform you about further events of HTW Berlin and trao via the aforementioned e-mail address even after the event. If you do not wish this, you can exercise your right to object at any time and we will immediately delete all contact data we have received from you.

Insofar as processing is based on your consent (e.g., when recording an online meeting), the data will be deleted at the latest as soon as you revoke your consent.

For how long such data, which is required to provide the conference and webinar service, is stored by Zoom, please refer to the following data protection information from Zoom: https://zoom.us/de-de/privacy.html

Cookies

So-called cookies are used on our Internet pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies to recognize your browser on your next visit (persistent cookies). The information contained in cookies is used, among other things, to facilitate navigation. You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

Insofar as the cookies serve the proper delivery of our website, the legal basis of the processing is Art. 6 I lit. b) DSGVO. Otherwise, the processing is justified by Art. 6 I lit. f) DSGVO, as the processing is necessary to protect a legitimate interest of our university and your interests, fundamental rights and freedoms do not override. Our legitimate interest is based on the fact that, on the one hand, we align our web offer specifically to the needs of our users and, on the other hand, we can use web analytics to find out about user behavior with regard to our website in order to continuously improve our offer.

Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days at the latest. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. Data may also be stored if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned norms expires, unless there is a necessity to continue storing the data for the conclusion or fulfillment of a contract.

Embedded YouTube videos.

Type and purpose of processing:

On some of our websites, we embed YouTube videos. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. In the process, YouTube is informed which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand. If a YouTube video is started, the provider uses cookies that collect information about user behavior. For more information on the purpose and scope of data collection and processing by YouTube, please refer to the provider’s privacy policy, where you will also find further information on your rights in this regard and settings options for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

 

Legal basis

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO). Recipient: Calling up YouTube automatically triggers a connection to Google. Storage period and revocation of consent: Anyone who has deactivated the storage of cookies for the Google ad program will not have to deal with any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you would like to prevent this, you must block the storage of cookies in the browser. Further information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/.

Third country transfer

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. Provision mandatory or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Your rights

Right to information and confirmation:

Upon request, we will inform you free of charge whether and which of your personal data we have stored. Likewise, we will confirm to you on request whether certain data is being processed. In addition, we will provide you with information about the processing purposes, the categories of data processed, the recipients or categories of recipients of the data and, if possible, the planned duration for which the data will be stored or, if this is not possible, the criteria for determining this duration, the existence of a right to rectification or erasure of the personal data relating to you or to restriction of processing by us or a right to object to processing and/or the existence of a right of appeal to a supervisory authority. Unless the personal data is collected from the data subject, we will provide you with all available information about the origin of the data, the existence of automated decision-making including profiling, the scope and the intended effects of such processing for the data subject. Furthermore, we will provide you with information as to whether your personal data has been transferred to a third country or to an international organization. If this is the case, we will provide you with information about the appropriate safeguards in connection with the transfer.

 

Right of rectification

You have the right to request that inaccurate personal data concerning you be corrected or completed.

Right of deletion. You have the right to request that we erase the personal data concerning you without undue delay, provided that one of the following reasons applies and to the extent that the processing is not necessary:

– The personal data was collected or otherwise processed for such purposes for which it is no longer necessary.

– You have revoked your consent on which the processing was based pursuant to Art. 6 I lit. a) DSGVO or Art. 9 II lit. a) DSGVO and there is no other legal basis for the processing.

– You object to the processing pursuant to Art. 21 I DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 II DSGVO.

– The personal data has been processed unlawfully.

– The erasure of the personal data is necessary for compliance with a legal obligation.

– The personal data was collected in relation to information society services offered pursuant to Art. 8 I DSGVO.

Right to restriction of processing

You may request us to restrict processing if one of the following conditions is met:

– The accuracy of the personal data is contested by you for a period enabling the controller to verify the accuracy of the personal data.

– The processing is unlawful, you object to the erasure of the personal data and request instead the restriction of the use of the personal data.

– We no longer need the personal data for the purposes of processing, but you need it for the assertion, exercise or defense of legal claims.

– You have objected to the processing pursuant to Art. 21 I DSGVO and it is not yet clear whether our legitimate grounds outweigh yours.

Right to data transfer

You have the right to receive personal data concerning you, which we process with the help of automated processes on the basis of your consent (Art. 6 I lit. a) or Art. 9 II lit. a) DSGVO) or on the basis of a contract (Art. 6 I lit. b) DSGVO), in a structured, common and machine-readable format. You may transfer this data to another responsible party or have it transferred by us, insofar as this is technically feasible and insofar as this does not affect the rights and freedoms of other persons.

Right of objection

You may object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 I lit. e) or f) DSGVO. After receipt of your objection, we will no longer process the relevant personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. You may object to the processing of your data for the purpose of direct marketing at any time. In this case, we will no longer process the personal data for these purposes. This also applies to profiling, insofar as it is associated with such direct advertising. Right to revoke consent under data protection law. You may revoke consent given by you for the processing of personal data at any time without giving reasons.

Assertion of rights

You can assert the rights to which you are entitled by contacting the person responsible for the project, Sarah Mareike Lüking, who is responsible for the editorial maintenance and support of the website, using the contact details provided.

Other legal bases for processing

If the processing of personal data is based on a legal obligation affecting us, the processing is based on Art. 6 I lit. c) DSGVO.

Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of personal data concerning you infringes data protection. The supervisory authority to which the complaint is submitted will inform you about the status and outcome of your complaint, including the possibility of judicial remedy. More information can be found on the website of the Federal Commissioner for Data Protection and Freedom of Information.

Security

To protect your data against access by unauthorized persons, we use SSL encryption for our pages. You can recognize such encrypted connections by the prefix “https://” in the page link in the address line of your browser. Unencrypted pages are marked by “https://”. All data that you transmit to us cannot be read by third parties thanks to SSL encryption. To protect your data against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons, we use technical and organizational security measures in accordance with Art. 32 DSGVO. Our security measures are continuously improved in line with technological developments. Access is only possible for a few authorized persons and persons with a special obligation to protect data who are involved in the technical, administrative or editorial management of data. Declaration of consent of the user. By using our website, you consent to the storage and processing by us of personal data voluntarily submitted by you in accordance with this privacy policy.

Subject to change

We reserve the right to change, update or supplement this privacy policy at any time. Any revised Privacy Statement will only apply to personal data collected or modified after the effective date of the revised statement.

Status | March 2021