keyboard_arrow_up

INFORMATION REQUIREMENTS FOR USE OF MICROSOFT TEAMS PURSUANT TO ART. 13 GDPR

With the following information, we would like to give you an overview of the processing of your personal data by Rhenus Warehousing Solutions SE & Co. KG and the rights to which you are entitled under data protection law. In order to fulfil our information obligations according to Art. 13 DSGVO (GDPR – General Data Protection Regulation), we are pleased to present our data protection information below:

 

The controller for the processing of personal data is:

Rhenus Warehousing Solutions SE & Co. KG


Rhenus-Platz 1
59439 Holzwickede

Data Protection Officer Contact:

If you have any questions regarding data protection or the processing of your personal data by us, please contact:

[email protected]

 

1. Description and Scope of Data Processing

We use Microsoft Teams to provide a modern working environment and enable audio and video conferencing with participants.

Microsoft Teams is a platform that allows messaging between users and meetings via audio and video between users and invited participants. The service enables our employees to collaborate in real time, both internally and with external interlocutors, from any location, and at any time via PCs, mobile devices or video systems.

In addition, documents can be managed, transmitted and edited between users. The service is integrated into the Microsoft 365 Office suite with Microsoft Office and Skype/Skype for Business. In addition, other services from Microsoft and other companies and service providers can be integrated and used.

Microsoft Teams is a web- and cloud-based service.

The processing of your personal data is necessary for the use of the Microsoft Teams service. Without this processing, neither the use of the service nor the transmission of sound and image recordings is possible.

When logging into the system, the following data of each user may be processed:

Salutation, title if applicable, surname, first name, e-mail address, telephone number.

When using the service, the following personal data of the users may also be processed:

Personal IP address, browser information, geographic region, avatar (voluntary), photograph (voluntary), user information in active directory (if synchronised), meeting and phone recordings, uploaded files and chat messages.

 

2. Legal Basis for Data Processing

The legal basis for meetings and video or telephone recordings is Art. 6 para. 1 lit. a) GDPR.

The legal basis for data processing is Art. 6 para. 1 lit. f) GDPR, as the data processing is carried out in the exercise of our legitimate interest. Where data processing is necessary for the conclusion and/or implementation of a contractual relationship, the legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.

 

3. Purpose of Data Processing

The processing of personal data serves the purpose of contacting and enabling an exchange with business partners, customers, applicants or interested parties by means of a modern web-based telephone and video conferencing system.

Depending on the intention and content of your request, the purpose may also be the initiation and/or implementation of a contractual relationship, as well as the maintenance of an existing customer relationship.

 

4. Duration of Storage

The data will be deleted within 6 months of it becoming no longer necessary to achieve the purpose for which it was collected or where the data is not subject to any further legal retention obligations (e.g. 10 years according to AO, 6 years according to HGB).

 

5. Legitimate Interest

Our legitimate interest in data processing lies in the need to provide cross-location collaboration by means of a video conferencing system in order to meet the requirements of the mobile working world.

 

6. Recipients of Personal Data

IT Administration: Rhenus Assets & Services GmbH

Microsoft Ireland Operations Limited as IT service provider

One Microsoft Place, South County Business Park, Leopardstown Dublin 18, Ireland

 

7. Transfer of Personal Data to a Third Country

Participation/access by a competent Rhenus company in a third country is possible depending on the content of the conversation,

 

8. Your Rights as a Data Subject

Right to Information
On request, we will provide you with information in writing or electronically as to whether and what personal data we have stored about you (Art. 15 GDPR).

 

Right to Rectification
You have the right to rectification (Art. 16 GDPR) and/or completion vis-à-vis the controller if your personal data are inaccurate or incomplete.

Right to Deletion

You may request the controller to erase the personal data concerning you without delay (Art. 17 GDPR).

 

Right to Objection


A data subject shall have the right at any time to object with future effect to the processing of personal data concerning him or her based on his or her particular situation. This shall not affect previous processing operations. The controller shall no longer process the personal data in the event of the objection, unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims (Article 21 of GDPR). 

 

Right to Restriction of Processing

You have the right to request the restriction of processing (Art. 18 GDPR).

 

Right to Data Portability
You have the right to data portability (Art. 20 GDPR).

 

Right of Appeal to the Supervisory Authority


The data subject has the right to lodge a complaint with a supervisory authority,
without prejudice to any other administrative or judicial remedy, under Article 77 GDPR. The data subject may exercise this right before a supervisory authority in the member state of his or her residence, place of work or the place of the alleged infringement.

Revocation of Consent
If you have given consent for the collection or use of personal data and wish to revoke this, you can do so with future effect at any time by e-mail or letter.

Provision of Personal Data

You are under no legal or fundamental contractual obligation to provide Rhenus Warehousing Solutions SE & Co. KG with your data for the above-mentioned purpose. However, if you refuse to make your data available, Rhenus Warehousing Solutions SE & Co. KG cannot grant you access to its buildings and premises for reasons of information security.

 

Automated Decision-making/Profiling

Automated decision making (including profiling) does not occur with your data.