Skip to content

Norbert Herrmann

Privacy Policy

Thank you for your interest in our offer. Norbert Herrmann takes the protection of your data very seriously. We adhere strictly to the legal provisions of the General Data Protection Regulation and the Telemedia Act. The subject of data protection is personal data. Here you can find out what data we collect, when we collect it and how we use it.

Responsibility

The controller is Norbert Herrmann, all contact details can also be found in the Imprint.

Collection of general information

You can visit our website without providing any personal data. However, as soon as you open our pages, information is automatically collected by us or our web space operator. This is known as server log files, which are more general and do not allow any conclusions to be drawn about the user (apart from the IP address, see below). Among other things, the following are recorded

  • Name of the website,
  • file,
  • date,
  • data volume,
  • web browser and web browser version,
  • operating system,
  • the domain name of your
  • Internet provider,
  • the so-called referrer URL (the page from which you accessed my pages – e.g. Google as part of a search query) and e.g. Google as part of a search query) and
  • the IP address

Your IP address

Without Internet Protocol addresses, or “IP addresses” for short, the Internet would not work – to put it very simply. An IP address is an address in computer networks that can be used to address and reach web servers and/or individual end devices. According to the prevailing legal opinion, IP addresses are now considered personal data. We do not store the IP addresses of our visitors in the log files. Instead of the visitor’s actual IP address, only the number 127.0.0.1 is stored. Your IP address is therefore anonymized!

We use the log data without allocation to the person of the user or other profiling in accordance with the legal provisions only for statistical evaluations for the purpose of operation, security and optimization of the offer. However, we reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use based on concrete evidence.

Personal data

Personal data is data that can be used to clearly identify a person. This includes, for example, surname, first name, address, date of birth, telephone number, but also the person’s website, etc. You only provide personal data when you contact us and send us an e-mail. We only collect, store or process data for our own business purposes. Personal data is only requested, processed and used to the extent necessary to provide the services or content you have requested.

We forward the data to third parties if this is done on the basis of consent or is permitted by law in order to fulfill our contractual obligations to the users.

Contact by e-mail

If you send us an e-mail, your e-mail address will only be used for correspondence with you. We would expressly point out other purposes and request your consent for this. If necessary, we will forward specialist questions on seminar topics by e-mail to our relevant speakers.

Data protection information for online meetings, telephone conferences and webinars via “Zoom”, “Cisco Webex” and “Microsoft Teams”

We would like to inform you below about the processing of personal data in connection with the use of “Zoom”, “Cisco Webex” and “Microsoft Teams”.

Purpose of the processing

We use the tools “Zoom”, “Cisco Webex” and “Microsoft Teams” to conduct telephone conferences, online meetings, video conferences and/or webinars (hereinafter: “Online Meetings”). “Zoom” is a service of Zoom Video Communications, Inc. based in the USA. “Webex” is a service provided by Cisco Systems GmbH, which is based in Germany. “Microsoft Teams” is a service provided by Microsoft Corp, which is also based in the USA.

Controller

Norbert Herrmann is responsible for data processing that is directly related to the holding of “online meetings”.
Note: If you access the “Zoom”, “Cisco Webex” or “Microsoft Teams” website, the respective provider is responsible for data processing. However, accessing the website is only necessary for the use of “Zoom” in order to download the software for the use of “Zoom”. For “Microsoft Teams”, it is only necessary to download the app. For “Webex”, it is only necessary to download the software to use “Webex”.
You can also use “Zoom” and “Webex” if you enter the respective meeting ID and any other access data for the meeting directly in the respective app. With “Microsoft Teams”, you can participate in the conferences in the app using “Link”, the integrated calendar in “Teams” or in the respective chats or “Teams channels”.
If you do not want to or cannot use the “Zoom”, “Teams” or “Webex” app, the basic functions can also be used via a browser version, which you can also find on the “Zoom”, “Webex” or “Microsoft” website.

What data is processed?

When using “Microsoft Teams”, “Webex” or “Zoom”, various types of data are processed. The scope of the data also depends on the data you provide before or when participating in an “online meeting”.
The following personal data is processed:

User details: first name, surname, telephone (optional), e-mail address, password (if “single sign-on” is not used), profile picture (optional), department (optional)
Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information
When dialing in with the telephone: information on the incoming and outgoing phone number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be saved.
Text, audio and video data: You may have the option of using the chat, question or survey functions in an “online meeting”. In this respect, the text entries you make are processed in order to display them in the “online meeting” and, if necessary, to log them. In order to enable the display of video and the playback of audio, the data from the microphone of your end device and from any video camera of the end device will be processed accordingly for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time via the “Zoom”, “Webex” or “Microsoft Teams” applications.
To take part in an “online meeting” or to enter the “meeting room”, you must at least provide information about your name.

Scope of the processing

We use “Microsoft Teams”, “Webex” or “Zoom” to conduct “online meetings”.
If it is necessary for the purposes of logging the results of an online meeting, we will log the chat content. However, this will not usually be the case.
If you are registered with “Zoom” as a user, reports on “online meetings” (meeting metadata, telephone dial-in data, questions and answers in webinars, survey function in webinars) can be stored for up to one month at “Zoom”.
If you are registered with “Microsoft Teams” as a user or participate in a conference as a guest, reports on “online meetings” (meeting metadata, telephone dial-in data) can be stored in Teams until the end of the meeting or the respective educational measure plus one month beyond that.
If you are registered as a user with “Webex”, reports on “online meetings” (meeting metadata, telephone dial-in data, questions and answers in webinars, survey function in webinars) can be stored for up to one month with “Webex”.
The possibility of software-based “attention monitoring” (“attention tracking”) in “online meeting” tools such as “Webex” is deactivated.
Automated decision-making within the meaning of Art. 22 GDPR is not used.

Legal basis for data processing

Insofar as personal data of employees of the law firm Reiter und Kollegen is processed, Section 26 BDSG is the legal basis for data processing.
If, in connection with the use of “Microsoft Teams”, “Webex” or “Zoom”, personal data is not required for the establishment, implementation or termination of the employment relationship, but is nevertheless an elementary component of the use of “Microsoft Teams”, “Webex” or “Zoom”, Art. 6 para. 1 lit. f) GDPR is the legal basis for data processing. In these cases, our interest lies in the effective conduct of “online meetings”.
Otherwise, the legal basis for data processing when conducting “online meetings” is Art. 6 para. 1 lit. b) GDPR, insofar as the meetings are conducted within the framework of contractual relationships.
If there is no contractual relationship, the legal basis is Art. 6 para. 1 lit. f) GDPR. Here too, we have an interest in the effective conduct of “online meetings”.

Recipients / disclosure of data

Personal data that is processed in connection with participation in “online meetings” is not passed on to third parties unless it is intended to be passed on. Please note that content from “online meetings”, as with face-to-face meetings, is often used to communicate information with customers, interested parties or third parties and is therefore intended to be passed on.
Other recipients: The provider of “Microsoft Teams”, “Webex” or “Zoom” necessarily receives knowledge of the above-mentioned data, insofar as this is provided for in the context of our order processing contract with “Microsoft”, “Webex” or “Zoom”.

Data processing outside the European Union

“Microsoft Teams”, ‘Webex’ and ‘Zoom’ are services provided by a provider from the USA. Personal data is therefore also processed in a third country. We have concluded an order processing agreement with all providers that meets the requirements of Art. 28 GDPR.
An appropriate level of data protection is guaranteed by the conclusion of the so-called EU standard contractual clauses.

Deletion of data

We are committed to the principles of data avoidance and data economy. Unless otherwise specified or required by law, we only store your data for as long as we need it, e.g. to process a request.

Your right to information

In accordance with § 34 and § 35 of the Federal Data Protection Act, you as a user have the right to request information at any time about what data we have stored about you and for what purpose this data is stored. In addition, as a user you have the right to correct incorrect data, revoke consent, block and delete your personal data as well as the right to lodge a complaint with the competent supervisory authority in the event of the assumption of unlawful data processing.

Security of your data

Your personal data provided to us is secured by taking all technical and organizational security measures to ensure that it is as inaccessible as possible to unauthorized third parties. We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible. When sending very sensitive data or information, it is advisable to use the postal service.

Changes to our privacy policy

We reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit. By using the website, you agree to the terms of this privacy policy. If you have any questions about this privacy policy, please contact us via our contact page.