Data protection declaration “BigBlueButton”

The following data protection declaration applies to the use of our online meeting service BigBlueButton.

We attach great importance to data protection. Your personal data is collected and processed in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

1. Responsible contact

Responsible for the collection, processing and use of your personal data within the meaning of Art. 4 No. 7 GDPR:
Thorsis Technologies
Oststraße 18
39114 Magdeburg
E-Mail: info [at] thorsis.com
Tel.: +49-391-544 563-1000

2. The collection and processing of data on usage of „BigBlueButton“

2.1 Capacity of data collection and processing

If you have video conferes or online meetings and use the service „BigBlueButton“ provided by Thorsis Technologies GmbH then we might acquire some of the following data:

  1. User data: First name, last name, Nickname (Pseudonym), User ID
  2. Meeting metadata: topic, description (optional), participant IP address, hardware information
  3. Meeting contents: Audio , Video and maybe text data contributed through meetings, contents of chats, set availability status, contributions to the shared whiteboard, choices on surveys, shared files on uploads and contents on shared screens
  4. Thorsis Technologies GmbH will not store any video conferences or its contents except being settled before with each participant.
    The optional meeting recording is done on a MP4 base for all video and audio records and presentations and on a OPUS base on audio records, text data for chats and an audio log file

2.2 Objective of data collection and processing

The collecting and processing of your personal data is only used to provide „BigBlueButton“ as a tool for video conferences and online meetings.

2.3 Legal basis for data collection and processing

As far as we get your agreement for collecting and processing your personal data while using „BigBlueButton“ the legal basis is Art. 6 para. 1 lit. a GDPR.

As far as collecting and processing your personal data while using „BigBlueButton“ is nessecary to fulfill a contract on which you are participating or pre-contractual measurements you were asking for the legal basis is Art. 6 para. 1 lit. b GDPR.

As far as collecting and processing your personal data while using „BigBlueButton“ is nessecary to fulfill a legal obligation which is subject to Thorsis Technologies GmbH the legal basis is Art. 6 para. 1 lit. c GDPR.

2.4 Access to personal data

All participants in a video conference have access to the content of the video conference, chats, shared files and contributions on whiteboards in the sense of seeing, hearing and reading. The hoster only has access to the processed data as part of the order processing.

2.5 Transmission of personal data

Our „BigBlueButton“ server is hosted by netcup GmbH Daimlerstr. 25 76185 Karlsruhe. netcup GmbH processes the personal data exclusively on our behalf. Accordingly, they may only use them in accordance with our instructions and for our purposes and not for their own purposes, i.e. neither for advertising nor to pass them on to third parties. In terms of data protection law, there is therefore no transmission.

2.6 Duration of storage of personal data

Thorsis Technologies GmbH does not store any personal data in connection with the use of BigBlueButton. Video conferences and chats are neither recorded nor saved unless expressly agreed. The content of chats, shared files and whiteboards are deleted from the platform as soon as a conference room is closed. The deletion of user accounts and related data takes place within one month after revocation of the consent or upon termination of the cooperation.

In principle, personal data that we process when using “BigBlueButton” are deleted as soon as they are no longer required for the purposes for which they were collected. If and to the extent that the processing is based on your consent, the data will only be stored until you revoke your consent, unless there is another legal basis for the processing.

3. Your rights as a data subject

You have a right to information about your personal data processed by Thorsis Technologies GmbH (Art. 15 GDPR), a right to correct your personal data (Art. 16 GDPR), a right to deletion (Art. 17 GDPR), a right to restriction of processing (Art. 18 GDPR), a right to object to processing (Art. 21 GDPR) and, insofar as the processing is based on your consent, a right to withdraw your consent (Art. 7 Para. 3 GDPR).

You also have the right to lodge a complaint with the competent supervisory authority.

4. Supervisory authority:

State Commissioner for Data Protection Saxony-Anhalt

Leiterstraße 9
39104 Magdeburg
Postal address:
Postfach 1947
39009 Magdeburg

Email: poststelle@lfd.sachsen-anhalt.de

5. Validity

The data protection declaration was last changed on August 11, 2021.