Privacy Statement

Microsoft Teams

Protecting your data is of utmost importance to us. Our privacy statements for different groups of data subjects offer a brief overview of the personal data we collect and what it is used for.

We, CAMPUS 02 University of Applied Sciences (abbr. CAMPUS 02 UAS), Körblergasse 126, 8010 Graz, use the “Microsoft Teams” tool to facilitate communication via telephone conferences, online meetings, online events and video conferences.

When using the “Microsoft Teams” tool, this personal data of participants is processed (further information can also be found at https://privacy.microsoft.com/de-de/privacystatement):

User details: e.g. specified username, for existing accounts also: email, password, profile picture (optional), telephone (optional), department (optional)

Metadata of meeting: e.g. IP address, device and hardware information, time of participation, meeting reports

Text, audio, video and other content data: e.g. text entries when using the chat function, microphone and camera data of your device during the meeting in the course of audio and video playback (microphone and camera can be deactivated in the settings), shared files

When dialling in by telephone: e.g. incoming and outgoing phone number, start and end time

Recordings (image, sound and chat within the web conference) for review are typically only made as part of selected online events after prior announcement, but not for individual appointments.

Both the recording function and the transcription function are used for interviews in projects carried out by students on behalf of the UAS or by staff members for the purpose of market research. This supports the implementation of projects and UAS operations in particular. For selected online events, the transcription function is activated after prior notification in order to ensure barrier-free access to the event.

As part of the transcription process, the spoken word is converted into a written text. For this purpose, Microsoft uses artificial intelligence (AI), which uses the above-mentioned data - and possibly data outside the meeting that is linked to your person in the case of an existing Microsoft account - to ensure, among other things, the improvement of jargon and accuracy. Microsoft does not use the processed data to improve the AI and the AI models created are automatically deleted after each meeting.

The processing of this data is based on the one hand on the fulfillment of a pre-contractual or contractual legal relationship according to Art. 6 para. 1 cl. b EU General Data Protection Regulation (GDPR) and is carried out either for the purpose of handling online meetings, consultations or events or for the purpose of fulfilling the Study Contract and handling the study operation or fulfilling the service contract and on the other hand on the basis of the legitimate interest according to Art. 6 para. 1 cl. f GDPR in an efficient and, if necessary, barrier-free implementation of online conferences at FH CAMPUS 02 . Furthermore, we process this data in the context of qualitative interviews on the basis of the legitimate interest of supporting scientific research (Art. 89 para. 1 GDPR in conjunction with § 2f para. 5 FOG) or, in certain cases, on the basis of consent according to Art. 6 para. 1 cl. a GDPR. This consent given in individual cases can be revoked at any time at datenschutz@campus02.at , whereby the legality of the processing carried out until the revocation is not affected.

Microsoft retains personal data for as long as necessary for the purpose of providing its services. Further information on data erasure can be found in Microsoft's privacy statement (https://privacy.microsoft.com/de-de/privacystatement).

Any data stored by us will be deleted in accordance with internal regulations (see respective privacy statements under https://www.campus02.at/en/startseite/datenschutz/)

Interview recordings for projects carried out by students on behalf of the UAS or by staff members for the purpose of market research will be deleted upon completion of the project. The AI models created for transcription will be deleted by Microsoft immediately after the meeting.

In the case of recordings of selected UAS online events, raw recording and/or transcription data will be deleted after the material has been post-processed. During post-processing, care is always taken to ensure that indicators that allow conclusions to be drawn about individual participants are removed - with the exception of speakers who have given their prior consent to the further processing of the final material.

Your personal data is treated as confidential and is generally processed only by CAMPUS 02 UAS staff members internally.

However, data processors who have been commissioned by us can also process data for the purposes mentioned if they can ensure adequate data security. For example, the above-mentioned data categories can be viewed and processed by external IT service providers, in cases where support is required.

We use the Microsoft Teams cloud service from ‘Office 365’ (from the processor Microsoft) for online meetings. Hosting takes place primarily within the European Union in accordance with European data protection law. Individual services and technical support can also be provided outside the European Union. Data transfer to the USA is therefore possible in principle.

On July 10, 2023, the European Commission adopted an adequacy decision on the Data Privacy Framework (data protection agreement between the EU and the USA). If providers in the USA certify themselves in accordance with these data protection requirements (which, among other things, restrict access to data by US authorities and provide legal protection for EU citizens), an adequate level of data protection is generally guaranteed for data transfers. You can check which providers are included in the list here: https://www.dataprivacyframework.gov/s/participant-search

Microsoft has undergone this self-certification. The data transfer can therefore be based on the adequacy decision on the Data Privacy Framework as a valid legal basis for data transfers to the USA. Furthermore, the standard contractual clauses and additional technical and organizational measures guaranteed by Microsoft also apply. Further information on data processing can be found in Microsoft's privacy policy (https://www.microsoft.com/de-de/privacy/privacystatement).

Please note that we will update this privacy statement from time to time (e.g. due to law amendments, usage of new technology, new study opportunities). We recommend that you regularly check it for updates.

In general, you have right of access, the right to rectification, to erasure, to restrict, to data portability, to withdraw and to object.
If you do, please contact us — we will be happy to help.

Data Protection Coordination Team
at CAMPUS 02 UAS

CAMPUS 02 - University of Applied Sciences
Körblergasse 126, 8010 Graz
+43 316 6002-8909
datenschutz@campus02.at

Data Protection Officer
at CAMPUS 02 UAS

dsb@campus02.at

If you believe that processing your data violates data protection laws or that your data protection rights have been infringed in some other way, you can also file a complaint with the supervisory authority. In Austria, the competent supervisory authority is the Austrian Data Protection Authority in Barichgasse 40-42, 1030 Vienna, telephone no.:+43 1 52 152-0, e-mail dsb@dsb.gv.at.