Privacy policy for Snapview Cloud Software

Thank you for your interest in our company. In the following, we would like to inform you in accordance with Art. 13 of the EU General Data Protection Regulation (GDPR) about the processing of personal data when using this website at engage.bsi-software.com, app.snapview.de and associated sub-domains.

Responsible for this website within the meaning of the EU GDPR and other national data protection laws of the member states as well as other data protection regulations is the:

BSI Business Systems Integration Deutschland GmbH

Rheinstrasse 97

64295 Darmstadt

Phone: +49 6151 493 54 00

Fax: +49 61514 935 497

E-mail: info@bsi-software.com

The data protection officer of the controller is

Lawyer Sascha Weller

IDR Weller - Institute for Data Protection Law

Ziegelbräustrasse 7

85049 Ingolstadt

Phone: +49 89 189 170 999

E-mail: datenschutz@bsi-software.com

1. general information on data processing

We only process our users' personal data to the extent necessary to provide a functional website and our content and services.

If we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b EU GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Ifthe processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c EU GDPR serves as the legal basis.

If the vital interests of the data subject or of another natural person require the processing of personal data, Art. 6 para. 1 lit. d of the GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f EU GDPR serves as the legal basis for the processing.

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

We sometimes use specialized providers for the provision of our website or certain services on the website (e.g. for hosting the pages or sending newsletters). These providers act as service providers for us and may also obtain knowledge of your personal data in connection with the maintenance and care of the systems. We have concluded so-called order processing contracts with these providers in accordance with Art. 28 EU GDPR, which ensure that data processing is carried out in a permissible manner.

2. provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

1. information about the browser type and version used

2. the user's operating system

3. the user's internet service provider

4. the full IP address of the requesting computer or the Internet access used by the visitor

5. the date and time of access

6. websites that are accessed by the user's system via our website

7. the amount of data transferred

8. the access status (file transferred, file not found, etc.)

The data (except for 3.) is also stored in the log files of our system. This data is not stored together with other personal data of the user.

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f EU GDPR.

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f EU GDPR.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after 90 days at the latest. Storage beyond this period is possible.

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. . As a result, the user does not have the option of objection.

3. use of web storage

Our website uses web storage. Web storage (also known as DOM storage) is a technology for web applications that is used to store data in a web browser. Web storage supports persistent data storage, similar to cookies, as well as local (local storage) and session-specific storage (session storage).

We use web storage to make our website more user-friendly. The following data is stored and transmitted in web storage:

1. settings for the selection of media devices

2. selection of video backgrounds

The legal basis for the processing of personal data using web storage is Art. 6 para. 1 lit. f EU GDPR.

The purpose of its use is to simplify the use of the website for users. Some functions of our website cannot be offered without the use of web storage.

We need web storage for the following applications:

1. preselection of media devices

2. preselection of video backgrounds

The user data collected by Web Storage is not used to create user profiles.

These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f EU GDPR.

Information in web storage is stored on the user's computer and processed from there. Unlike cookies, this data does not leave the user's device and is not transferred to our servers. As a user, you therefore have full control over the use of web storage. You can deactivate or restrict the use of web storage by changing the settings in your Internet browser. Information that has already been stored can be deleted at any time. This can also be done automatically. If Web Storage is deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

4. registration & login for consultants

In order to provide the video consulting service, it is necessary for consultants to register with Snapview. We collect the following data to register and set up access to our system:

Name of the company (company)

Personal master data (salutation, title, first name and surname)

Address data (address, postal code, city, country)

Contact details (e-mail address, telephone numbers)

Profile data (profession, position title)

Payment data (depending on the agreed payment method, e.g. bank details)

The collection and processing of this information is necessary for the performance of the contract with each consultant or their employer. The legal basis for the storage of the data is Art. 6 para. 1 lit. b EU GDPR.

In of conducting video consultations, we also collect data for the proper functioning of our services, for the security of data and business processes, to prevent misuse and damage caused by interference with information systems and to improve our services:

Login data

Access data

Usage data

These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f EU GDPR, insofar as it is not already the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures.

The data will be deleted when it is no longer required for the fulfillment of the purpose, unless a longer retention period is required by law.

5. login for participants

By registering with Snapview, the consultant has concluded a license agreement for the Snapview software and a data protection agreement (in accordance with Art. 28 GDPR), on the basis of which we provide our services. The use of the video consultation is initiated by the consultant and is possible for participants without registering with Snapview. Participants receive the access data for the video consultation (URL and session number) from their advisor, possibly also a password. To participate in a video consultation, participants call up the URL provided by the advisor and enter the session number and their first and last name or a pseudonym.

6. snapshot

The advisor can take a snapshot of transmitted content during the video consultation. You will be asked for permission for the first snapshot. If you agree, you will receive a visual notification for each subsequent snapshot.

The legal basis for the processing of snapshots is consent pursuant to Art. 6 para. 1 lit. a EU GDPR or, in the case of a contract, Art. 6 para. 1 lit. b EU GDPR

The snapshots are stored temporarily in our data center. The data is deleted daily. The consultant can save the snapshots of the session on their computer.

7. records

The consultant can record the content of the session. You will be asked for your consent beforehand and a message will appear informing you that a recording is taking place. All media channels will be recorded

The legal basis for the processing of the recording is consent pursuant to Art. 6 para. 1 lit. a EU GDPR.

The recording is temporarily stored in our data center and deleted after transfer to the respective customer system after a certain period of time [the customer must specify the exact period here].

8. transcription

Transcription is a technique that automatically converts spoken language into text.

If your session is transcribed, you will receive a message before you enter the session. There are two options depending on the settings:

  1. You can only agree, otherwise you cannot enter the meeting.

  2. You can agree to the transcript or reject it and then enter the session. If you decline, your spoken language will not be transcribed. If other participants in the session have agreed to the transcription, they and the consultant will be transcribed.

The generated audio data remains in our data center and is deleted after 10 days for technical reasons.

The generated text data is forwarded to a peripheral system. For technical reasons, the text data is deleted in our data center after 10 days.

The legal basis for the processing of audio data / text data is consent pursuant to Art. 6 para. 1 lit. a EU GDPR.

9. electronic contract conclusion with electronic signature

During the session, a contract can also be concluded with an electronic signature. This service is fully controlled by our service provider inSign GmbH, Marzlingen. For details on data processing, please refer to the following privacy policy:

https://static.insign365.getinsign.cloud/insign-datenschutz.html

10. rights of the data subject

Every data subject has the right of access under Article 15 EU GDPR, the right to rectification under Article 16 EU GDPR, the right to erasure under Article 17 EU GDPR, the right to restriction of processing under Article 18 EU GDPR, the right to object under Article 21 EU GDPR and the right to data portability under Article 20 EU GDPR. With regard to the right of access and the right to erasure, the restrictions under Sections 34 and 35 BDSG-new apply. In addition, there is a right of appeal to a data protection supervisory authority (Article 77 EU GDPR in conjunction with Section 19 BDSG-new).

You can withdraw your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us before the EU GDPR came into force, i.e. before May 25, 2018. Please note that the revocation only takes effect for the future. Processing that took place before the withdrawal is not affected.

Status: 2025-02-21