We would like to inform you below about the processing of personal data in connection with the use of “Jitsi”.

Purpose of Processing

For reasons of information security and data protection, we preferably use a self-hosted “Jitsi” instance to conduct telephone conferences, online meetings, video conferences, and/or webinars (hereinafter: “Online Meetings”).

The Jitsi instance of embedded brains GmbH & Co. KG is operated on an internal server of embedded brains GmbH & Co. KG.

Responsible Party for the Processing of Personal Data and Contact for Data Protection Issues:

embedded brains GmbH & Co. KG Dornierstr. 4 D-82178 Puchheim Germany Phone: +49-(0)89-189 47 41-00 Email: info@embedded-brains.de

Processed Data

Registration is not required to participate in a video conference via Jitsi. Jitsi does not store user data, and video conferences are end-to-end encrypted.

When using our Jitsi instance, the following personal data may be processed:

• Usage Data: IP address, device information, browser type, date and time of use
• Communication Data: Audio and video content, chat messages (if enabled), shared screen content
• Contact Data: Name or pseudonym, if provided by you

As a rule, “Online Meetings” are not recorded. If we record “Online Meetings” at the customer’s request as part of project work, we will inform you transparently in advance and, if necessary, request your consent.

Automated decision-making within the meaning of Art. 22 GDPR is not used.

Other data, such as chat or speaker statistics, are only stored for the duration of the meeting.

Legal Basis for Processing

To the extent that personal data of employees of embedded brains GmbH & Co. KG are processed, § 26 BDSG (German Federal Data Protection Act) is the legal basis for data processing. If personal data are processed in connection with the use of “Jitsi” that are not necessary for the establishment, implementation, or termination of the employment relationship but are an essential part of using “Jitsi,” the legal basis for data processing is Art. 6(1)(f) GDPR. In these cases, our interest lies in the effective conduct of “Online Meetings.”

Otherwise, the legal basis for data processing in the conduct of “Online Meetings” and project work is Art. 6(1)(b) GDPR, insofar as the meetings are conducted within the framework of contractual relationships.

If there is no contractual relationship, the legal basis is Art. 6(1)(f) GDPR. Here, too, our interest lies in the effective conduct of “Online Meetings” and project work.

Recipients or Categories of Recipients of Personal Data

Personal data processed in connection with participation in “Online Meetings” and project work are not generally disclosed to third parties by us, unless they are specifically intended for disclosure. Please note that content from “Online Meetings,” as with in-person meetings, often serves to communicate information with customers, prospects, or third parties and is thus intended for disclosure.

Transfer of Personal Data to a Third Country

Processing of data outside the European Union (EU) does not take place.

Duration of Storage of Personal Data

We generally delete personal data when there is no longer a need for further storage. A need may exist, in particular, if the data are still required to fulfill contractual services, to review and grant warranty and, if applicable, guarantee claims, or to defend against them. In the case of legal retention obligations, deletion will only be considered after the respective retention period has expired.

Your Rights as a Data Subject

You have the right to information about the personal data concerning you. You can contact us at any time for information.

For information requests that are not made in writing, we ask for your understanding that we may require proof from you to confirm that you are the person you claim to be.

Furthermore, you have the right to rectification, erasure, or restriction of processing, insofar as this is provided for by law.

You also have a right to object to processing within the framework of legal provisions.

A right to data portability also exists within the framework of data protection regulations.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint about the processing of your personal data by us with a supervisory authority for data protection.