Data security information for the use of Microsoft Teams at the University of Applied Sciences for Health Professions Upper Austria
The University of Applied Sciences for Health Professions Upper Austria provides the Microsoft Teams application for virtual cooperation as part of its IT infrastructure services. This app is a product of Microsoft Ireland Operations Limited, which is a certified processor of the University of Applied Sciences for Health Professions Upper Austria.
Depending on application, audio visual data, chats, and information about individual use as well as uploaded data and other contributions from participants cooperating in “Teams“ (= a defined group of persons working exclusively together) will be processed. The data – except for the technically necessary transfers to Microsoft Corporation for operating the application – will not be forwarded to third party recipients. (Microsoft is contractually bound to transfer technically necessary data for ongoing system maintenance to third countries in exceptional cases only. In such events, standard contractual clauses for the data transfer will be provided, and technical (= encoding of the data) and organisational (= guidelines for protecting its use) safety measures will be implemented.)
Nevertheless, we wish to point out that there are no legal arrangements with the European Commission for data transfer to the United States of America which would confirm an appropriate data security level under certain conditions. Risks concerning the transfer of personal data to the USA which may be posed by the US-American legal situation and which may not ensure an equal level of EU data protection, cannot be completely excluded.
The University of Applied Sciences for Health Professions Upper Austria generally refers to the legal basis constituted by Article 6 Section 1 f in relation to Article 46 and Article 49 General Data Protection Regulation (GDPR), which allows the processing and transfer of data on the basis of appropriate guarantees for the protection of legitimate interests. The prevailing of interests of the University of Applied Sciences for Health Professions Upper Austria is justified by the fact that there is a need for the use of digital media regarding the maintenance of its general ongoing operation, as well as for the organisation of virtual meetings, and for digital cooperation. Thus, and for data security reasons, the University of Applied Sciences for Health Professions Upper Austria provides and maintains an infrastructure which is subject to EU data protection requirements.
Upon receiving the meeting request, your name (= your Microsoft user name or your email address) will be displayed in the list of participants in the chat window and will be visible for all participants during and even after the meeting is ended. If the initiator of the meeting has activated the chat function during the meeting, the chat messages of all participants will also remain visible during and even after the meeting is ended.
If the meeting will be recorded, you will be informed about the purpose and legal basis of the recording in advance, and if necessary, you will be asked for your consent. You can see that the recording is in progress when the frame of the chat window lights up blue. You may also refuse your permission for audio visual recordings by deactivating your camera and microphone.
The University of Applied Sciences for Health Professions Upper Austria, Semmelweisstraße 34, 4020 Linz, is responsible for the data processing. Persons who are affected by the data processing have the right, at all times, to free information, correction, deletion, or restriction of their personal data as well as have been provided with the right to object regarding data processing based on the premise of relevant rules relating to data protection.
In the events of queries, suggestions and complaints with respect to data protection, please contact the data protection coordinator and the data protection officer at the University of Applied Sciences for Health Professions Upper Austria by email at: firstname.lastname@example.org. In addition, and in accordance with Article 77 of the General Data Protection Regulation (GDPR) persons concerned have the right to file a complaint with the Austrian data protection authorities, Barichgasse 40-42, 1030 Wien, by email email@example.com, https://www.dsb.gv.at, if they consider that the processing of their personal data is not lawfully executed.
(Last updated on: 16.4.2021)