Data protection information for online events organized by MEDICE Ibérica and held on Zoom
Dear participants,
MEDICE Ibérica, MEDICE Arzneimittel Pütter GmbH & Co. KG and Zoom Communications Inc. collect and process your personal data as part of your participation in one of our webinars.
We use the "Zoom" tool from Zoom Video Communications, Inc. to conduct our online events. Zoom Video Communications, Inc. is based in the USA.
Note: If you access the "Zoom" website, the provider of "Zoom" is responsible for data processing. However, accessing the website is only necessary for the use of "Zoom" in order to download the software for the use of "Zoom".
You can also use "Zoom" if you enter the relevant meeting ID and any other access data for the meeting directly in the "Zoom" app.
If you do not want to or cannot use the "Zoom" app, the basic functions can also be used via a browser version, which you can also find on the "Zoom" website.
The following personal data is collected from you:
Contact details (first and last name, e-mail address, city, country/region, postal code)
Meeting metadata (topic, description (optional), participant IP addresses, device/hardware information, participation, duration of participation)
Video, audio and presentation recordings, text file of the webinar chat (incl. names of participants who ask questions in the chat)
When dialing in with the telephone (information on the incoming and outgoing number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be saved).
Text, audio and video data: You may have the option of using the chat, question or survey functions in an "online meeting". In this respect, the text entries you make are processed in order to display them in the "online meeting" and, if necessary, to log them.
For the duration of the online event, the microphone of your end device and the video camera of your end device will be switched off or muted in order to prevent unlawful recordings of your person.
To participate in an online event or enter the "meeting room", you must at least provide your name.
The legal basis for the processing of your personal data is your informed, voluntary consent in accordance with Art. 6 para. 1 lit. a) GDPR, as well as our legitimate interest in the effective implementation of the webinar in accordance with Art. 6 para. f) GDPR.
Responsible body for data protection in accordance with the GDPR:
MEDICE IBÉRICA, S.L.
C/Muntaner 179, 3º1ª
08036 – Barcelona - Spain
Phone: +34 936 41 55 11
The personal data collected is processed for the following purposes:
Conducting and, if necessary, recording the webinar
Transmission of the certificate of attendance and, if necessary, the webinar recording to registered participants
optional: for subsequent contact for information and marketing purposes
The data collected as part of the online event registration and participation will be collected on the servers of the service provider Zoom Video Communications Inc. in the USA and stored for 6 months after the webinar has been held. Only the employees of MEDICE Ibérica involved in conducting the online event have access to this data. At the end of this storage period, the data is automatically deleted from the servers of Zoom Video Communications Inc.
If necessary, the video recording of the online event will be collected on the servers of the service provider Zoom Video Communications Inc. in the USA and stored for 6 months after the online event has taken place. Access to this data is restricted to employees of MEDICE Ibérica involved in the online event and registered participants of the online event. At the end of this storage period, the data will be automatically deleted from the servers of Zoom Video Communications Inc.
If you are registered with "Zoom" as a user, reports on "online meetings" (meeting metadata, telephone dial-in data, questions and answers in webinars, survey function in webinars) can be stored for up to 12 months at "Zoom".
Further information on Zoom's privacy policy can be found at: https://www.zoom.com/en/trust/privacy/
After the online event, the data collected from you will be downloaded from the servers of Zoom Video Communications Inc. and further processed and stored on the access-protected servers of MEDICE Arzneimittel Pütter GmbH & Co. KG, as the parent company responsible for IT infrastructure at MEDICE Ibérica in Germany, for the purposes of certificate transmission, follow-up to the online event, and, if necessary, transmission of the link to the online event recording.
Only authorized MEDICE Ibérica employees involved in the webinar will have access to this data.
If you have not consented to the further use of your data collected during event registration and participation for subsequent contact for information and marketing purposes, your personal data will be deleted manually by MEDICE Ibérica after transmission of the certificate of participation and, if applicable, the link to the event recording.
If you have consented to the use of your data for subsequent contact for information and marketing purposes, your contact details will be stored on the servers of MEDICE Arzneimittel Pütter GmbH & Co. KG and processed until you revoke your consent through MEDICE Ibérica.
Personal data may be transferred to the following third parties:
competent authorities, in the event of an inspection
registered event participants (if you asked questions via the chat function during the webinar)
MEDICE Arzneimittel Pütter GmbH & Co. KG, as the parent company responsible for IT infrastructure at MEDICE Ibérica
Processors subject to the instructions of MEDICE Arzneimittel Pütter GmbH & Co. KG (Zoom Video Communications Inc.)
There are corresponding contractual agreements in accordance with Art. 26 GDPR between MEDICE Ibérica and MEDICE Arzneimittel Pütter GmbH & Co. KG.
The IT service provider Zoom Video Communications Inc. used by MEDICE Arzneimittel Pütter GmbH & Co. KG is a US company. MEDICE Arzneimittel Pütter GmbH & Co.KG only uses US companies that are certified under the EU-US Data Privacy Framework, meaning that the adequacy decision of the EU Commission pursuant to Art. 45 GDPR applies (i.e. an adequate level of data protection exists) and that data processing takes place exclusively on servers within the EU. In order to protect your data, agreements on order processing based on the standard contractual clauses of the European Commission have also been concluded with the service providers.
MEDICE Ibérica guarantees that your data will only be passed on to entities that can demonstrate an appropriate data protection concept in accordance with the applicable regulations and laws and with which, if necessary, appropriate contractual agreements have been concluded in accordance with Art. 26 or Art. 28 GDPR.
When processing your personal data, our aim is to guarantee your data protection rights at all times.
You can exercise the following rights in relation to your personal data:
You can request information about the processing of your data.
You can request that your personal data be amended if it is incorrect or incomplete.
You can request the restriction of the processing of your personal data. (1) For the duration of the verification of the accuracy of the data. (2) If the processing is unlawful and you oppose erasure. (3) If the data are no longer required by the controller for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims. (4) In the event of an objection to data processing, as long as the relevant balancing of interests has not been clarified.
You can request that the data collected about you be transferred to you or to a body designated by you.
If there is a basis for complaint, you can lodge a complaint with the competent data protection authority.
You can contact the Spanish data protection supervisory authority at
Agencia Espanola de Protección de Datos (AEPD)
C/Jorge Juan, 6
E - 28001 Madrid
Phone: + 34 91 266 35 17
E-mail: internacional[at]aepd.es
Homepage: https://www.agpd.es/
You can request the deletion of the data collected about you.
You can object to the processing of your personal data for reasons arising from your particular situation at any time, informally and without giving reasons. If the processing is based on Art. 6 para. 1 lit. e) or f) GDPR.
You can revoke your consent to data processing at any time, informally and without giving reasons.
You will not suffer any disadvantages in the event of a revocation/objection. The revocation/objection applies with effect for the future; the previous data transfers remain lawful. From now on, your data will only be processed by MEDICE Ibérica to a limited extent if this is required by law in accordance with Art. 6 para. 1 lit. c) and our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR.
If you have any further questions about the handling of your personal data or would like to make use of your other rights, please contact us at privacy-spain[at]medice.com.
You can also contact our parent company MEDICE Arzneimittel Pütter GmbH & Co. KG in Germany at:
MEDICE Arzneimittel Pütter GmbH & Co. KG
Data protection
Kuhloweg 37
58638 Iserlohn - Germany
Phone: +49 (0)2371 937
E-mail: datenschutz[at]medice.de
For confidential matters relating to data protection, you can contact our data protection officer directly at: dsb[at]medice.de