· 3 min read · News
Online Meeting and Webinar Tools – a dataprivacy consideration
With the CoVID-19 limitations regarding events, academies, trainings and meetings we have to move our activities from meetings in person to digital meetings.
A big variety of tools is available of which you can choose, offering various functions, various price models and also with different privacy settings.
Regina Stoiber, lawyer and member of JCI Germany has investigated various tools regarding data privacy and the ability to use them in your company. Please find the original document (in German) on Regina Stoiber’s website.
Here you find an overview of various tools that have been checked for data protection. This is not a comprehensive list, but tools that we have heard are mainly used in Local and National Organizations of JCI Europe.
Additionally to the ones listed below, JCI Europe uses the tool Clickmeeting. This has been developped by “GetResponse”, and has been spun off as separate company, based in Poland.
Google Meet (Hangouts)
Criteria
| Producer, Country | Google Ireland Ltd., Ireland |
|---|---|
| Representative in the EU (acc. Art. 27 GDPR) | not applicable |
| SaaS (Server location) | Yes (Ireland), part of the GSuite |
| Encrypted Transmission (TLS) | Yes |
| Order processing contract | Yes, for the GSuite |
| Link OP Contract | Data processing agreement |
| on-premise | No |
| End-to-End-Encryption | No |
| Ensuring the level of data protection | EU-Privacy-Shield |
| Data Protection | Privacy information |
| GDPR-compliant (Producer’s specification) | Yes |
| Use of the data for own purposes | No specific statement on this, but Google assures that the data will not be sold and used for advertising. In addition, there is no user attention tracking. |
| URL | Product website |
GoToMeeting
Criteria
| Producer, Country | LogMeIn, USA |
|---|---|
| Representative in the EU (acc. Art. 27 GDPR) | LogMeIn Technologies UK Limited |
| SaaS (Server location) | Yes (USA) |
| Encrypted Transmission (TLS) | Yes |
| Order processing contract | Yes |
| Link OP Contract | Data processing agreement (GDPR compliant addendum for processing customer data) |
| on-premise | No |
| End-to-End Encryption | Yes |
| Ensuring the level of data protection | EU-Privacy-Shield |
| Data protection | Privacy information |
| GDPR-compliant (Producer’s specification) | Yes |
| Use of the data for own purposes | According to AV, LogMeIn processes the data for the operation of the service. |
| URL | Product website |
Teams
Criteria
| Producer, Country | Microsoft Corporation, USA |
|---|---|
| Representative in the EU (acc. Art. 27 GDPR) | |
| SaaS (Server location) | Europe incl. Germany for EU clients |
| Encrypted Transmission (TLS) | Yes |
| Order processing contract | Yes |
| Link OP Contract | Data processing agreement |
| on-premise | No |
| End-to-End Encryption | No |
| Ensuring the level of data protection | EU-Privacy Shield |
| Data protection | Privacy information |
| GDPR-compliant (Producer’s specification) | Yes |
| Use of the data for own purposes | Provision, further development, personalization, but also for personalized advertising mailing, the data is used according to the privacy policy. |
| URL | Product website |
WebEx
Criteria
| Producer, Country | Cisco, USA |
|---|---|
| Representative in the EU (acc. Art. 27 GDPR) | The provider has various companies in Europe. |
| SaaS (Server location) | USA |
| Encrypted Transmission (TLS) | Yes |
| Order processing contract | Yes |
| Link OP Contract | Data processing agreement |
| on-premise | Yes |
| End-to-End Encryption | Yes, but this may lead to limited functionality |
| Ensuring the level of data protection | EU-Privacy Shield |
| Data protection | Privacy information |
| GDPR-compliant (Producer’s specification) | Yes |
| Use of the data for own purposes | Use of functions, customer service, market information (the data protection declaration does not assign data to products) |
| URL | Product website |
Zoom
Criteria
| Producer, Country | Zoom Video Communications, Inc., USA |
|---|---|
| Representative in the EU (acc. Art. 27 GDPR) | |
| SaaS (Server location) | USA |
| Encrypted Transmission (TLS) | Yes |
| Order processing contract | Yes |
| Link OP Contract | Data processing agreement |
| on-premise | No |
| End-to-End Encryption | No, according to the manufacturer, this security feature is under progress |
| Ensuring the level of data protection | EU-US-Privacy Shield |
| Data protection | Privacy information |
| GDPR-compliant (Producer’s specification) | Yes |
| Use of the data for own purposes | |
| URL | Product website |