---
type: source
title: Zoom Data Protection Policy - Universität Greifswald
tags: ["privacy", "gdpr", "zoom", "web-conferencing", "datenschutz"]
related: ["zoom-privacy-policy", "gdpr-compliance", "zoom", "web-conferencing"]
created: 2026-07-01
updated: 2026-07-01
authors: [Universität Greifswald]
year: 2026
url: "https://rz.uni-greifswald.de/dienste/webdienste/webkonferenz/datenschutz"
venue: "URZ Web Services"
sources: ["output/rz_uni_greifswald_de_dienste_webdienste_webkonferenz_datenschutz.md"]
---

# Zoom Data Protection Policy - Universität Greifswald

This source document outlines the data protection framework and official guidelines for the use of the **Zoom** web conferencing service at the **Universität Greifswald**. It details the legal basis for processing, the types of data collected, and the specific technical configurations implemented by the university to ensure [[gdpr-compliance]].

## Governance
- **Controller:** Universität Greifswald, represented by Rector [[prof-dr-katharina-riedel]].
- **Data Protection Officer:** [[dominique-kandzia]] via [[sis-schweriner-it-und-servicegesellschaft-mbh]].
- **Supervisory Authority:** [[landesbeauftragte-fur-datenschutz-und-informationsfreiheit-mecklenburg-vorpommern]].

## Legal and Contractual Framework

### GDPR Compliance and Data Sovereignty
The university ensures compliance through a **Custom Data Processing Agreement** with Zoom Video Communications, Inc. to ensure that data processing meets GDPR standards and to mitigate risks associated with the provider being based in the USA.

### Legal Bases
- **Public Interest:** Art. 6(1)(e) GDPR in conjunction with § 3 LHG M-V.
- **Contract/Employment:** Art. 6(1)(b) GDPR in conjunction with Art. 88 GDPR and § 10 DSG M-V.
- **Consent:** Art. 6(1)(a) GDPR is required specifically for the recording of meetings.

## Technical Privacy Configurations

### Data Routing and Minimization
- **European Data Center Routing:** All video conferences are routed exclusively through data centers located in Europe to minimize international data transfer risks.
- **Data Minimization:** Zoom is configured to transmit and store the minimum amount of data necessary; data minimization is enforced across all functional areas.

### Feature Restrictions
- **Attention Tracking:** The software-based "Attention Tracking" (Aufmerksamkeitsüberwachung) feature is explicitly deactivated.
- **Automated Decision Making:** No automated decision-making per Art. 22 GDPR is employed.

### Access and Voluntariness
- **Voluntary Use:** No student or teacher is forced to use Zoom; use of the service is voluntary for both.
- **Access Methods:** While the Zoom app is standard, basic functions and alternative access are available via a **browser version** for users who cannot or will not install the software.

## Data Scope

### Processed Data Types
- **User Data:** Name, email, and optionally phone, profile picture, and department.
- **Meeting Metadata:** Meeting topic, description, participant IP addresses, and hardware information.
- **Phone Dial-in:** Phone numbers (incoming/outgoing), country, and timestamps.
- **Interactive Data:** Chat inputs, polls, and audio/video streams from microphones and cameras.
- **Recordings (Optional):** MP4 (video/audio/presentation), M4A (audio), and text files of chats/chat logs.

### Processing Limits
- **Recordings:** Only performed after transparent prior notification and explicit consent.
- **Chat Logs:** Only logged if necessary for documenting results (noted as rare).
- **Retention:** Meeting reports for registered users are stored for up to one month.