Privacy Notice for Webinar Participants

(Microsoft Teams)

With this Privacy Notice, we areinforming you about the processing of your personal data in connection with the participation in webinars, conducted using the “Microsoft Teams” software.

1. Controller

BDO Austria Holding Wirtschaftsprüfung GmbH is the controller responsible for the collection and processing of personal data in connection with webinars.

2. Use of Your Personal Data

For the organisation, conduct and follow-up of webinars (information events, online training sessions and client information events), the BDO Austria Group uses Microsoft Teams (webinar function). From individuals who register for or participate in our webinars, we collect and/or process the following personal data:

Information relating to webinar participants: first name, last name, title/salutation, email address, company/organisation, position within the company, and the date and time of registration for the webinar.
Webinar metadata: topic, where applicable description, participants’ IP addresses, and device/hardware information.
Where participation takes place by telephone: information on incoming and outgoing phone numbers, country name, start and end time, and connection data such as the IP address of the device.
Text data: the chat function is generally disabled. If a webinar participant submits questions via the chat function during the Q&A session, the text entered by the respective participant will be processed; such questions are visible only to the presenter and to BDO. Where questions are answered as part of the follow-up to a webinar, the questions and the email addresses of the webinar participants will be processed in order to provide such follow-up responses.
Where a webinar is recorded: our webinars are recorded in order to make them available on demand at a later stage. The recordings comprise MP4 files of all video, audio and presentation recordings, as well as any text data from the online meeting chat. As the cameras and microphones of webinar participants are disabled, the recording may only contain any questions submitted by webinar participants in text form.

No automated decision-making within the meaning of Article 22 of the General Data Protection Regulation (GDPR) takes place.

3. Legal Basis for Processing

The processing of personal data in connection with webinars is based on our legitimate interests pursuant to Article 6(1)(f) GDPR, namely the organisation and conduct of webinars, their follow-up (e.g. responding to follow-up questions), and the further development of webinars (e.g. preparing participant statistics over time and assessing the effectiveness of and interest in webinars).
In the case of paid webinars, the organisation and conduct of the webinar are based on the legal basis of performance of a contract pursuant to Article 6(1)(b) GDPR.

4. Processing of Data

Where we conduct webinars jointly with other webinar organisers identified in the relevant invitations, the first name, last name, address (if provided), email address, telephone number (if provided), company/organisation, position within the company, and the date and time of registration of webinar participants will be disclosed to the respective webinar organisers on the basis of their legitimate interests. Each respective webinar organiser is solely responsible for any further processing.

5. Data Subject Rights

Data subjects (webinar participants) have the right to obtain access from the controller to the personal data concerning them and to request the rectification of inaccurate data. In addition, there is a right to erasure where one of the grounds set out in Article 17 GDPR applies, for example where the data are no longer necessary for the purposes pursued. There is also a right to restriction of processing where one of the conditions set out in Article 18 GDPR is met and, in the cases set out in Article 20 GDPR, a right to data portability.

Where data are collected on the basis of Article 6(1)(f) GDPR (processing for the purposes of legitimate interests), the data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her. In such case, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or unless the processing serves the establishment, exercise or defence of legal claims. Requests may be sent to Datenschutz@bdo.at.

If you submit a request to us as a data subject, we are obliged, where there are reasonable doubts as to your identity, to verify your identity. The type of proof of identity required depends on the nature of the request. We will retain your request and our response for 13 months for the purpose of demonstrating lawful handling of the request.

If you have any questions or complaints, please contact our Data Protection Officer at datenschutz@bdo.at. Pursuant to Article 77 GDPR, you also have the right to lodge a complaint with a supervisory authority. You may contact the supervisory authority of your habitual residence, place of work or place of business. The companies of the BDO Austria Group are subject to the supervision of the Austrian Data Protection Authority (Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at).

6. Retention Period

Personal data processed in connection with webinars will be stored for as long as necessary for the defined purposes, taking into account any applicable statutory retention periods. Subject to any statutory retention obligations that may apply in the case of paid webinars, personal data will generally be retained for a period of two years after the respective webinar has taken place.

7. Contact Details of the Data Protection Officer:

Unseren Datenschutzbeauftragten können Sie wie folgt erreichen:
BDO Austria Holding Wirtschaftsprüfung GmbH
QBC 4 - Am Belvedere 4
Entrance Karl-Popper-Straße 4
1100 Vienna
E-Mail: datenschutz@bdo.at
Tel: +43 5 70 375

8. Right to Lodge a Complaint with a Supervisory Authority
The companies of the BDO Austria Group are subject to the supervision of the Austrian Data Protection Authority (Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at), with which you may lodge a complaint pursuant to Article 77 GDPR in the event of an infringement of data protection law.

Zuletzt geändert am 24. Juni 2025