Privacy Policy for online events via Zoom

Complete Vocal Institute (CVI) priorities a high data security and confidentiality. The below privacy policy applies to the personal information you provide, in order to participate in online CVI singing education/course and webinars held by CVI via the website Zoom: https://zoom.us/meetings.

The Privacy Policy below sets out CVI’s guidelines for processing your personal data when attending a CVI online education/ courses and webinars, which provide you with the information you are entitled to receive under the current data protection law.

 

Data controller and contact details

CVI, is the data controller of the personal data you provide, in order to participate at our online education / courses and webinars held & conducted by CVI via the website Zoom:

Complete Vocal Institute
Adresse: Kompagnistræde 32 A, 1208 København
CVR-nr.: 25 65 22 23

Mail: info@shout.dk
Telefon: +45 33 32 77 24

 

Other data controllers

Zoom’s website and related services are operated and owned by Zoom Video Communications, Inc. (‘Zoom’). Zoom will therefore in certain situations act independently as data controller for the processing of your personal data via the website Zoom.

This happens i.a. to ensure the security of the Website and that it works (among other things in the form of necessary cookies) and to ensure compliance with the Website’s terms of use: https://explore.zoom.us/en/terms/

In these cases, we refer to Zoom’s own privacy policy:

https://explore.zoom.us/en/privacy/

CVI is not responsible for Zoom’s processing of personal data as data controller.

In relation to conducting online teaching and webinars, Zoom will only process personal data on behalf of CVI. In these cases, Zoom is the data processor on behalf of CVI (see point 6 below).

 

Types of personal data

CVI collects general personal information about you in connection with our online teaching/ education / webinar, which may include

username
your name
your email
your employer
your job position
your photo
your voice
which webinar you have attended
any correspondence/comments/feedback
user satisfaction survey responses

In cases where online teaching is only offered to our internal course participants (at closed CVI events), in addition to the above, it will be possible to indirectly derive personal information in the form of voice problems and health information, which could constitute sensitive personal information.

 

Use of personal data

CVI collects and processes your personal data for the following purposes only:

To record your registration for a course/education/update or seminar.

  • Register your registration for course/ teaching / update/seminar or webinar.
  • To enter into an agreement with you about participation in an online event/education, which is a condition to being able to provide the relevant CVI course/education/update or seminar.
  • To sign up via CVI’s website.
  • To create a profile via the website/cvi.my.
  • Service notifikations.
  • Circulation of subsequent user satisfaction surveys.
  • Compliance with requirements under applicable law.
  • Surveys, statistical data and development.
  • Sharing of data with Zoom to allow them to enforce their terms of service.
  • For the establishment, exercise or defense of a legal claim.
  1. Legal basis for processing your personal data

For your general personal data, the legal basis of processing for the above purposes is as follows:

For the performance of an agreement with you for participation in an online event (article 6(1)(b) of the GDPR).

Legitimate interest in sharing your general personal data with other participants in the online event (article 6(1)(f) of the GDPR).

Legitimate interest in preparing statistical data, making surveys and improving our own services and products (article 6(1)(f) of the GDPR).

Legitimate interest in sending out service notifications when necessary (article 6(1)(f) of the GDPR).

Legitimate interest in sending out customer satisfaction surveys concerning the online events (article 6(1)(f) of the GDPR).

Legitimate interest in establishing, exercising and defending a legal claim (articles 6(1)(f) and 9(2)(f) of the GDPR).

We will obtain prior consent from you to share information about your health information in connection with members-only online events (article 9(2)(a) of the GDPR).

 

Transfer to data processors and sharing with other data controllers

In order to fulfil the above purposes, we may provide access to your personal data to third parties which provide relevant services to CVI based on a contractual relationship.

These can be, for example, information technology suppliers (including Zoom) and email providers. Such service providers will only process personal data in accordance with our instructions pursuant to data processor agreements concluded.

If your personal data are transferred to data processors located in non-EU/EEA countries which do not provide an adequate level of protection (including Zoom and some of Zoom’s sub-processors), such transfer will be safeguarded by the standard contractual clauses of the European Commission or the EU-US.

As a general rule, your personal data will not be disclosed to a third party without your permission. However, it may be necessary in some cases and in accordance with the law to disclose your personal data to:

  • the police
  • lawyers
  • auditors and accountants
  • courts
  • public authorities

As mentioned above, it should also be noted that some of your personal data will be shared with other persons participating in the online education/CVI course/update/ webinar.

 

Retension of personal data

CVI will erase your personal data when we no longer need to process them to fulfil one or more of the purposes set out above. As a basic rule your personal data will be erased five years after your participation in an online education/CVI course/update/ webinar.

Personal data in the form of audio, video, and your voice, however, will be deleted immediately if these are smaller online courses, normal seminars at the longer CVI courses as these are generally not recorded.

With regards to the CVT Connect course, personal information in the form of audio, video and your voice will be deleted 3 years after participation.

If you have given CVI consent to share information about your voice issues and health information with other participants in the online course, the consent form will be kept for 5 years from the time of obtaining your consent.

Furthermore, if depersonalized, the data may be processed and stored longer.

 

Confidentiality

As already stated in a separate notice, participation in online events held by CVI is strictly confidential. This means that you are not allowed to share personal data about the other participants with any third parties. As well as it is strictly forbidden to film and record the online events via programs installed on the computer or using a mobile telephone.

 

Security

CVI and Zoom have implemented appropriate security measures to protect the quality and integrity of your personal data. The security measures implemented include policies, procedures and recovery plans as well as confidentiality, encryption, firewalls, instructions for the teacher/staff who use Zoom in teaching.

 

Your rights

You have the right to access the personal data we process about you.

You have the right to object to our collection and further processing of your personal data.

You have the right to rectification or retention of your personal data, subject to certain statutory exceptions.

You have the right to request restriction of your personal data.

In some cases, you may also request a copy of your personal data and for your personal data to be transmitted to another controller (data portability).

You have the right to withdraw any consents given.

 

Right to withdraw consent

If a data processing operation is based on your consent, you have the right to withdraw consent at any time. You may withdraw your consent, by contacting us via the contact details set out under ” contact details” above.

If you decide to withdraw consent, this will not affect the lawfulness of our data processing based on consent before its withdrawal.

Any withdrawal of consent will take effect on withdrawal.

 

Questions and complaints

If you have any questions regarding this Privacy Policy or if you wish to lodge a complaint about our processing of your personal data in relation to our online courses, please contact us directly at:

Michelle Sanders
Tel.: 3176 9634
E-mail: info@shout.dk

You may also make a complaint with the Danish Data Protection Agency:

Datatilsynet
Tel.: 33 19 32 00
Email: dt@datatilsynet.dk

If you have questions of a technical nature concerning webinars, please contact Zoom: https://support.zoom.us/hc/en-us

 

Changes to the Privacy Policy

CVI reserve the right to change this Privacy Policy from time to time. In case of any changes, the date at the top of the Privacy Policy will also change.