Excellent data protection with alfaview
100 % GDPR-compliant – verified by various data protection authorities
In its review of various video conferencing providers, Berlin’s Commissioner for Data Protection and Freedom of Information singles out alfaview as one of the few providers earning the maximum number of four green traffic lights. The State Commissioner of Baden-Württemberg for Data Protection and Freedom of Information also lists alfaview as one of the few data protection-compliant video conferencing providers in its guide.
- Software made in Germany
- All data centers are located in & have their headquarters in Germany
- All data centers and alfaview are certified under ISO 27001
- Data is encrypted in accordance with the latest guidelines of the German Federal Office for Information Security (BSI) (TLS)
- Data transport & server hard drives are encrypted
- The content of a video conference (such as audio and video streams, chat messages, screen shares) is not stored or shared by alfaview. Third parties outside the alfaview room have no access to the content.
Data protection and privacy is a standard for us
Data protection and privacy is the top priority at alfaview– we make no compromises when it comes to protecting your data. The content of your video conferences and the personal data of all participants must be protected from being accessed by third parties. Many video conferencing providers promise high data protection standards and advertise that they comply with GDPR requirements. A closer look, however, reveals that these promises are often untrue. Data protection authorities have even been wary about using certain video conferencing products, especially from the US.
Company headquarters
The location of a company’s headquarters determines the legal regulations the company is subject to.
US companies can be required to disclose customer and communication data (such as video, audio, chats) to US authorities due to various legal provisions in the United States (Patriot Act, CLOUD Act, FISA), even if doing so violates EU law (GDPR, German Data Protection Act (BDSG)).
Unlike the GDPR, these US laws are not limited to personal data: Trade secrets and other sensitive data of companies and public institutions are likewise not protected when data is transferred to the US, and can be accessed by US authorities without further judicial review, and even transferred to other third countries through the US. The mere possibility of US authorities accessing the data means that US providers cannot be GDPR-compliant.
alfaview is a video conferencing provider with its corporate headquarters in Karlsruhe, Germany. As such, we guarantee legal security under German and EU laws.
Server location
A large number of US cloud providers provide data centers in Europe and advertise them as compliant with the GDPR. However, these companies are still subject to US laws and are required to hand over the collected data at the request of authorities.
If German companies host their software at such data centers, the transfer of data (customer and communication data) to non-secure third countries such as the US cannot be ruled out. This basically disqualifies all US providers and their subsidiaries from being GDPR-compliant.
alfaview exclusively uses German data centers that are located in Germany and have their corporate headquarters in Germany. By doing so, we guarantee that your data remains in the area covered by the GDPR.
ISO certification
There are international standards governing the security of servers. For example, ISO 27001 certification provides a guarantee that the data center has defined and implemented best-practice processes for information security, such as data encryption and strict management of access and access authorizations. This ensures appropriate and proportionate security safeguards to protect information and data.
alfaview exclusively uses data centers certified by ISO 27001 in Germany. In addition, the company alfaview itself is ISO 27001-certified, enabling us to guarantee the highest security standards.
A single source for everything
A lot of companies outsource some or all of their support. This results in sensitive customer data being given to third-party companies.
alfaview has its own in-house support team. You can reach us by phone, by completing our contact form, or by sending us an email. You are also welcome to visit our support center to see for yourself.
Transparency
Under the GDPR, every company that transfers personal data to subcontracted processors (such as data centers) and has such data processed on its behalf must enter into a processing contract. Many companies only make this contract available upon request.
alfaview is committed to transparency. The technical and organizational measures we take to protect customer and communication data, along with a transparent portrayal of how and for what purposes our subcontractors are used, can be found in our data processing agreement. If you have any additional or more in-depth questions on the subject of data protection and privacy, please feel free to contact us at datenschutz@alfaview.com.
Data processing
Video conferencing providers who do not comply with the GDPR may harvest your personal data or other similar information and sell it to third parties for advertising purposes.
alfaview only collects such personal data as is absolutely necessary for the provision of the video conferencing software. The data, data transport, and server hard drives are encrypted in accordance with the latest BSI recommendations (TLS). Audio and video streams are not stored or shared.
Your privacy in the alfaview room
Before you enter the alfaview room, you will be asked to define your audio and video settings. At this point, you can specify which camera, microphone, and speaker you want to use. You can also enter the alfaview room with the camera off.
When entering the room, the screen sharing and microphone are deactivated by default for all participants.
Participants can activate their microphone and camera themselves at any time during the online meeting.
If a person has deactivated their camera and microphone, only they can reactivate them.
In the alfaview room, moderators have the possibility to assign certain permissions (camera, microphone, screen sharing) to participants and revoke them as well.
Moderators can revoke the permission of participants to use their camera and stream their video image. No consent is required from the participant for camera permission to be restored.
Moderators can revoke the permission of participants to use their microphone. When permission to use the microphone is restored, the participants must turn the microphone on themselves. Moderators cannot activate a microphone that has been turned off.
Moderators can revoke the permission of participants to share their screen. When permission to share the screen is restored, the participants must restart the screen sharing themselves. Moderators cannot restart screen sharing.
It is not possible to enter the alfaview room secretly. If spectators are invited to an online meeting, they will be announced with an acoustic signal when entering the room. In addition, a red eye icon shows how many spectators are currently in the room.
Private short messages can only be read by the recipient. Group chat messages are only visible to participants for the duration of their stay in the room.