Product privacy statement

• Account information
  We collect information about the individual user and his organization as it is entered in the application.
  
  For this purpose we process contact data. On the organization level, the main contact details (name, business address and phone number) of key users are stored in order to enable Barco to make contact for support purposes.
  
  The data is processed on the basis of the performance of a contract.

• Web logs
  The MediCal QAWeb hosted server application contains internal audit logs of user activity occurring through interaction on the website (user login, configuration changes).
  
  This is needed to be able to provide the necessary support and troubleshooting and also to create an audit trail when changes to configuration are made. The data is processed on the basis of the performance of a contract.

Barco is managing the hosting environment for WeConnect and is hence a processor of the organization which uses the product. Barco engaged Amazon Web Services Inc. as sub-processor in order to provide cloud services (eu-west-1, EU (Ireland) https://aws.amazon.com/about-aws/global-infrastructure/). Barco engaged MongoDB Atlas of Mongo DB Inc., as sub-processor (https://www.mongodb.com/security) for database services and Vonage Business Limited as sub-processor for audio and video streaming services https://www.vonage.com/legal/privacy-policy/?icmp=footer_novalue_privacy.

In order to activate/use the service

• Login data such as user name, email address and IP address in order to activate the service. The user has to confirm the login creation via email.
• In case “Single Sign On” is not activated for the institute, the password chosen by the user is stored in a secure way. Barco has no access to the passwords.
• Uploaded avatar picture to identify the participant in the session.

The data is processed on the basis of the performance of a contract.

• In order to evaluate the session
  Session related information such as attendance, answers to polls and quizzes, start/stop screen sharing, chats, raise hands, silent questions and whiteboard annotations.
  
  The data is processed on the basis of the performance of a contract and/or on the basis of Barco’s legitimate interest to continually improve its products.
  
  
• In order to provide support
  When joining a lecture from a remote location audio and video streaming data and settings are collected in order to optimize the connection between the participant and the host:
  • The selection by the user of what content is shown in main area of the user interface, mute/unmute actions for microphone and camera.
  • Video/audio streaming quality related information such as packet loss, bandwidth, stream (dis)connection info, selected camera and microphone and screen resolution are stored.
  • Camera and microphone settings for reuse in next sessions.
    
  
  The data is processed on the basis of the performance of a contract and/or on the basis of Barco’s legitimate interest to continually improve its products.

Barco acts as a processor when providing XMS Cloud, as it manages the hosting environment on behalf of the customer organization.

Barco uses Microsoft Azure (Microsoft Corporation) as a sub‑processor
(region: North Europe, Ireland – https://azure.microsoft.com/en-us/global-infrastructure/locations/).

Barco also uses Amazon Web Services, Inc. as a sub‑processor
(region: eu‑west‑1, EU (Ireland) – https://aws.amazon.com/about-aws/global-infrastructure/).

MongoDB Atlas (MongoDB, Inc.) is used as a sub‑processor for database services 
(https://www.mongodb.com/security).

• Service activation
  To activate XMS Cloud, users must create a myBarco account, which is used for secure authentication and access to the XMS Cloud portal.
  The processing of personal data for myBarco accounts is described in the Barco.com Privacy Policy.
  The installing user creates the organization tenant and receives a confirmation email upon completion of the registration.
  The data is processed on the basis of the performance of a contract.

• Use of the service and support
  Barco processes login and contact data (such as username, email address, and IP address) to enable use of the service. Contact details of designated key users (name, address, phone number) are processed to provide technical support, including break/fix and field support.
  The data is processed on the basis of the performance of a contract.
  
  
• Product improvement
  Barco collects pseudonymised usage data of the XMS Cloud platform to generate statistics, analytics, and insights for product improvement.
  
  
• Information about updates
  Barco processes the name and email address of the organization’s key user to inform them about security updates or temporary service unavailability due to updates.
  
  
• In- app notifications
  Barco uses in‑app notifications to inform users about issues related to their installation base.For this purpose we process your contact data such as your name and email address.

• Email notifications
  These data are processed on the basis of the individual user’s unambiguous consent. The user can at any time revoke its consent in the notification centre in XMS Cloud.

When providing QAWeb Enterprise, Barco acts as a processor by managing the hosting environment on behalf of the customer organization.

Barco uses Amazon Web Services, Inc. as a sub‑processor to provide cloud infrastructure services

(region: eu‑west‑1, Ireland – https://aws.amazon.com/about-aws/global-infrastructure/regions_az/). 

• Service activation and use

To activate and use QAWeb Enterprise, users provide information via the QAWeb Enterprise signup portal (https://signup-qaweb.healthcare.barco.com)

Barco processes information about the user and the user’s organization as entered in the application. For this purpose, Barco processes contact data such as name, email address, business address and phone number.
The data is processed on the basis of the performance of a contract.

• Support and audit logging

To provide technical support and ensure traceability of configuration changes, Barco processes audit logs of user activity in the QAWeb Enterprise web client (such as user logins and configuration changes)

Audit logs are encrypted at rest and subject to strict access controls.

These logs are used to provide support and to maintain an audit trail for configuration changes, including changes to quality assurance policies, users, permissions and organizational structure.

For support purposes, Barco also processes contact data such as name, email address, business address, and phone number. At organization level, the contact details of designated key users are processed to enable Barco to contact them for support purposes.
The data is processed on the basis of the performance of a contract.

When providing Insights Management Suite, Barco acts as a processor by managing the hosting environment on behalf of the customer organization.

Barco uses Microsoft Azure (Microsoft Corporation) as a sub‑processor to provide certain cloud services 
(region: North Europe, Ireland – https://azure.microsoft.com/en-us/global-infrastructure/locations/).

Barco also uses Amazon Web Services, Inc. as a sub‑processor to provide certain cloud services 
(region: eu‑west‑1, EU (Ireland) – https://aws.amazon.com/about-aws/global-infrastructure/).

• Service activation and use
  To activate and use Insights Management Suite, Barco processes information about the user and the user’s organization as provided during the projector registration and
  The data is processed on the basis of the performance of a contract.

• Information about updates and outages
  To inform users about updates or service outages, Barco processes contact data such as name and email address. This processing is carried out to inform users about security updates and temporary unavailability of the platform.
  The data is processed on the basis of Barco’s legitimate interest of informing users about security and availability of the platform.

• Installation and use of the ClickShare Desktop App
  Barco processes device‑specific technical data, such as hardware model, operating system version, unique device identifiers and network information.
  These data are processed on the basis of the performance of a contract with Barco to which you are a party, being the provision of the services while you make use of the application.

• Use of the ClickShare Mobile App
  Barco processes limited location data and product interaction data, not linked to the user’s identity, to enable application functionality.
  These data are processed on the basis of the performance of a contract with Barco to which you are a party, being the provision of the services while you make use of the application.

• Product Improved
  To improve the ClickShare applications, Barco processes pseudonymised or non‑identifying technical and usage data, such as device characteristics, operating system version, regional settings, network information and feature usage.
  Barco processes this data for its legitimate interest to gain insight in the use of the application in order to improve its application. 

• Installation and use of the MirrorOp Apps
  To download and use the MirrorOp Desktop App and MirrorOp Mobile App, Barco processes certain personal data related to the use of the applications. Barco processes personal data when you download and use the applications. Barco also processes device and technical data, such as hardware model, operating system version, unique device identifiers, and network information.
  These data are processed on the basis of the performance of a contract with Barco to which you are a party, being the provision of the services while you make use of the MirrorOp application functionality.

When providing Web Analyzer, Barco acts as a processor by managing the hosting environment on behalf of the customer organization.

Barco uses Microsoft Azure (Microsoft Corporation) as a sub‑processor to provide cloud infrastructure services 
(region: North Europe, Ireland – https://azure.microsoft.com/en-us/global-infrastructure/locations/)

Barco also uses Amazon Web Services, Inc. as a sub‑processor to provide certain cloud services 

(region: eu‑west‑1, EU (Ireland) – https://aws.amazon.com/about-aws/global-infrastructure/).

• Service activation and use Web Analyzer

To activate Web Analyzer, users must create a myBarco account, which is used for secure authentication and access to Web Analyzer.

The processing of personal data for myBarco accounts is described in the Barco.com Privacy Policy.
The data is processed on the basis of the performance of a contract.

• Information about updates and outages 

To inform users about updates or service outages, Barco processes contact data such as name and email address. This processing is carried out to inform users about security updates and temporary unavailability of the platform.
The data is processed on the basis of Barco’s legitimate interest in informing users about security and availability of Web Analyzer.

When providing NexxisLive, Barco acts as a processor by managing the hosting environment on behalf of the customer organization.

Barco uses Microsoft Azure (Microsoft Corporation) as a sub‑processor to provide cloud infrastructure services 
(region: North Europe, Ireland – https://azure.microsoft.com/en-us/global-infrastructure/locations/).

Barco also uses Amazon Web Services, Inc. as a sub‑processor to provide certain cloud services 
(region: eu‑west‑1, EU (Ireland) – https://aws.amazon.com/about-aws/global-infrastructure/).

• Service Activation

To activate NexxisLive, Barco processes contact and organization data as entered by users via the Barco activation and NexxisLive registration portals. This includes contact data relating to individual users and their organization. Upon completion of registration, the designated end‑user administrator and the person performing the installation receive a confirmation email.
The data is processed on the basis of the performance of a contract.

• Use of the service

To enable access to and use of the NexxisLive portal, Barco processes user identification data.

• The end‑user administrator is required to create a myBarco account
• The administrator determines which individuals may access the NexxisLive service.
• authenticated access may require individual users to create a myBarco account.

The processing of personal data for myBarco accounts is described in the Barco.com Privacy Policy.
The data is processed on the basis of the performance of a contract.

• Support

To operate and support the NexxisLive service, Barco processes user identification and environmental data contained in debug, information, and error logs generated by user interactions with the NexxisLive portal. All NexxisLive components generate logs used to monitor system performance, ensure service availability, and provide technical support.
The data is processed on the basis of the performance of a contract.

• Product Improvement

To improve NexxisLive, Barco processes aggregated and pseudonymised user identification and environmental data derived from system logs. This data is used to generate statistics, analytics and insights for NexxisLive users and for internal product improvement.
This data is processed on the basis of Barco’s legitimate interest to continually improve its products.

• Information about updates

To inform key users about updates, Barco processes contact data such as name and email address of the organization’s designated administrator. This includes communication about security updates and temporary service unavailability.
The data is processed on the basis of Barco’s legitimate interest in informing its key users about security updates  

When providing Helios, Barco acts as a processor by managing the hosting environment on behalf of the customer organization.

Barco uses Microsoft Azure (Microsoft Corporation) as a sub‑processor to provide certain cloud infrastructure services 
(region: North Europe, Ireland – https://azure.microsoft.com/en-us/global-infrastructure/locations/).

Barco also uses Amazon Web Services, Inc. as a sub‑processor to provide certain cloud services 
(region: eu‑west‑1, EU (Ireland) – https://aws.amazon.com/about-aws/global-infrastructure/).

• Service activation and use
  To activate and use Helios, users must create and use a myBarco account to access the application. Barco processes information about the individual user and the user’s organization when a myBarco account is created and used for Helios. For this purpose, Barco processes contact data such as name, email address, address, and phone number. The processing of personal data for myBarco accounts is described in the Barco.com Privacy Policy.
  The data is processed on the basis of the performance of a contract.

• Information about updates and outages
  To inform users about updates or service outages, Barco processes contact data such as name and email address. This processing is carried out to inform users about security updates and temporary unavailability of Helios.
  The data is processed on the basis of Barco’s legitimate interest in informing users about security and availability of Helios.

• Product improvement
  To improve the Barco Pulse Mobile App Barco process device-specific information not linked to your user identity, such as your hardware model, operating system version, unique device identifiers, localization and regional settings and network information, as well as what features were used. 
  This data is processed on Barco’s legitimate interest to gain insight in the use of the application in order to improve the application.

• Service activation
  To activate and access the BPT web application, users must create a myBarco account. The myBarco account is used for secure authentication to the BPT portal. The processing of personal data for myBarco accounts is described in the Barco.com Privacy Policy. The user performing the initial setup creates the organization tenant. A confirmation email is sent upon completion of the registration process. The processing of personal data for myBarco accounts is described in the Barco.com Privacy Policy.
  The data is processed on the basis of the performance of a contract.

• Use of the service and support
  To enable use of the BPT service and provide technical support, Barco processes limited contact data. This includes contact data such as username, email address and company name. This data is processed to provide break/fix support and other technical assistance.
  The data is processed on the basis of the performance of a contract.

• Product improvement
  To improve the BPT application and related services, Barco processes technical and device‑specific data not linked to an individual user’s identity. This includes information about ClickShare Base Units and connected peripherals, collected via debug, information and error logs generated during use of the BPT application.
  This data is processed on the basis of Barco’s legitimate interest to continually improve its products.