Loom Privacy Notice
Version 2 / feb 23, 2026
1. Overview
Remerge GmbH uses Loom to record certain meetings with external participants. This notice describes how your personal data is processed in this context.
2. Purpose
To inform external meeting participants about the collection, use, and protection of their personal data when meetings are recorded using Loom.
3. Scope
This notice applies to all external participants (prospects, customers, partners, suppliers, etc.) who join Remerge meetings recorded with Loom.
4. Controller and Processor Details
Controller: Remerge GmbH
Data Privacy Officer (EEA/Europe):
Ilan Leonard Selz
Am Hamburger Bahnhof 4, 10557 Berlin, Germany
privacy@remerge.io | berlin@isico-datenschutz.de
Data Privacy Officer (Other regions):
Julie Armindo Kremp
Heidestraße 9, 10557 Berlin, Germany
privacy@remerge.io
Processor: Atlassian Pty Ltd
Contact (privacy):
privacy@atlassian.com
EU Representative: Atlassian B.V.
Contact: eudatarep@atlassian.com
UK Representative: Atlassian (UK) Operations Limited, c/o Herbert Smith Freehills LLP, Exchange House, Primrose Street, London EC2A 2EG, UK
Contact: ukrepresentative@atlassian.com
5. What Data We Process
- Name, organisation, and role/title (where relevant)
- Meeting audio/video, screen content, and transcripts
- Access data ( IP addresses are collected automatically as part of “Device and Connection Information” when you install, access, update, or use the Services)
6. Purposes of Processing
For internal users
We process personal data for:
- Internal collaboration and documentation
- Knowledge sharing and training/onboarding
- Operational efficiency (asynchronous updates, meeting follow-ups)
For external users
We process personal data for:
- To document meetings and enable accurate follow-up and continuity
- To support collaboration with Clients, potential clients, providers, or potential providers.
- Operational efficiency
7. Loom AI and Automated Processing
- When enabled, Loom AI records videos and generates summaries, transcriptions, and other text outputs to help participants locate key information and take action. These data may be shared with OpenAI for this purpose.
- Significance and consequences: Loom AI outputs support meeting documentation and follow-ups; no automated decisions with legal or similar effects rely on them.
8. Legal Basis
- Art. 6(1)(f) GDPR (legitimate interests) in documenting business communications and follow-up
- Explicit consent is sought through advance and start-of-recording notices. If declined, alternatives include an unrecorded meeting, camera off, or a written follow-up.
9. Recipients and Roles
- Remerge staff involved in the meeting topic/follow-up, under appropriate access controls.
- Processor: Atlassian (Loom) under its DPA (https://www.atlassian.com/legal/data-processing-addendum) and its subprocessors.
- Support: Atlassian support teams may access data as necessary, as do Remerge’s internal technical and security teams.
- Loom AI recipient: transcript text may be shared with OpenAI to generate AI outputs
10. International Data Transfers
Transfers may occur to countries outside the EEA (e.g., US, UK, Japan, South Korea, Brazil). Safeguards: EU adequacy decisions and/or EU Standard Contractual Clauses (SCCs).
11. Retention
Recordings and transcripts are retained in accordance with Loom Enterprise retention policies and Remerge internal retention rules. Recordings are retained for up to 36 months unless otherwise required by law or business need.
12. Your Rights
You have the right to request access to your data, rectification, erasure, restriction of processing, and data portability. You may also object to processing based on legitimate interests or withdraw consent at any time (where relevant). To exercise your rights, contact your Remerge point of contact or privacy@remerge.io
Providing your personal data is not a statutory or contractual requirement. However, if you do not wish to be recorded, please inform us in advance so we can offer an alternative (unrecorded meeting, camera off, or written follow-up).
13. Complaints
You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
14. Disclaimers
Invite footer example:
“This meeting may be recorded and transcribed using Loom. If you prefer not to be recorded, inform us in advance of an alternative.
Read Atlassian’s (and Loom’s) GDPR commitment and Remerge’s Privacy Notice (insert link) for details on data processing.”
Start-of-recording example:
“Before we start: we’re recording and transcribing this meeting in Loom, and Loom AI may create summaries from the transcript—does anyone object or prefer an unrecorded alternative?"