This is a very difficult matter, as it touches different parts of laws. IANAL, but I have been trained on several parts of labour law so I can point out some aspects.
What can you do with the computer at work?
If not declared by some agreement otherwise, a computer at work can only be used for work purposes. Your employer supplies you with tools (in this case a computer, in other cases an electric drill or a torque wrench) to perform certain task connected with your job. So, frankly speaking, you may have abused your work tool for private purposes and your employer may have injunctive relief "Unterlassungsanspruch" against you.
There are, of course exceptions.
Employers may permit fair use of work tools like telephones or internet access for private purposes. Fair use often has to be discussed for each case, but if you find something in your contract or related documents, it will often be "solange es die Erbringung der Arbeit und den Betriebsablauf nicht beeinträchtigt". Which means, you can call your relatives in urgent cases, but keep it concise, and keep an eye not to hinder your or your colleagues from working.
Employers may have signed an explicit agreement "Betriebsvereinbarung" with the worker's council in your case the "Personalrat" concerning fair use of computer, internet and telephone. Ask your "Personalrat" if there are any "Betriebsvereinbarungen" on this topic.
Very urgent private issues. E.g. mom is dying, you have to call your brother or you have to respond immediately to an inquiry of the Finanzamt concerning your tax declaration etc. In these cases you probably have to notify your boss concerning this issue.
What can your employer do with your computer?
Employers can do a lot, but not without limitations. The limitations come from "GDPR", "BetrVG" and a lot of other laws. This matter is even more complicated and in most cases involves the "Personalrat".
Employers can assume, that only work related things on your computer are stored. Hence he has a right to access and read everything to keep business going. Again here are some limitations. If viewing your files could be used to assess and evaluate your efficiency in doing your work, it has to be agreed with the Personalrat. Ususally there is a Betriebsvereinbarung on the use of IT-equipment and work surveillance. Even more, if viewing your files is done without your knowledge.
If you have keys that can be used to impose your identity, the employer has to take care that they can't be abused. Therefor it makes a lot of sense to have keys for signage and file encryption separated.
For encryption of work data, the employer can demand from you to grant access to keys. If the keys are escrowed, usually some regulation should exist with the Personalrat (another Betriebsvereinbarung) how they can be used in case of severe sickness or other cases. In most cases this involves the attendance of members of the Personalrat as witnesses when your data is decrypted or read.
Things are mixed up
So, you have used your work tools for private purposes, there's only one common key for encrypting work related data and signing emails etc. This is, while very common at many work places, a real mess.
Let's say, you broke your neck and your employer needs your work results. In most cases, with or without Betriebsvereinbarung and whatever has happened before. If the employer has some reason to believe, that there are private things around your work place (physical or digital) he has to consult the Personalrat and needs independend witnesses when accessing it.
Even more if there was a Betriebsvereinbarung or a permit for you to use the computer for private purposes.
What can you do?
Best thing is to prevent uncertain situations from the beginning. If you have a good connection to your colleagues and bosses, you don't want to put them in a lot of questions of conscience when the need to access work data arises.
- Find out, if there are regulations in or attached to your contract
- Find out, if there are Betriebsvereinbarungen
- Don't do private things with work equipment without explicit permit
- Separate access to work related data and signage keys where possible (e.g. by sharing all work data on drives with group access)
- Ask your Personalrat if in doubt
- Ask a lawyer if in doubt
- Ask a lawyer if not in doubt
- Ask a lawyer
Side note
In normal companies there's usually a "Betriebsrat" instead of a "Personalrat". If there's no such "XYZ-rat" at all, it might usually wise not to store anything private at the work place, as there is no supervision to monitor the compliance with working laws.
In general, conflicting laws like BGB, BetrVG, GDRP cannot be broken down easily to some sort of priority in many cases, so if the recommendations above do not fit to your situation, ask a lawyer, which may or may not be able to predict what's going to happen when the shit hits the fan.
