Data protection

Data protection:

The University of Vienna is pleased that you are visiting our websites. Data protection and data security are very important to us. We would therefore like to take this opportunity to inform you which of your personal data we collect in general, including when you visit our websites, and for what purposes it is used. Please note that this privacy policy is limited to general data processing by the University of Vienna. The University of Vienna will inform data subjects separately about any further data processing, although reference may be made to this general statement. Since legislative changes or changes to our internal processes may make it necessary to adapt this privacy policy, we ask you to read this privacy policy regularly. § 1 Responsible person and scope of application.
This privacy policy is based on the University of Vienna's General Privacy Policy (as of October 31, 2022). It is available here: https://dsba.univie.ac.at/datenschutzerklaerung/#c1021739




Responsible person and scope of application:

The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection legislation is:

University of Vienna
Universitätsring 1
1010 Vienna

email: dsba@univie.ac.at
Site: univie.ac.at



Data protection officer and contact persons:

The external data protection officers of the person responsible are:
RA Dr. Daniel Stanonik LL.M. and RA Dr. Karsten Kinast LL.M., acting as a mutual representative

If data subject rights within the meaning of § 13 of this privacy policy (e.g. right to information, right to deletion, etc.) are asserted, these requests or requests must be sent without exception to dsba@univie.ac.at or by post to
University of Vienna
For example Data Protection Officer of the University of Vienna
Universitätsring 1
1010 Vienna

to fix.




General information about data processing:

a) Automatic data storage:
When you visit our website, certain information is automatically created and stored.
For this purpose, our web server automatically stores data such as: the address (URL) of the accessed website Browser and browser version, the operating system used, the address (URL) of the previously visited page (referrer URL), the host name and the IP address of the device from which the date and time are accessed in files as so-called web server log files.
Web server log files are usually stored for two weeks and then automatically deleted. We do not share this data, but we cannot rule out the possibility that this data will be viewed in the event of illegal conduct.

b) Legal basis
Insofar as we obtain consent from the data subject for processing personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for processing personal data. When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as processing of personal data is necessary to fulfill a legal obligation to which the University of Vienna is subject, Article 6 (1) (c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis. If processing is necessary to protect a legitimate interest of the University of Vienna or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 (1) (f) GDPR serves as the legal basis for processing.
If data is processed by the University of Vienna in the area of science and research, the University of Vienna reserves the right to use provisions of the Research Organization Act (FOG) as appropriate legal bases in addition to the legal bases set out above. This also applies in connection with a declaration of consent (broad consent) with regard to the special provisions in accordance with Section 2d (3) FOG.



cookies:

Our website uses HTTP cookies as “essential cookies” (essential cookies), functional cookies to ensure technical functionality, and statistical cookies to collect usage analyses of our website. Any advertising cookies are not used.

Cookies are small files that are stored on your computer by our website. These cookie files are automatically stored in your local cookie folder. A cookie consists of a name and a value.
The following cookies are currently used on WEBSITE:

Cookie: _cf_bm
Data type: bot management data
Purposes: Protection against bots and misuse on the website.
Storage time: 30 minutes
Recipient: Cloudflare (Webflow CDN)

Cookie: cfuvid
Data type: user ID, session data
Purposes: Used by Cloudflare to identify trusted users and protect against bots.
Storage period: Up to 30 days
Recipient: Cloudflare

If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings.

The legal basis for processing data with the user's consent is Article 6 (1) (a) GDPR in accordance with the cookie banner and the legitimate interest within the meaning of Article 6 (1) (f) GDPR, unless these are cookies necessary for website operation.

The legal basis for processing personal data using technically necessary cookies is Article 6 (1) (f) GDPR.

The cookies used are used in particular to determine the frequency of use and the number of users of our websites and to continue to identify your computer during a visit to our website when switching from one of our websites to another of our websites and to be able to determine the end of your visit. This tells us which area of our websites and which other websites our users have visited.

The purpose of using technically necessary cookies is to make it easier for users to use websites. Some functions of our website cannot be offered without the use of cookies. For this, it is necessary that the browser is recognized even after a page change.

The user data collected through technically necessary cookies is not used to create user profiles.



Security measures to protect the data we store:

We use encryption to securely transfer data over the Internet. By using TLS (Transport Layer Security), an encryption protocol for secure data transmission over the Internet, we can ensure the protection of confidential data. You can recognize the use of this data transfer security by the small lock icon at the top left of the browser and the use of the https scheme (instead of http) as part of our Internet address.

We are committed to protecting your privacy and keeping your personal information confidential. In order to prevent manipulation, loss or misuse of your data stored by us, we take extensive technical and organizational security measures, which are regularly checked and adapted to technological progress. This includes the use of recognized encryption methods (TLS). However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and the above security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data — e.g. if this is done by e-mail — can be read by third parties. We have no technical influence on this. It is the responsibility of the user to protect the data provided by him/her against misuse by means of encryption or in any other way.



Legislation:

GDPR and DSG The processing of personal data provided to the University of Vienna is regulated by the GDPR and the DSG in the respective valid versions. According to this, data collection, processing, use and transfer (hereinafter: use of data) is permitted if the GDPR, the Data Protection Adjustment Act 2018 (DSG 2018) or another legal provision permits it or if the person concerned has consented.

Update of these terms of use Due to constant technical and legal changes, we must change or update the following terms of use from time to time. Therefore, before using our website, please check when the last new version was posted on the website.




Copyright and other intellectual property rights:

All content on our website, including texts, images, graphics, audio and video files, is — unless expressly stated otherwise — our property. This copyrighted content may only be used without consent for private, i.e. not for public or commercial purposes (downloads, reproductions). Changes, translations or other editing of the content require the prior written consent of the University of Vienna. The unauthorized or misuse of all registered trademarks and logos of the University of Wien SE is prohibited. We would like to point out that an infringement of our copyright or other property rights may result in civil and/or criminal consequences.




Disclaimer:

Our websites may contain hyperlinks to external websites of other providers. When you activate these hyperlinks, you will be redirected from one of our websites directly to the website (s) of the other provider. You can recognize this, among other things, by changing the URL. We cannot be responsible for the confidential treatment of your information on these third-party websites, as we have no control over whether these companies comply with data protection regulations. Please find out more about how these companies handle your personal data directly on these websites. The University of Vienna is not aware of the content of third-party websites. The University of Vienna therefore assumes no guarantee or liability for any illegal content or other violations of rights on websites of third-party providers. The information on this website has been compiled and checked with great care. However, we cannot assume any responsibility for their timeliness, accuracy, completeness and/or quality. This website is for general information and is in no way a substitute for professional advice. The University of Vienna assumes no responsibility for actions taken on the basis of this website. You use this website and download data at your own risk. The University of Vienna assumes no responsibility for any resulting damage, in particular to the user's data, hardware and/or software.




Your rights as a data subject:

You have the right to information from the person responsible about the personal data concerned and to correct or delete or restrict processing and to data portability. Please direct your inquiries in this regard to the above-mentioned data protection officer. If data processing is based only on Article 6 (1) a) GDPR, i.e. you have given consent to the collection and processing of data, you are entitled to withdraw the consent at any time, but without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. You have the right to object to the processing of your personal data for direct marketing purposes at any time. When processing your personal data on the basis of legitimate interests in accordance with Article 6 (1) (f) GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct marketing. In the case of direct marketing, you have a general right of objection, which is implemented by us without specifying a particular situation. To do so, please contact dsba@univie.ac.at, unless processing provides a different or additional e-mail address.

As a data subject to the processing of personal data, you have the following rights under the GDPR:

- In accordance with Article 15 GDPR, you can request information about your personal data processed by us. In particular, you can provide information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, unless it was collected by us, about a transfer to third countries or to international organizations, and the existence of an automated Request decision-making, including profiling, and, where applicable, meaningful information about their details.

- In accordance with Article 17 GDPR, you may request the deletion of your personal data stored by us unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

- In accordance with Article 18 GDPR, you can request that the processing of your personal data be restricted if you dispute the accuracy of the data, the processing is unlawful, we no longer need the data and you refuse to delete it because you need it to assert, exercise or defend legal claims. You are also entitled to the right under Article 18 GDPR if you have filed an objection to processing in accordance with Article 21 GDPR.

- In accordance with Article 20 GDPR, you can request to receive your personal data that you have provided to us in a structured, common and machine-readable format or you can request that it be transmitted to another person responsible.

- In accordance with Article 7 (3) GDPR, you can withdraw your consent to us at any time. As a result, we are no longer allowed to continue data processing based on this consent in the future.

- In accordance with Art 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, place of work or our company headquarters. In Austria, the supervisory authority is the data protection authority, Barichgasse 40-42, 1030 Vienna, telephone: +43-1-52152-0, e-mail: dsb@dsb.gv.at, website: dsb.gv.at




Update and change:

Parts of the privacy policy may be changed or updated by us. Please check the privacy policy before using our offerings to be up to date with possible changes or updates.