DECLARATION OF CONSENT AND LEGAL NOTICE

Thank you for visiting our webpage! The Austrian Students Union (in the following text referred to as “ÖH” or “we”) takes data protection and the privacy of our clients very seriously.

The declaration of consent applies to several webpages of the ÖH, such as:

• oeh.ac.at
• progress-online.at
• schwarzesbrett.at
• Other webpages, where a link to the declaration of consent shows up

You can find further information concerning the use of personal data below:

I. NAME AND ADDRESS OF THE RESPONSIBLE AUTHORITY

The responsible authority acts in line with the Basic Regulation on Data Protection (DSGVO), national laws of EU member states and further data protection regulations that apply and can be contacted at the following address:

Austrian Students Union
Taubstummengasse 7-9
1040 Vienna, Austria

II. NAME AND ADDRESS OF THE DATA PROTECTION OFFICER

The current data protection officer is: Boris Treml

For further information concerning data requests and protection measures feel free to contact Boris Treml.

By adding “Data Protection Officer” to the above mentioned address (I.) you can send a written request per mail.

III. PROVISION OF THE WEBPAGE AND CREATING LOGFILES

1. WEBSITE

a) DESCRIPTION AND EXTENT OF DATA PROCESSING

Every time you access one of our webpages our system automatically detects personal data and information on your electronic device.

The following data will be collected:
• Information about the type of browser the client uses, the set language and the current version of the browser in use
• Concerning mobile phones: device manufacturer as well as model name/number
• The internet service provider of the client
• The IP-address of the user
• Date and time of access
• Calls to the URL
• The amount of data transferred
• Websites that provide a non-https link to our webpage that the client has used
• Websites that are linked on our webpages and are opened by the client
• State of access /HTTPS status code

The data will be stored in the logfiles of our system.

LEGAL BASIS

The legal basis to the temporary storage of cookies and logfiles is the Basic Regulation on Data Protection (Art. 6 Abs. 1 lit. F DSGVO)

PURPOSE OF DATA PROCESSING

The temporary storage of the client’s IP-address is necessary to deliver our webpage from our system to the electronic device of the user. For this purpose the IP-address will be stored during the duration of the session.
The logfiles are saved to provide a functional webpage. Additionally, the data is used to optimize the website and to grant security on our IT systems. Data is not used for marketing purposes. In this regard, we support the regulations concerning data protection according to Art. 6 Abs. 1 f DSGVO.

DURATION OF DATA RETENTION

The collected data will be stored after every session and deleted after 30 days. Any data that would make the identification of the user possible will not be saved.

EXTERNAL SERVICE PROVIDER

If you open one of our webpages you won’t see any content like JavaScript files, Stylesheets or pictures from external service providers, nor will your data be passed on to third parties. Some of our webpages are linked to my-cdn.at to provide media content. The connection to my-cdn.at does not permit the transmission of personal data, the generation of cookies or the saving of any IP-addresses.

b) THE USE OF COOKIES

DEFINITION OF COOKIES’

Cookies are little text files that are saved to the web browser and will be downloaded as soon as you access a webpage for the first time. If you return to said webpage with the same device/ browser the cookie and the information it contains will be either transmitted to the webpage that created it (first party cookies) or will be delivered to another website (third party cookies).
This provides the website with the functional requirements of the clients browser and will change the settings accordingly. Cookies provide data about your preferences, how you use the webpage and sometimes even optimize individual user experience.

FUNCTIONAL COOKIES

We use cookies to be able to provide our web services, whereby all cookies are stored in encrypted form. The use of cookies for the following data processing activities is done with the legitimate interest of providing a fully functional website and are necessary to carry out the requested online services (Art. 6 Abs. 1 f DSGVO, § 96 Abs 3 TKG).

The following table shows all functional cookies in use:

OTHER COOKIES

This webpage uses Matomo, a web analytics tool of INNOCRAFT 6011, Wellington, New Zealand. Matomo uses “cookies”, special text files that are saved to the clients electronic device and provides information about the usage of the website. As a rule, the information that is provided by the cookie (including abbreviated IP address) will be delivered and saved to our server in Germany.

Matomo is soley used with an extension that guarantees that the IP-address is anonymous by abbreviating it which makes linking it to a particular individual impossible.

The following non functional cookies are in use:

COOKIE SETTINGS AND RESTRICTIONS ON THIS WEBPAGE

If you want to block all cookies visit your browser settings to do so. Cookies that have already been saved can be deleted at any time. The website might not be fully functional if the use of cookies is deactivated or restricted.
You can also manage and delete your cookies in your browser settings. The following links provide further information about the procedure for different browsers:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/Windows/10.20/de/cookies.html

IV. ÖH REMINDER

For the “ÖH Reminder” service reminder.oeh.ac.at we collect the following personal data of the client:

The only required information to provide the service is the phone number, all other other fields are optional.
During transmission, the name of the subscriber as well as the phone number will be delivered to the contractor (websms.at) which will then forward the message to the client.
If the client doesn’t revoke his consent, the data will be automatically deleted three months after deregistration.
The text message will be only delivered in consent of the client (Art. 6 ABS. 1 lit. A DSGVO). The client can revoke his agreement of consent at any given time (more information: IV). Unfortunately, we are unable to provide the “ÖH-Reminder” service if the client does not consent to the declaration of agreement.

V. BULLETIN BOARD

If you use the [“Bulletin Board”](https://www.oeh.ac.at "schwarzesbrett.oeh.ac.at) we collect the following personal data during the creation of an account or during the publication of notices posted to the bulletin board.

Name
Address
Phone Number
Content of notices posted to the bulletin board
(Optional: fax, UID, URL)

We need the information for the following reasons:

To be able to publish a notice to the bulletin board, we need the personal information of the client in case that any issues arise concerning malpractices. The processing of the data is used exclusively to fulfill the contract (Art. 6 Abs 1 lit. B DSGVO) and to ensure our legitimate interest of protect the clients data from misuse (Art. 6 Abs. 1 lit. F DSGVO). We are unable to publish notices to the bulletin board if we don’t receive the above mentioned information of the client.

Under no circumstances will the data be delivered to third party member vendors. The client can decide himself which information is public (separate settings for address, name, phone number and fax). The client has the full power to decide which information is available to other clients.

PLEASE NOTE: All notices to the bulletin board will be automatically deleted 6 weeks after publication. (You can extend the time your notice is available by sending an email to schwarzesbrett@oeh.ac.at)

The notice can be deleted anytime in the login section of your profile. You can also delete your account by sending an informal email with the subject “delete account” to schwarzesbrett@oeh.ac.at.

VI. APPOINTMENTS FOR THE CAREER GUIDANCE FOR HIGH SCHOOL GRADUATES

The federal ÖH offers career guidance at schools for high school graduates (=“Maturant_innen”). We collect the following data during the registration process for the appointments:

To arrange an appointment we need the address and phone number of the school as well as a responsible contact person which will be present at the day of the consultation. The collected data will be automatically deleted as soon as the responsible contact person is not working for the school anymore. The clients agreement to the declaration of consent provides the legal basis for the processing of the personal data (Art. 6 Abs. 1 lit. a DSGVO).

VII. ONLINE FORM “#FLATTENTHEFEES”

The personal data that has to be provided in the online form will only be used to process the application and will be automatically deleted with the end of the COVID-19 pandemic, or at the latest with 31. December, 2020. The submitted personal experiences with “Distance Learning” will be saved anonymously and used exclusively to improve study conditions.

VIII. LEGAL RIGHTS CONCERNING DATA PROCESSING

The Basic Regulation on Data Protection (EU-VO 2016/679) grants the following rights to the client. Please note, that the personal data can either be rectified or be deleted, but it is not possible to do both at the same time.

WITHDRAWAL OF CONSENT

The ÖH saves and processes the personal data of the client only on the basis of his/her agreement to the declaration of consent. The client has the right to withdraw the consent at any given time. However, the withdrawal of consent does not change the legality or rightfulness of the data processing and collection that occurred until consent was revoked.

RIGHT OF ACCESS TO PERSONAL DATA

The client has the right to access the origin, category, storage period, third party contractors and the purpose for which personal data has been saved and processed by the ÖH.

RIGHT OF RECTIFICATION AND ERASURE OF PERSONAL DATA

The client has the right to rectify personal information that is either incomplete or inaccurate. Additionally, the client can demand that the incomplete or inaccurate information may be deleted.

RIGHT OF LIMITING PROCESSING AND THE USE OF PERSONAL DATA

If it is unclear, if the processed personal data was incomplete/ inaccurate or was unlawfully processed, the client can demand a limit to the processing of his/her data until all issues have been resolved.

RIGHT TO OBJECT

Even if the collected personal data is complete and accurate and has been lawfully processed by the ÖH, the client has the right to object. However, please note that this is only possible in special, justified cases.

RIGHT TO TRANSFER DATA

If requested, the ÖH is obligated to delivered the stored personal data of the client in an accessible file format. If desired, the data can be transferred to a third party of the clients choosing, if the requested technical requirements are feasible and the transferal of the data doesn’t lead to unreasonable expenses or efforts on behalf of the ÖH. Further, the data transfer can only be granted in accordance to the legal framework - all directives concerning confidentiality obligations and data security still apply and must be adhered to during the process.

RIGHT OF APPEAL

If the client is concerned that the Basic Regulation on Data Protection (EU-VO 2016/678) was breached, he/she has the right to file a complaint to the data protection authority.

WHO SHOULD YOU CONTACT IF YOU WANT TO CLAIM YOUR RIGHTS?

To assert your rights please write a written complaint ( per email or mail) to the address mentioned in item (1) or directly to the following email address: office@digimox.at