DECLARATION OF CONSENT AND LEGAL NOTICE
This content is also available in
Thank you for visiting our webpage! The Austrian Students Union (in the following text referred to as “ÖH” or “we”) takes data protection and the privacy of our clients very seriously.
The declaration of consent applies to several webpages of the ÖH, such as:
- Other webpages, where a link to the declaration of consent shows up
You can find further information concerning the use of personal data below:
I. NAME AND ADDRESS OF THE RESPONSIBLE AUTHORITY
The responsible authority acts in line with the Basic Regulation on Data Protection (DSGVO), national laws of EU member states and further data protection regulations that apply and can be contacted at the following address:
Austrian Students Union
1040 Vienna, Austria
II. NAME AND ADDRESS OF THE DATA PROTECTION OFFICER
The current data protection officer is: Boris Treml
For further information concerning data requests and protection measures feel free to contact Boris Treml.
By adding “Data Protection Officer” to the above mentioned address (I.) you can send a written request per mail.
III. PROVISION OF THE WEBPAGE AND CREATING LOGFILES
a) DESCRIPTION AND EXTENT OF DATA PROCESSING
Every time you access one of our webpages our system automatically detects personal data and information on your electronic device.
The following data will be collected:
• Information about the type of browser the client uses, the set language and the current version of the browser in use
• Concerning mobile phones: device manufacturer as well as model name/number
• The internet service provider of the client
• The IP-address of the user
• Date and time of access
• Calls to the URL
• The amount of data transferred
• Websites that provide a non-https link to our webpage that the client has used
• Websites that are linked on our webpages and are opened by the client
• State of access /HTTPS status code
The data will be stored in the logfiles of our system.
The legal basis to the temporary storage of cookies and logfiles is the Basic Regulation on Data Protection (Art. 6 Abs. 1 lit. F DSGVO)
PURPOSE OF DATA PROCESSING
The temporary storage of the client’s IP-address is necessary to deliver our webpage from our system to the electronic device of the user. For this purpose the IP-address will be stored during the duration of the session.
The logfiles are saved to provide a functional webpage. Additionally, the data is used to optimize the website and to grant security on our IT systems. Data is not used for marketing purposes. In this regard, we support the regulations concerning data protection according to Art. 6 Abs. 1 f DSGVO.
DURATION OF DATA RETENTION
The collected data will be stored after every session and deleted after 30 days. Any data that would make the identification of the user possible will not be saved.
EXTERNAL SERVICE PROVIDER
DEFINITION OF COOKIES’
Cookies are little text files that are saved to the web browser and will be downloaded as soon as you access a webpage for the first time. If you return to said webpage with the same device/ browser the cookie and the information it contains will be either transmitted to the webpage that created it (first party cookies) or will be delivered to another website (third party cookies).
This provides the website with the functional requirements of the clients browser and will change the settings accordingly. Cookies provide data about your preferences, how you use the webpage and sometimes even optimize individual user experience.
The following table shows all functional cookies in use:
|Cookie_ID||Use||Contains personal data?||File format||Storage Periode|
|cookie_agreed||Stores the Cookie Agreement||No||Integer||90 days|
This webpage uses Matomo, a web analytics tool of INNOCRAFT 6011, Wellington, New Zealand. Matomo uses “cookies”, special text files that are saved to the clients electronic device and provides information about the usage of the website. As a rule, the information that is provided by the cookie (including abbreviated IP address) will be delivered and saved to our server in Germany.
Matomo is soley used with an extension that guarantees that the IP-address is anonymous by abbreviating it which makes linking it to a particular individual impossible.
The following non functional cookies are in use:
|Cookie_ID||Use||Contains personal data?||File format||Storage Periode|
|_pk_id,5,59d6||Collects surfing data of clients to generate anonymous evaluations by Matomo||Only encrypted||text||30 days|
|_pk_ses,5,59d6||Collects surfing data of clients to generate anonymous evaluations by Matomo||Only encrypted||text||During the session|
COOKIE SETTINGS AND RESTRICTIONS ON THIS WEBPAGE
You can also manage and delete your cookies in your browser settings. The following links provide further information about the procedure for different browsers:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
IV. ÖH REMINDER
For the “ÖH Reminder” service reminder.oeh.ac.at we collect the following personal data of the client:
|Name and Surname:||To personalize the message the client receives|
|E-Mail:||Communication with the subscriber|
|Phone number:||Communication with the subscriber and delivery of information|
|Higher Academic Institution:||To be able to provide specific information concerning the higher academic institution of the subscriber|
The only required information to provide the service is the phone number, all other other fields are optional.
During transmission, the name of the subscriber as well as the phone number will be delivered to the contractor (websms.at) which will then forward the message to the client.
If the client doesn’t revoke his consent, the data will be automatically deleted three months after deregistration.
The text message will be only delivered in consent of the client (Art. 6 ABS. 1 lit. A DSGVO). The client can revoke his agreement of consent at any given time (more information: IV). Unfortunately, we are unable to provide the “ÖH-Reminder” service if the client does not consent to the declaration of agreement.
V. BULLETIN BOARD
If you use the [“Bulletin Board”](https://www.oeh.ac.at "schwarzesbrett.oeh.ac.at) we collect the following personal data during the creation of an account or during the publication of notices posted to the bulletin board.
Content of notices posted to the bulletin board
(Optional: fax, UID, URL)
We need the information for the following reasons:
To be able to publish a notice to the bulletin board, we need the personal information of the client in case that any issues arise concerning malpractices. The processing of the data is used exclusively to fulfill the contract (Art. 6 Abs 1 lit. B DSGVO) and to ensure our legitimate interest of protect the clients data from misuse (Art. 6 Abs. 1 lit. F DSGVO). We are unable to publish notices to the bulletin board if we don’t receive the above mentioned information of the client.
Under no circumstances will the data be delivered to third party member vendors. The client can decide himself which information is public (separate settings for address, name, phone number and fax). The client has the full power to decide which information is available to other clients.
PLEASE NOTE: All notices to the bulletin board will be automatically deleted 6 weeks after publication. (You can extend the time your notice is available by sending an email to firstname.lastname@example.org)
The notice can be deleted anytime in the login section of your profile. You can also delete your account by sending an informal email with the subject “delete account” to email@example.com.
VI. APPOINTMENTS FOR THE CAREER GUIDANCE FOR HIGH SCHOOL GRADUATES
The federal ÖH offers career guidance at schools for high school graduates (=“Maturant_innen”). We collect the following data during the registration process for the appointments:
|Information about the school:||Name and address of the institution|
|Contact at school:||Name of the responsible contact person of the school to personalize communication|
|E-Mail:||Of the responsible contact person and the school itself, to be able to send information about the registration process for an appointment|
|Phone number:||Only in agreement with the contact person, to personally get in contact before the guidance service takes place|
To arrange an appointment we need the address and phone number of the school as well as a responsible contact person which will be present at the day of the consultation. The collected data will be automatically deleted as soon as the responsible contact person is not working for the school anymore. The clients agreement to the declaration of consent provides the legal basis for the processing of the personal data (Art. 6 Abs. 1 lit. a DSGVO).
VII. ONLINE FORM “#FLATTENTHEFEES”
The personal data that has to be provided in the online form will only be used to process the application and will be automatically deleted with the end of the COVID-19 pandemic, or at the latest with 31. December, 2020. The submitted personal experiences with “Distance Learning” will be saved anonymously and used exclusively to improve study conditions.
VIII. LEGAL RIGHTS CONCERNING DATA PROCESSING
The Basic Regulation on Data Protection (EU-VO 2016/679) grants the following rights to the client. Please note, that the personal data can either be rectified or be deleted, but it is not possible to do both at the same time.
WITHDRAWAL OF CONSENT
The ÖH saves and processes the personal data of the client only on the basis of his/her agreement to the declaration of consent. The client has the right to withdraw the consent at any given time. However, the withdrawal of consent does not change the legality or rightfulness of the data processing and collection that occurred until consent was revoked.
RIGHT OF ACCESS TO PERSONAL DATA
The client has the right to access the origin, category, storage period, third party contractors and the purpose for which personal data has been saved and processed by the ÖH.
RIGHT OF RECTIFICATION AND ERASURE OF PERSONAL DATA
The client has the right to rectify personal information that is either incomplete or inaccurate. Additionally, the client can demand that the incomplete or inaccurate information may be deleted.
RIGHT OF LIMITING PROCESSING AND THE USE OF PERSONAL DATA
If it is unclear, if the processed personal data was incomplete/ inaccurate or was unlawfully processed, the client can demand a limit to the processing of his/her data until all issues have been resolved.
RIGHT TO OBJECT
Even if the collected personal data is complete and accurate and has been lawfully processed by the ÖH, the client has the right to object. However, please note that this is only possible in special, justified cases.
RIGHT TO TRANSFER DATA
If requested, the ÖH is obligated to delivered the stored personal data of the client in an accessible file format. If desired, the data can be transferred to a third party of the clients choosing, if the requested technical requirements are feasible and the transferal of the data doesn’t lead to unreasonable expenses or efforts on behalf of the ÖH. Further, the data transfer can only be granted in accordance to the legal framework - all directives concerning confidentiality obligations and data security still apply and must be adhered to during the process.
RIGHT OF APPEAL
If the client is concerned that the Basic Regulation on Data Protection (EU-VO 2016/678) was breached, he/she has the right to file a complaint to the data protection authority.
WHO SHOULD YOU CONTACT IF YOU WANT TO CLAIM YOUR RIGHTS?
To assert your rights please write a written complaint ( per email or mail) to the address mentioned in item (1) or directly to the following email address: firstname.lastname@example.org