Privacy policy

The University of Graz takes data protection very seriously and treats your personal data confidentially and in accordance with legal regulations. This privacy policy informs you in accordance with Art. 12, 13 GDPR about the purpose, legal basis(s) and your rights in connection with the processing of personal data in the context of the use of our cooperation website, which is hosted at the University of Graz.

 

A) Accessing our website

Description and scope of data processing

When accessing the web pages of the University of Graz, the web servers temporarily store each access in a log file. The following data is recorded and stored until it is automatically deleted

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved data
  • Amount of data transferred
  • Message as to whether the retrieval was successful
  • Identification data of the browser and operating system used
  • Website from which the access was made
  • Name of your internet access provider

Purpose of the data processing

This data is processed for the purpose of ensuring the use of the website (connection establishment), system security and the technical administration of the network infrastructure. In addition, the processing serves to optimize the website. The IP address is only analyzed in the event of attacks on our network infrastructure.

Legal basis for data processing

The processing of the above-mentioned data is carried out in particular on the basis of the existing overriding legitimate interest (Art 6 para 1 lit f GDPR) of the cooperation partners in ensuring system security, the technical administration of the network infrastructure and the optimization of the website to fulfill university tasks, taking into account the guiding principles for universities in the fulfillment of their tasks (see §§ 2 and 3 UG).

 

B) Website analysis

Description and scope of data processing

The setting of web statistics cookies serves to measure reach and usage, in particular to compile reports on aggregated website activities (reach measurement, estimation of the performance of the required servers, analysis of the content accessed, detection of navigation problems, etc.) and thus improve our website. In this way, we fulfill our university tasks (in particular public educational mandate; further education mandate; support of national and international cooperation; support of the use and implementation of their research results in practice and support of the social integration of results of the development and development of the arts; informing the public about the fulfillment of the tasks of the universities) in compliance with the guiding principles for universities (efficiency, economy and expediency of management).

 

Further details can be found in the cookie settings in the footer of the website.

 

  1. Matomo

Matomo is an open-source web analysis platform that is operated at the University of Graz as a self-hosted solution. Matomo makes it possible to collect information about the behavior of website visitors in order to gain insights into user behavior and, based on this, to improve our online presence to fulfill the university's tasks.

 

  1. Google Analytics

Google Analytics is a widely used web analysis tool from the US company Google LLC. Google Analytics enables us to collect information about the behavior of website visitors in order to gain insights into user behavior and, based on this, to improve our online presence to fulfill the university's tasks. User data is collected using cookies and evaluated using the Google Analytics analysis tool, in particular to improve our advertising measures.

Legal basis for data processing

The legal basis for data processing in the course of website analysis is your voluntarily given consent in accordance with Art. 6 para. 1 lit a GDPR and § 165 para. 3 TKG 2021. You give us your consent by actively clicking on "Accept all cookies" or by actively ticking the box under "Cookie settings" for the respective processing purpose in the cookie banner when you visit our website. No analysis cookies are set before you give your consent.

Transmission
In the course of using the analysis service provider Google LLC, data may be transmitted to the USA (third country).

There is currently (as of June 17, 2024) a decision by the European Commission in which the level of data protection for certified companies in the USA is declared appropriate ("adequacy decision"). Google LLC is such a certified company (see the list of certified companies at https://www.dataprivacyframework.gov/list).
Any data transfer to Google LLC in the USA is therefore carried out on the basis of Art. 45 para. 1 GDPR in conjunction with the EU-US Data Privacy Framework.

 

 

 

C) Website marketing

In order to fulfill our university tasks, it is necessary to reach and address potential students ("prospective students") in particular. For this purpose, we use marketing cookies to obtain information about the interests and media usage behavior of prospective students, which subsequently enables us to advertise our range of courses in a targeted manner. In addition, this provides us with information on the effectiveness of online measures in the orientation and decision-making phase of prospective students.

 

Legal basis for data processing

The legal basis for data processing in the course of website marketing is your voluntarily given consent in accordance with Art. 6 para. 1 lit a GDPR and § 165 para. 3 TKG 2021. You give us your consent by actively clicking on "Accept all cookies" or by actively ticking the box under "Cookie settings" for the respective processing purpose in the cookie banner when you visit our website. No marketing cookies will be set before you give your consent.

 

Transmission
In the course of using the marketing service providers Google LLC and Meta Platforms, Inc. data may be transmitted to the USA (third country).
There is currently (as of June 17, 2024) a decision by the European Commission in which the level of data protection for certified companies in the USA is declared adequate ("adequacy decision"). Google LLC and Meta Platforms, Inc. are such certified companies (see the list of certified companies at https://www.dataprivacyframework.gov/list).
Any data transfer to Google LLC and Meta Platforms, Inc. in the USA therefore takes place on the basis of Art. 45 para. 1 GDPR in conjunction with the EU-US Data Privacy Framework.

 

D) Reach and usage measurement by Matomo

The website uses "Matomo" to measure reach and usage. For this purpose, certain usage information (e.g. information about the browser, the end device, events) is processed without the setting of "cookies" exclusively for absolutely necessary purposes of reach and usage measurement.

Purpose of the data processing

The processing of the data serves to measure reach and usage, in particular to compile reports on aggregated website activities (reach measurement, estimation of the performance of the required servers, analysis of the content accessed, detection of navigation problems, etc.) and thus improve our website. In this way, we fulfill our university tasks (in particular public education mandate; further education mandate; support of national and international cooperation; support of the use and implementation of their research results in practice and support of the social integration of results of the development and development of the arts; informing the public about the fulfillment of the tasks of the universities) in compliance with the guiding principles for universities (efficiency, economy and expediency of management).

Legal basis for data processing

The processing of the above-mentioned data is carried out in particular on the basis of the existing legitimate interest or public interest (Art 6 para 1 lit f and e GDPR in conjunction with §§ 2 and 3 UG) of the university as a public institution in the improvement of the website to fulfill university tasks, taking into account the guiding principles for universities in the fulfillment of their tasks (see §§ 2 and 3 UG).

If you do not agree to the storage and analysis of the usage information generated, you can object to this below. In this case, a so-called deactivation cookie will be stored in your browser, which means that "Matomo" will not collect any session data. Please note: If you delete your cookies, the deactivation cookie will also be deleted and you will have to store it again.

You have the option of deactivating data processing by "Matomo" on the following website: https://www.uni-graz.at/de/datenschutz

 

Storage period:

We store your data as follows:

  • With consent (Art 6 para 1 lit a GDPR): Data that we process from you on the basis of your consent will remain stored until you withdraw your consent, but no longer than until the purpose has been achieved. In addition, only your absolutely necessary personal data (name, date of consent, proof of consent, e.g. signature) will be stored for the purpose of proving your consent or your revocation for a period of 3 years from revocation.
  • In the public interest (Art 6 para 1 lit e GDPR): We process your data for as long as this is necessary due to the public interest or until a (justified) objection is raised. In addition, we only store your data if there are statutory retention periods or limitation periods regarding potential legal claims are open.
  • In the case of legitimate interest (Art. 6 para. 1 lit. f GDPR): We process the data for as long as this is necessary to safeguard legitimate interests or until a (justified) objection is raised. In addition, we only store your data if there are statutory retention periods or limitation periods regarding potential legal claims are open.

 

Your rights:

In connection with the processing of your personal data, you generally have the following rights:

  • Right of access to the personal data concerned (Art 15 GDPR),
  • Right to rectification (Art 16 GDPR), erasure (Art 17 GDPR) and to restriction of processing (Art 18 GDPR),
  • Right to data portability (Art 20 GDPR),
  • Right to object (Art 21 GDPR),
  • if the processing is based on consent: Right to withdraw consent (Art 7 (3) GDPR), which does not affect the lawfulness of processing based on consent before its withdrawal

 

You can assert your rights in connection with the joint website operation via the joint contact point of the harald.heppner(at)uni-graz.at project.

 

In addition, you have the right to lodge a complaint (Art 77 GDPR) with a supervisory authority, in Austria this is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, telephone: +43 1 52 152-0, e-mail: dsb(at)dsb.gv.at.

 

 

Data controller and contact details of the data protection officer:

University of Graz, Universitätsstraße 3, 8010 Graz, rektorsbuero(at)uni-graz.at
Contact details of the data protection officer: dsba(at)uni-graz.at

 

Institute of History, Mozartgasse 3, 8010 GRAZ, AUSTRIA
Contact details of the data protection officer(s): harald.heppner(at)uni-graz.at