Privacy Policy
1. Responsible Party and Scope of Application
The responsible party within the meaning of the General Data Protection Regulation (GDPR) is the
Rectorate of TU Wien
Karlsplatz 13
1040 Vienna
2. Data Protection Officer
Mag.a Christina Thirsfeld
TU Wien
Karlsplatz 13/018
If Data Subject Rights within the meaning of this Privacy Policy (e.g., right to information, right to erasure, etc.) are asserted, these requests or applications must be addressed without exception to datenschutz@tuwien.ac.at.
3. General Information on Data Processing
a) Scope
We collect and use personal data from our users only to the extent necessary for the provision and operation of our websites and the services offered. We use your personal data to provide the information, products, and services you request, to answer your questions, and to operate and improve our websites and applications. If we use contracted service providers for individual functions of our offering, we always select them carefully, monitor them regularly, and provide you with detailed information below about the respective processing operations and storage periods.
b) Legal Basis
The collection and use of our users' personal data is only carried out in accordance with the relevant legal basis. By being present on digital communication channels that are frequently used by our legally defined target group, we fulfill our university tasks of target group-specific public relations work (Art. 6 (1) (e) GDPR in conjunction with § 3 UG).
In addition, we process data on the basis of your consent in accordance with Art. 6 (a) GDPR. This applies to marketing and analysis cookies, which are only processed on the basis of your consent.
c) Data Deletion and Storage Period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by European or national legislators in EU regulations, laws, or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
The declaration can be accessed, saved, and printed at any time at Privacy Policy - Cluster Forschung+Daten.
4. Objection
When your personal data is processed on the basis of “public interest” and “legitimate interests,” you have the right to object to the processing of your personal data if there are reasons for this arising from your particular situation or if the objection is directed against direct marketing. In the case of direct marketing, you have a general right of objection, which we will implement without you having to specify a particular situation.
5. Rights of Data Subjects
The GDPR grants you, as a data subject, the following rights with regard to the processing of personal data:
- Right to information
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to withdraw consent
- Right to object
To exercise your rights, please contact datenschutz@tuwien.ac.at.
You also have the option of lodging a complaint with a data protection supervisory authority. The data protection supervisory authority responsible for us is the Austrian Data Protection Authority: Email: dsb@dsb.gv.at; Tel: +43 1 52 152-0.
6. SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us via forms. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
7. Use of Cookies
We use cookies on this website. A cookie is a small file that is stored by a website on the user's device (computer or mobile device). Cookies enable the website to function optimally and take into account the user's selected preferences and settings. We use both session cookies, which are deleted after closing the website, and persistent cookies, which are deleted according to the periods specified in “Change current cookie settings.” The website uses the following types of cookies:
- Technically necessary cookies to ensure the basic functionality of the website;
- Web statistics cookies to learn more about the use of the website and to improve it; and
- Marketing cookies to enable technical connection to third-party providers and to display personalized advertising content.
When accessing the website and at any time thereafter, users can decide whether to allow the setting of cookies and which additional functions they wish to activate. Changes can be made via the browser settings or the 'Change current cookie settings' menu item. Please note that blocking or deleting cookies may limit the functionality of the website. Cookies from the web statistics or marketing categories are processed exclusively on the basis of the user's consent in accordance with Art. 6 (1) (a) GDPR.
Insofar as your selection includes providers that transfer data to countries without an adequacy decision pursuant to Art. 45 GDPR and without appropriate safeguards pursuant to Art. 46 GDPR, your consent also extends to this. Please note that this may involve certain risks, particularly regarding access by public authorities for control and monitoring purposes. For data transfers to the USA, there is currently an adequacy decision (the 'EU-US Data Privacy Framework'), which certifies an adequate level of data protection for participating organizations. A list of participating companies can be found here.
a) Strictly Necessary Cookies
Strictly necessary cookies serve to enable the technical operation of our website and to make it functionally usable for you. These cookies are used based on our legitimate interest in offering a technically flawless website. However, you can generally deactivate the use of cookies in your browser.
| Cookie | Data Type | Purpose | Storage Duration |
| fe_typo_user | Personalization information | This cookie provides TYPO3 with all information for personalizing the website (e.g., login, forms, etc.). | End of session |
| be_typo_user | User ID | This cookie informs TYPO3 whether the visitor is logged into the TYPO3 backend and which backend user it is. | End of session |
| be_lastLoginProvider | User ID | Contains the ID of the TYPO3 backend login provider used. | 90 days |
| PHPSESSID | PHP Session Identifier | PHP's standard session identification. | End of session |
| supi | Consent to individual cookies | Stores information regarding consent to cookies and services. | 7 to 30 days |
b) Media Providers
The integration of video material from YouTube is carried out for the professional presentation of our website content. We use this service to publish videos on our website. When using YouTube, your personal data will be processed. Use only occurs with your consent and only as long as you have not deactivated the respective cookie.
| Cookie | Data Type | Purpose | Storage Duration |
| YouTube | Referrer URL | For the integration of video material on our website. | 6 months |
c) Marketing & Analysis Cookies
Marketing cookies originate from external advertising companies and are used to collect information about the websites visited by the user. Use only occurs with your consent and only as long as you have not deactivated the respective cookie.
A list of these cookies can be found in your Privacy Settings.
8. Provision of the Website and Creation of Log Files (Hosting)
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:
- IP address
- Date and time of the request and the number of bytes sent
- HTTP method and HTTP version
- Access status/HTTP status code
- Amount of data transferred
- Previously visited URL (Referrer URL)
- Browser version
- Server responses
- Error codes
The log files contain IP addresses or other data that allow for an assignment to the user. This could be the case, for example, if the link to the website through which the user accesses the site contains personal data, or if the link through which the user leaves contains such data. Storage in log files is carried out to ensure the functionality of the website. In addition, the data serves to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Legal Basis
The legal basis for the temporary storage of the data and the log files is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest in data processing consists in achieving the purposes of the data processing.
Duration of Storage
The data is stored anonymously in log files. It is no longer possible to establish a personal reference. Any storage of data beyond this in a form that allows the identification of the data subjects is not carried out by the website operator.
9. Data Processors
To provide the website, we use a service provider (processor). supseven e.U., Marxergasse 24/2, 1030 Vienna, operates our website on our behalf.
10. Hyperlinks to Third-Party Websites
Our websites contain so-called hyperlinks to the websites of other providers. When activating these hyperlinks, you will be redirected from one of our websites directly to the website of the other providers. You can recognize this, among other things, by the change of the URL. We cannot accept responsibility for the confidential handling of your data on third-party websites. Please inform yourself about the handling of your personal data by these companies directly on their respective websites.
a) YouTube Videos
YouTube videos are also displayed on this website. We generally ensure that YouTube only processes data about you if you have given your consent pursuant to Art. 6 (1) (a) GDPR. By loading YouTube videos, you consent to a connection being established with YouTube servers and to cookies being set by this provider. Further information on how YouTube processes your data can be found at https://policies.google.com/privacy?hl=en. You can declare your consent by checking the corresponding box in our consent banner or subsequently when accessing the application. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
b) Repositories
Our websites contain so-called hyperlinks to the websites of various repositories, such as TU Wien Research Data, PHAIDRA, Zenodo, etc. This serves to comply with the FAIR principles (findable, accessible, interoperable, and reusable) for this content. We cannot accept any responsibility for the confidential handling of your data on third-party websites. Please inform yourself about the handling of your personal data by these organizations directly on their respective websites.
11. Validity of this Privacy Policy
The currently applicable privacy policy can be accessed and printed by you at any time here on this page.
For questions regarding data protection, you can reach us at datenschutz@tuwien.ac.at, cluster-forschung-daten@tuwien.ac.at or via the other contact details provided in this privacy policy.