Privacy statements

Privacy Policy of the University of Graz Here as pdf-document for download

Privacy policy of the associations

  • "alumni UNI graz. the alumni network (alumni UNI graz)", ZVR: 790183860 and
  • "Graduates of the Social and Economic Sciences at the Karl-Franzens-University Graz (SOWI-AV)", ZVR: 990292547

 

1. General

1.1 In fulfillment of the information obligations according to the Data Protection Regulation (D-SGVO), we hereby inform you as existing or future members of the association about the most important aspects of data processing in the context of our association tasks. The protection of your personal data is of particular concern to us. Your data will be processed exclusively on the basis of the legal provisions.

1.2 The alumni UNI graz is responsible under data protection law iSd D-SGVO for personal data collected and processed in connection with the website https://alumni.uni-graz.at and data management software "IntrAlumni Portal" (hereinafter "alumni INSIDE") https://alumni-inside.uni-graz.at.

1.3 The SOWI-AV acts as a branch association of alumni UNI graz according to the Austrian Data Protection Act (VerG) and is responsible for personal data collected and processed in connection with the website https://sowi-av.uni-graz.at according to the German Data Protection Regulation (D-SGVO).

2. Purpose and legal basis of data processing

2.1 We store and process the data provided by you for the purpose of/for

  • Member administration and support
  • Creation of (service) offers and invoices
  • provision of our content and services
  • electronic payments and donations
  • marketing and advertising measures

2.2 The legal bases for the processing of your personal data are a) contract fulfillment including contract initiation (Art 6 para 1 lit b D-SGVO) b) fulfillment of legal obligations (Art 6 para 1 lit c D-SGVO) c) legitimate interests (Art 6 para 1 lit f D-SGVO) d) your consent (Artl 6 para 1 lit a D-SGVO). 2.3 We will not process the data provided to us for purposes other than the fulfillment and performance of our contractual or statutory tasks and services or the purposes covered by your consent. This does not include use for statistical purposes, provided that the data provided has been anonymized.

3. Administration of membership data, electronic payment and personal profile in alumni INSIDE

3.1 For organizational purposes, the administration and payment of membership and event fees, we will process your personal data that you have disclosed to us.

3.2 If you make an electronic payment for a service (e.g. membership fee, events, donations) of the association, further personal data could be collected on the part of the payment service providers.

3.3 For each member a personal profile is created in alumni INSIDE and updated in case of changes. Members can manage the profile themselves and, with the exception of the user name, also change it. The website for managing your personal settings can be reached via the following address: https://alumni-inside.uni-graz.at. You have to authenticate yourself with your username and password.

4. Event photos

4.1 In the context of events it may happen that the respective club or their chapter takes photos. You will be informed and made aware of this separately before such an event. If necessary, these photos will be published on our website(s) for public relations purposes and to present our activities.

4.2 The processing of the image data is carried out for the purpose of public relations, to present our activities and to inform the public about the fulfillment of the tasks of the association. The processing is carried out in particular on the basis of the existing overriding legitimate interest (Art 6 para 1 lit f DS-GVO) of the association in the fulfillment of its purposes.

5. Duration of data storage

We process your personal data as far as they are necessary for the purposes mentioned, in any case for the duration of the association membership, starting with the initiation until the termination. After termination of your membership, your personal data will generally be deleted. In addition, necessary data will remain stored until the expiry of the retention periods provided for in the Association Act and the Federal Fiscal Code, as well as until the end of any legal dispute.

6. Data Security and Data Sharing

6.1 Your personal data is protected by appropriate structural, infrastructural, organizational and technical precautions. These precautions relate in particular to protection against unauthorized, illegal or accidental access, processing, loss, use and manipulation.

6.2 The data transfer or data transmission is carried out exclusively on the basis of legal regulations.

6.3 In the course of our activities, we regularly cooperate with the University of Graz, external IT service providers, banks, suppliers, printers and delivery services, which may have access to your personal data in the course of their activities, if necessary. All processors used by us are contractually obligated by us to comply with the provisions of data protection law before the start of their activities.

6.4 Notwithstanding our efforts to maintain an appropriately high level of due diligence at all times, it cannot be ruled out that information you disclose to us via the Internet may be viewed and used by other persons. Please note that we therefore cannot accept any liability whatsoever for the disclosure of information due to errors in data transmission not caused by us and/or unauthorized access by third parties.

7. Disclosure of data breaches

We endeavor to ensure that data breaches are identified at an early stage, rectified and, if necessary, reported to you or the relevant supervisory authority without delay, including the respective categories of data affected.

8. Contacting by interested parties

In case of contacting by interested parties, the information of the interested parties will be stored by us for six months for the purpose of processing and answering the inquiry as well as for any follow-up questions. We do not pass on this data without the consent of the respective interested party.

 

9. accessing our website

9.1 When accessing the website of the respective association, the web servers temporarily store each access in a log file. When calling the portal "alumni INSIDE", the web servers temporarily store each access and the activities in a log file and in the profile of the member. The following data is collected and stored until automated deletion:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved data
  • Amount of data transferred
  • Message as to whether the retrieval was successful
  • Recognition data of the browser and operating system used
  • Website from which the access was made
  • Name of your Internet access provider

9.2 The processing of this data is for the purpose of ensuring the use of the website (connection establishment), system security and the technical administration of the network infrastructure. In addition, the processing serves the optimization of the Internet offer of the association. The IP address is only evaluated in the event of attacks on our network infrastructure.

10. reach and usage measurement Matomo

10.1 Description and scope of data processing
Our website uses "Matomo" for reach and usage measurement. For this purpose, so-called "cookies" (small text files) are stored on your computer and transferred to the server in order to process usage information exclusively for absolutely necessary purposes of range and usage measurement.

The software is set so that the IP addresses are not stored in full, but the 3rd and 4th octets of the IP address are masked (e.g. 192.168.xxx.xxx). In this way, an assignment of the shortened IP address to the calling computer is no longer possible according to general discretion. The information generated by the cookie about the use of the site will not be disclosed to third parties.

Depending on user behavior (e.g. coming from another page with referrer), the following cookies may be set by Matomo:

_pk_id: 13 months (to store the unique visitor ID).

_pk_ref: 6 months (to store attribution information, i.e. the referrer that was originally used to visit the website)

_pk_ses, _pk_cvar, _pk_hsr: 30 minutes (for temporary storage of data about the visit)

mtm_consent_removed: expiration date of 30 years to remember that the user has chosen to opt-out

10.2 Purpose of data processing
The purpose of processing the data is to measure reach and usage, in particular to compile reports on aggregated website activity (measuring reach, estimating the performance of the required servers, analyzing the content accessed, detecting navigation problems, etc) and thus improve our website. In this way, we fulfill the tasks of the university (in particular, the public mandate of education; the mandate of further education; support for national and international cooperation; support for the use and implementation of its research results in practice and support for the social integration of the results of the development and development of the arts; informing the public about the fulfillment of the tasks of the universities, maintaining contact with graduates) in compliance with the guiding principles for universities (economic efficiency, economy and expediency of management).

10.3 Legal basis of data processing
The processing of the above-mentioned data is based in particular on the existing overriding legitimate interest or public interest (Art 6 para 1 lit f and e DSGVO in conjunction with §§ 2 and 3 UG) of the University of Graz as a public institution in the improvement of the web presence for the fulfillment of university tasks, taking into account the guiding principles for universities in the fulfillment of their tasks (see §§ 2 and 3 UG).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this, the University of Graz as a public institution unfortunately loses its contribution to the improvement of the website and its usability in terms of university tasks and guiding principles. If you do not agree with the storage and analysis of the generated usage information, you can object to this below. In this case, a so-called deactivation cookie will be placed in your browser, which means that "Matomo" will not collect any session data. Please note: If you delete your cookies, the deactivation cookie will also be deleted and you will have to store it again.

On the following website you have the possibility to deactivate the data collection by "Matomo": www.uni-graz.at/de/datenschutz/.

This information on data protection does not apply to websites that can be accessed via links on our website. The operators of the linked websites are solely responsible for their content.

11. links to other internet sites
This information on data protection does not apply to websites that can be accessed via links on our internet site. The operators of the linked websites are solely responsible for their content.

12. your rights

12.1 As a data subject, you have the right at any time to obtain information about your stored personal data, their origin and recipients and the purpose of data processing, as well as a right to rectification, data transmission, objection, restriction of processing and blocking or deletion of incorrect or inadmissibly processed data.

12.2 You have the right to revoke any consent given for the use of your personal data at any time. The revocation of consent does not affect the lawfulness of the data processing carried out on the basis of the consent until the revocation. A revocation has the consequence that we will no longer process your data for the aforementioned purposes from that point on.

12.3 Your request for information, deletion, correction, objection and/or data transfer, in the latter case provided that this does not cause disproportionate effort, can be addressed to dsb(at)alumni.uni-graz.at.

12.4 If you are of the opinion that the processing of your personal data by us violates applicable data protection law or that your data protection rights have been violated in any other way, you have the possibility to complain to the competent supervisory authority. In Austria, the competent authority for this is the data protection authority(https://www.dsb.gv.at).

 

13. COVID-19 contact data processing (contact tracing) in the context of events of alumni UNI graz and SOWI-AV

13.1 We process the following contact data of event visitors in the context of events (e.g. lectures, guided tours, seminars) of alumni UNI graz and SOWI-AV.

  • First name
  • Last name
  • Date of birth
  • Mail address
  • Telephone number

The processing of the aforementioned data is based on the legal grounds of Art 6 para 1 lit e and f DSGVO, according to which on the one hand there is a public interest and on the other hand a legitimate interest of alumni UNI graz, SOWI-AV or the event visitors in reducing the risk of spreading Covid-19 infections.

13.2 The purpose of the data processing is the collection and storage of contact data in order to be able to notify event visitors and employees in case of a suspected Covid-19 or infection case. The storage period of the contact data is 28 days according to the recommendation of the BMfSGPK. The contact data will be irretrievably deleted after 28 days from the end of the event.

13.3 In the event of a suspected case of Covid-19 or a case of infection in an event visitor or employee, the contact data will be disclosed to the competent health authority in order to make a significant contribution to reducing the risk of spreading a Covid-19 infection (cluster reduction). Beyond that, data will only be passed on or transferred on the basis of legal regulations.

 

14. our contact details

You can reach us under the following contact details:

(1) https://alumni.uni-graz.at alumni(at)uni-graz.at
Tel: 0043 (0)316 380 1820
Fax: 0043 (0)316 380 9175

(2) https://sowi-av.uni-graz.at sowi-av( at)uni-graz.at
Tel: 0043 (0)316 692 858

Privacy policy as pdf-document