Datenschutzinformation

Website

Purpose

If you only use our website to retrieve information, it is generally not necessary for you to provide personal data. However, it is necessary for the operation of the website to process certain data that can be used to establish a personal reference. In this case, this is only the data that is transmitted to us by your Internet browser. These are in particular the following:

• Date and time of accessing one of our web pages
• your browser type
• the browser settings
• the operating system used
• the last page you visited
• the amount of data transferred and the access status (file transferred, file not found, etc.) your IP address

Legal basis

The legal basis for this is our legitimate interest (§ 165 para. 3 TKG 2021, Art 6 para. 1 lit. f GDPR), which consists of ensuring the operation of the website, carrying out an error and availability analysis and defending against attacks.

Recipients

If this is necessary for the above-mentioned purposes, your personal data will only be transmitted to IT service providers used by us.

Storage period

The data is only stored for a maximum of 32 days, unless there is a legal obligation to retain it for longer. At the same time, data may be stored for longer if this is necessary in order to investigate detected attacks on our website.

Transmission to a third country

Data is not transferred to a third country. The website is hosted on our own servers.

Use of Cookies

In order to make visiting our website attractive, we use cookies that enable the use of certain functions on the website. Cookies are small text files that are temporarily stored on your computer. They do not interfere with the system and cannot cause any damage.

Most browsers are configured to accept cookies automatically. However, you can also set your browser so that you are either informed about the setting of cookies, decide on a case-by-case basis whether to accept them or generally exclude the acceptance of cookies. If you do not accept cookies, the functionality of our website may be restricted. Under the “Help” menu item in common browsers, you will find information on how you can accept or reject cookies.

Necessary cookies

Certain technical cookies are necessary to enable the operation of a website. These technically necessary cookies are only used by visitors to the website primarily to control certain sessions. This means that they are automatically deleted after the respective session when the browser is closed. The legal basis for their use is our legitimate interest (§ 165 para. 3 TKG 2021, Art 6 para. 1 lit. f GDPR) to ensure the operation of the website.

Statistical cookies

Matomo

This website uses Piwik/Matomo, an open-source software for the statistical analysis of visitor access. Piwik/Matomo uses cookies. This enables us to analyze the use of the website. The purpose of this analysis is to improve the website for you by, among other things, detecting navigation problems on the website and adapting functions and offers according to your wishes. The collection of your data is therefore absolutely necessary for the operation of the website.

The information generated by the cookies about your use of this website is stored exclusively on our web server and is not transmitted to other servers or third parties.

After collection and before storage, the IP address is immediately anonymized.

However, if you do not agree to the storage and analysis of this data, you can object to its storage and use at any time (by clicking below). (A so-called opt-out cookie is then stored in your browser, which means that Piwik/Matomo does not collect any session data).

You have the option of preventing the actions you take here from being analyzed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving usability for you and other users.

Your visit to this website is currently recorded by Matomo Web Analytics. Uncheck this box to opt-out. (Zustimmungsfeld für Matomo Cookies)

Legal basis

The legal basis for the setting of cookies and the associated data processing is our legitimate interest - already stated in the purpose - in accordance with  § 165 para. 3 TKG 2021, Art 6 para 1 lit. f GDPR.

Recipients

Your personal data will not be forwarded to third parties.

Storage period

Personal data is not stored. You can manually delete the cookies set at any time.

Transfer to a third country

Your data will not be transferred to a third country.

Third party cookies

YouTube videos

Purpose, processed data and recipients

YouTube videos are integrated on our website, which are stored on “www.youtube.com” and can be played directly from our website. YouTube is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as “Google”). We use the “extended data protection mode” option provided by YouTube, i.e. no data about you as a user is transmitted to YouTube if you do not play the videos.

Only when you play the videos will YouTube cookies be stored on your computer and data transmitted to the YouTube operator Google. If you play videos stored on YouTube, at least the following data will be transmitted to Google: IP address and cookie ID, the specific address of the page you have accessed on our website, the language setting of your browser, the system date and time of access and your browser ID. The data transfer takes place regardless of whether you are logged in to YouTube via a user account or whether you do not have a user account. If you are logged in, this data is assigned directly to your account. You can prevent this assignment by logging out before activating the start button. YouTube or Google stores this data as user profiles and uses it for the purposes of advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of these user profiles, which you must address directly to Google as the operator of YouTube.

• Information on theuse of cookies  in the context of YouTube by Google
• Further information on YouTube data protection  by Google

The legal basis for the setting of the aforementioned cookies and the associated data processing is your consent (§ 165 para. 3 TKG 2021, Art 6 para. 1 lit. a GDPR). By playing the YouTube videos, you consent to data processing by Google. We do not process the data concerned.

Revocation notice

You can withdraw your consent at any time. The legality of the data processing up to the time of revocation remains unaffected.

Transmission to third countries

Google operates several data centers and servers worldwide. It is therefore possible that data may also be transferred to a third country. An overview of the data centers and servers operated by Google can be found here. According to Google, standard contractual clauses are used if data is transferred to an inappropriate third country .

Google Maps

We use the “Google Maps” component from Google on our website.

No cookies are set when using the “Google Maps” component. We would like to point out that data is only transmitted to Google when you actively select the component. Google is solely responsible for the processing of personal data in this regard (e.g. IP address, location); we do not have access to this data.

The use of “Google Maps” and the information obtained via “Google Maps” is subject to theGoogle Terms of Use and the additional terms and conditions for “Google Maps”.

Open Street Map

Our website also uses map services provided by the OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands B72 1JU, United Kingdom (short OSMF). Your internet browser or application is connected to servers operated by OSMF in the United Kingdom and other countries. As the operator of this website, we have no control over these connections and the processing of your data by OSMF.

Information on the use of data by OSMF can be found at wiki.osmfoundation.org/wiki/Privacy_Policy .

Contact us

Purpose

If you contact us via the contact form on the website, by e-mail or by telephone, the personal data you provide will be stored by us for the purpose of processing your inquiry and in the event of follow-up questions.

The provision of personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide your personal data. If you do not provide it, we will not be able to process your request. If you intend to enter into a contract with us, the provision of your data is necessary for the conclusion of a contract. Otherwise this is not possible.

Legal basis

The legal basis for this is on the one hand

• our legitimate interest in responding to your request (Art. 6 para 1 lit. f GDPR) or
• the fulfillment of a contract concluded with you or the implementation of pre-contractual measures, insofar as this is necessary (Art 6 para 1 lit. b GDPR)

Recipients

Your personal data will not be forwarded to third parties.

Storage period

Your personal data will only be stored for as long as is necessary to achieve the respective purpose or within the scope of statutory retention periods.

Transfer to a third country

Your data will not be transferred to a third country.

Newsletter

Purpose

You have the possibility to subscribe to various newsletters via the website of the University of Innsbruck. For this we need your e-mail address and your declaration that you agree to receive the newsletter. When you register for one of our newsletters, in addition to your e-mail address, we also store further information, such as interests, on a case-by-case basis.

In order to provide you with targeted information, we also collect and process your voluntarily provided first and last name.

The provision of personal data is not required by law or contract or necessary for the conclusion of a contract. You are not obliged to provide your personal data. Failure to provide this data has no consequences for you.

Legal basis

The legal basis for sending the newsletter is your consent (§ 174 TKG 2021 in conjunction with Art. 6 para. 1 lit. a GDPR).

Cancellation notice

You can cancel your subscription to the newsletter at any time by clicking on the “Unsubscribe newsletter” button. You can of course also contact us by e-mail or telephone. We will then immediately delete your data in connection with the newsletter mailing. The legality of the processing carried out between your consent and the revocation remains unaffected.

Recipients

Your personal data will not be forwarded to third parties.

Storage period

The deletion or non-processing for the above purpose takes place after unsubscribing from the newsletter.

Transfer to a third country

Your data will not be transferred to a third country.

StudyTest

Purpose

You can take the StudyTest on the website studytest.uibk.ac.at. Participation in the StudyTest is generally possible without providing personal data. However, it is possible to save the test result so that you can call it up again at a later date. To do this, you must provide your name and an e-mail address.

The provision of personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide your personal data. If you do not provide it, you will not be able to take the StudyTest.

Legal basis

The legal basis for the StudyTest is your consent pursuant to Art. 6 para. 1 lit. a GDPR. This data processing is necessary in order to be able to display your test result again.

Revocation notice

You can withdraw your consent at any time. The legality of the data processing up to the time of revocation remains unaffected.

Storage period

The data will be automatically deleted after 12 months at the latest, unless you revoke your consent beforehand and/or request the deletion of the data.

Recipients

The StudyTest is based on the “Study Interest Test” (SIT) of ZEIT ONLINE GmbH, which processes your data together with Faibl GmbH as a technical service provider on our behalf. The University of Innsbruck has concluded an order processing contract with the above-mentioned companies in accordance with Art. 28 GDPR, which safeguards your rights.

Transfer to a third country

Data is not transferred to a third country.

Chatbot Leo

Purpose

We use a chatbot on our website. The data processing serves the purpose of providing the chatbot. It is designed to help you find the information you want on our website more quickly and to make it easier for you to contact us.

The chat history is stored for forwarding to the specialist department and/or for the continuous improvement of service quality beyond the duration of the conversation. The chatbot solution uses software that uses an algorithm based on “artificial intelligence” and continuously improves itself. To achieve this and train the chatbot, chat messages from chatbot users are stored and processed. The conversations are assigned a randomly generated pseudonym, which cannot be assigned to chatbot users and thus guarantees the anonymity of the users.

The provision of personal data is neither legally nor contractually required or necessary for the conclusion of a contract. You are not obliged to provide your personal data. If you do not provide it, you will not be able to use the Leo chatbot.

Processed data

No cookies are set when using our chatbot. However, the following user information is stored in the browser's LocalStorage:

• chatwidget-{Widget-ID}-sender: This contains a reference to users in our system.
• chatwidget-{Widget-ID}-auto-msg: This contains information about the welcome message (e.g. whether you have already seen it or closed it).
• chatwidget-{Widget-ID}-timestamp: Time of your last visit.
• chatwidget-{Widget-ID}-widgetInfo: Contains basic information about the display of the widget so that you do not have to reload it from the server every time you visit.
• chatwidget-{Widget-ID}-sound: You have the option of switching the sound on and off. This is stored here.

To track user information, data is stored in the browser's LocalStorage/SessionStorage. If the browser does not allow or support access to LocalStorage/SessionStorage, an attempt is made to store the data as a cookie.

Cookies - Keys and Their Functions:

• cookietest: This session cookie is set once when the page loads and is immediately deleted afterward. This allows the widget to determine whether access is blocked, for example, by browser settings.

In LocalStorage - Keys and Their Functions:

• onlimChat.chatwidget-v2-{Widget-ID}-author: Contains a reference to the user in our system.
• onlimChat.chatwidget-v2-{Widget-ID}-auto-msg: Contains information regarding the welcome message (e.g., whether the user has already seen or closed it).
• onlimChat.chatwidget-v2-{Widget-ID}-timestamp: Timestamp of the user's last visit.
• onlimChat.chatwidget-v2-{Widget-ID}-widgetInfo: Contains basic information about the widget's display so that the user does not have to reload it from the server on every visit.
• onlimChat.chatwidget-v2-{Widget-ID}-sound: Stores the user's preference for enabling or disabling sound.
• onlimChat.chatwidget-v2-{Widget-ID}-representation (only for specific features):
• Source: The overlay display can be enabled or disabled in the snippet. If this value is not set, the user can switch between display modes. This key stores the user's last selected display mode.
• Function: Saves the display mode last chosen by the user.
• onlimChat.chatwidget-v2-{Widget-ID}-question (only for specific features):
• Source: This is only set if a query parameter with the name/key "onlimQuestion" is included in the URL of the webpage where the widget is embedded.
• Function: Questions set in the URL via this query parameter are automatically sent to the chatbot during the conversation, e.g., during a Bot2Bot handover. To prevent the question from being sent multiple times (e.g., due to page reloads or navigating back and forth in the browser history), the question is saved.
• onlimChat.chatwidget-v2-{Widget-ID}-tags (only for specific features):
• Source: This is only set if a query parameter with the name/key "onlimTag" is included in the URL of the webpage where the widget is embedded.
• Function: Tags are automatically assigned to the conversation. These tags are also stored in the browser, making it possible to associate them with a conversation even if the user visits other pages on the website before starting the conversation.
• onlimChat.chatwidget-v2-{Widget-ID}-lang (only for direct use within the Onlim platform):
• Source: This is only set for the test widget within the Onlim platform (app.onlim.com) when the conversation language is manually changed in the header.
• Function: By saving the language, the test widget can be displayed in the previously selected language after a reset.
• onlim-ls-test: This is set in an iframe with the Onlim domain to test access permissions for LocalStorage. The iframe ensures that the user has the same conversation across different subdomains/domains where the same widget is loaded.

In SessionStorage - Keys and their Functions:

• onlimChat.chatwidget-{Widget-ID}-auto-open (only for specific features):
• Source: This is only set when a link button is clicked for which the option "Reopen Chat Widget" has been activated.
• Function: Ensures that the widget is reopened on the next page.

Legal basis

The legal basis for processing the data in order to provide you with the chatbot is your consent in accordance with § 165 para. 3 TKG 2021.

Revocation notice

You can withdraw your consent at any time. The legality of the data processing up to the time of revocation remains unaffected.

Recipients

The chatbot function is provided by the company Onlim (Onlim GmbH, Michael-Gaismair-Strasse 13, 6410 Telfs, Austria, hereinafter referred to as “Onlim”). By using the chatbot functions, a direct connection to the Onlim servers is established. Your entries in the chat transmit data to the Onlim servers. The company Onlim is therefore our data processor. Further information on data protection at Onlim can be found at https://onlim.com/en/privacy-policy/  .

Storage period

Your personal data will only be stored for as long as is necessary to achieve the respective purpose or until you withdraw your consent. You can delete the data in your LocalStorage yourself at any time. If you visit the site again after more than seven days, the information in LocalStorage will be ignored, deleted and recreated.

The data under “widgetInfo” is valid for the next 5 (five) minutes. After that, the data will be fetched again from the server during a new visit to the page.

SessionStorage data remains stored until the user closes the tab.

Transfer to a third country

Data is not transferred to a third country. The chatbot data is hosted in certified and highly available data centers in Germany.

Walls.io

Our website uses social media plugins or widgets from Walls.io. When these plugins are called up, the IP address and cookie information are transmitted to Walls.io. Walls.io is operated by “Walls.io GmbH” in Vienna, Austria.

Privacy policy of Walls.io

Nutzer*innen von Sozialen Medien

Purpose

We use our social media presence to provide information about us, job vacancies and our services. We also intend to contact and communicate with users. In addition, we receive statistical evaluations of usage data collected by the respective social media in anonymized form in order to better adapt our presence and our offers to your interests.

In general, usage data in social media is processed for advertising and market research purposes. For example, social media providers can create their own user profiles from various user interests and subsequently use these user profiles to place targeted advertisements within and outside of social media. For these purposes, the social medium also uses cookies in which the usage behavior and interests of the users are stored. Furthermore, these user profiles may also contain data on users as members of the respective social media, provided they are logged in to them (hereinafter referred to as “usage data”).

For a detailed description of the respective data processing and the options for objection or revocation, please refer to the data protection information of the respective social medium (see below).

In addition, we also process your user name, name, contact and communication data in the course of our social media presence if you contact us and share this data with us.

Legal basis

The legal basis for this is

• our legitimate interest pursuant to Art. 6 para 1 lit. f GDPR, which arises from the purpose described, or
• the fulfillment of a contract concluded with you or the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR, insofar as this is necessary.

The legal basis for processing in joint responsibility with the respective social medium is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the processing of data for analysis and marketing purposes described above in order to continuously improve our presence on social media.

Shared responsibility

As we operate various social media presences, we take current developments in the area of data protection in social media into account and take them very seriously. We therefore inform you that, based on the current case law of the European Court of Justice, there is joint responsibility within the meaning of Art. 26 GDPR between the operators of a media presence and the respective providers of this social media for the processing of your usage data. We have taken the necessary precautions for this joint responsibility, insofar as this has been made possible for us by the respective providers.

At this point, we would like to point out that the primary processing of your usage data in the social media is carried out by the respective providers of this social medium and that we only receive this - if at all - in anonymized form and therefore the primary responsibility for this in accordance with the GDPR lies with the providers of the social medium. We therefore also recommend that you assert your data subject rights in this context directly with the respective social medium. The corresponding links to the providers' data protection information can be found below.

Recipients

Some social media may process user data outside the European Union under certain circumstances. You can find more information on this in the respective social media below.

Storage period

We process your data, which we process in the context of your contact in the course of our presence on social media, until the deletion of your account in the respective social medium, unless longer storage is necessary due to the purpose of processing, legal provisions or for the assertion or defense of rights. As soon as none of these reasons apply, your data will be deleted.

We only receive and process usage data in anonymized form. For more information about the storage period, please visit the data protection information of the respective social medium.

Facebook and Instagram

Facebook Ireland Ltd.

4 Grand Canal Square, Grand Canal Harbour
Dublin 2, Irland

Privacy policy

Shared responsibility

Further information

LinkedIn

LinkedIn Ireland Unlimited Company

Wilton Plaza, Wilton Pl
Saint Peter’s
Dublin 2, Irland

Privacy policy

Shared responsibility

Further information

X/Twitter

X Internet Unlimited Company

One Cumberland Place, Fenian Street, Dublin 2
D02 AX07, Ireland

Privacy policy

Youtube

Google Ireland Limited

Gordon House, 4 Barrow Street, Dublin
D4 E5W5, Irland

Privacy policy

TikTok

TikTok Technology Limited

The Sorting Office, Ropemaker Place, Dublin 2, Dublin
D02 HD23, Ireland.

Privacy policy

planeed

planeed GbR

Watzmannst. 1a
81541 München, Deutschland

Privacy policy

Event and congress management

Purpose

The purpose of data processing is the organisation of events, specifically for scientific conferences, meetings, workshops and congresses. Within the framework of a scientific event, the following activities, amongst others, are carried out:

• Registration, administration, correspondence
• Online submission of contributions (Call for Papers)
• Assignment of contributions by the program committee
• Support for the meeting of the program committee
• Verify the online input 
• authors are notified about the experts´results
• simple payment verification
• Frontdesk functionality for use at the conference location (registration)

Processed data

In order to participate in a scientific event, a registration is necessary. During the registration you can see which personal data will be processed. The data required for the organization of the event are marked with an asterisk (mandatory fields). All other information is voluntary and will be used by us to further improve the quality of service for you within the organization. If the event is a paid event, columns of numbers are also processed.

If you use online forms or software to organize conferences, you will find more information about the processed data in the section tools and applications.

Legal basis

The legal basis for the processing of your personal data within the scope of our offers is the contract initiation or fulfillment (Art. 6 para. 1 lit. b GDPR). Our services are based either on a contractual relationship against payment or free of charge.

A further legal basis for the processing of your personal data is Art. 6 para. 1 lit. e GDPR in conjunction with § 3 UG 2002. The processing is therefore necessary in order to perform a task which is in the public interest and which has been assigned to us by the legislator, namely the training and promotion of young scientists and artists (no. 4), further education, specifically of university graduates and teachers (no. 5), the coordination of scientific research and teaching within the university (no. 6), the support of national and international cooperation in the field of scientific research and teaching as well as the arts (no. 7), as well as the support of use and implementation of their research results in practice and the support of the social integration of results and appreciation of the arts (no. 8)

The legal basis for the processing of the data you have voluntarily entered is our legitimate interest (Art. 6 para. 1 lit. f GDPR). The legitimate interest is to further improve the quality of service for you within the framework of the organization.

In this context, please note the information on the right to object on the main page.

Receiver

Your personal data will not be forwarded to third parties. It may be necessary for organizational reasons to pass on certain personal data, e.g. to co-organizers, experts, business partners and service providers. This includes in particular:

• Payment providers for processing of payment transactions,
• Print shops and dispatch partners in the process of creating and dispatching publications
• Ticket dealers for handling ticket sales
• Software service provider

More information about the specific service providers and related data processing can be found in the section tools and applications.

Storage duration

Your personal data will be stored only as long as necessary for the purpose. If the data is relevant for tax purposes, the retention period is at least seven (7) years (see § 132 para. 1 BAO). Further retention periods may result from statutory retention periods or for the purpose of asserting, exercising or defending legal claims.

Further information can be found in the section about data processing - Assertion, exercise or defence of legal claims .

Advertising and marketing for events

Purpose

The purpose of this data processing is to provide information about interesting, topic-related (non-)scientific news and events and to send invitations to our events.

Processed data

In order to provide you with this service, the following personal data in particular is processed:

Your name and contact details for postal mailing or your e-mail address for electronic mailing of information or invitations.

You are under no obligation to provide this data. Without the provision of your data, we will not be able to inform you about topic-related news or invite you to interesting events.

Legal basis

Electronic mailing

The legal basis for electronic mailing as part of our offers is your consent in accordance with Art. 6 para. 1 lit a GDPR in conjunction with § 174 para. 3 TKG 2021.

We will also use your name and contact details or your e-mail address, which are known to us in the course of an existing contractual relationship with you, to send you the latest news or invitations to events. However, when we collect your name and contact details or email address, as well as for each subsequent mailing, you will have a clear and unambiguous opportunity to decline the mailing free of charge and without any problems. In this case, the legal basis is our legitimate interest in keeping you up to date with the information specified under “Purpose” - in conjunction with the exception for business relationships pursuant to Section 174 (4) TKG 2021.

Sending by post

The legal basis for sending information by post as part of our offers is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

In this context, please note the information on the right to object on the main page.

Recipients

Your personal data will not be forwarded to third parties.

Storage period

Your personal data will be deleted for the above purpose after you have objected to the processing of your personal data.

Live streaming of events and web conferences

Purpose

The purpose is to broadcast live events and/or hold web conferences.

Processed data

In the context of web conferences, various personal data can be processed. All participants in the web conference can see or hear the content provided (messages, comments, contributions, etc.). In addition, the following personal data is processed:

• Freely chosen pseudonyms or, if applicable, first and last name of the participants
• Screen Sharing

There is the possibility to participate in the webinar by using a pseudonym, which guarantees a certain anonymity if desired.

More information about technical data processing can be found in the section tools and applications.

Legal basis

Live streaming of events or web conferences – if it is an event in a non-public area - are based on our legitimate interest in making the event accessible to as many people as possible (Art. 6 para. 1 lit. f GDPR). If, the event is in a public area, the processing is based on Art. 6 para. 1 lit. e GDPR in conjunction with §§ 2 and 3 UG, the performance of a task in the public interest. In particular, the development of new accesses or methods in the context of digitization - with special consideration of the principle of freedom of science and teaching - is intended to safeguard or advance the development and freedom of science and teaching and thus provide a large number of people with the best possible access to science and teaching.

The data processing is necessary to enable persons or the public to participate from other locations, especially in times of crisis, and thus to be able to fulfill the public responsibility of the university in the best way possible.

In this context, please note the information on the right to object on the main page.

Storage duration

More information can be found in the sectiontools and applications.

Third country transfer

Further information can be found in the overview of applications or will be provided to you by the event organization.

Photo and video recordings during events

Purpose

During this event, photos and videos will be taken for documentation purposes. It is not our intention to identify individual persons, but purely to document the event. For the purpose of documentation, the photos/videos taken will also be published on the internet (specifically on our homepage, YouTube, Facebook).

Legal basis

The data from photo and video recordings at events, i.e. both the production and the publication of the photos/videos on our legitimate interest in documenting the event, if the event is in a non-public area (Art. 6 para. 1 lit. f GDPR). If the event is in a public area, the processing is based on Art. 6 para. 1 lit. e GDPR in connection with § 3 Z 11 UG, the publicity effect of the University of Innsbruck. Not least because of the publicity effect of the University of Innsbruck it is necessary for us to document our activities. There is no obligation for you to be photographed or recorded. If you do not agree with the photograph or publication, please inform the photographer immediately or contact us.

In this context, please note the information on the right to object on the main page  .

Storage duration

Photos/videos are stored as long as necessary for the purpose. Photos/videos will be deleted immediately if they are not suitable for the above mentioned purposes or in case of an objection by affected persons.

Applicants to the University of Innsbruck

In the following we inform you about the processing of your personal data.

Processed data and purpose

a) Applications via the career portal of the University of Innsbruck

As part of your application in the career portal of the University of Innsbruck, your applicant data (including correspondence) will be collected and stored for coordination and evaluation in the application process. This applies both to applications from external persons in the career portal of the University of Innsbruck and to applications from employees of the University of Innsbruck in the internal career portal.

The processing and transmission of the data you submit

• Name and contact details
• Completed education and training
• Training and further education
• Previous professional positions and other periods
• Language and IT skills
• Uploaded documents (CV, letter of motivation, certificates, references, etc.)

is used for the application to the university as well as compliance with recording, information and reporting obligations, insofar as this is necessary for the application process, including automatically created and archived text documents (log data) in these matters.

b) Appointment procedures at the University of Innsbruck

In the context of appointment procedures, we process the following data from you to carry out an appointment procedure for university professors within the meaning of §§ 98ff UG 2002:

• Personal data (professional title, academic degree, name, date of birth)
• Contact data (email, address, telephone number)
• Qualification data (data on school and university degrees)
• Current or last employer
• Faculty affiliation
• Institute affiliation

Applicants are requested not to disclose any sensitive data (e.g. racial and ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or sex life) unless this is absolutely necessary or explicitly requested for the appointment procedure. If applicants provide sensitive data voluntarily and without being asked, this data may be stored as part of the application process.

c) Application for the position of (Vice) Rector

As part of the selection procedure for the position of Rector and Vice-Rector, we process the following data in particular:

• Personal data (professional title, academic degree, name, date of birth)
• Contact details (email, address, telephone number)
• Qualification data (data on school and university degrees)
• Current or last employer
• Faculty affiliation
• Institute affiliation

d) Data processing for the purposes of system administration and security

Due to the applicable legal data security regulations, a range of your data is processed for the administration and security of the system (log data), such as for the administration of user IDs. This includes automatically created and archived text documents in these matters.

e) Data processing for the assertion, exercise or defense of legal claims

Legal basis

Ad a: The processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR in fulfillment of a contract or pre-contractual measures.

Ad b: The legal basis for this data processing is the fulfillment of a legal obligation pursuant to Art 6 para 1 lit. c and e GDPR in conjunction with §§ 98ff UG 2002. Further regulations can be found in the guidelines of the Senate for the implementation of appointment procedures pursuant to § 98 UG as well as in the statutes section “Provisions on appointment procedures pursuant to § 98 of the administrative schedule for appointment procedures pursuant to § 98 para 2 and 6 UG, pursuant to § 99 para 4 UG and pursuant to § 99a UG”.

Ad c: The legal basis for this data processing is the fulfillment of a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR in conjunction with § 21 para. 1 no. 4 and 5, § 23 para. 1 no. 2, § 23a para. 2, § 24 para. 2 and § 25 para. 1 no. 5a and no. 6 UG. Further regulations can be found in the election regulations of the University Council (provisions for the election of the Rector) pursuant to § 21 para. 1 in particular no. 3 UG (published in the Gazette of March 4, 2022, 25th edition, no. 349).

Ad d and e: The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR or our legitimate interest in providing a technically error-free and optimized system. Without this data processing, secure operation of the system is not possible.

In this context, please note the information on the right to object on the main page  .

Provision of personal data

The provision of personal data for this data processing is required by law and/or contract or is necessary for the conclusion of a contract. Without this personal data, it is not possible to consider your application in the above procedures, as we would otherwise not be able to assess whether you are suitable for the position in question.

Origin of the data and recipients

Ad a: All data from the career portal is collected directly from you and will not be passed on to third parties outside the University of Innsbruck.

If a legal dispute arises during the recruitment process, the data necessary for the appropriate legal action will be transmitted to legal representatives, authorities and courts.

Ad b: All data from the appointment procedure will be collected directly from you and passed on to the following recipients on the basis of the statutory provisions:

Data of the commission members/selection committee:

• Rector
• Vice Rector for Research for procedures pursuant to § 99 para. 5 UG
• Senate for procedures according to §98 UG
• Working Group for Equal Treatment Issues
• Arbitration committee in the event of an objection

Data of the reviewers:

• Rector
• Vice Rector for Research in proceedings pursuant to § 99 para. 5 UG
• Senate for proceedings pursuant to § 98UG
• Working Group for Equal Treatment Issues
• Appointment committee for procedures pursuant to § 98UG
• Selection committee or department of the professors in procedures pursuant to §§ 99 and 99a UG
• Bishop: For obtaining the Nihil Obstat

Data of the applicants:

• Rector
• Appointment committee for procedures pursuant to § 98 UG
• Selection committee or department of the professors in procedures pursuant to §§ 99 and 99a UG
• Reviewers
• Working group for equal treatment issues
• Works Council
• Arbitration committee in the event of an objection
• Bishop: The details of the first applicant for obtaining the Nihil Obstat

If a legal dispute arises during the appeal proceedings, the data necessary for the appropriate legal prosecution will be transmitted to legal representatives, authorities and courts.

Ad c: All data from the application process will be collected directly from you and disclosed to the following recipients

• Selection committee according to § 23a UG
• Recruitment service providers commissioned with the selection procedure

If a legal dispute arises during the recruitment process, the data necessary for the appropriate legal action will be transmitted to legal representatives, authorities and courts.

Storage period

Ad a: Your application documents will be deleted eight months after rejection. If your application is accepted, your application documents will be transferred to the electronic personnel file.

You can edit or remove the data in your profile at any time; if there are no applications (anymore) in your profile, you can delete it yourself at any time.

Ad b: The data of the best applicants (appointment proposal) will be included in the appointment file, which will be kept in the archives of the University of Innsbruck.

The application documents of applicants who are not among the best applicants (appointment proposal) will be deleted eight months after the signing of the employment contract with the selected university professor.

Data processed in appointment procedures will not be deleted. These are added to the appointment file, which is kept in the archives of the University of Innsbruck.

Ad c: The data of applicants for the position of (Vice-)Rector who are not among the best applicants (triple proposal) will be deleted seven months after the signing of the employment contract with the selected (Vice-)Rector.

The data of the best applicants (triple proposal) will be included in the appointment file and kept in the archives of the University of Innsbruck.

Visitors to courses in the form of webinars and courses with live transmission or recording

The University of Innsbruck promotes the use of digital media as part of its educational obligations. This also includes the recording of courses and the use of webinars or streaming to enable participation in non-presence.

Visitors to courses in the form of webinars and courses with live transmission or recording

Purpose

The live transmission of courses (streaming, video conferencing), the holding of webinars and their recording as well as any other use in the context of teaching pursues the purpose of fulfilling the public teaching mission of the University of Innsbruck. In particular, the development of new approaches and methods - with special consideration of the principle of freedom of learning - is intended to ensure and promote the development and freedom of teaching and thus offer students the best possible access to teaching.

Processing is necessary to enable students and the public to participate from other locations and thus to fulfill the university's public educational mission in the best possible way.

When broadcasting or recording lectures in the lecture hall, depending on the didactic concept, the audience may also be streamed or recorded by voice or video. You will be informed by a flashing sign in the lecture room if an audio or video recording is taking place. If you do not wish to be recorded, the lecturer will be happy to inform you of your alternatives. You can find more information on admission to online courses in the section tools and applications . If an application is not included in the list, the information will be provided to you by your course instructor.

Processed data

In the context of a webinar, various personal data can naturally be processed. All participants can see or hear the content made available to each other (such as images, voice, messages, comments, contributions, etc.). Depending on the tool and area of application, the following data may also be processed

• Freely chosen pseudonyms or, if applicable, first and last names of the participants
• Information in log files, cookies
• User ID, password, institution, email etc.
• Screen sharing, chat messages, participant lists, information on group rooms, etc.
• group rooms etc.

Depending on the system, you have the option of participating in the webinar using a pseudonym, which guarantees a certain degree of anonymity if desired. If you are required to attend a course, you must inform the course management of your pseudonym by e-mail.

The processing of the information in the log files is necessary for trouble-free operation, to carry out an error and availability analysis and to defend against attacks.

If the didactic concept of the course management not only provides for a live transmission but also a recording of the course, you will be informed of this in advance. Further information on technical data processing can be found in the section tools and applications . If an application is not included in the list, the information will be provided to you by your course instructor.

Legal basis

The processing, i.e. both the direct transmission and the creation and provision of the recordings in the OLAT learning management system, is based on the performance of a task that is in the public interest. The legal basis for this is Art. 6 para. 1 lit. e GDPR in conjunction with §§ 3 and 76 UG. The public interest arises from the purpose described above. Furthermore, the transfer may result from the need for joint degree programs with partners at other locations.

In this context, please note the information on the right to object on the main page.

Recipients

Live broadcasts, recordings of courses and webinars are generally only accessible to those students who have registered for the course. If the didactic concept of the course management provides not only for a live broadcast but also for a recording, this will be made available by the course management to all participants who have registered for the course for a limited period of time in the OLAT learning management system.

We use certain software for distance learning. These may be processors under certain circumstances. You can find more information on this in the section tools and applications.

Storage duration

Your data will be transmitted live over the internet as part of streaming, video conferences or webinars. If a recording takes place, it will be stored for as long as it is necessary for the teaching and learning purpose, but for a maximum of 3 semesters after the end of the course. Once the purpose has been fulfilled, the recordings are deleted unless there is a statutory retention period or you have given your express consent for longer storage.

You can find more information on the log files in the section tools and applications.

Third country transfer

Further information can be found in the overview of applications or will be provided by the course instructors.

Management of requests for data subject rights

Purpose

The purpose is to process your requests in connection with the rights of data subjects under the GDPR.

Processed data

In particular, the following personal data is processed:

• Name
• Contact details
• Requested request
• Proof of identity
• Date of receipt
• Other comments by the data subject
• Personal data affected by the respective request

Further information on the processed personal data can be found in the individual data processing operations concerning you.

Legal basis

The legal basis for the processing of your personal data for the purpose described is a legal obligation (Art. 6 para. 1 lit. c in conjunction with Art. 12 ff GDPR). Accordingly, we must send you all notifications in connection with your rights as a data subject.

Recipients

If necessary for evidence purposes, the personal data will be submitted to the data protection authority or the court.

Storage period

Your data will be stored for three years after the application has been processed. This is due to the general limitation period pursuant to Section 24 para 4 DSG.

You can find more information in this regard in the data processing Assertion, exercise or defense of legal claims.

Budget and Controlling

Purpose

Budget and Controlling supports the management of the University of Innsbruck in the implementation of strategic goals in research, teaching and administration by providing information and data relevant to management and decision-making. If necessary, your personal data will be processed in the context of Budget and Controlling.

Legal basis

The legal basis is a legal obligation (Art. 6 para. 1 lit. c GDPR). Further legal bases are Art. 6 para. 1 lit. e GDPR for the performance of our tasks that are in the public interest and Art. 6 para. 1 lit. f GDPR for the performance of our tasks that are in the legitimate interest. The public interest and the legitimate interest arise from the purpose described above.

Here can be found an overview of the individual national legal standards.

In this context, please note the information on the right to object on the main page.

Storage period

Your personal data will only be stored or processed in this context for as long as is necessary to fulfill the described purpose.

Finance department

Purpose

Processing and transmission of data in the context of a business relationship with customers, suppliers, service providers or other business partners, including automatically created and archived text documents (such as correspondence) in these matters.

Legal basis

The processing of your personal data is based on the initiation or fulfillment of a contract (Art. 6 para. 1 lit. b GDPR) in the context of a business relationship. In addition, we are subject to legal obligations (Art. 6 para. 1 lit. c GDPR in conjunction with BAO in particular) and must process your personal data accordingly.

Further legal bases are Art. 6 para. 1 lit. e GDPR for the performance of our tasks that are in the public interest and Art. 6 para. 1 lit. f GDPR for the performance of our tasks that are in the legitimate interest. The public interest and the legitimate interest arise from the purpose described above.

In this context, please note the information on the right to object on the main page  .

Storage period

Your personal data will only be stored for as long as is necessary to fulfill the purpose. If the data is relevant under tax law, the retention period is at least seven years (see in particular Section 132 para 1 BAO). Further retention periods may result from applicable guarantee, warranty, limitation and statutory retention periods.

Recipients

Your personal data will not be forwarded to third parties. It may be necessary to transfer your personal data to the following recipients as part of the data processing described:

• Banks for the processing of payment transactions
• Legal representatives in business cases
• Public accountants for auditing purposes
• Courts and tribunals
• Competent administrative authorities, in particular tax authorities
• Debt collection companies for debt collection (abroad only if the debt has to be collected abroad)
• Third-party financiers such as leasing or factoring companies and assignees, if the delivery or service is financed by third parties in this way
• contractual or business partners who participate or are to participate in the delivery or service
• Insurance companies on the occasion of the conclusion of an insurance contract for the delivery*service or the occurrence of an insured event

Grants, prizes and scholarships

Purpose

The University of Innsbruck (Vice-Rectorate for Research, projekt.service.büro, International Services, etc.) processes and awards grants, prizes and scholarships. In the course of the awarding procedure and the administrative processing of these grants, prizes and scholarships, personal data must be requested and sometimes also passed on to third parties (reviewers, funding bodies, jury members). In accordance with the requirements of the funding bodies or the procedure, different data is requested in the application forms or, if possible, upon approval.

In addition, the University processes your personal data for the purpose of quality assurance, evaluation, compliance with qualification agreements and the preparation of an intellectual capital report.

Processed data

In particular, the following personal data is processed

• First name and surname
• Contact details (address, e-mail address and telephone number)
• Supporting documents and enclosures to the application (CV, publication lists, etc.)

Further information on the personal data processed can be found in the respective calls for applications or in the corresponding application forms.

Legal basis

The legal basis for the processing of your personal data as part of the award procedure for grants, scholarships and prizes is usually the initiation or fulfillment of the contract (Art. 6 para. 1 lt. b GDPR). If this is not the case, the legal basis for the processing of your personal data in the context of the award procedure for grants, scholarships and prizes is the legitimate interest (Art. 6 para. 1 lit. f GDPR). For statistical surveys, documentation and publication of your research, the processing of your personal data is based on Art. 6 para. 1 lit. e GDPR in conjunction with Art. 89 GDPR and § 2h para. 1 FOG.

In this context, please note the information on the right to object on the main page  .

Recipients

The University of Innsbruck (Vice-Rectorate for Research, projekt.service.büro, International Services, etc.) processes and stores your personal data. Depending on the requirements of the funding bodies or internal guidelines, an evaluation procedure is carried out within or outside the university. For this purpose, the personal data required for the assessment must be forwarded (e.g. academic application with name and contact details, CV, certificates, publication lists). Depending on the mode of decision-making (jury meeting, submission of a proposal to funding bodies), the relevant personal data must also be passed on to the respective internal and external jury members or decision-making bodies.

Furthermore, personal data may be passed on to the following bodies Funding bodies, awarding bodies, graphics agencies, printers, publishers, banks, etc. Your personal data may also be published on social media platforms, in newspapers, etc.

Storage period

Your personal data will only be stored for as long as is necessary to fulfill the purpose. In addition, longer retention periods may exist due to EU regulations, national laws and internal university guidelines.

Internal audit

Purpose

Internal Audit is tasked with providing independent and objective auditing and advisory services aimed at creating added value and improving business processes.

To this end, Internal Audit examines compliance, efficiency and expediency in order to identify deviations from proper procedures and possible weaknesses in procedures and processes and, if necessary, to make a proposal for their elimination, avoidance or optimization. If necessary, your personal data will be processed as part of the internal audit tasks.

Legal basis

The legal basis for the processing of your personal data results from the fulfillment of a legal obligation (Art. 6 para. 1 lit. c GDPR) of the university. Further legal bases are Art. 6 para. 1 lit. e GDPR for the performance of our tasks that are in the public interest and Art. 6 para. 1 lit. f GDPR for the performance of our tasks that are in the legitimate interest. The public interest and the legitimate interest arise from the purpose described above.

The national legal provisions can be found at:

• Guidelines for the management
• Audit regulations
• Federal Public Corporate Governance Code 2017
• International Professional Practices Framework (IPPF; International Principles for the Professional Practice of Internal Auditing)

In this context, please note the information on the right to object on the main page .

Storage period

Your personal data will only be stored or processed in this context for as long as is necessary to fulfill the described purpose.

Assertion, exercise or defense of legal claims

Purpose

Retention and, where appropriate, other processing of pb data for the purpose of asserting, exercising or defending legal claims or with regard to acts of the courts in the course of their judicial activities.

Data processed

For more information on the data processed, please refer to the single data information. 

Legal basis

The legal basis for processing your pb data for the described purpose is our legitimate interest (Art. 6 para. 1 lit. f or in conjunction with Art. 9 para. 2 lit. f GDPR). The legitimate interest is to process pb data as evidence for asserting and defending legal claims.

In this context, please note the information on the right to object on the main page.

Recipients

Your pb data will not be transmitted to third parties as a matter of principle. A transfer will only take place if it is necessary for the described purpose.

Storage period

You will find more detailed information on the storage period in the single data information. 

For Requests under the Informationsfreiheitsgesetz (IFG)

Purpose

Processing requests for access to information in accordance with § 7 IFG, communication with applicants, and fulfillment of legal obligations.

Processed Data

The following personal data, in particular, are processed:

• Name, address, contact details (e.g., email, phone)
• Any additional information provided in the request or correspondence

Legal Basis

The legal basis for processing your personal data for the described purpose is § 7(1) IFG in conjunction with Art. 6(1)(c) GDPR (fulfillment of a legal obligation).

Recipients

No personal data of the applicant will be disclosed to third parties.

Transfer to Third Countries

No data transfers to third countries take place.

Storage Period

Your data will be stored for three years after the request has been processed. This is based on the general statute of limitations in accordance with § 24(4) DSG.
Further information on this can be found in the data processing section Assertion, Exercise, or Defense of Legal Claims.

For Proactive Publication under the Informationsfreiheitsgesetz (IFG)

Purpose

Fulfillment of the legal obligation for proactive publication of information in accordance with § 4 IFG, to ensure transparency and access to information of general interest.

Processed Data

The following categories of data may be processed as part of proactive publications:

• General Information: Documents, reports, statistics, protocols, decisions, and other information of public interest.
• Personal Data: If included in the published documents, this may include, for example, names, roles, and contact details of public officials or other individuals mentioned in the context of public duties.
• Metadata: Information about the type, timing, and scope of the publication.

The publication of information, particularly personal data, is always carried out with a careful consideration of conflicting interests. The following are particularly taken into account:

• The public interest in transparency and freedom of information,
• The legitimate interests of the affected individuals (e.g., data protection, personal rights),
• The legal requirements of the IFG and GDPR.

If the interests of the affected individuals outweigh the public interest, the relevant data will be anonymized, pseudonymized, or not published.

Legal Basis

The legal basis for processing your personal data for the described purpose is § 4(1) IFG in conjunction with Art. 6(1)(c) GDPR (fulfillment of a legal obligation).

Recipients

Your data will be transmitted to the Federal Chancellery, which will publish it on the website data.gv.at or provide it to the applicant upon request.

Transfer to Third Countries

No data transfers to third countries take place.

Storage Period

The data will be published for as long as legally required. Once the publication obligation ceases, the data will be deleted unless other retention obligations apply.

Research Projects

Purpose of Data Processing

Research is a central task of the university and of particular importance to society. It contributes to expanding knowledge, better understanding societal developments, and developing solutions for current and future challenges.

The University of Innsbruck processes personal data for scientific research purposes. This includes, in particular, the acquisition of new scientific knowledge, the verification of existing assumptions, and the development of methods, procedures, or technologies.

In accordance with good scientific practice, personal data may be stored in a protected scientific data archive after the completion of a research project. This archive ensures that the data is treated confidentially and made available to other researchers for archival purposes in the public interest, for scientific or historical research purposes, or for statistical analyses.

Further information about research at the University of Innsbruck can be found on the following page: https://www.uibk.ac.at/en/research/.

Processed Data

Wherever possible, personal data is pseudonymized or anonymized to minimize the identifiability of the individuals concerned. Processing in identifiable form only occurs if it is absolutely necessary for conducting the research.

The specific types of data processed depend on the respective research projects.

Legal Basis

The processing of personal data for research purposes is based on your consent (Art. 6(1)(a) GDPR; for special categories of personal data in conjunction with Art. 9(2)(a) GDPR).

The storage of personal data after the completion of a research project in our data archive is based on Art. 6(1)(e) GDPR in conjunction with § 2f(1) or (3) FOG (Austrian Research Organization Act).

The use of archived data for other archival purposes in the public interest, for scientific and historical research purposes, or for statistical purposes in related research areas is permitted under the conditions of § 2d(2)(1) FOG.

If special categories of personal data are involved, the archiving is based on Art. 6(1)(e) in conjunction with Art. 9(2)(j) GDPR and § 2f(1) or (3) FOG.

The use of archived personal data by other researchers is permitted under the conditions of § 2f(2) FOG.

The publication of personal data, provided it does not involve special categories as defined in Art. 9(1) GDPR, may be based on the overriding legitimate interest of the university (Art. 6(1)(f) GDPR). This interest particularly lies in the publication of the university's research results.

In this context, please note the information on the right to object on the main page.

Please note: For processing related to research purposes, these rights may be restricted under Art. 89 GDPR if their exercise would seriously impair or render the research work impossible.

Recipients

Whether and to whom data is transmitted depends on the respective research project. Further details can be found in the information specific to each research project.

Storage Duration

Your personal data will only be stored for as long as necessary to achieve the research purposes.

To demonstrate good scientific practice, data is generally retained for at least 10 years following the publication of the results.

For archival, research, and statistical purposes under Art. 89 GDPR and §§ 2d and 2f FOG, personal data is retained for as long as necessary for these purposes.

Security Service

Purpose

The University of Innsbruck processes personal data to ensure the safety of individuals, buildings, facilities, and property, as well as to enforce and comply with house rules and to prevent disruptions to university operations. This includes, among other things:

• Access control,
• Independently asking individuals to leave,
• Security patrols on university premises,
• Security services at the University and Regional Library of Tyrol,
• Contacting the police when necessary,
• Issuing bans from the premises, and
• Documenting security-related incidents.

Data Processed

The data processing concerns students, employees of the University of Innsbruck, and external persons present on university premises.

Depending on the group of persons, the following personal data may be processed: first and last name, employee status, student status, ID data (e.g., student ID, photo ID), and image data (e.g., photos taken in the context of incident documentation).

Legal Basis

The legal basis for data processing is our legitimate interest (Art. 6 para. 1 lit. f GDPR), which arises from the purpose described above. Our legitimate interest lies in ensuring safety on university premises and protection against unwanted disruptions.

The provision of your personal data is not required by law or contract and is not necessary for the conclusion of a contract. However, failure to provide such data may result in security checks not being possible or access to university premises being denied.

In this context, please note the information on the right to object on the main page.

Recipients

In the context of the security service, your personal data may be transferred to the following recipients:

• Siwacht Bewachungsdienst GmbH
• Police and security authorities, where required in specific cases

Storage Period

Routine log data from security checks are deleted after 2 years.

Incident documentation (e.g., in connection with bans from the premises or security-related events) is retained for the duration of processing and clarification.

If legal claims are asserted or proceedings initiated, the data will be stored until the final conclusion of the proceedings.