Peter-Tunner-Straße 23, 8700 Leoben 
0
This website is operated by the Student Union of the University of Leoben, hereinafter referred to as "we", "us" and "ÖH Leoben", located in 8700 Leoben, Peter-Tunner-Strasse 23. In this privacy statement, we as the responsible party according to Art. 4 (7) EU-DSGVO describe which data we collect when you visit our website and for what purpose we process it. All relevant contact details can be found in section 10 of this privacy policy.
This privacy policy applies to the websites we jointly operate, which you can find under the following domains:
www.oeh-leoben.at
www.oeh-druck.at
www.vorlesungsaufzeichnung.at
www.wohnen-leoben.at
www.oeh-service.at
Since the protection of your personal data is of particular concern to us, we strictly adhere to the legal requirements of the DSG and the EU-DSGVO when collecting and processing your personal data.
In the following, we provide detailed information about the scope and purpose of our data processing as well as your rights as a data subject. Therefore, please read our privacy policy carefully before you continue to use our website and, if necessary, give your consent to data processing.
1. Personal data
The use of our website is generally possible without providing personal data. For the use of individual services, however, different rules may apply, to which we will refer you separately.
Apart from the cookies described in detail below, we only collect and store the data that you yourself provide to us by entering it in our input masks or otherwise actively interacting with our website.
Personal data is any information that relates to an identified or identifiable natural person. This includes, for example, your name, address, telephone number or date of birth.
2. Collection and processing of personal data
Personal data that goes beyond the information stored by cookies will only be processed by us if you voluntarily provide us with it, for example, if you register with us, enter into a contractual relationship with us or otherwise wish to contact us. This is exclusively contact data and information about the concerns with which you approach us.
We use the personal data provided by you exclusively within the scope of fulfilling the respective purpose of the processing (e.g. registration, sending newsletters, processing an order, sending information material and advertising, processing a competition, answering a question, enabling access to certain information), and/or this is permitted by law (in particular according to Art. 6 EU-DSGVO).
The purpose of the processing of your data is the operation of our website and the targeted provision of student-related information including the presentation of the range of our services. In addition, we offer services for students on our individual service portals, for the fulfillment of which we require certain personal data. Any further use of your data will only take place if you have expressly consented to it beforehand. You can revoke your consent for the future at any time, as explained in detail below.
3. Storage period
We only use data that you have made available to us in the course of our services for as long as we provide these services to you and, beyond that, for as long as any legal claims can be asserted or statutory retention obligations exist. The information stored by the cookies and plugins we use will only be processed as long as this is necessary to ensure system integrity and the performance of our website.
In the event of a contract being initiated or concluded, we will process your personal data after the contract has been fully processed until the expiry of the warranty, guarantee, limitation and statutory retention periods applicable to us, and beyond this until the end of any legal disputes in which the data is required as evidence.
4. Newsletter
We also use your personal data to regularly send students of the University of Leoben relevant information about our services and important university news by means of a newsletter. Consent to the sending of this newsletter to the extent operated by us is not necessary in accordance with §13 HSG.
5. Tools and applications used
a. Google Maps
On our website we use the services of Google Maps. This allows us to show you interactive maps directly on the website and enables you to use the map function comfortably.
By visiting our website, Google receives the information that you have accessed the corresponding subsite of our website and the personal data listed under 2. This occurs regardless of whether you are logged in via a Google account or not. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish this, you must log out of Google before using this service. Google uses your data for purposes of advertising, market research and website design. You have the right to object to the use of your data in this regard, which you must address directly to Google.
Further information on the purpose and scope of data collection can be found in Google's privacy policy, which can be found at http://www.google.de/intl/de/policies/privacy. Google also processes your data in the USA and has submitted to the EU-US Privacy Shield.
b. Links to other websites
On our website we also set links to other websites; this is done for information purposes only. These websites are not under our control and are therefore not covered by the provisions of this privacy policy. If you activate a link, it is possible that the operator of this website collects data about you and processes it in accordance with its privacy policy, which may differ from ours.
c. Interaction with various social networks
On our website, it is also possible to interact with various social networks via plugins. These are:
- Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
- Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If you click on a plugin of one of these social networks, it will be activated and a connection to the respective server of this network will be established as described before. If you activate these plugins, you consent to the use of your data collected via these plugins also in the USA, if applicable.
We have no influence on the scope and content of the data that is transmitted to the respective operator of this social network by clicking on the plugin or which may subsequently be subject to access by US authorities.
Should you wish to inform yourself about the type, scope and purpose of the data collected by the operators of these social networks, we recommend that you read the privacy policy of the respective social network.
d. Lecture recording
We provide students of the University of Leoben with digital recordings of the courses they have attended to enable better success in their studies. In order to take advantage of this offer, students must register at www.vorlesungsaufzeichnung.at and provide their essential contact information for this purpose. In this context, we only process log files to the extent necessary to ensure system integrity and do not pass this data on to third parties. If an account is not used for a period of one year, the account data will be deleted by us.
e. ÖH Leoben housing portal
We operate a housing portal at www.wohnen-leoben.at, where landlords on the one hand and interested students on the other hand can inform themselves about existing properties in Leoben and the surrounding area. In this context, we process the data provided by the registering users, in particular contact data and information on the object of the lease, for the period of use of our service. We do not pass this data on to third parties, unless a landlord on the one hand or a student on the other hand approaches us directly with this request. The log files stored in this context are processed exclusively to ensure system integrity. If an account is not used for a period of one year, the account data will be deleted by us.
f. Printing service.
In the course of our print service, we enable students to provide us with print data in order to produce academic papers, scripts or other printed works. In order to use this service, it is necessary to provide us with contact data (last name, first name, e-mail) as well as the matriculation number and telephone number. We do not pass on the data provided in this context, including the print documents provided, to third parties and only store them for as long as this is necessary to provide our service or to defend against legal claims, or for as long as there are any statutory retention obligations.
g. Application forms
On our website, we offer you the opportunity to submit various applications to us via online application forms and to register online for events and services. We do not pass on the data provided in this context, including the evidence or invoices provided, to third parties and only store it as long as this is necessary for the provision of our services or for the defense of legal claims, or as long as there are any statutory retention obligations.
6. Common responsibilities according to Art. 26 DSGVO
a. Facebook - Fan Page
We operate a Facebook fan page at https://www.facebook.com/oeh.leoben. The purpose of this fan page is to share information about our activities, to set marketing measures and to provide another communication channel with us.
In this context, we are "joint controllers" with Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, which provides this service to us. Basically, Facebook allows you to select in your settings which personal data is shared with us. If you do not want this, we receive all information regarding the use of our fan page and personal data about visitors in anonymized form.
For this purpose, we have concluded a so-called Art. 26 DSGVO agreement with Facebook, in which the mutual rights and obligations of us and Facebook are regulated. You can find this at https://www.facebook.com/legal/terms/page_controller_addendum. In this context, we also ask you to read Facebook's privacy policy, which you can find at https://www.facebook.com/policy.php.
In the Art. 26 -DSGVO agreement we have concluded, Facebook undertakes to be the first point of contact for data subjects regarding the processing of Insights data and to fulfill the related obligations and tasks.
You can therefore assert your data subject rights both against us in accordance with point 10. of this Privacy Policy and against Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
b. Instagram - Profile
We operate an Instagram - profile at https://www.instagram.com/oeh_leoben/. With this profile we want to set marketing measures, draw attention to our activities and services and create another communication channel with our students.
In this context, we are also "joint controllers" with Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Canal Squ-are, Grand Canal Harbour, Dublin 2, Ireland, which provides us with this service. Basically, Instagram allows you to choose in your settings which personal data is shared with us. If you do not want this, we receive all information regarding the use of our fan page and personal data about visitors in anonymized form.
For this purpose, we have entered into a so-called Art. 26 DSGVO agreement with Instagram, in which the mutual rights and obligations
Page 4 of 7
of us and Instagram are regulated. You can find this at https://www.facebook.com/legal/terms/page_controller_addendum. In this context, we also ask you to read the privacy policy of Instagram, which you can find at https://help.insta-gram.com/519522125107875.
In the Art. 26 -DSGVO agreement we have concluded, Instagram undertakes to be the first point of contact for data subjects regarding the processing of Insights data and to fulfill the related obligations and tasks.
You can therefore assert your data subject rights both against us in accordance with point 10. of this Privacy Policy, and against Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
7. Data transfer
As a matter of principle, your data will not be transferred to third parties unless we are legally obliged to do so, the transfer of data is necessary for the performance of a contractual relationship concluded between us, or you have previously given your express consent to the transfer of your data. External order processors or other cooperation partners will only receive your data if this is necessary for the execution of the contract. If one of our processors comes into contact with your personal data, we ensure that they comply with the provisions of data protection laws in the same way as we do.
We will never sell or otherwise market your personal data to third parties.
If our contractual partners or processors are located in a third country, i.e. a country outside the European Economic Area (EEA), we will inform you separately about the consequences of this circumstance in the description of the service.
8. Security
We use numerous technical and organizational security measures to protect your data against manipulation, loss, destruction and against access by third parties. Our security measures are continuously improved in line with technological developments on the Internet.
9. Your rights
In accordance with the General Data Protection Regulation and the Data Protection Act, you have the following rights and remedies as a data subject of our data processing:
Right to information (Art. 15 EU-DSGVO): As a data subject, you have the right to request information about whether and, if so, which personal data about you is being processed. For your own protection - so that no one else receives information about your data - it may be necessary for us to verify your identity in an appropriate form.
Right to rectification (Art. 16) and deletion (Art. 17 EU-DSGVO): You have the right to request without undue delay the rectification of inaccurate personal data concerning you or - taking into account the purposes of the data processing - the completion of incomplete personal data, as well as the erasure of your data, provided that the criteria of Art. 17 EU-DSGVO are met.
Right to restriction of processing (Art. 18 EU-DSGVO): You have the right to restrict the processing of all collected personal data under the legal conditions. As of the restriction request, this data will only be processed with individual consent or for the assertion and enforcement of legal claims.
Right to data portability (Art. 20 EU-DSGVO): You can request the unhindered and unrestricted transfer of collected personal data to a third party.
Right to object (Art. 21 EU GDPR): You may object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is necessary for the purposes of protecting our legitimate interests or those of a third party. Your data will no longer be processed after objection, unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims. You may object to data processing for the purpose of direct marketing at any time with effect for the future.
Revocation of consent: If you have separately given your consent to the processing of your data, you may revoke it at any time. Such a revocation affects the permissibility of the processing of your personal data after you have expressed it to us.
If you take a measure to enforce your rights under the GDPR listed above, we must respond to the requested measure or comply with the request without undue delay, but no later than one month after receipt of your request.
We will respond to all reasonable requests within the legal framework free of charge and as promptly as possible.
The data protection authority is responsible for requests regarding violation of the right to information, violation of the rights to confidentiality, to rectification or to deletion.
10. Contact information / Contact person / Data protection officer
a. Contact information of the data controller
ÖH at the University of Leoben
Peter-Tunner-Strasse 23, 8700 Leoben
b. Contact information of the data protection officer
Mag. Philipp Summereder, attorney at law
Summereder Pichler Wächter Attorneys at Law GmbH
Dr. Herbert-Sperl-Ring 3, A - 4060 Leonding
Status: November 2022
Peter-Tunner-Straße 23, 8700 Leoben
