Privacy policy

General information on data processing

General principle: We only collect and process personal data to the extent that this is supported by a legal basis, such as for contract fulfilment or according to user consent. You can find further details on the legal bases under the respective processing activities.

Legal bases: According to Art. 6 (1) GDPR, data processing is only lawful if one of the following conditions is met:

• The data subject has provided their consent to the processing of their personal data for one or multiple stated purposes;
• Processing is necessary for the fulfilment of a contract whose contracting party is the data subject or for the performance of pre-contractual measures that are carried out at the request of the data subject;
• Processing is necessary for the fulfilment of a legal obligation to which the controller is subject;
• Processing is necessary in order to protect the vital interests of the data subject or another natural person;
• Processing is necessary for the performance of a task that lies in the public interest or in the exercise of public authority which has been assigned to the controller;
• Processing is necessary for maintaining the legitimate interests of the controller or a third party, insofar as the interests or basic rights and freedoms of the data subject that require the protection of personal data do not prevail, in particular if the data subject is a minor.

Storage duration: Personal data is only stored for as long as this is necessary for the designated purpose, this is prescribed on the basis of European or national legal provisions (laws, regulations or other rules) or this is required on the basis of the legitimate interest of the controller or a third party.

Server logs

Visiting this website causes the web server to process technically necessary data, including IP address, time of the request, the address requested and the browser identification sent. The legal basis is the legitimate interest in operating the site securely (Art. 6(1)(f) GDPR).

Retention period: the content server's request logs are deleted automatically after 5 days; the web server itself keeps no access log. If netcup GmbH collects log data to defend against an attack, it is stored for no longer than 14 days.

Hosting

This website and its content server run on a server of netcup GmbH, Karlsruhe, Germany, in a data centre within the European Union. netcup GmbH processes the data named above as a processor solely on our behalf (Art. 28 GDPR); no data is transferred to third countries.

No cookies, no analytics, no tracking

The public pages of this website set no cookies and use no analytics, tracking or advertising services. For that reason, no cookie banner is shown.

Fonts

All typefaces are served from this server. There is no connection to Google Fonts or any other external provider, so no IP address is transmitted to a third party.

Images and content data

Event images and portraits are served from our content server, which is reached under a separate subdomain of this website. That is the same controller rather than a third party; retrieving the images transmits your IP address to that server.

Calendar files

Calendar files (.ics) are generated on request and contain only publicly published event data. A subscription is fetched by your calendar application and is not analysed by us in any personally identifiable way.

Links to external websites

Event pages link to external services, such as registration pages, live streams, the websites of those involved and Google Maps for directions. These links open in a new tab; data reaches the respective provider only once you follow such a link. FH Vorarlberg accepts no responsibility for cookies set once visitors have left this website.

Editorial access

A password-protected editorial area is used to maintain the content. For editors, name, email address, role and an encrypted password are processed. After signing in, a session key is kept in the browser’s local storage, as is the chosen interface language; no cookies are used for this. The legal basis is the legitimate interest in maintaining the content securely (Art. 6(1)(f) GDPR).

Contacting us

If you contact us by email or telephone, the information provided by the enquiring person is processed insofar as this is necessary to answer the enquiry and for related tasks. This data is generally not passed on to third parties, unless service providers are used for the communication, the disclosure is necessary to assert or defend legal claims, or there is a legal obligation to do so.

If you send us personal data via email (not via the website), we are unable to guarantee secure transmission and the protection of personal data. We strongly recommend never transmitting confidential data by email in unencrypted form.

Notice on security measures in place

In consideration of the state of the art, implementation costs and the manner, scope, circumstances and purposes of processing as well as the different likelihoods of occurrence and severity of the risk for the rights and freedoms of natural persons, we take suitable technical and organisational measures to ensure the confidentiality, integrity and availability of data.

These measures encompass controlling physical and electronic access to the data and controlling existing access, entry and forwarding and the securing of availability. We have set up procedures to safeguard the maintenance of the rights of data subjects and ensure an appropriate response to the endangerment of data. Moreover, the protection of personal data is already considered in the selection of hardware and software and is supplemented by default settings that support data protection.

To prevent unauthorised access to data transmitted over the Internet, we use https. The protection of confidential data can be ensured with TLS (Transport Layer Security), an encryption protocol for secure data transmission. You can recognise the use of this technical protection by the lock symbol in the browser and in the website address that begins with https (instead of http). However, despite regular checks, complete protection against all hazards is unfortunately not possible.

Changes and updates to the privacy policy

Please revisit the content of the privacy policy at regular intervals. The privacy policy will be adjusted when changes arise in how we process data. Insofar as an action is required on your part, such as consent, or an individual notification, we will inform you accordingly.

Rights of data subjects according to the General Data Protection Regulation

We would like to inform you that in relation to your personal data, you generally have the rights to information, correction, erasure, restriction, data portability, revocation and objection. Enquiries or requests in this connection can be addressed to datenschutz@fhv.at.

If processing occurs on the basis of consent, you may revoke this consent at any time also by emailing datenschutz@fhv.at. Insofar as processing occurs on the basis of the legitimate interests of FH Vorarlberg, you can subject a justified objection according to the requirements of Art. 21 GDPR, although the lawfulness of data processing conducted prior to the revocation or objection remains unaffected.

If you believe that data is being processed unlawfully, we ask you to contact us at datenschutz@fhv.at. Moreover, you have the right to lodge a complaint with the responsible data protection authority with respect to suspected unlawful data processing. The responsible authority is the Austrian Data Protection Authority (Datenschutzbehörde).

Responsible controller for data processing and the data protection officer

Responsible controller: Fachhochschule Vorarlberg GmbH, Campus V, Hochschulstraße 1, 6850 Dornbirn, info@fhv.at, +43 5572 792-0

Data protection officer: datenschutz@fhv.at

Should you have any questions or concerns in connection with data protection at FH Vorarlberg, our internal contact person will be happy to help and is reachable by email at datenschutz@fhv.at.

Valid version

This data protection text is provided in English and German. In the event of ambiguities or disputes, the German version shall prevail.