Menü öffnen/schließen
AA
Change font size

Privacy Policy

Data protection information for affected persons pursuant to Articles 13 and 14 DSGVO

Data protection is a matter of trust, and your trust is important to us. We respect your privacy and personal sphere. The protection and legally compliant collection, processing, and use of your personal data is therefore an important matter for us. To ensure that you feel safe when visiting our website, we strictly observe the legal provisions when processing your personal data and would like to inform you here about our data collection and data use.

  • Contact
  • Purposes and legal basis of data processing
  • Website
  • Newsletter
  • Rights of the data subjects

Contact

Data protection officer and data protection coordinator

Responsible party 
Anton Bruckner Privatuniversität (ABPU)
Alice-Harnoncourt-Platz 1
A-4040 Linz
T +43 732 701000
E

Data protection officer 
Dr. Albert Laimighofer, Rechtsanwalt
BEURLE Rechtsanwälte GmbH & Co KG, FN 532839m
A-4020 Linz, Landstraße 9
T: +43 732 77 16 53 27
E

As a public body, the ABPU is obliged to appoint a data protection officer (Article 37 Paragraph 1 lit. a DSGVO in conjunction with § 2 Research Organisation Act).

Purposes and legal basis of data processing

The Anton Bruckner Private University processes personal data to the extent necessary to fulfill contractual obligations and legal obligations. In addition, personal data is processed primarily for marketing purposes on the legal grounds of legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR or on the basis of existing consent within the meaning of Art. 6 para. 1 lit. a GDPR.

If the data processing is carried out due to the fulfillment of contractual or legal obligations, the provision of the data is necessary to achieve the purpose.

For processing based on legitimate interests or consent, the provision of data by you is voluntary. Failure to provide the data has no consequences for the data subjects.

 

Marketing activities:

  • Marketing (general), public relations, operation of a website, processing of photos of events: legitimate interest
  • The legitimate interest is the ABPU’s interest in initiating and intensifying business relationships with existing and potential customers
  • Event or monthly program newsletter and monthly program (by post): Consent
  • These consents can be revoked at any time (see Newsletter)

In the course of public relations work and the documentation of events, certain marketing activities are carried out that are predominantly based on legitimate interests. You can object to this processing within the meaning of Art. 21 GDPR. However, we assume that an objection will only lead to us no longer being allowed to process the data if there are reasons worthy of special consideration.

Long Night of Research (LNF)

  • legitimate interests

The LNF is an initiative of the federal and state governments to promote awareness of research and development in Austria. It takes place on a uniform day each year in all participating provinces and is advertised with supra-regional funds and regional funds in the participating provinces. Upper Austria Research GmbH (UAR) coordinates the LNF in Upper Austria as the federal state coordinator and carries out activities throughout Upper Austria.

As part of the LNF, we produce photographs and films at the Anton Bruckner Private University, which are used for our own marketing activities and are also sent to the coordinator UAR for marketing and documentation purposes. In addition, we receive images from the LNF from the UAR, which we can also use for our own marketing purposes. The image/sound recordings (or excerpts thereof) are processed electronically, in particular also published or distributed in any way whatsoever. There is no entitlement to remuneration for persons depicted. If you as a visitor do not agree to this, please inform the photographers accordingly.

Our marketing activities are carried out in the course of public relations work and the documentation of events and are mainly based on the legitimate interests of the ABPU. You can object to this processing within the meaning of Art. 21 GDPR. However, we assume that an objection will only lead to us no longer being allowed to process the data if there are reasons worthy of special consideration.

Transfer to recipients in third countries:

  • The data from the above-mentioned processing activities are not usually transferred to recipients in third countries.

Type of information provided pursuant to Art. 14 GDPR:

The provision of information within the meaning of Art. 14 GDPR takes place in the context of the first use of the data, but at the latest within one month of collection. Disclosure of the data to third parties is not intended.

Website

Use of statistics cookies

This website uses the web analytics service Matomo (formerly Piwik). Matomo uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.

The information generated by the cookie about your use of this website (including your IP address) is transmitted to our server and stored. This is used to analyze the use of our website with the aim of website optimization. The information generated by the cookies about your use of this website will not be disclosed to third parties. You may refuse the use of cookies by selecting the appropriate settings in your browser, however please note that if you do this you may not be able to use the full functionality of this website. 

Your consent is generally required for the use of statistics cookies (see cookie banner when calling up the website). You can change your settings in this regard at any time under “Edit cookie settings” in the footer of this website.

Use of videos (YouTube)

This website uses the YouTube embedding function to display and play videos from the provider “YouTube”. The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If the playback of embedded Youtube videos is started, the provider “Youtube” uses cookies to collect information about user behavior. According to information from “Youtube”, these are used, among other things, to collect video statistics, improve user-friendliness and prevent abusive behavior. Independently of a playback of the embedded videos, a connection to the Google network “DoubleClick” is established each time this website is called up, which may trigger further data processing operations without our influence.

Further information on data protection at “YouTube” can be found in the provider’s privacy statement at: https://www.google.de/intl/de/policies/privacy/.

Use of cookies on the application portal

We use the application portal “eRecruiter” to manage job postings. Only technically necessary cookies are used for the secure operation of the portal. Details on cookies can be found at https://support.erecruiter.net/portal/de/kb/articles/cookies-am-bewerberportal-8-6-2020

Use of cookies for course registration of the degree programme Elementarl Music Eeducation

We use a registration system for the administration and organization of courses of the IMP Institute. For the secure operation of the portal, only technically necessary cookies are used. These are:

name lifetime content resp. purpose
ad_user_login bzw. ad_user_login_secure 8 hours Store the user ID  
ad_session_id  20 minutes Allows the assignment of different page views to one session
ad_secure_token 1 week Increases the security of user authentication
cookieconsent_status-…  1 year Used to hide cookie information

Newsletter

Purpose and content of the newsletter

We send event and monthly program newsletters only with the consent of the recipients. If the contents of a newsletter are specifically described in the registration, they are decisive for the consent of the users. In addition, our newsletters contain information about the ABPU’s study and course offerings, events of the ABPU and its partners (this may include, in particular, references to blog posts, lectures, workshops, concerts or online presences).

Lawfulness of processing

In accordance with the requirements of the General Data Protection Regulation (GDPR), we inform you that the mailing of the event and monthly program newsletters is based on your consent in terms of point (a) of Article 6(1) GDPR as well as Article 7 GDPR. We are interested in using a user-friendly and secure newsletter system that serves our business interests and meets the expectations of users.

Double opt-in and logging

Registration for our newsletters is carried out by means of a so-called double opt-in procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses.

The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address.

Registration data

To register for a newsletter, we need your e-mail address as well as your first and last name in order to be able to personalize the newsletter for you.

In individual cases, the newsletter may also contain links to external websites, i.e. websites of third parties. However, ABPU has no influence on their content and the data protection standards of such linked sites. Liability on the part of ABPU for external links is therefore excluded.

Cancellation/withdrawal

You can cancel the receipt of our newsletter at any time, i.e. withdraw your consent. This will terminate your given consent to receive the newsletter. You will find a link to cancel the newsletter at the end of each message.

Rights of the data subjects

The data subject (i.e. the natural person whose personal data are processed) is entitled to various – very comprehensive – rights to obtain from the controller (i.e. the organization, in this specific case Anton Bruckner Private University).

These rights serve to ensure the transparency of the processing of personal data. The data subject should be able to obtain information and should also know by whom, how, in which way, and why the data are processed.

The data subjects have the following rights to obtain from the controller:

  • Right to transparent information
  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to object to processing (only in case of legitimate interest)
  • Right to data portability (only in case of contractual relationship or consent).
  • If the processing is based on consent, the data subject has the right to withdraw the consent at any time (marketing for own purposes); the withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
  • Right to lodge a complaint to a supervisory authority.

Data subjects may exercise all rights by e-mail to or in any and every possible way.

The data subjects must identify themselves and contribute to prove the identity, in order to ensure that when responding to the exercise of the respective right, the data subject is actually addressed.

General information according to Article 14 GDPR

In addition to information about the use of personal data, Article 14 GDPR stipulates that data subjects must be informed about the categories of data and the origin (source of data), in cases where the controller has not obtained these data directly from the data subject itself.

This takes place

  • when building and maintaining a contact database for own purposes from public sources

Contact database

Processing of the following categories of personal data:

  • Master data (name, title, gender)
  • contact data

Origin of the data:

  • Publicly accessible sources (e.g. company register, telephone directory, homepages, social media).

Type of information provision in terms of Article 14 GDPR:

The provision of information in terms of Article 14 GDPR takes place in the context of the first use of the data, but no later than one month after obtainment. Disclosure of the data to third parties is not envisaged.