We process your data exclusively on the basis of the legal provisions (DSGVO, TKG 2003 and Research Organisation Act). In our data protection statement below, we inform you about the most important aspects of our data processing.
The following statement describes for what purpose what type of data is collected, for how long it is stored and how you can decide at any time how your personal data is handled.
Personal data may only be processed and transmitted within the framework of the specific fulfilment of tasks and only for the purposes for which they were originally collected.
According to the Forschungsorganisationsgesetz Artikel 7 §2c FFoQSI is considered a research institution, which we hereby point out in accordance with Art 7 §2d Abs 5a. Therefore, as a scientific institution, we are allowed to process personal data (e.g. medical data) for research purposes and research activities and to transmit them to other scientific institutions if the processing is pseudonymised or anonymised, or if area-specific personal identifiers or other unique identifiers are used instead of the name. Since we do not process any register-related data (e.g. ELGA), as a research institution we do not need a data protection officer.
In what context does FFoQSI store data?
- Contact with us
- Log data
- Web analysis
- Event invitations
- Joint projects
- Legal obligations
Contact with us
If you contact us by e-mail, the data you provide will be processed and stored for the purpose of processing and responding to your enquiry. We do not pass on this data without your consent.
When you visit ffoqsi.at, the web servers temporarily store each access in a log file. The following data is collected and stored until automated deletion:
- IP address
- Date and time of access
- Name and URL of the retrieved data
- The amount of data transferred
- Message as to whether the retrieval was successful
- Browser and operating system used
- Website from which the access was made
- Name of your internet access provider
This data is not merged with other data sources. In addition, the data is deleted after a statistical evaluation by the application server after a maximum of 90 days, and only pseudonymised data is subsequently stored and processed.
Your IP address is recorded, but pseudonymised. This means that only a rough localisation is possible. The data processing is carried out on the basis of the legal provisions of § 96 para 3 TKG and Art 6 para 1 lit a (consent) and/or f (legitimate interest) of the DSGVO.
You have the option of subscribing to our event invitations for FFoQSI events via our website. For this we need your e-mail address and your declaration that you agree to receive these electronic invitations by e-mail.
Data processing in connection with your application
As part of your application with us, your address and telephone number as well as accompanying documents that you send us will be stored. This data is stored for the period of processing as well as the legally required retention period of 6 months. In addition, we keep your contact details on record for a further 12 months in order to contact you in the event of suitable future vacancies.
If you object to this record keeping, we ask you to indicate this when submitting your application. Otherwise, your data can be deleted at any time by sending a revocation to email@example.com.
Data processing in connection with a joint project with us
In connection with your access accounts (e.g. IT services) at FFoQSI, your first name, last name, email address and hashed password are stored. Furthermore, access to our servers is logged.
Data processing in connection with our legal obligations
We are legally obliged to adhere to various storage and retention periods, which we naturally do. You can find an overview of all legal storage and retention periods on the WKO website.
Furthermore, we are bound by the storage and retention periods of our public funding agencies. These can last up to 10 years after the end of the project period.
We are legally obliged to submit invoices (to clients) and to accept invoices (from suppliers). The documents are stored electronically and/or as a printout within the framework of the legal retention obligations and then deleted/destroyed.
In the case of cooperative research projects, we are obliged to allow funding agencies and/or consortium leaders, in their capacity as controlling bodies, to view the documents of the specific project. This includes invoices and enclosures such as specifications, statements of work, delivery notes, handover protocols and progress reports.
In the case of certain projects funded by public authorities, extended retention periods may apply.
In principle, you have the rights to information, correction, deletion, restriction, data transferability, revocation and objection. You are welcome to contact us in this regard!
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated, you are welcome to contact us and we will deal with your concern at any time. You also have the option of raising your concern with the supervisory authority. In Austria, this is the data protection authority.