Privacy policy

Declaration on the duty to inform

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2021). In this data protection information, we inform you about the most important aspects of data processing on our website.

 

Data processing for general contact enquiries

If you contact us via the contact form on our website, by email or by telephone, we will store the data you voluntarily provide for six months for the purpose of processing your enquiry and in the event of follow-up questions. The legal basis for this is your consent in accordance with Art. 6 para. 1 lit a GDPR. The data will not be passed on to third parties.

 

Data processing if you are interested in a degree programme

We would like to point out that your name, address, e-mail address and telephone number will be stored for the purpose of counselling and subsequent contract processing. The data you provide is required to fulfil the contract or to carry out pre-contractual measures. In the event that you are interested in a study/continuing education place that takes place in cooperation with another company, it is possible that your data will be passed on to the cooperation partner for administrative processing.

If you do not register for a study programme, the data stored by us will be deleted after six months.

Data processing is carried out on the basis of the legal provisions of § 165 para. 3 TKG 2021 and Art. 6 para. 1 lit a (consent) and/or lit b (necessary for contract fulfilment) of the GDPR.

 

Data collection and processing with HubSpot

We use HubSpot for marketing activities on our website. HubSpot is a software company from the USA with a branch office HubSpot Ireland Limited in 1 Sir John Rogerson's Quay, Dublin 2.

We use the HubSpot marketing platform for our own marketing, lead generation and customer service purposes. This includes email marketing (sending newsletters and automated mailings), contact management in CRM, contact forms, landing pages, chatbots and the publication of social media posts. With the help of HubSpot, visitors can find out more about our company, download content and enter their contact details or other demographic information.

All data and information collected is stored, managed and processed on the HubSpot marketing platform and therefore transmitted to HubSpot and affiliated companies. This data is hosted in the European Union in a data centre in Germany with a backup in Ireland.

Based on this collected data or information, visitors can be contacted regarding their interest in our offer and interact with us. Information on how HubSpot handles your personal data can be found at the following link: HubSpot Privacy Policy. Further information on the compliance of the use of HubSpot by organisations and companies with the GDPR can be found here: Guide to GDPR-compliant use of HubSpot.

HubSpot uses cookies, which are stored locally in the cache of your web browser on your end device and enable us to analyse your use of the website. This data may include: Your IP address, browser type, domain name, internet service provider (ISP), files viewed on our website (e.g. HTML pages, graphics, etc.), operating system, clickstream data, access times and addresses of websites from which you accessed our website. You can find out exactly which cookies are set by HubSpot or used through the use of various HubSpot applications here: Cookies set by HubSpot in the visitor's browser.

If we have your personal data (name, address, etc.) because you have provided it to us or have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, this data is processed on this website for the purpose of website analysis. This data can then be linked to the log data mentioned above (device and activity data), so that there is also a personal reference with regard to the log data.

You can permanently object to the collection of data by HubSpot and the setting of cookies by preventing the storage of cookies through your browser settings. You can object to the processing of your personal data at any time with effect for the future.

 

Data processing for job applications

1. what data is processed?

The following categories of data are processed in order to carry out the application process:

  • Applicant master data (first name, surname, title, email address, telephone number, address, date of birth, citizenship)
  • Qualification data (cover letter, letter of motivation, CV, previous activities, professional qualifications and competences)
  • Voluntary information, such as an application photo, information on severe disability or other information that you voluntarily provide us with in your application
  • additional questions depending on the respective job advertisement (e.g. driving licence, citizenship)
  • Communication between you and us as well as comments and evaluations that are written about you during the application process
  • Other data / data categories, e.g. publicly accessible, job-related data, e.g. a profile on professional social media networks such as XING or LinkedIn
  • Special categories of personal data: If you provide information in your application documents that contains special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. information that allows conclusions to be drawn about your sexual orientation; information about your health; information that allows conclusions to be drawn about your ethnic origin or religion), we will also only process this data to the extent permitted by law

Failure to provide your data would mean that we would not be able to review or process your application.

2) For what purposes do we process your data and on what legal basis?

a) Data processing for the purposes of the employment relationship

Your personal data will be processed for the purposes of personnel selection to fill vacancies, i.e. to initiate an employment contract. The necessity and scope of the data collection depend, among other things, on the position to be filled. If your desired position involves the performance of particularly confidential tasks, increased personal and/or financial responsibility or is linked to certain physical and health requirements, more extensive data collection may be necessary.

The legal basis for processing in this context is Article 6(1)(b) GDPR (implementation of pre-contractual measures).

b) Data processing on the basis of legitimate interest - Art. 6 para. 1 lit. f GDPR

In addition, we process your application data on the basis of overriding legitimate interests (Art. 6 para. 1 lit. f GDPR) in order to check your suitability as a potential employee. However, a legitimate interest also exists, for example, if your data is required for the assertion, exercise or defence of legal claims in the context of the application process (e.g. claims under the General Equal Treatment Act). In the event of a legal dispute, we have a legitimate interest in processing the data for evidence purposes.

c) Consent - Art. 6 para. 1 lit. a and Art. 9 para. 2 lit. a GDPR

If you have given us your voluntary consent to the processing of certain personal data, this consent forms the legal basis for the processing of this data.

In the following cases, we process your personal data on the basis of your consent:

  • Inclusion in the applicant pool, i.e. we store the application documents beyond the current application procedure for consideration in subsequent application procedures.
  • Forwarding the documents to other Group companies/Group-wide applicant pool, sending feedback questionnaires. The data that you have already provided in the application process will be processed for this purpose.

If we base data processing on your consent, you have the right to withdraw your consent at any time with effect for the future. If possible, please send your cancellation by e-mail to datenschutz[at]fh-burgenland.at. The legality of the processing of your data up to the time of revocation remains unaffected.

3. recipient

In order to achieve the intended purposes, it may be necessary for us to disclose your data to the following recipients on a case-by-case basis. This disclosure may take the form of transmission, dissemination or another form of provision.

RECIPIENTPLACE OF BUSINESS (COUNTRY)BASIS FOR THIRD COUNTRY TRANSFERS
Microsoft Ireland Operations Limited One Microsoft Place, South County Business Park, Leopardstown Dublin 18, IrelandIrelandWithin EEA
Erstes Burgenländisches Rechenzentrum Gesellschaft m.b.H., Kasernenstrasse 9, A-7000 Eisenstadt as IT service provider (in the course of IT administration)AustriaWithin the EEA

4 How long will your data be stored?

We only store your data for as long as is necessary to fulfil the purpose for which it was collected. Your personal data and application documents will be deleted no later than seven months after completion of the application process, unless longer storage is required or permitted by law.

If you have expressly consented to your data being kept on record, we will store your data until you withdraw your consent, but for a maximum of five years.

Web analysis

Our website uses functions of the web analysis service Google Analytics, a web analysis service of Google Inc (Google Ireland). Cookies are used to analyse the use of the website by its users. The information generated in this way is transferred to the Google server in the USA and stored there. Google will use this information for the purpose of analysing your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google Inc. under any circumstances.

Data processing in connection with Google Analytics is carried out on the basis of your consent in accordance with Art. 6 para. 1 lit a in conjunction with Art. 49 para. 1 lit a GDPR via the cookie banner (see in detail under "Cookies"). You can revoke your consent at any time with effect for the future by adjusting your preferences under "Edit cookie settings" on our website.

You can find more information on the use of data by Google Ireland Limited at: https://policies.google.com/privacy?hl=de

Newsletter

You have the option of subscribing to our newsletter via our website. To do this, we need your email address and your declaration that you agree to receive the newsletter. The legal basis for data processing in connection with the newsletter is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

As soon as you have registered for the newsletter, we will send you a confirmation email with a link to confirm your registration.

You can cancel your subscription to the newsletter at any time. Please use the following link: Cancel subscription Your data in connection with the newsletter dispatch will then be automatically deleted.

Competitions

The name, address, email address, telephone number, gender and age of the data subjects are processed when the controller organises and runs competitions. The legal basis for the processing of personal data when organising and running competitions is Article 6(1)(a) GDPR (declaration of consent). Apart from the dispatch of prizes by Austrian Post, the personal data of the data subjects will not be passed on to third parties. The personal data of the data subjects (with the exception of the winners) will be deleted immediately after the evaluation and termination of the competition, at the latest within 14 days. The personal data provided by the individual winners will be stored for the purpose of answering queries about the prizes and for the duration of the warranty period (but for no longer than 3 years from the date on which the prize is sent). Further information on your rights as a data subject can be found under "Your rights".

Your rights

In principle, you have the rights to information, rectification, erasure, restriction, data portability, cancellation and objection. If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the data protection authority.

You can reach us using the following contact details

Controller

University of Applied Sciences Burgenland GmbH
Campus 1
A- 7000 Eisenstadt

Phone: +43 5 7705
Email: datenschutz(at)fh-burgenland.at

Data Protection Officer

Horst Lesacher, LL.M.
Phone: +43 5 9010 8015
datenschutz(at)landesholding-burgenland.at