Declaration on the duty to inform

The protection of your personal data is of particular concern to us. We therefore process your data exclusively in accordance with the relevant legal provisions (DSGVO, TKG 2021). In this data privacy information, we notify you of the most important aspects of data processing within the scope of our website.

Data storage for general contact requests

If you contact us via the contact form on our website, by e-mail or by telephone, the data you provide voluntarily will be stored by us for six months for the purpose of processing the enquiry and in case of follow-up questions. The legal basis for this is your consent in accordance with Art 6 para 1 lit a DSGVO. The data will not be passed on to third parties.

Data storage in case of interest in a study programme

We would like to point out that name, address, e-mail address and telephone number are stored for the purpose of consulting and subsequent contract processing. The data you provide is required for the fulfilment of the contract or for the implementation of pre-contractual measures. In the event that you are interested in a study/further education slot that takes place in cooperation with another company, it is possible that your data will be passed on to the cooperation partner for administrative processing.

If you do not enrol for a course of study, the data you provided will be deleted after six months.

The data processing is carried out in accordance with the legal provisions set forth in § 165 para 3 TKG 2021 as well as in Art 6 para 1 lit a (consent) and/or lit b (necessary for the fulfilment of the contract) of the DSGVO.

Data processing when applying for a job

1. What data are processed?

The following categories of data or data are processed in order to carry out the application procedure:

  • Applicant master data (first name, last name, title, e-mail address, telephone number, address, date of birth, citizenship)
  • Qualification data (covering letter, motivation letter, CV, previous activities, professional qualifications and competences)
  • Voluntary information, such as an application photo, details of severely disabled status or other information that you voluntarily provide to us in your application
  • additional questions depending on the respective advertisement (e.g. driving licence, citizenship)
  • the communication between you and us as well as comments and evaluations written about you in the course of your application process
  • other data / categories of data, e.g. publicly disclosed, work-related data, e.g. a profile on professional social media networks such as XING or LinkedIn
  • Special categories of personal data: If you provide information in your application documents that contains special categories of personal data within the meaning of Art. 9(1) of the GDPR (e.g. information that allows conclusions to be drawn about your sexual orientation; information about your health; information that allows conclusions to be drawn about your ethnic origin or religion), we will also only process this data within the legally permissible scope

Failing to provide your data would have the consequence that we would not be able to review or process your application.

2. For what purposes do we process your data and on what legal basis?

a) Data processing for employment purposes

Your personal data are processed for the purposes of personnel selection to fill vacancies, i.e. to initiate an employment contract. The necessity and the scope of the data collection are assessed, among other things, according to the position to be filled. If your desired position involves the performance of particularly confidential tasks, increased personnel and/or financial responsibility, or is linked to certain physical and health requirements, more extensive data collection may be necessary.

The legal basis for processing in this context is Art 6 para 1 lit b DSGVO (implementation of pre-contractual measures).

b) Data processing based on legitimate interest - Art. 6 Abs.1 lit. f DSGVO

In addition, we process your application data on the basis of overriding legitimate interests (Art 6 para 1 lit f DSGVO) in order to check your suitability as a potential employee. However, a legitimate interest also exists, for example, if your data is required for the assertion, exercise or defence of legal claims in the context of the application procedure (e.g. claims under the General Equal Treatment Act). In the event of a legal dispute, we have a legitimate interest in processing the data for evidentiary purposes.

c) Consent - Art. 6 para.1 lit. a and Art. 9 para. 2 lit. a DSGVO

If you have given us your voluntary consent to the processing of certain personal data, then this consent forms the legal basis for the processing of this data.

In the following cases, we process your personal data on the basis of consent given by you:

  • Inclusion in the applicant pool, i.e. we store the application documents beyond the current application procedure for consideration in subsequent application procedures.
  • Forwarding the documents to other group companies/group-wide applicant pool, sending feedback questionnaires. The data that you have already provided in the application process will be processed for this purpose.

If we base data processing on your consent, you have the right to revoke your consent at any time with effect for the future. If possible, please send the revocation by e-mail to datenschutz[at] The lawfulness of the processing of your data up to the time of the revocation remains unaffected.

3. Recipients

In order to achieve the purposes sought, it may be necessary on a case-by-case basis for us to disclose your data to the following recipients. This disclosure may be by transmission, dissemination or other form of making available.

Microsoft Ireland Operations Limited. One Microsoft Place, South County Business Park, Leopardstown Dublin 18, Ireland.IrelandInside EEA
Erstes Burgenländisches Rechenzentrum Gesellschaft m.b.H., Kasernenstrasse 9, A-7000 Eisenstadt as IT service provider (in the course of IT administration).AustriaInside EEA

4. How long will your data be stored?

We only store your data as long as it is necessary to achieve the purpose. Your personal data or application documents will be deleted at the latest after seven months from the end of the application process, unless longer storage is legally required or permissible.

If you have expressly consented to us keeping records, we will store your data until you revoke your consent, but for a maximum of five years.


Web analysis

Our website uses functions of the web analysis service Google Analytics, a web analysis service of Google Inc. (Google Ireland). Cookies are used for the purpose of enabling an analysis of how its users use the website. The information thus generated is transferred to Google's server in the USA and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Under no circumstances will Google associate your IP address with any other data held by Google Inc.

Data processing in connection with Google Analytics is based on your consent pursuant to Art 6 (1) (a) in conjunction with Art 49 (1) (a) DSGVO via the cookie banner (see in detail under "Cookies"). You can revoke your consent at any time with effect for the future by adjusting your preferences under "Edit cookie setting" on our website.

You can find more information on the use of data by Google Ireland Limited at:


You have the option of subscribing to our newsletter via our website. For this we need your e-mail address and your declaration that you agree to receive the newsletter. The legal basis for data processing in connection with the newsletter is your consent in accordance with Art 6 para 1 lit a DSGVO.

Once you have registered for the newsletter, we will send you a confirmation email with a link to confirm your registration.

You can cancel your subscription to the newsletter at any time. Please use the following link: Your data in connection with the newsletter dispatch will then be automatically deleted.


The name, address, e-mail address, telephone number, gender and age of the data subjects are processed in the course of the implementation and handling of competitions by the responsible party. The legal basis for the processing of personal data during the implementation and handling of competitions is Art 6 para 1 lit a DSGVO (declaration of consent). Apart from the dispatch of the prizes by the Austrian postal service, the personal data of the persons concerned will not be passed on to third parties. The personal data of the persons concerned (with the exception of the winners) will be deleted immediately after the evaluation and termination of the competition, at the latest within 14 days. The personal data disclosed by the individual winners will be stored for the purpose of answering queries regarding the prizes and for the duration of the warranty period (however, no longer than 3 years from the date of dispatch of the prize). You can find more information on your rights as a data subject under the point "Your rights".

Your rights

You are generally entitled to the rights of information, correction, deletion, restriction, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to the supervisory authority. In Austria, this is the data privacy authority.

You can reach us at the following contact details:


Fachhochschule Burgenland GmbH
Campus 1
A- 7000 Eisenstadt
Tel.: +43 5 7705

Email: datenschutz[at]

Data Privacy Officer:

Horst Lesacher, LL.M.
Tel.: +43 5 9010 8015