About us

Data Privacy Statement of the Complexity Science Hub

The protection of your personal data is of particular concern to us. We treat your personal data confidential and in accordance with the statutory data protection regulations and this data privacy statement. 

As a scientific research institute, the CSH is subject to special publication and data processing needs. In particular, CSH must keep permanent, confidential records of certain application and resume data for scientists, including external review letters; of author- and ownership data for research reports, research data, research software, lab books, and intellectual property. These records will not be erased and, in some cases such as review letters, will not be disclosed, even if requested by individuals that are mentioned in the records. The Institute must also, without seeking individual consent, regularly publish customary resume, in general publicly available data about its current and former scientists.

The General Data Protection Regulation as well as the Austrian Research Organisation Act provide for special provisions in order to be able to continue to carry out data processing essential for scientific operations in order to establish authorships (see point 4.8/4.9 below), to secure confidentiality of expert opinions in the application process (see reference to trade secret under point 7), to archive research results (see point 4.8), and to publish names and publication lists of researchers that have been working at the CSH (see point 4.9).

Since changes in the law or changes in our internal processes may make it necessary to adapt this data privacy statement, we ask you to read this data privacy statement regularly.

1. General

This data privacy statement applies to the Complexity Science Hub Vienna (CSH,we“, “us“, “our“), Josefstaedter Strasse 39, 1080 Vienna, Austria, as controller within the meaning of the EU General Data Protection Regulation (GDPR). CSH complies with the applicable provisions on the processing of personal data, in particular the Austrian Data Protection Act, the GDPR, the Austrian Research Organisation Act and the Austrian Telecommunications Act. In the following, we will inform you about the institute, as well as the nature, scope and purpose of the data collection and processing and your rights as data subject. 

2. Contact of controller and data protection officer

Complexity Science Hub Vienna CSH
Address: Josefstaedter Straße 39, 1080 Vienna, Austria
Phone: +43 1 59991 600
E-mail: office@csh.ac.at

E-mail in case you want to exercise your rights as a data subject (see point 7): datenschutz@csh.ac.at

Data Protection Officers of CSH:
Dr. Martina Kirisits, c/o Medical University of Vienna
E-Mail: datenschutz@csh.ac.at

3. What is personal data

Personal data is any information that on its own or together with other information relate to an identified or identifiable natural person. This includes, for example, your name, your address, your telephone number or your date of birth. Information that we cannot (or only with disproportionately high effort) relate to your person, e.g. anonymized information, is not personal data according to the GDPR. The person whose personal data is processed is the data subject.

4. Processing activities

In this data privacy statement we want to inform you about the following activities where we process your personal data:

4.1   Use of our websites
4.2   Use of cookies
4.3   Sending information (e.g. Newsletter) and events registration
4.4   Contact management (Customer Relationship Management – CRM)
4.5   Applications for positions in the fields of administration
4.6   Application for positions in the academic field (e.g. Interns, PhD students, PostDocs, Faculty)
4.7   Career tracking and quality management
4.8   Public Relations
4.9   Contract management
4.10   Processing images (Picture Pool)

4.1 Use of our Websites

In general you may use the CSH websites without disclosing your personal data. However, this may be different for the use of individual services to which we will draw your attention separately.

When you use our websites, we usually process your IP address, the name and version of your web browser, cookies that identify your web browser, which pages you visit exactly when on our websites (URL, date, time), and the website you visited before visiting our websites. All this data is transmitted to us by your web browser when you visit our website. This data will not be used by us to identify the individual user; the data is evaluated exclusively for statistical purposes while maintaining the anonymity of the individual users. 

In addition to the processing activities listed in point 4.2 (use of cookies), we carry out the following data processing on our website:

  • Logging of system usage
  • Authorization process
  • Evaluation of server logs for problem analysis

Your access data to the CSH websites will not be passed on to third parties. We process your data based on our legitimate interest according to Art 6 (1) point (f) GDPR in order to make the CSH websites user-friendly and protect them from attacks.

We store your personal data for as long as we need it for the fulfilment of the above-mentioned purposes. When we no longer need your personal data, we erase it from our systems and records or anonymise it so that you cannot be identified anymore.

The CSH websites may contain so-called hyperlinks to the websites of other providers. If you click on these hyperlinks, you will be redirected from the CSH websites directly to the websites of other providers. We cannot assume any responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these providers comply with data protection regulations.

4.2 Use of cookies

In order to make use of our CSH websites as optimal as possible for you, we use so-called “cookies”. Cookies are text files that can be stored on the user’s computer if the user’s browser settings allow this. Information can be written into these text files, which can be read out again at a later time. A cookie is bound to a certain domain and contains information that can later only be read out again from this domain.

In data protection, a distinction is made between cookies that require your consent before they may be stored on your terminal device and cookies that may be stored without your consent in accordance with the Telecommunications Act, as these are absolutely necessary so that we can make our service available to you. The majority of our cookies are those for which no consent is required. Of course, we only use the other cookies after we have obtained your consent.

The legal basis for setting cookies is therefore either your consent or the exception provided for in the Telecommunications Act and therefore our legitimate interest according to Art 6 (1) point (f) GDPR in order to implement data security measures, for abuse prevention and website optimisation.

You can withdraw your consent at any time with effect for the future by selecting the option “Technically Necessary Cookies” or by blocking the storage of cookies by setting your browser software accordingly. Thereby, you can generally prevent the setting of cookies on your device and shorten the storage period of the cookies. More detailed information can be found in the help menu of your browser or e.g. under the URL http://www.aboutcookies.org. Disabling cookies may result in disabling certain functionality and features of the CSH websites.

Cookies that require consent on the CSH Website

  1. Google Analytics 4

If you have given your consent, Google Analytics 4, a web analysis service of Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Nature and purpose of processing

Google Analytics uses cookies that enable your use of our website to be analyzed. The information collected by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, your user behavior is recorded in the form of “events”. Events can be

  • Page views
  • First visit to the website
  • Start of the session
  • Websites visited
  • Your “click path”, interaction with the website
  • Scrolls (whenever a user scrolls to the end of the page (90%))
  • Clicks on external links
  • Internal search queries
  • Interaction with videos
  • File downloads
  • Viewed / clicked ads
  • Language setting

Also recorded:

  • Your approximate location (region)
  • Date and time of your visit
  • Your IP address (in abbreviated form)
  • Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
  • your internet provider
  • the referrer URL (via which website/advertising medium you came to this website)

Purposes of processing

On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activities. The reports provided by Google Analytics are used to analyze the performance of our website.

Recipient

Recipients of the data are/can be

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 GDPR)
  • Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA
  • Alphabet Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA

 

Third country transfer

The European Commission adopted its adequacy decision for the USA on July 10, 2023. Google LLC is certified according to the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU Standard Contractual Clauses with the provider.

Storage period

The data we send and linked to cookies will be automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. The deletion of data whose retention period has been reached occurs automatically once a month.

Legal basis

The legal basis for this data processing is your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR. 

Revocation

You can revoke your consent at any time with effect for the future by accessing the Settingsand changing your selection there. The lawfulness of the processing carried out based on consent until its revocation remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, functionality on this and other websites may be restricted. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by

  1. not giving your consent to the setting of the cookie or
  2. downloading and installing the browser add-on to deactivate Google Analytics HERE.

Further information on the terms of use of Google Analytics and data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/de/  and at https://policies.google.com/?hl=de

  1. Cookies used by the Cookie Banner

The following cookies are used by the cookie banner:

CookieDurationDescription
cookielawinfo-checkbox-analytics1 yearSet by the GDPR Cookie Consent plugin, this cookie records the user consent for the cookies in the “Analytics” category.
cookielawinfo-checkbox-functional1 yearThe GDPR Cookie Consent plugin sets the cookie to record the user consent for the cookies in the category “Functional”.
cookielawinfo-checkbox-necessary1 yearSet by the GDPR Cookie Consent plugin, this cookie records the user consent for the cookies in the “Necessary” category.
CookieLawInfoConsent1 yearCookieYes sets this cookie to record the default button state of the corresponding category and the status of CCPA. It works only in coordination with the primary cookie.
PHPSESSIDsessionThis cookie is native to PHP applications. The cookie stores and identifies a user’s unique session ID to manage user sessions on the website. The cookie is a session cookie and will be deleted when all the browser windows are closed.
viewed_cookie_policy1 yearThe GDPR Cookie Consent plugin sets the cookie to store whether or not the user has consented to use cookies. It does not store any personal data.

The following data is processed: The choice of the user.

The purpose of the cookies is to store the choice of the user for each category (Analytics, Necessary). The Cookies are technically necessary since without these cookies the cookie banner plugin cannot be displayed.

The data is stored for a period of 11 months, after this period ends the cookie banner will pop up again and you will have to select your cookie preference again.

4.3 Cookies of social media platforms

Embedded Social Media Elements Privacy Policy

We include elements of social media services on our website to display images, videos and text. By visiting pages that display these elements, data is transferred from your browser to the respective social media service and stored there. We do not have access to this data.

The following links will take you to the pages of the respective social media services where we explain how they handle your data:
– Google Privacy Policy applying to YouTube: https://policies.google.com/privacy?hl=en

YouTube Privacy Policy
We have included YouTube videos on our website. So we can present you interesting videos directly on our site. YouTube is a video portal that has been a subsidiary of Google LLC since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page on our website that has a YouTube video embedded, your browser automatically connects to YouTube or Google servers. Depending on your settings, various data will be transmitted. Google is responsible for the entire data processing and therefore Google’s data protection also applies.
In the following, we will explain in more detail which data is processed, why we have included YouTube videos and how you can manage or delete your data.

What is YouTube?
On YouTube, users can view, rate, comment on and upload videos free of charge. Over the last few years, YouTube has become one of the most important social media channels in the world. To enable us to display videos on our website, YouTube provides a code excerpt that we have built into our site.

Why do we use YouTube videos on our website?
YouTube is the video platform with the most visitors and the best content. We strive to provide you with the best possible user experience on our website. And of course, interesting videos should not be missing. With the help of our embedded videos, we provide you with additional helpful content in addition to our texts and images. In addition, our website is easier to find on the Google search engine through the embedded videos. Even if we place advertisements via Google Ads, Google – thanks to the collected data – can only show these advertisements to people who are interested in our offers.

What data does YouTube store?
Once you visit one of our sites that has a YouTube video built in, YouTube sets at least one cookie that stores your IP address and our URL. If you are logged into your YouTube account, YouTube can usually associate your interactions on our website with your profile using cookies. This includes information such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution, or your Internet service provider. Additional information may include contact information, any ratings, sharing content via social media, or adding to your favorites on YouTube.

If you’re not signed in to a Google Account or Youtube Account, Google stores data with a unique identifier associated with your device, browser or app. For example, your preferred language setting remains the same. But a lot of interaction data can’t be stored because fewer cookies are set.

The following list shows cookies that have been set in a browser test. On the one hand, we show cookies that are set without a registered YouTube account. On the other hand, we show cookies that are set with a registered account. The list cannot claim to be complete because the user data always depends on the interactions on YouTube.

CookieDurationDescription
mec_cart1 monthProvides functionality for our ticket shop
VISITOR_INFO1_LIVE6 monthsYouTube sets this cookie to measure bandwidth, determining whether the user gets the new or old player interface.
VISITOR_PRIVACY_METADATA6 monthsYouTube sets this cookie to store the user’s cookie consent state for the current domain.
YSCsessionYoutube sets this cookie to track the views of embedded videos on Youtube pages.
yt-remote-connected-devicesneverYouTube sets this cookie to store the user’s video preferences using embedded YouTube videos.
yt-remote-device-idneverYouTube sets this cookie to store the user’s video preferences using embedded YouTube videos.
yt.innertube::nextIdneverYouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen.
yt.innertube::requestsneverYouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen.


How long and where is the data stored?
The data that YouTube receives from you and processes is stored on Google’s servers. Most of these servers are located in America. At https://www.google.com/about/datacenters/inside/locations/?hl=en, you can see exactly where the Google data centers are located. Your data is distributed on the servers. So the data is faster retrievable and better protected against manipulation.
Google stores the collected data for different lengths of time. Some data can be deleted at any time, others are automatically deleted after a limited period of time and still others are stored by Google over a longer period of time. Some data (such as “My Activity” items, photos or documents, products) stored in your Google Account will remain stored until you delete it. Even if you’re not signed in to a Google Account, you can still delete some information associated with your device, browser, or app.

How do I delete or prevent my data from being stored?
Basically, you can manually delete data from your Google Account. With the automatic deletion of location and activity data introduced in 2019, information will be stored for either 3 or 18 months, depending on your decision, and then deleted.

Whether or not you have a Google Account, you can configure your browser to delete or disable Google cookies. This works in different ways depending on which browser you use. If you do not want cookies, you can set your browser so that it always informs you when a cookie is to be set. In this way, you can decide whether to allow each individual cookie or not. Because YouTube is a subsidiary of Google, there is a joint privacy statement. If you would like to learn more about how we treat your information, we recommend that you read the privacy statement at https://policies.google.com/privacy?hl=de.

4.3 Sending information (e.g. Newsletter) and events registration

We appreciate it if you register for events or subscribe to receive information, news on research and events of CSH (including newsletters, event invitations, etc).

For the above mentioned purposes, we collect and process data that you have made available to us, like your name, e-mail address and address, your telephone number as well as your organisation and function. You need a valid e-mail address to register online. We may check the e-mail address you have entered to ensure that you are actually the owner of the e-mail address provided. This is done by sending you a confirmation e-mail with a link to confirm your registration to the e-mail address you have provided.

In connection with your registration we also process your IP address, the date and time of your registration. This is done for security reasons in case we have to prove that we have received your consent for processing. 

CSH reserves the right to use personal data provided by you for direct marketing purposes, especially in order to inform and invite you to events, send newsletters, and to transmit your data to our subsidiaries for this purpose; this is based on our legitimate interest according to Art 6 (1) point (f) GDPR. As a person interested in CSH we would like to inform you about the institute and its subsidiaries. You have the right to object to receiving information any time with effect for the future (see point 7).

We process your data until you withdraw your consent or object to processing, but no longer than necessary to fulfil the purpose pursued with the processing, or if the storage is or becomes unlawful for other legal reasons.

4.4 Contact management (Customer Relationship Management – CRM)

For the purpose of contacting and developing individual communication strategies with contractual partners, interested parties and (potential) supporters of CSH we process your contact data (name, telephone number, e-mail address, address, organisation and function), information on your education and your professional career, date of birth, nationality, funding data and main interests. This also serves to optimise our contact management (Customer Relationship Management – CRM). We process your data either for contract initiation and performance of contract according to Art 6 (1) point (b) GDPR, on the basis of your consent according to Art 6 (1) point (a) GDPR, or our legitimate interest according to Art 6 (1) point (f) GDPR in order to ideally design the contact management or if the data are publicly available. As far as data processed for this purpose is not obtained from you, data is obtained from a telephone query or publicly available sources like publicly available websites, registries, or publicly available contents in social media networks like LinkedIn.

You may withdraw your consent at any time with effect for the future (see also point 6) or object, on grounds relating to your particular situation, to processing at any time according to point 7.

We process your data until you withdraw your consent or object to processing your data, but no longer than necessary to fulfil the purpose pursued with the processing, or if the storage is or becomes unlawful for other legal reasons.

4.5 Applications for positions in the fields of administration and science

If you apply for an open position, we collect and process personal data which you have either provided to us or which we obtain, for example in the course of job interviews, or in the course of internal assessment centers or the performance of tests. We process your data according to Art 6 (1) point (b) GDPR in order to take necessary steps prior to entering into a contract.

We do not collect any special categories of personal data during the application process (in particular data revealing your racial or ethnic origin, political opinion, religious or philosophical beliefs or trade union membership, as well as health data or data on sex life or sexual orientation). However, if you provide us with information that contains special categories of personal data, this constitutes your explicit consent pursuant to Art 9 (2) point (a) GDPR that we may process this data. We store your data for 7 months after the end of the application process and delete it after such period. We will store your data beyond that period only if you consent, if we further process your data based on another legal basis (e.g. in connection with an employment relationship) or if it is necessary for the completion of possible legal disputes, in which the data is needed as evidence. On the basis of your consent, we will keep your application on record for two years. You may withdraw your consent at any time with effect for the future (see also point 6).

4.6 Application for positions in the academic field

If you apply for an open position in the academic field of CSH (e.g. as an intern, junior researcher/PhD student, PostDoc, Faculty), we collect and process personal data which you have either provided to us or which we obtain, for example, in the course of job interviews or in the course of internal assessment centres or the performance of tests.

Obtaining independent expert opinions of scientists worldwide is part of the internationally recognised application process in the course of scientific applications. For this purpose and for applications for positions as Faculty, the necessary data of applicants (that is, application documents such as CV including publication list, cover letter, and research statement including a description of scientific achievements and planned future research activities) may be transferred to external experts (who may reside in third countries) in order to obtain an assessment of the applicant. In order to preserve the independence of these experts, the identity of the experts as well as the expert assessments they offer are kept strictly confidential and qualify as business and trade secrets of CSH and therefore will not be disclosed to applicants. Appropriate confidentiality agreements are concluded with the experts. 

We process your data on the legal basis of contract initiation and performance of a contract according to Art 6 (1) point (b) GDPR (in connection with Art 49 (1) point (b) in case of transmission to experts in third countries). We do not collect any special categories of personal data during the application process (in particular data revealing your racial or ethnic origin, political opinion, religious or philosophical beliefs or trade union membership, as well as health data or data on sex life or sexual orientation). If you nevertheless provide us with information that contains special categories of personal data, this constitutes your explicit consent pursuant to Art 9 (2) point (a) GDPR that we may process this data.

We store your data for a period of 3 years after the end of the application process, and beyond that only for documentation purposes of funded programmes with a view to possible auditing by the funding agencies, if we further process your data based on another legal basis (e.g. in connection with an employment relationship), or if it is necessary until the completion of possible legal disputes, in which the data is needed as evidence.

If you reject an offer of admission from CSH, CSH also is entitled to process certain data for the purpose of career tracking and quality management (see point 4.8).

4.7 Career tracking and quality management

For the purpose of career tracking and quality management in connection with the optimal use of CSH’s funds and to determine the effects of measures in the field of science and research, we collect and process, if available and used by us for this purpose, the following qualitative and quantitative data of you if you either were or are active in the context of teaching and research at CSH, or applied for an position in the academic field at CSH (see point 4.6) and rejected our offer for admission: address data, education data, career path, income, employment status and extent (full-time/part-time; permanent/temporary), data on the role of the data subject (e.g. job title), e-mail data, identification data, contact data, proof of performance/grading (including review letters), nationality, date of birth, name, qualitative data concerning the relevance of the studies for the job, professional advancement and satisfaction, as well as perception of the quality and relevance of your education and training experience, geographic and/or sectoral mobility, academic functions, publications, external funding and activities concerning technology transfer.

In regards of data that was not obtained from you, data is received from other processing activities at CSH or publicly accessible sources like publicly available websites, registries, or from generally accessible contents in social media networks like LinkedIn.

Your data for the purpose of career tracking and quality management is processed for the duration of the existence of the institute, but no longer than necessary to fulfil the purpose pursued with the processing, or if the storage is or becomes unlawful for other legal reasons, and will be deleted when you object, on grounds relating to your particular situation, to processing at any time with effect for the future according to point 7. However, data subjects may not object to processing if the purpose of processing (career tracking and quality management) is likely to be made impossible or seriously impaired. We process your data for the purposes above on the basis of a public interest according to Art 6 (1) point (e) and Art 9 (2) point (g) GDPR in connection with Sec 2e and 2h Austrian Research Organisation Act (Forschungsorganisationsgesetz – FOG).

4.8 Public Relations

The protection of your personal data is of particular concern to us. We treat your personal data confidential and in accordance with the statutory data protection regulations and this data privacy statement. 

As a scientific research institute, the CSH is subject to special publication and data processing needs. In particular, CSH must keep permanent, confidential records of certain application and resume data for scientists, including external review letters; of author- and ownership data for research reports, research data, research software, lab books, and intellectual property. These records will not be erased and, in some cases such as review letters, will not be disclosed, even if requested by individuals that are mentioned in the records. The Institute must also, without seeking individual consent, regularly publish customary resume, in general publicly available data about its current and former scientists.

The General Data Protection Regulation as well as the Austrian Research Organisation Act provide for special provisions in order to be able to continue to carry out data processing essential for scientific operations in order to establish authorships (see point 4.8/4.9 below), to secure confidentiality of expert opinions in the application process (see reference to trade secret under point 7), to archive research results (see point 4.8), and to publish names and publication lists of researchers that have been working at the CSH (see point 4.9).

Since changes in the law or changes in our internal processes may make it necessary to adapt this data privacy statement, we ask you to read this data privacy statement regularly.

4.9 Contract management

CSH processes personal data that you as a contractual partner or supplier provide to CSH, for example by sending an inquiry or registration or for the conclusion of a contract. The data processing takes place for the purpose of communication with the contractual partner or supplier or the performance of the contract. This includes the initiation, conclusion, performance, guarantees as well as rescinding of contract.

For this purpose, the following personal data of data subjects of the contractual partner, supplier or subcontractor will be processed: name and contact data of contact persons as well as electronically created and archived documents (such as correspondence). If you take part in our courses, personal data required for course registration and processing will be stored by us (your name, contact data, information on course participation, performance record and grading). As an external instructor, we collect and process personal data required for the course (name, contact details, course details, and course evaluation by course participants).

The legal basis for the data processing is the contract initiation and performance of contract according to Art 6 (1) point (b) GDPR.

We store your data until the end of the business relationship or until the expiry of the guarantee, warranty, statute of limitations and statutory retention periods applicable to CSH and beyond that until the end of any legal disputes, in which the data is required as evidence.

4.10 Processing images (Picture Pool)

CSH reserves the right to record images (photos and videos including acoustic information) of participants and speakers at lectures and events (especially public lectures, “Lange Nacht der Forschung”) and to publish them on the CSH websites, in media reports and social media portals of CSH. Publication is for reporting on lectures and events of the institute as well as for information purposes and not for commercial purposes. 

The legal basis for the processing of your personal data is either your consent pursuant to Art 6 (1) point (a) GDPR or our overriding legitimate interest pursuant to Art 6 (1) point (f) GDPR in conjunction with Sec 12 Austrian Data Protection Act to comply with our obligation to inform the public about lectures and events organised by the institute. 

You may withdraw your consent to processing at any time with effect for the future in accordance with point 6 or object, on grounds relating to your particular situation, to processing at any time with effect for the future in accordance with point 7. If images are created for marketing purposes based on your consent (e.g. for posters, flyers for events), you can revoke your consent until the print order is placed.

We process your data up to your revocation or objection, at the latest, however, until the data is no longer necessary to fulfil the purpose pursued with the storage, or if the storage is or becomes inadmissible for other legal reasons.  

In particular, the storage period depends on the following criteria:

  • Type of image (number of persons, depicted environment)
  • Framework within which the recording was made (public event, lecture) 
  • Suitability for use on our websites and social networks
  • Suitability for the presentation of the institute’s history
  • Suitability for use in anniversaries and annual reports
  • Degree of interference with secrecy interests
  • Use for archiving


In addition, images and/or videos (including audio recordings) will be stored until the end of any legal disputes that arise during which they are required as evidence.

Images and/or videos (including audio recordings) are published for the above purposes – i.e. made available to everyone. If necessary, the image and/or video material (including audio recordings) will be transferred to third parties (e.g. agencies, printing companies) for the purposes of advertising.

5. Recipients

Within CSH, only the responsible organizational entities and persons process your data.

Except as explicitly mentioned in our processing activities (see point 4), we do not transmit your personal data to other recipients, unless it is required to fulfil our contractual obligations or to comply with mandatory laws/authority requests. 

However, your personal data is being processed also by our processors on our behalf. These processors are in particular providers of marketing tools, IT service providers, providers of other tools and software solutions, and IT maintenance services. Our processors process your data solely on our behalf and on the basis of our instructions.

6. Withdrawl of your consent

You can withdraw your consent at any time with effect for the future and without stating a reason in order to hinder further processing of your personal data that has been collected and used based on this consent. 

If you want to withdraw your consent to processing activities of CSH, please send an e-mail to datenschutz@csh.ac.at or a letter to Complexity Science Hub Vienna, c/o Secretary General, Josefstaedter Strasse 39, 1080 Vienna, Austria.

7. Rights of data subjects

As a data subject of our data processing you have the following rights and legal remedies:

According to Art 15 GDPR you have the right to access the personal data concerning you that is being processed by CSH. Without prejudice to other statutory restrictions, this right does normally not exist if the provision of this information would jeopardize a business or trade secret of CSH or third parties.

You also have the right to rectification of inaccurate or incomplete personal data according to Art 16 GDPR, the right to erasure (‘right to be forgotten’) of your personal data according to Art 17 GDPR, and the right to restriction of processing according to Art 18 GDPR. According to Art 20 GDPR you have the right to receive the data you have provided in a structured, commonly used and machine-readable format and the right that those data is transmitted without hindrance or restriction to another controller.

In accordance with Article 21 GDPR, you also have the right to object, on grounds relating to your particular situation, at any time with effect for the future to the processing of personal data concerning you, which we process on the basis of a public or legitimate interest (Art 6 (1) point (e) and (f) GDPR) or for scientific research purposes pursuant to Art 89 (1) GDPR; this also applies to profiling based on those provisions. We do no longer process your personal data after you object to processing, unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, processing is necessary for the establishment, exercise or defence of legal claims or, in case of scientific research, processing is necessary for the performance of a task carried out for reasons of public interest.

You can object to processing for direct marketing purposes (e.g. point 4.3) at any time with effect for the future.

For processing activities carried out based on the Austrian Research Organisation Act (e.g. career tracking and quality management under point 4.8), you may exercise your rights as a data subject only within the scope of Sec 2d (6) Austrian Research Organisation Act.

In order to exercise your rights as a data subject, please send an e-mail to datenschutz@csh.ac.at or a letter to Complexity Science Hub Vienna, c/o Secretary General, Josefstaedter Strasse 39, 1080 Vienna, Austria.

For questions concerning the processing of your personal data, please also contact our data protection officer (see point 2 for contact details).

You are also entitled to lodge a complaint with a data protection supervisory authority. In Austria, this is the data protection authority (Österreichische Datenschutzbehörde, www.dsb.gv.at).

 

0 Pages 0 Press 0 News 0 Events 0 Projects 0 Publications 0 Person 0 Visualisation 0 Art

Signup

CSH Newsletter

Choose your preference
   
Data Protection*