Privacy policy

Declaration on the duty to inform

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, TKG 2021). In this data protection information, we inform you about the most important aspects of data processing on our website.

 

Data processing for general contact enquiries

If you contact us via the contact form on our website, by email or by telephone, we will store the data you voluntarily provide for six months for the purpose of processing your enquiry and in the event of follow-up questions. The legal basis for this is your consent in accordance with Art. 6 para. 1 lit a GDPR. The data will not be passed on to third parties.

 

Data processing if you are interested in a degree programme

We would like to point out that your name, address, e-mail address and telephone number will be stored for the purpose of counselling and subsequent contract processing. The data you provide is required to fulfil the contract or to carry out pre-contractual measures. In the event that you are interested in a study/continuing education place that takes place in cooperation with another company, it is possible that your data will be passed on to the cooperation partner for administrative processing.

If you do not register for a study programme, the data stored by us will be deleted after six months.

Data processing is carried out on the basis of the legal provisions of § 165 para. 3 TKG 2021 and Art. 6 para. 1 lit a (consent) and/or lit b (necessary for contract fulfilment) of the GDPR.

 

Data collection and processing with HubSpot

We use HubSpot for marketing activities on our website. HubSpot is a software company from the USA with a branch office HubSpot Ireland Limited in 1 Sir John Rogerson's Quay, Dublin 2.

We use the HubSpot marketing platform for our own marketing, lead generation and customer service purposes. This includes email marketing (sending newsletters and automated mailings), contact management in CRM, contact forms, landing pages, chatbots and the publication of social media posts. With the help of HubSpot, visitors can find out more about our company, download content and enter their contact details or other demographic information.

All data and information collected is stored, managed and processed on the HubSpot marketing platform and therefore transmitted to HubSpot and affiliated companies. This data is hosted in the European Union in a data centre in Germany with a backup in Ireland.

Based on this collected data or information, visitors can be contacted regarding their interest in our offer and interact with us. Information on how HubSpot handles your personal data can be found at the following link: HubSpot Privacy Policy. Further information on the compliance of the use of HubSpot by organisations and companies with the GDPR can be found here: Guide to GDPR-compliant use of HubSpot.

HubSpot uses cookies, which are stored locally in the cache of your web browser on your end device and enable us to analyse your use of the website. This data may include: Your IP address, browser type, domain name, internet service provider (ISP), files viewed on our website (e.g. HTML pages, graphics, etc.), operating system, clickstream data, access times and addresses of websites from which you accessed our website. You can find out exactly which cookies are set by HubSpot or used through the use of various HubSpot applications here: Cookies set by HubSpot in the visitor's browser.

If we have your personal data (name, address, etc.) because you have provided it to us or have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, this data is processed on this website for the purpose of website analysis. This data can then be linked to the log data mentioned above (device and activity data), so that there is also a personal reference with regard to the log data.

You can permanently object to the collection of data by HubSpot and the setting of cookies by preventing the storage of cookies through your browser settings. You can object to the processing of your personal data at any time with effect for the future.

 

Data processing for job applications

The application process is carried out via the Onlyfy application platform. This privacy notice provides you with all relevant information regarding the processing of your personal data in connection with job applications.

 

Data Processing When Using the Public Wi-Fi

When using our public Wi-Fi, personal data is processed to ensure a secure, stable, and legally compliant network operation.

Login Data

To authenticate with the Wi-Fi, you may log in via a captive portal using your email address or mobile phone number. These login details are stored for a period of 90 days.

Connection and Device Data

While using the Wi-Fi, we collect technical information about the connection and the device used. This includes in particular:

  • Connection status and duration

  • IP address, MAC address, VLAN assignment

  • Device information (e.g. operating system, device type, Wi-Fi profile)

  • Access point through which the connection is established

  • Type of connection and authentication

These data are stored for 90 days for the purpose of network monitoring, error analysis, and misuse prevention.

Security and Content Filtering

When attempting to access blocked content categories via the Wi-Fi (e.g. websites categorized as “pornography,” “gambling,” or “unrated”), security-relevant events are logged for a period of one month. The following data are recorded in such cases:

  • Timestamp of the access attempt

  • IP address of the device

  • Accessed URL

  • Content category

  • Technical details of the blocking

Legal Basis

The processing of these data is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in maintaining network security and stability. The processing of login data provided via the captive portal is based on your consent in accordance with Art. 6 (1) lit. a GDPR.

Web analysis

Our website uses functions of the web analysis service Google Analytics, a web analysis service of Google Inc (Google Ireland). Cookies are used to analyse the use of the website by its users. The information generated in this way is transferred to the Google server in the USA and stored there. Google will use this information for the purpose of analysing your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google Inc. under any circumstances.

Data processing in connection with Google Analytics is carried out on the basis of your consent in accordance with Art. 6 para. 1 lit a in conjunction with Art. 49 para. 1 lit a GDPR via the cookie banner (see in detail under "Cookies"). You can revoke your consent at any time with effect for the future by adjusting your preferences under "Edit cookie settings" on our website.

You can find more information on the use of data by Google Ireland Limited at: https://policies.google.com/privacy?hl=de

Newsletter

You have the option of subscribing to our newsletter via our website. To do this, we need your email address and your declaration that you agree to receive the newsletter. The legal basis for data processing in connection with the newsletter is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

As soon as you have registered for the newsletter, we will send you a confirmation email with a link to confirm your registration.

You can cancel your subscription to the newsletter at any time. Please use the following link: Cancel subscription Your data in connection with the newsletter dispatch will then be automatically deleted.

Competitions

The name, address, email address, telephone number, gender and age of the data subjects are processed when the controller organises and runs competitions. The legal basis for the processing of personal data when organising and running competitions is Article 6(1)(a) GDPR (declaration of consent). Apart from the dispatch of prizes by Austrian Post, the personal data of the data subjects will not be passed on to third parties. The personal data of the data subjects (with the exception of the winners) will be deleted immediately after the evaluation and termination of the competition, at the latest within 14 days. The personal data provided by the individual winners will be stored for the purpose of answering queries about the prizes and for the duration of the warranty period (but for no longer than 3 years from the date on which the prize is sent). Further information on your rights as a data subject can be found under "Your rights".

Your rights

In principle, you have the rights to information, rectification, erasure, restriction, data portability, cancellation and objection. If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the data protection authority.

You can reach us using the following contact details

Controller

University of Applied Sciences Burgenland GmbH
Campus 1
A- 7000 Eisenstadt

Phone: +43 5 7705
Email: datenschutz(at)hochschule-burgenland.at

Data Protection Officer

Horst Lesacher, LL.M.
Phone: +43 5 9010 8015
datenschutz(at)landesholding-burgenland.at