Data Protection Declaration of the Cluster of Excellence MetAGE

The protection of personal data is of particular concern to the University of Graz, the Medical University of Graz and the Medical University of Vienna, the consortium partners of the Cluster of Excellence MetAGE, which is why we treat all processed personal data confidentially and in compliance with the statutory provisions. A data processing agreement in accordance with Article 26 of the GDPR (Agreement on Joint Controllership) will be concluded between the consortium partners.

Below, we would like to inform you about how we process your personal data. In addition to general information, you will also find specific details about the data processing activities.

 

 

Contact information

University of Graz
Universitätsstraße 3, 8010 Graz
Data protection officer: dsba(at)uni-graz.at

 

Medical University of Graz
Neue Stiftingtalstraße 6, 8010 Graz
Data protection officer: datenschutz(at)medunigraz.at

 

Medical University of Vienna
Spitalgasse 23, 1090 Wien
Data protection officer: datenschutz(at)meduniwien.ac.at

 

 

Visiting our website

  1. Accessing the website

The website of the Cluster of Excellence MetAGE is hosted by the University of Graz. When accessing the website, our web servers temporarily store each visit in a log file. The following data is collected and stored until automated deletion:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved data
  • Amount of data transmitted
  • Message indicating whether the retrieval was successful
  • Identification data of the browser and operating system used
  • Website from which access was made
  • Name of your internet service provider

Purpose of data processing: This data is processed for the purpose of ensuring the use of the website (connection establishment), system security and the technical administration of the network infrastructure. In addition, the processing serves to optimize the internet offer of the University of Graz. The IP address is only evaluated in the event of attacks on our network infrastructure.

Legal basis for data processing: The processing of the above-mentioned data is carried out in particular on the basis of the existing overriding legitimate interest (Article 6(1)(f) of the GDPR) of the University of Graz in ensuring system security, the technical administration of the network infrastructure and the optimization of the internet offer to fulfill university tasks, taking into account the guiding principles for universities in the fulfillment of their tasks (see Sections 2 and 3 of the University Act).

  1. Website analytics

The use of web statistics cookies serves to measure reach and usage, specifically to compile reports on aggregated website activities (such as reach measurement, estimation of server performance, analysis of accessed content, detection of navigation issues, etc.) and to improve our online presence. By doing this, we fulfill our university responsibilities (including public education mandate, continuing education mandate, support for national and international cooperation, assistance with the use and implementation of research results in practice, support for the societal integration of developments in the arts, and informing the public about the fulfillment of the university's tasks) while adhering to the guiding principles for universities (efficiency, economy, and appropriateness of management).

For more details, please refer to the cookie settings in the footer of the website.

1) Uni Graz Matomo
Matomo is an open-source web analytics platform that is operated as a self-hosted solution at the University of Graz. Matomo allows for the collection of information about the behavior of website visitors to gain insights into usage patterns and, based on this, to improve our online presence in order to fulfill the university's responsibilities.

2) Google Analytics
Google Analytics is a widely used web analytics tool provided by the U.S. company Google LLC. Google Analytics enables us to collect information about the behavior of website visitors to gain insights into usage patterns and, based on this, to improve our online presence in order to fulfill the university's responsibilities. In particular, user data is collected using cookies and analyzed with the Google Analytics tool to enhance our advertising efforts.

Legal basis for data processing: The legal basis for data processing in the context of website analysis is your voluntary consent pursuant to Article 6(1)(a) of the GDPR and Section 165(3) of the TKG 2021 (Telecommunications Act). You provide your consent by actively clicking "Accept All Cookies" or by actively selecting the checkboxes under "Cookie Settings" for the respective processing purpose in the cookie banner when accessing our website. No analytics cookies will be set before you give your consent.

Transmission: In the context of using the analytics service provider Google LLC, data may be transferred to the USA (a third country). As of the latest update (June 17, 2024), there is a decision by the European Commission which deems the level of data protection for certified companies in the USA to be adequate ("Adequacy Decision"). Google LLC is one such certified company (see the list of certified companies at https://www.dataprivacyframework.gov/list). Therefore, any data transfer to Google LLC in the USA is based on Article 45(1) of the GDPR in conjunction with the EU-US Data Privacy Framework.

  1. Website marketing

To fulfill our university responsibilities, it is essential to reach and engage potential students ("prospective students"). For this purpose, we use marketing cookies to gather information about the interests and media usage behavior of prospective students, which enables us to target our promotion of study programs more effectively. Additionally, this helps us assess the effectiveness of online measures during the orientation and decision-making phases of prospective students.

Legal basis for data processing: The legal basis for data processing in the context of website marketing is your voluntary consent pursuant to Article 6(1)(a) of the GDPR and Section 165(3) of the TKG 2021 (Telecommunications Act). You provide your consent by actively clicking "Accept All Cookies" or by selecting the checkboxes under "Cookie Settings" for the respective processing purposes in the cookie banner when accessing our website. No marketing cookies will be set before you give your consent.

Transmission: In the context of using the analytics service provider Google LLC, data may be transferred to the USA (a third country). As of the latest update (June 17, 2024), there is a decision by the European Commission which deems the level of data protection for certified companies in the USA to be adequate ("Adequacy Decision"). Google LLC is one such certified company (see the list of certified companies at https://www.dataprivacyframework.gov/list). Therefore, any data transfer to Google LLC in the USA is based on Article 45(1) of the GDPR in conjunction with the EU-US Data Privacy Framework.

  1. Reach and usage measurement by Matomo

The website uses "Matomo" for reach and usage measurement. For this purpose, certain usage information (e.g., information about the browser, device, events) is processed solely for essential purposes related to reach and usage measurement, without the use of cookies.

Purpose of data processing: The processing of the data is intended for reach and usage measurement, specifically to compile reports on aggregated website activities (such as reach measurement, estimation of server performance, analysis of accessed content, detection of navigation issues, etc.) and to improve our online presence. By doing so, we fulfill our university responsibilities (including public education mandate, continuing education mandate, support for national and international cooperation, assistance with the use and implementation of research results in practice, support for the societal integration of developments in the arts, and informing the public about the fulfillment of the university's tasks) while adhering to the guiding principles for universities (efficiency, economy, and appropriateness of management).

Legal basis for data processing: The processing of the aforementioned data is carried out particularly on the basis of the legitimate interest or public interest (Article 6(1)(f) and (e) of the GDPR in conjunction with Sections 2 and 3 of the University Act) of the university as a public institution in improving its online presence to fulfill its university responsibilities, while considering the guiding principles for universities in fulfilling their tasks (see Sections 2 and 3 of the University Act).

If you do not agree with the storage and evaluation of the generated usage information, you can object to it below. In this case, a so-called opt-out cookie will be placed in your browser, which means that "Matomo" will not collect any session data. Please note: If you delete your cookies, the opt-out cookie will also be deleted and will need to be set again by you.

On the following website, you have the option to disable data processing by "Matomo": https://www.uni-graz.at/de/datenschutz

 

 

Contacting us

If you contact us (via email, phone, or contact form), we will process the data you provide that is necessary for handling and responding to your inquiry. This typically includes:

  • First and last name
  • Address
  • Email address
  • Student ID number

In addition to the above data, the following optional data you may provide can also be processed:

  • Gender
  • Academic titles (prefixes and suffixes)
  • Phone number
  • Institution/Organization/Field of Study
  • Content data (if you leave us a message)

Purpose of data processing: The processing of this data is for the purpose of handling and responding to your inquiry. The data will be stored with us for at least six months or for the duration required to process your request, in case of follow-up questions.

Legal basis of data processing: The processing of the aforementioned data is carried out primarily based on the legitimate interest (Article 6(1)(f) of the GDPR) of the Cluster of Excellence MetAGE in handling and responding to your inquiry.

 

 

Public relations & social media

The Cluster of Excellence MetAGE and its consortium partners, the University of Graz, Medical University of Graz, and Medical University of Vienna, have online presences on social networks and platforms to communicate with users and inform them about news (sometimes through campaigns).

The consortium partners have no influence over the type and scope of data processed by the provider of each network/platform, nor over how this data is processed, used, or potentially shared with third parties, and they also lack effective control mechanisms.

We would like to point out that social networks/platforms and their functions are used voluntarily and at the users' own responsibility. By choosing to use these services, the users agree to the terms of use and privacy policies of the respective providers.

Purpose of data processing: The online presences on social networks and platforms supplement the existing university communication channels, such as the website, press releases, newsletters, print materials, and events, in a meaningful and necessary way.

Legal basis of data processing: The use of social networks and platforms by the consortium partners serves to fulfill and enhance university tasks within the framework of effective and targeted public relations (Article 6(1)(e) and (f) of the GDPR in conjunction with Section 3(4), (5), (7), (8), (10), and (11) of the University Act).

 

 

Data storage

Unless specifically addressed in the context of individual processing activities regarding storage and possible limitations of the right to deletion, revocation, or objection, we store your data as follows: Consent (Article 6(1)(a) of the GDPR): Data that we process based on your consent will be stored until you withdraw your consent, but no longer than until the purpose for which the data was collected has been fulfilled. Additionally, only your essential personal data (name, date of consent, proof of consent, e.g., signature) will be stored for the purpose of proving your consent or withdrawal for a period of 3 years from the date of withdrawal.

Public Interest (Article 6(1)(e) of the GDPR): We process your data as long as necessary due to the public interest or until a (justified) objection is raised. Beyond this, we will store your data only if there are legal retention periods or if statutes of limitations concerning potential legal claims are still open.

Legitimate Interest (Article 6(1)(f) of the GDPR): We process the data as long as necessary to safeguard the legitimate interests or until a (justified) objection is raised. Beyond this, we will store your data only if there are legal retention periods or if statutes of limitations concerning potential legal claims are still open.

Furthermore, we would like to point out that universities, in the course of fulfilling their tasks (including scientific research and teaching), are permitted to further use data for public interest archival purposes for scientific or historical research purposes (Article 5(1)(b) of the GDPR). Separate information will be provided regarding such further processing.

 

 

Your rights

In connection with the processing of your personal data, you generally have the following rights:

  • Right to access the personal data concerned (Article 15 of the GDPR),
  • Right to rectification (Article 16 of the GDPR), erasure (Article 17 of the GDPR), and restriction of processing (Article 18 of the GDPR),
  • Right to data portability (Article 20 of the GDPR),
  • Right to object (Article 21 of the GDPR),
  • Right to withdraw consent (Article 7(3) of the GDPR), without affecting the lawfulness of processing based on consent before its withdrawal.

 

If you have any inquiries, please contact the joint point of contact:

University of Graz
Institute of Molecular Biosciences
Humboldtstrasse 50
8010 Graz
Austria
Phone: +43-316-380 1903
E-Mail: metage@uni-graz.at

 

In addition, data subjects have the right to lodge a complaint with a supervisory authority (Art 77 GDPR), which in Austria is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, phone: +43 1 52 152-0, e-mail: dsb(at)dsb.gv.at.