Source: https://www.stgis.at/en/privacy-policy/
Timestamp: 2019-04-26 07:08:22+00:00

Document:
We appreciate your visit to our website and your interest in our school.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website.
Legal basis for data processing: The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing: The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose the IP address of the user must remain stored for the duration of the session. The purpose of storage in log files is to ensure the functionality and stability of the website. In addition, the data helps us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
Period of storage: The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is terminated.
Description and scope of data processing: School applications and inquiries should be submitted by e-mail at info@stgis.at. Summer camp applications should be submitted to summercamp@stgis.at and Winter camp applications to wintercamp@stgis.at. In this case, the personal data transmitted with the e-mail, the content as well as the date and time of your e-mail will be stored.
How did you hear about StGIS?
Emotional and Psychological Support: Eating disorders, Dietary considerations, Psychological support, Emotional support, Recent family trauma.
date and time of your contact request.
Legal basis for data processing: The legal basis for the processing of data transmitted in the course of sending an e-mail or submitting the Student Application, Staff Application and Event Registration is your consent, Art. 6 para. 1 lit. a GDPR. The legal basis for any statistical evaluations carried out is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing: The processing of the data from the e-mail and submitted forms serves us solely for the treatment of the contact inquiry or the service request or the product registration, and in relation to the statistical data stored within the scope of the sending process to prevent misuse and the security of our IT systems. The data will not be passed on to third parties.
Period of storage: The data will be deleted as soon as storage is no longer necessary to achieve the purpose for which it was collected. For the personal data sent by the contact form or e-mail, this is the case when the conversation with the user has ended, unless contractual or legal obligations prevent deletion. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified.
The data submitted in the course of your student or staff application request will be stored for the duration of the contractual relationship and at least for the duration of two further years from completion or termination of our contract. If after that time a request for the deletion of data is still contrary to child protection, taxation, or commercial data retention obligations, your data will be made anonymous. In the case of applications which do not lead directly to a contractual relationship these will be stored for a further two years in order to identify repeat applicants and anonymized or deleted thereafter.
The data submitted in the course of your event registration request will be stored for a period of 120 days. This timeframe allows StGIS to keep information on average from 90 days before the event to enable early registrations, and 30 days after in case we may need to make contact following the event (for instance relating to lost property or for your feedback about the event).
The website will then use Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google". Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. It is possible to assign data, sessions and interactions across several devices to a pseudonymous user ID and thus analyze a user's activities across devices. The information generated by the cookies, such as time, place and frequency of your visit to the website, including your IP address, is transmitted to Google in the USA and stored there.
If you visit our site via a mobile device (smartphone or tablet), you must instead click this Link [PLEASE LINK] to prevent tracking by Google Analytics within this website in the future. This is also possible as an alternative to the browser add-on mentioned above. By clicking the link, an opt-out cookie is set in your browser that is only valid for this browser and this domain. If you delete the cookies in this browser, the opt-out cookie will also be deleted, so you will have to click the link again.
We use the Google Tag Manager on our website. This service allows website tags to be managed through an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags that may collect data. However, the Google Tag Manager does not access this data. If deactivated at the domain or cookie level, it will remain valid for all tracking tags implemented with Google Tag Manager.
We also use Google Audiences ("GA Audiences"), another web analytics service from Google. This service collects and stores data from which pseudonymised user profiles are created. This technology allows users who have visited our web pages to see targeted advertising from us on other external pages of the Google Partner Network.
The information generated by the cookies is transmitted by Google to a server in the USA for analysis and stored there. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating DoubleClick, Google receives the information that you have called the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
Purpose of data processing: The purpose of using technically necessary cookies is to simplify the use of websites for users. The analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continuously optimize our offer. For these purposes, our legitimate interest lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.
Our website also uses Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.
Description and scope of processing: By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data mentioned under "Provision of the website and creation of log files" are transmitted. This is regardless of whether Google provides a user account that you are logged in from or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or needs-oriented design of its website. Such an evaluation takes place in particular (also for user who are not logged in) for the provision of needs-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Legal basis for processing: The legal basis for the processing of personal data is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing: The integration of Google Maps serves only to help you to find the venues. For this purpose, our legitimate interest also lies in the processing of personal data.
We make use of YouTube as a third-party widget on our website in order to enhance the user experience. This allows us to embed and display videos directly on the website and enables you to conveniently use the video function.
Right of access: Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us; in particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of appeal, the source of your data, if not obtained from you, and the existence of automated decision-making, including profiling and, if applicable, require meaningful information on their details.
Right to rectification: In accordance with Art. 16 GDPR you have the right to demand immediately the rectification of incorrect or the completion of incomplete personal data stored by us.
Right of erasure: In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
Right of restriction: According to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its erasure and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have filed an objection to the processing in accordance with Art. 21 GDPR.
Right to data portability: In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request its transfer to another person responsible.
Right of appeal: Under Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our place of business. In the present case, the competent supervisory authority is: Austrian Data Protection Authority (“Datenschutzbehörde” dsb.gv.at, Wickenburggasse 8-10, 1080 Wien, E-Mail: dsb@dsb.gv.at).
Right to object: According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 para. 1 lit. e or f GDPR for reasons arising from your particular situation. This also applies to profiling based on these provisions. If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising. This also applies to profiling insofar as it is connected with such direct advertising.
Right of withdrawal: You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed display of the key or lock symbol in the lower status bar or the address line of your browser.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 21
 Art. 20
 Art. 77
 Art. 21
 Art. 6