Source: https://www.phwien.ac.at/privacy-statement-bottom?tmpl=component&amp;print=1
Timestamp: 2019-04-18 19:08:49+00:00

Document:
The person responsible within the meaning of the GDPR is the respective rector in accordance with § 2 Paragraph 3 of the Education Documentation Act.
All legal obligations required for the performance of tasks which are in the public interest or which are necessary for the fulfilment of a legal obligation in the course of the administration of the studies (see in particular Annex 3 of the Education Documentation Act). Due to university law, students are legally obliged to provide the necessary personal data.
Student services (e.g. copying system, library system, etc.) and public relations. Insofar as data processing is based on consent, the right of revocation pursuant to Art 7 GDPR exists at any time.
The list of data categories to be processed for the implementation of higher education law is regulated by law in §§ 3ff in conjunction with the annexes to the Education Documentation Act.
SourcePIN Register Authority within the scope of its powers under the E-Government Act.
In the course of university administration at Austrian universities of teacher education, no data is generally transmitted to countries outside the EU. Data transfers in the course of international mobility programmes (e.g. Erasmus+) are in principle based on consent.
The rights of the person concerned must be asserted against the person responsible. This is according to § 2 Paragraph 3 of the Education Documentation Act the respective rector.
As far as the data processing is based on consent, the right of revocation according to Art 7 GDPR exists at any time.
A data subject has the right to request the correction or completion of inaccurate personal data without delay.
A data subject has the right to request that the personal data be deleted without delay, provided that the reasons specified in Art 17 para. 1 GDPR are fulfilled.
A data subject has the right to request that the processing of personal data be restricted, provided that the reasons specified in Art. 18 para. 1 GDPR are fulfilled.
A data subject has the right to receive his/her personal data in a structured, current and machine-readable format, provided that the data processing is based on a consent or contract and is carried out by means of automated procedures.
A data subject has the right to object at any time to the processing of his/her personal data, unless the data subject proves compelling grounds for processing worthy of protection (e.g. law enforcement), which outweigh the interests, rights and freedoms of the data subject.
In the area of university administration and performance evaluation, no automated decision-making, including profiling, takes place that has a legal effect on the person concerned or significantly impairs them in a similar manner.
A data subject shall have the right of appeal to the supervisory authority if he/she considers that the processing of personal data concerning him/her is contrary to this Regulation.

References: § 2
 Art 7
 § 2
 Art 7
 Art 17
 Art. 18