Source: https://www.fwf.ac.at/en/privacy-policy/
Timestamp: 2019-04-22 18:05:00+00:00

Document:
The Austrian Science Fund (FWF) is pleased that you are visiting our website. Data protection and data security when using our website are very important to us. We would therefore at this point like to inform you which of your personal data we collect when you visit our website and what purposes it is used for.
Since changes in the law or changes in our internal processes may make it necessary to adapt this data protection declaration, we ask you to read this data-protection declaration regularly. The data protection declaration can be called up, saved and printed out at any time under the heading data protection declaration.
This data protection declaration applies to the FWF website and its various subdomains, which can be accessed under the domain www.fwf.ac.at (hereinafter referred to as “our website”).
Personal data is all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behaviour. Information that we cannot (or only with disproportionate effort) relate to your person, e.g. by anonymising the information, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis or your consent.
If we process your personal data for the provision of certain offers, we will subsequently inform you about the specific processes, the scope and purpose of data processing, the legal basis for processing and the respective storage period.
GDPR Art. 6 para. 1 (f) serves as the legal basis for the aforementioned data processing. The processing of the data mentioned is necessary for the provision of a website and thus serves the ensuring of a legitimate interest of our company.
As soon as these data are no longer required to display our website, they will be deleted. The collection of data for the provision of our website and the storage of data in log files is absolutely necessary for the operation of our website. Consequently, there is no possibility of objection on the part of the user. Further storage may take place in individual cases if this is required by law.
Your data will be passed on to the shipping company commissioned for the delivery, insofar as this is necessary for the delivery of the goods.
If you order printed products on our website and enter your e-mail address, we may use this to send you a newsletter regarding our own similar goods or services.
GDPR Art. 6 para. 1 (b) serves as the legal basis for processing your personal data (cf. § 4 2. a.) that are necessary to fulfil a contract concluded with us,. This also applies to processing operations that are necessary to carry out pre-contractual measures.
On completion of the processing of the contract, your data will be blocked for further use and deleted after expiry of the storage periods under tax and commercial law, unless you have expressly consented to the further use of your data. Further storage may take place in individual cases if this is required by law.
None of your data is passed on to third parties in connection with the sending of the newsletter.
We use the “double opt-in procedure” for sending the newsletter, i.e. we will only send you the newsletter if you confirm your registration beforehand via a confirmation e-mail sent to you for this purpose via a link contained in it. This is to ensure that, as the owner of the e-mail address provided, only you can subscribe to the newsletter. Your confirmation must be sent shortly after receipt of the confirmation e-mail, otherwise your newsletter subscription will be automatically deleted from our database.
By entering my data and pressing the “send” button, I agree to my e-mail address, my name and my address being processed for the regular sending of the newsletter. I can unsubscribe from the newsletter service at any time by clicking on the appropriate link at the end of the newsletter.
I may revoke my consent to the collection of personal data collected during the registration process at any time.
Your e-mail address, your name and your address will be stored for as long as you have subscribed to the newsletter. After you unsubscribe from the newsletter, your e-mail address and your contact data will be deleted. Further storage may take place in individual cases if this is required by law.
The processing of personal data via https://elane.fwf.ac.at is based on Art. GDPR 6 Para. 1 (c) and § 2g FOG.
The personal data will be deleted after the end of the legal retention periods.
If your application has been rejected, the FWF will continue to process your data for the legally permissible period. The data processing is based on Art. 6 para. 1 point f GDPR and/or § 2g of the Austrian Research Organisation Act (FOG). The FWF has a legitimate interest in the evaluation and analysis of its allocation of funding.
The data processing is based on Art. 6 para. 1 point f GDPR. The FWF has a legitimate interest in a functioning complaint management process which is transparent and effective. Your personal data will be stored until the complaint procedure has been concluded.
you have given your express consent pursuant to GDPR Art. 6 para. 1, sentence 1 (a).
this is permitted by law and is necessary for the fulfilment of a contractual relationship with you pursuant to GDPR Art. 6 para. 1, sentence 1 (b).
there is a legal obligation to pass on data according to GDPR Art. 6 para. 1 sentence 1. (c).
the disclosure pursuant to GDPR Art. 6 para. 1, sentence 1 (f) is necessary to protect legitimate company interests and to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.
Various types of cookies are used on our website, the type and function of which will be explained in more detail below.
Our website uses transient cookies, which are automatically deleted when you close your browser. This type of cookie allows us to collect your session ID. This makes it possible to assign different requests from your browser to a common session and enables us to recognise your end device during subsequent visits to the website.
Persistent cookies are also used on our website. Persistent cookies are cookies that are stored in your browser for a longer period of time and transmit information to us. The respective storage time differs depending on the cookie. You can delete persistent cookies independently using your browser settings.
These cookies enable us to analyse website usage and improve the performance and functionality of our website. For example, information is collected about how visitors use our website, which pages are most frequently accessed, or whether error messages are displayed on certain pages.
Advertising cookies (third-party providers) allow us to show you various offers that match your interests. These cookies can be used to record the web activities of users over a longer period of time. You will possibly recognise the cookies on various devices you use.
In addition, certain cookies allow us to connect to your social networks and share content from our website within your networks.
Most browsers are preset to accept cookies by default. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, we would like to point out that if cookies are deactivated on our website by your browser settings you may no longer be able to use all functions of the website. You can also use your browser settings to delete cookies already stored in your browser or to have the storage time displayed. In addition, it is possible to set your browser so that it informs you before cookies are stored. Since functions may differ on different browsers, we would ask you to use your browser’s help menu for the configuration options.
We use tracking and analysis tools to ensure continuous optimisation and demand-oriented design of our website. With the help of tracking measures it is also possible for us to statistically record the use of our website by visitors and to further develop our online offer for you with the help of the knowledge gained. In accordance with these interests, the use of the tracking and analysis tools described below is justified under GDPR Art. 6 para. 1 sentence 1 (f). The following description of the tracking and analysis tools also shows the respective processing purposes and the data processed.
After processing and before saving, the IP address is anonymised. However, we expressly point out that, despite the fully activated anonymisation function, total anonymisation is not achieved, but is merely a pseudo-anonymisation. When it is used, Matomo creates an internal hash value, which is calculated from various factors such as the IP address, the resolution, the browser, the plugins used and the operating system. With the activated anonymisation function this heuristic also uses the full IP address for internal purposes, so that a recalculation of the values back to the IP address is possible with some effort and can thus be linked the other information with a high degree of reliability.
Visits to our website are currently recorded by Matomo.
We do not process the data concerned. By using the AddThis field, you agree to the processing of data by the AddThis company to the extent shown on the www.addthis.com website. You can veto the use of your data at any time by using an opt-out cookie, which you can download from the following link: http://www.addthis.com/privacy/opt-out. This deactivation prevents advertisers from receiving data about excluded visitors. This also prevents them from learning the interests of these visitors and personalising their content or services for them.
Our website contains social plugins of the Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, US), Google+ (Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, US) and Twitter (Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, US) social networks. These services are provided by the respective companies (providers). As part of our online presence, the social plugins are identified by the respective buttons belonging to the service. On the basis of the data transmitted to the respective service via the social plugins, if necessary the service can assign you to your account with it. In order to increase the protection of your data on our website, the social plugins are integrated on our website by means of a two-click solution. This ensures that no automatic connection to the servers is established by the respective providers when a page of our website containing such social plugins is called up.
The activation of the function of the respective social plugin takes place in two stages. To activate a social plugin, you must first click on the link on our website. This first activates the social plugin and your browser establishes a connection to the servers of the respective provider. With a second click you can now interact with the social plugin and, for example, submit your recommendation. If you are already logged in to one of the social networks of the providers, they can immediately assign the visit to this website to your profile. If you interact with the social plugins by clicking on them, the corresponding information is also transmitted directly to the provider’s server and stored there. The information may also be published on the social network and displayed there under your contacts. If you wish to prevent such direct association with your profile of your data collected via our website, you must log out of your provider's account before visiting our website.
The scope and purpose of the data collection by the respective service as well as the further processing and use of your data there can be found in the data protection information directly from the service’s website. There you will also receive further information about your corresponding data protection rights and setting options for the protection of your privacy.
Our website uses plugins from Vimeo.com, which is operated by the Vimeo company , 555 West 18th Street, New York, New York 10011, US. If you call up webpages from our website provided with such a plugin, a connection to the Vimeo servers is established and the plugin is displayed on the website by notifying your browser. This will tell the Vimeo server which of our web pages you have visited. If you are logged in as a Vimeo member, Vimeo assigns this information to your personal user accounts on these platforms. When using these plugins, such as clicking/launching a video or sending a comment, this information is assigned to your Vimeo user account, for example, which you can only prevent by logging out before using the plugin.
Information on the collection and use of data by the above platform or plug-ins can be found in the data protection information: http://vimeo.com/privacy.
The functions of the LinkedIn network are used on our website by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, US (hereafter LinkedIn).
If one of our pages contains elements from LinkedIn, a connection to the LinkedIn server is established when you access it. LinkedIn will be informed about your visit with your IP address on our website. By clicking the LinkedIn button for the recommendation function, LinkedIn is able to assign this visit to your user account on LinkedIn. This information is then processed further by LinkedIn.
Our website uses the functions of the Research Gate research network from ResearchGate GmbH, Invalidenstrasse 115, 10115 Berlin, Germany. For more information, see: https://www.researchgate.net/privacy-policy.
Our website contains hyperlinks to websites of other providers. When these hyperlinks are activated you will be redirected from our website directly to the other providers’ networks. You can recognise this, for example, by the change in the URL. We cannot assume any responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please inform yourself about the handling of your personal data by these companies directly on their websites.
In accordance with GDPR Art. 15, you can request information about your personal data processed by us. In particular, you may request information on the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or veto, the existence of a right of appeal, the origin of your data, if not collected by us, a transfer to third countries or international organisations and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details.
In accordance with GDPR Art. 16 you can demand the immediate rectification of inaccurate personal data concerning you or the completion of incomplete personal data stored by us.
In accordance with GDPR Art. 17, you may request the deletion of your personal data stored by us, provided that the processing is not necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, on grounds of public interest or to assert, exercise or defend legal claims.
In accordance with GDPR Art. 18, you can demand the restriction of the processing of your personal data if you dispute their accuracy, if the processing is unlawful, if we no longer need the data and if you refuse their deletion because you need them to assert, exercise or defend legal claims. You are also entitled to the right under GDPR Art. 18 if you have filed an objection to the processing pursuant to GDPR Art. 21.
In accordance with GDPR Art. 20, you can demand that the personal data you have provided us with be received in a structured, commonly used and machine-readable format or you can request that they be transmitted to another person responsible.
In accordance with GDPR Art 7. para. 3, you can withdraw your consent to us at any time. As a consequence, we will in future no longer be permitted to continue the data processing based on this consent.
In accordance with GDPR Art 7 you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters. In Austria, the supervisory authority is the data protection authority, Wickenburggasse 8, 1080 Vienna. Telephone: +43-1-52 152-0, e mail: dsb(at)dsb.gv.at, Web: www.dsb.gv.at.
The FWF would like to point out that the personal data required for the allocation of monetary funds are processed, among others, on the basis of § 2g of the Austrian Research Organisation Act (FOG). You can find a list of the relevant processes here.
When processing your personal data on the basis of legitimate interests pursuant to GDPR Art. 6 para. 1 sentence 1 (f), you have the right to object to the processing of your personal data pursuant to GDPR Art. 21, if there are grounds for this arising from your particular situation or the objection is directed against direct advertising. In the case of direct advertising, you have a general right of objection, which we will implement without the need for details of a particular situation.
We commit ourselves to protect your privacy and to treat your personal data confidentially. In order to prevent manipulation, loss or misuse of your data stored with us, we take extensive technical and organisational security precautions, which are regularly checked and adapted to technological progress. This includes the use of recognised encryption methods (transport-layer security).
However, we would like to point out that due to the structure of the internet, it is possible that the data protection rules and the above-mentioned security measures may not be observed by other persons or institutions not within our area of responsibility. In particular, unencrypted data – e.g. if this is sent by e-mail – can also be read by third parties. We have no technical influence on this. It is the responsibility of the user to protect the data they provide against misuse, by encryption or in any other way.

References: Art. 6
 Art. 6
 § 4
 § 2
 Art. 6
 § 2
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 18
 Art. 21
 Art. 20
 Art 7
 Art 7
 § 2
 Art. 6
 Art. 21