Data protection statement

The University of Graz and Graz University of Technology as partners of the "NAWI Graz" cooperation take data protection very seriously and treat your personal data confidentially and in accordance with the statutory provisions.

This data protection declaration is intended to inform you in accordance with Art. 12, 13, 14 GDPR about the purpose, legal basis and your rights regarding the processing of personal data within the framework of the NAWI Graz cooperation (NAWI Graz organization, NAWI Graz teaching and NAWI Graz research).

Purpose, scope and legal basis of data processing:

1.) General administration: as an employee:in of the two cooperation partners in the cooperation areas, we process your data, such as:

- First and last name
- Academic degree
- Open Researcher and Contributor ID (ORCID)
- Professional title
- Type of employment
- Organizational or institutional affiliation Institutional affiliation
- Office address
- Email address
- Department
- Research group name
- Information on third-party funded projects
- Publication data
- Cooperation data
- Main areas of work
- Lecture title
- Data on patents, service inventions and other scientific achievements worthy of protection
- References
- Curriculum vitae
- Description of the research project
- Project costs (incl. personnel costs)

We process this data for the purpose of fulfilling information and reporting obligations on the basis of our legitimate interest in the smooth running of our business.

2) Event management:
For the purpose of organizing and conducting the events, we process the following personal data that you provide yourself as a participant when registering for the event:
- Salutation
- First and last name
- Title (optional)
- Email address
- Organizational affiliation

We process this data to fulfill the event contract or to carry out pre-contractual measures (in accordance with Art. 6 para. 1 lit b GDPR). For the purpose of organizing and conducting the events, we process the following personal data that you provide yourself as a speaker:
- Salutation
- First and last name
- Title (optional)
- Organizational affiliation
- Lecture title

We process this data to fulfill the contract or to carry out pre-contractual measures (in accordance with Art. 6 para. 1 lit b GDPR). In addition, we process your short biography and your photo for the purpose of organizing and holding the events, if you optionally provide us with these. We process this data on the basis of your consent.

3) Public relations:
The partners of NAWI Graz take photos or videos as part of events. If necessary, these photos or videos are published for public relations purposes and to present our activities on central university media channels (such as the central website of NAWI Graz,
individual university websites, institute or center websites, in university magazines such as "UNIZEIT", "TU Graz people", "TU Graz research"). The processing of the photos or videos (optionally with names, titles, functions of the persons depicted and explanatory texts) is carried out for the purpose of public relations work, to present NAWI Graz activities and to inform the public about the fulfillment of the universities' tasks.

4) E-mail/postal mailing list:
We process the following personal data for the purpose of receiving electronic or postal information on events within the scope of the cooperation:
- salutation
- first and last name
- academic degree
- professional title
- function
- postal address
- e-mail address

The processing of this data is based on our legitimate interest (Art 6 para 1 lit f GDPR) as an employer to inform our relevant employees and students, as well as in the further education to be offered with regard to the tasks of academic
teaching anchored in the Universities Act 2002, in particular for graduates of universities and for educators, as well as for informing the public about the fulfillment of the tasks of the universities.

5) Co-financing from NAWI Graz funds:
If you submit an application for co-financing of a project from NAWI Graz funds, we process the data provided in the application, these are for example:
- first and last name
- title3
- organizational or institutional affiliation,
- postal address
- e-mail address
- ORCID
- information on third-party funded projects
- information on cooperation partners in the project
- publication data
- data on patents
- CV
- description of the research project
- project costs (incl. personnel costs)

This data is processed for the purpose of reviewing and evaluating the application or, optionally, for processing the approval or implementing pre-contractual measures (Art 6 para 1 lit b GDPR).

5) Reporting, quality management and performance monitoring:
As part of reporting, quality management and performance monitoring, aggregated data (e.g. event registration figures, distribution of registrations according to certain criteria, data regarding conference financing, etc.) is processed, whereby the aim is to ensure complete anonymization. If a personal reference cannot be completely ruled out for smaller group sizes, the processing is based on the legitimate interest (Art 6 para 1 lit f GDPR) of the cooperation partners in connection with the fulfillment of the guiding university principles (efficiency, economy and expediency of management), the statutory auditing and reporting obligations and internal quality management within the cooperation.

Storage period:
For contracts: We store your personal data for as long as is necessary for the execution of the contract (in particular event contract, funding contract). Beyond this, we only store your data if there are statutory retention periods or for the duration of potential legal claims (limitation periods). With consent: Data that we process from you on the basis of your consent will remain stored until
revocation of your consent/will be deleted after the event has ended. In addition, only your absolutely necessary personal data will be stored for the purpose of proving your consent or your revocation for a period of 3 years from revocation. In the case of legitimate interest: We process the data for as long as this is necessary to safeguard legitimate interests or until a (justified) objection is raised.

Transfer of your data:
Your data will only be processed within the NAWI Graz cooperation, there will be no transfer to external recipients.

Your rights:
In connection with the processing of your personal data, you have the following rights at any time, which can be asserted at the NAWI Graz Coordination Office, Mozartgasse 12/2, 8010 Graz, e-mail address info@nawigraz.at:
- Right of access to the personal data concerned (Art 15 GDPR),
- right to rectification (Art 16 GDPR) or erasure (Art 17 GDPR) or to restriction of processing (Art 18 GDPR),
- right to data portability (Art 20 GDPR),
- right to object (Art 21 GDPR),
- right to withdraw consent (Art 7 (3) GDPR), which does not affect the lawfulness of processing based on consent before its withdrawal,

In addition, there is the
- right to lodge a complaint (Art 77 GDPR), which should be submitted to the competent supervisory authority.
In Austria, this is the Austrian Data Protection Authority, Barichasse 40-42, 1030 Vienna, phone:
+43 1 52 152-0, email: dsb(at)dsb.gv.at.

Our contact details:
University of Graz, Universitätsstraße 3, 8010 Graz, rektorsbuero(at)uni-graz.at
Graz University of Technology, Rechbauerstraße 12/I, 8010 Graz, info(at)tugraz.at

Joint administrative coordination office: NAWI Graz Coordination Office, Mozartgasse 12/2, 8010 Graz, mail address info(at)nawigraz.at

You can reach our data protection officer at