Data protection

Protection of Privacy

The David Herzog Fund takes data protection very seriously and treats your personal data confidentially and in accordance with legal regulations. The following data protection declaration is intended to inform applicants for the David Herzog Fund and grant recipients of the David Herzog Funds about the purpose, legal basis and personal rights in connection with the processing of personal data by the David Herzog Fund in accordance with Art 12 and 13 GDPR.

Purpose and legal basis of data processing:

Viewing the website

1.) Description and scope of data processing

When accessing the website of the David Herzog Fund of the Styrian Universities, the web server temporarily saves every access in a log file. The following data is recorded and stored until it is automatically deleted:

• IP address of the accessing computer
• Date and time of access
• Name and URL of the data retrieved
• Amount of data transferred
• Success status of the attempted access
• Identification data of the browser and operating system used
• Website from which access is requested
• Name of Internet provider

2.) Purpose of data processing

Data is processed for the purpose of ensuring the usability of the website (connection establishment), system security and the technical administration of the network infrastructure. In addition, processing serves to optimise the online presence of the David Herzog Fund. The IP address is only evaluated in the event of attacks on our network infrastructure.

3.) Legal basis for data processing

The above data is processed in particular for the purposes of the legitimate interests (Art 6 (1) f GDPR) of the David Herzog Fund.

Scholarships / grants / applications:

The personal data disclosed in grant applications and all other required and transmitted documents and in final reports, as well as all other required documents for the purpose of verifying and evaluating the application or, subsequently, for processing of funding based on the fulfilment of the funding contract or to carry out pre-contractual measures is processed in accordance with Art 6 (1) b GDPR.

Since processing of personal data is necessary for the conclusion of the contract or pre-contractual measures, failure to provide the personal data required automatically means that the application in question cannot be taken into consideration.

Events:

The following personal data provided by the participant upon registration for the event is processed for the purpose of organising and holding events:

-Form of address

-First and last name

-Academic degree (optional)

-E-mail address

-Organisational affiliation

This data is processed to fulfil the event contract or to implement pre-contractual measures (Art 6 (1) b GDPR).

For the purpose of organising and holding events, the following personal data provided by the speaker is processed:

-Form of address

-First and last name

-Academic degree (optional)

-Organisational affiliation

-Lecture title

This data is processed to fulfil the contract or to implement pre-contractual measures (Art 6 (1) b GDPR).

In addition, optional personal data in the form of a short biography and a photo is processed for the purpose of organising and holding the events, provided that the data is given voluntarily. This data is processed on the basis of consent of the data subject to the processing of his or her personal data, given in the form of an informed, active transmission (Art 6 (1) a GDPR).

Storage period:

In the event of a contract being established: Personal data is stored for as long as necessary to fulfil the contract or implement pre-contractual measures (for the selection process and grant payment, as well as the implementation of an event). In addition, personal data is only stored until any statutory retention periods or statute of limitations with regard to potential legal claims expire.

In the event of consent being given: Personal data processed on the basis of consent for this given is stored until consent is withdrawn / are deleted after the event has ended. In addition, only absolutely necessary personal data is stored for the purpose of proving consent or withdrawal thereof for a period of 3 years from the date of withdrawal.

Transfer of data:

Personal data may be transferred to the representatives of the David Herzog Fund (University of Graz, Graz University of Technology, Medical University of Graz, University of Music and Performing Arts Graz, Montanuniversität Leoben) and to the respective funding agencies for the purpose of proving the proper use of funds.

Rights of data subjects:

In connection with the processing of personal data, data subjects at all times have the following rights, which can be asserted against the managing director of the DHF:

David-Herzog-Fonds der steirischen Universitäten / David Herzog Fund of the Styrian Universities
Beethovenstraße 21
A-8010 Graz
Tel: 0316 380 8073
dhf.stmk(at)uni-graz.at

• Right of access by the data subject (Art 15 GDPR);
• Right to rectification (Art 16 GDPR) or to erasure (Art 17 GDPR) or to restriction of processing (Art 18 GDPR);
• Right to data portability (Art 20 GDPR);
• Right to object (Art 21 GDPR);
• Right to withdrawal of consent (Art 7 (3) GDPR), which does not affect the lawfulness of processing based on consent before its withdrawal;

In addition, data subjects have the

• Right to lodge a complaint with a supervisory authority (Art 77 GDPR), which in Austria is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, phone: +43 1 52 152-0, e-mail: dsb@dsb.gv.at.

Person responsible for data protection:

David-Herzog-Fonds der steirischen Universitäten / David Herzog Fund of the Styrian Universities
Beethovenstraße 21
A-8010 Graz
Tel: 0316 380 8073
dhf.stmk(at)uni-graz.at
https://david-herzog-fonds.at