Privacy Policy
Protecting your personal data is very important to us. This privacy policy explains, in accordance with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021), what personal data is processed when you visit and use this website, for which purposes this happens, on which legal basis the processing is carried out, and which rights you have. We process personal data only on the basis of the law, in a transparent and fair manner, and we limit processing to what is necessary. The following explanations are necessarily somewhat technical; we have tried to describe everything as clearly as possible, and a glossary of the most important terms is provided at the end of this policy.
1. Privacy at a glance
General information
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, IP address and technical usage data. We process personal data only on the basis of applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).
How do we collect your data?
This website is an informational coming-soon page. It does not contain contact forms, registration or a newsletter, so we do not actively collect data that you provide. If you contact us by email using the address in our imprint, we process the information you send in order to handle your enquiry. All other data is collected automatically and for technical reasons when you visit the website, in particular server log data and technically necessary cookies.
What do we use your data for?
We use this data solely to technically provide and secure the website, to answer enquiries you send us, and to comply with legal obligations. We do not use web analytics, tracking or profiling, and we do not sell your personal data.
What rights do you have?
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent, as well as the right to lodge a complaint with the supervisory authority. Details can be found in the section "Your rights as a data subject".
2. Scope of this privacy policy
This privacy policy applies to all personal data processed by us on this website and on any related subdomains, and — to the extent described — to data processed when you contact us by email, phone or post. It does not apply to other websites or services of third parties that we merely link to; the privacy policies of those providers apply to them.
3. Controller
The controller responsible for data processing on this website is:
Austrian Society for Vacuum Technology (ÖGV)
Austrian association register number (ZVR): 502959215
Wiedner Hauptstraße 8-10/134, TU Wien
1040 Vienna
Austria
Phone: +43 (1) 58801/13420
Email: [email protected]
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data. The person responsible for data-protection enquiries is Helmut Riedl-Tragenreif, who can be reached at the address above and at [email protected].
4. Legal bases for processing
We process personal data only on a valid legal basis. Depending on the activity, we rely on the following:
- Consent (Art. 6(1)(a) GDPR) — where you have given us permission for a specific purpose. You may withdraw consent at any time with effect for the future.
- Contract or pre-contractual steps (Art. 6(1)(b) GDPR) — where processing is necessary to handle a request you make or to prepare or perform an agreement.
- Legal obligation (Art. 6(1)(c) GDPR) — where we are legally required to retain or disclose data.
- Legitimate interest (Art. 6(1)(f) GDPR) — where processing is necessary for the secure, stable and user-friendly provision of the website, abuse prevention or the protection of our rights, and your interests do not override ours.
In addition, where information is stored on or read from your device (for example through technically necessary cookies), § 165(3) TKG 2021 applies. The national law implementing the GDPR in Austria is the Datenschutzgesetz (DSG). For the operation of this website we currently rely mainly on our legitimate interest (Art. 6(1)(f)) and, where applicable, on legal obligations (Art. 6(1)(c)).
5. Purposes of processing and data minimisation
We process personal data only for clearly defined purposes: providing and securing this website, handling any enquiries you send us, and fulfilling our legal obligations. We follow the principle of data minimisation — we collect only the data we actually need, we do not sell your personal data, and we do not use it for purposes incompatible with those stated here.
6. Hosting and technical delivery
Hosting
This website is self-hosted on a virtual server provided by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The server is located within the European Union. Hetzner processes data required for website delivery, system stability, technical security and error analysis as our processor under a data-processing agreement pursuant to Art. 28 GDPR.
Server log files
When you access the website, information may automatically be processed in so-called server log files. This includes in particular:
- IP address of the requesting device
- date and time of access
- requested page or file
- amount of data transferred
- referrer URL, where transmitted
- browser type, browser version and operating system
- status code or information on whether the request was successful
This data is not merged with other data sources. Processing is based on our legitimate interest in the secure and technically error-free provision of the website pursuant to Art. 6(1)(f) GDPR. Log data is stored only as long as necessary for operation, security and error analysis and is then deleted or anonymised, unless statutory obligations or legitimate security interests require longer retention.
Processing on our behalf
Where external service providers act as processors, we conclude agreements pursuant to Art. 28 GDPR. The service providers process personal data only to the extent required and in accordance with our instructions, subject to confidentiality and appropriate technical and organisational measures.
8. Newsletter
This website does not offer a newsletter and does not collect email addresses for marketing purposes.
9. External links and social media
This website contains links to external websites, such as LinkedIn and the websites of partner institutions. These are simple links. Data is only transmitted to these providers when you actively click the respective link. From that point on, the privacy policies of the respective external provider apply. We have no influence on the data processing carried out by those providers.
10. Recipients and processors
Personal data is transferred to third parties only where this is necessary to provide the website, comply with legal obligations or protect legitimate interests. Recipients may include in particular:
- our hosting and infrastructure provider (Hetzner Online GmbH)
- IT service providers and technical maintenance partners
- authorities, courts or public bodies where legally required
Where required, we conclude agreements with processors pursuant to Art. 28 GDPR.
11. Transfers to third countries
All processing for this website takes place on a server located within the European Union. We do not transfer personal data to countries outside the European Economic Area through our own processing. If you click an external link, any resulting data processing — including any transfer to third countries — is carried out by the respective external provider under its own privacy policy.
12. Storage duration
We store personal data only for as long as necessary for the respective purposes. In addition, we store data where statutory retention obligations apply (for example up to seven years for tax and commercial records under the BAO and UGB) or where further storage is necessary to establish, exercise or defend legal claims. Server log data is kept only for as long as needed for operation, security and error analysis and is then deleted or anonymised.
13. Data security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure, including access restrictions, encryption, secure passwords, logging and regular updates (Art. 32 GDPR). Where technically possible, this website is transmitted securely via HTTPS. You can recognise an encrypted connection by the lock symbol and "https://" in your browser's address bar. Nevertheless, data transmission over the internet may have security vulnerabilities; complete protection against access by third parties is not possible.
14. Your rights as a data subject
Under the GDPR you have extensive rights. We respond to requests without undue delay and at the latest within one month.
- Right of access (Art. 15 GDPR) — you may ask whether and which personal data we process about you and request a copy together with information on purposes, recipients, storage periods and the origin of the data.
- Right to rectification (Art. 16 GDPR) — you may have inaccurate data corrected and incomplete data completed.
- Right to erasure (Art. 17 GDPR) — you may request deletion of your data where there is no legal reason for continued processing.
- Right to restriction (Art. 18 GDPR) — you may request that we limit processing, for example while the accuracy of data is being verified.
- Right to be informed (Art. 19 GDPR) — recipients of your data are informed of any rectification, erasure or restriction, unless this proves impossible or disproportionate.
- Right to data portability (Art. 20 GDPR) — for data you provided on the basis of consent or contract, you may receive it in a structured, commonly used, machine-readable format or have it transmitted to another controller.
- Right to object (Art. 21 GDPR) — on grounds relating to your particular situation you may object at any time to processing based on legitimate interest; we then stop unless we demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.
- Objection to direct marketing (Art. 21(2) GDPR) — you may object to processing for direct marketing at any time, with no need to give reasons.
- Right to withdraw consent (Art. 7(3) GDPR) — where processing is based on consent, you may withdraw it at any time with effect for the future; the lawfulness of prior processing is unaffected.
- No automated decision-making (Art. 22 GDPR) — you have the right not to be subject to a decision based solely on automated processing, including profiling, that has legal or similarly significant effects. We do not carry out such processing.
To exercise any of these rights, please contact us at [email protected] or write to the address provided in the imprint.
15. Right to lodge a complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Austria
Phone: +43 1 52 152-0
Email: [email protected]
Website: dsb.gv.at
16. Changes to this privacy policy
We reserve the right to update this privacy policy if legal requirements, technical functions or our data processing activities change. The version published at the time of your visit applies.
17. Questions about data protection
If you have questions about this privacy policy or would like to learn more about the processing of your personal data, please contact us at [email protected]. We are happy to help.
18. Glossary of terms used
To make this policy easier to understand, here are plain-language explanations of the key legal terms.
- Personal data — any information relating to an identified or identifiable natural person, e.g. name, email address, IP address or online identifiers.
- Processing — any operation performed on personal data, such as collecting, storing, using, transmitting or erasing it.
- Controller — the person or organisation that decides why and how personal data is processed (here: us).
- Processor — a service provider that processes personal data on the controller's behalf and on its instructions (e.g. our hosting provider).
- Data subject — the identified or identifiable person whose data is processed, e.g. a visitor to this website.
- Consent — a freely given, specific, informed and unambiguous indication of your wishes by which you agree to a specific processing; it can be withdrawn at any time.
- Recipient — a person or body to which personal data is disclosed.
- Third party — anyone other than the data subject, the controller and its processors.
- Pseudonymisation — processing data so it can no longer be attributed to a specific person without additional information kept separately.
- Third country — a country outside the EU/EEA.
- Supervisory authority — the public body monitoring compliance with data protection law; in Austria, the Datenschutzbehörde.