Privacy Policy

Privacy Policy for the Joint Website Operation as Part of the Research Project “Biblical Anthropology in Canonical Discourse: New Hermeneutical Perspectives on the Biblical Understandings of the Human Being”

 

The University of Graz and KU Leuven take data protection very seriously and treat your personal data confidentially and in accordance with legal requirements. This Privacy Policy informs you, in accordance with Articles 12 and 13 of the GDPR, about the purpose, legal basis(es), and your rights in connection with the processing of personal data in the context of using our collaborative website, which is hosted by the University of Graz.

 

A) Visiting Our Website 

Description and Scope of Data Processing

When you visit the University of Graz’s websites, the web servers temporarily store each access in a log file. The following data is collected and stored until it is automatically deleted:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the data accessed
  • Amount of data transferred
  • Notification of whether the access was successful
  • Identification data of the browser and operating system used
  • Website from which the access originated
  • Name of your Internet service provider

 

Purpose of Data Processing

This data is processed to ensure the use of the website (establishing a connection), system security, and the technical administration of the network infrastructure. The processing also serves to optimize the website. The IP address is analyzed only in the event of attacks on our network infrastructure.

 

Legal Basis for Data Processing

The processing of the aforementioned data is based in particular on the existing overriding legitimate interest (Art. 6(1)(f) GDPR) of the cooperation partners in ensuring system security, the technical administration of the network infrastructure, and the optimization of the website to fulfill university tasks, taking into account the guiding principles for universities in the fulfillment of their tasks (see Sections 2 and 3 of the University Act).

 

B) Website Analysis

 

Description and Scope of Data Processing

Web analytics cookies are used to measure reach and usage, in particular to compile reports on aggregated website activity (reach measurement, assessment of server performance, analysis of accessed content, identification of navigation issues, etc.) and thereby improve our website. In doing so, we fulfill our university responsibilities (in particular, the public educational mission; the continuing education mission; support for national and international cooperation; support for the practical application and implementation of research findings; and support for the societal integration of results from the development and promotion of the arts; informing the public about the fulfillment of universities’ duties) in compliance with the guiding principles for universities (efficiency, economy, and appropriateness of financial management).

 

  1. Matomo

    Matomo is an open-source web analytics platform operated at the University of Graz as a self-hosted solution. Matomo enables us to collect information about the behavior of website visitors in order to gain insights into usage patterns and, based on this, improve our online presence to fulfill the university’s tasks.

     

  2. Google Analytics

    Google Analytics is a widely used web analytics tool provided by the U.S.-based company Google LLC. Google Analytics enables us to collect information about the behavior of website visitors in order to gain insights into usage patterns and, based on this, improve our online presence to fulfill the university’s mission. In particular, user data is collected via cookies and analyzed using the Google Analytics tool to improve our advertising efforts.

 

Legal basis for data processing

The legal basis for data processing in the context of website analysis is your voluntary consent pursuant to Article 6(1)(a) of the GDPR and Section 165(3) of the TKG 2021. You grant us your consent by actively clicking “Accept All Cookies” or by actively checking the box under “Cookie Settings” for the respective processing purpose in the cookie banner when you visit our website. No analytics cookies are set before you grant your consent.

 

Data Transfer

When using the analytics service provider Google LLC, data may be transferred to the United States (a third country).

Currently (as of June 17, 2024), there is a decision by the European Commission declaring the level of data protection for certified companies in the United States to be adequate (“Adequacy Decision”). Google LLC is such a certified company (see the list of certified companies at https://www.dataprivacyframework.gov/list).

Thus, any data transfers to Google LLC in the United States are based on Article 45(1) of the GDPR in conjunction with the EU-US Data Privacy Framework.

 

 

C) Website Marketing

To fulfill our university’s mission, it is particularly important to reach and engage potential students (“prospective students”). To this end, we use marketing cookies to gather information about the interests and media usage behavior of prospective students, which subsequently enables us to promote our academic programs in a targeted manner. In addition, this provides us with insights into the effectiveness of online measures implemented during the orientation and decision-making phase of prospective students.

 

Legal Basis for Data Processing

The legal basis for data processing in connection with website marketing is your voluntary consent pursuant to Article 6(1)(a) of the GDPR and Section 165(3) of the TKG 2021. You grant us your consent by actively clicking “Accept All Cookies” or by actively checking the box under “Cookie Settings” for the respective processing purpose in the cookie banner when you visit our website. No marketing cookies are set before you grant your consent.

 

Transfer

In connection with the use of the marketing service providers Google LLC and Meta Platforms, Inc., data may be transferred to the United States (a third country). Currently (as of June 17, 2024), there is a decision by the European Commission declaring the level of data protection for certified companies in the United States to be adequate (“Adequacy Decision”). Google LLC and Meta Platforms, Inc. are such certified companies (see the list of certified companies at https://www.dataprivacyframework.gov/list). Thus, any data transfers to Google LLC and Meta Platforms, Inc. in the United States are based on Article 45(1) of the GDPR in conjunction with the EU-US Data Privacy Framework.

 

D) Audience and Usage Measurement via Matomo

The website uses “Matomo” to measure audience reach and usage. For this purpose, certain usage information (e.g., information about the browser, the device, and events) is processed without the use of cookies, exclusively for the strictly necessary purposes of audience and usage measurement.

 

Purpose of data processing

The processing of data serves the purpose of measuring reach and usage, in particular to compile reports on aggregated website activities (reach measurement, estimation of server performance requirements, analysis of accessed content, identification of navigation issues, etc.) and thereby improve our website. In doing so, we fulfill our university responsibilities (in particular, our public educational mandate; continuing education mandate; support for national and international cooperation; support for the practical application and implementation of its research results; and support for the societal integration of results from the development and promotion of the arts; informing the public about the fulfillment of the university’s duties) in compliance with the guiding principles for universities (efficiency, economy, and appropriateness of financial management).

 

Legal Basis for Data Processing

The processing of the aforementioned data is based, in particular, on the University’s legitimate interest or public interest (Art. 6(1)(f) and (e) of the GDPR in conjunction with Sections 2 and 3 of the University Act) as a public institution in improving its website to fulfill its academic duties, taking into account the guiding principles for universities in the performance of their duties (see Sections 2 and 3 of the University Act).

If you do not consent to the storage and analysis of the usage information generated, you may object to this below. In this case, a so-called deactivation cookie will be stored in your browser, which means that “Matomo” will not collect any session data. Please note: If you delete your cookies, this will also delete the deactivation cookie, and you will need to set it again. On the following website, you have the option to disable data processing by “Matomo”: https://www.uni-graz.at/de/datenschutz

 

Retention period:

We store your data as follows: 

  • With consent (Art. 6(1)(a) GDPR): Data that we process based on your consent will be stored until you withdraw your consent, but no longer than until the purpose of the processing has been fulfilled. In addition, only your strictly necessary personal data (name, date of consent, proof of consent, e.g., signature) will be stored for the purpose of verifying your consent or withdrawal for a period of 3 years from the date of withdrawal. 
  • In the public interest (Art. 6(1)(e) GDPR): We process your data for as long as this is necessary in the public interest or until a (reasoned) objection is raised. Furthermore, we store your data only if statutory retention periods apply or if limitation periods regarding potential legal claims are still open. 
  • Legitimate interest (Art. 6(1)(f) GDPR): We process the data for as long as necessary to safeguard legitimate interests or until a (substantiated) objection is raised. Furthermore, we store your data only if statutory retention periods apply or if limitation periods regarding potential legal claims are still open.

 

Your rights:

In connection with the processing of your personal data, you generally have the following rights:

  • Right of access to the personal data concerned (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), and restriction of processing (Art. 18 GDPR),
  • Right to data portability (Art. 20 GDPR),
  • Right to object (Art. 21 GDPR),
  • If processing is based on consent: Right to withdraw consent (Art. 7(3) GDPR), which does not affect the lawfulness of processing carried out prior to withdrawal

 

You may exercise your rights in connection with the joint website operation through the project’s joint contact point at at-institut(at)uni-graz.at.

In addition, you have the right to lodge a complaint (Art. 77 GDPR) with a supervisory authority; in Austria, this is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, telephone: +43 1 52 152-0, email: dsb(at)dsb.gv.at.

 

Data controllers and contact details of the data protection officers:

University of Graz, Universitätsstraße 3, 8010 Graz, rektorsbuero(at)uni-graz.at

Contact details of the data protection officers: dsba(at)uni-graz.at

 

KU Leuven, Oude Markt 13 – bus 5005, 3000 Leuven (Belgium), tel. +32 16 324010