Example Data Protection Informations

Controller: TU Graz, Rechbauerstr. 12, 8010 Graz
Contact: datenschutz@tugraz.at
Data protection officer: x-tention Informationstechnologie GmbH
Römerstraße 80a, 4600 Wels
datenschutzbeauftragter@tugraz.at
Purpose of processing: Maintaining contacts in the academic community to the extent that this is covered by the reasons for being contacted to which the data subject has consented.
Data: Name, email address, reasons for contacting the data subject to which they have given their consent.
Basis in law: Consent pursuant to GDPR Art. 6 (1) (a)
Purpose of processing: Documentation of consent
Data: Name, email address, date, purpose of processing
Basis in law: GDPR Art. 7 (1)
Recipient: No transmission to third parties; no contract processing
Transmission to third countries: No
Duration of storage: Until the time when you withdraw your consent. Irrespective of withdrawal of consent, the data will be deleted if your email address becomes invalid or if we receive notification that communications are undeliverable.
Data subject rights: You have the right to:
  • Information and access, to find out whether we have personal data of yours stored and what data it is.
  • Rectification – correction and/or completion of your personal data that are incorrect or incomplete
  • Erasure – deletion of your personal data that are being processed in a manner which is not lawful or is no longer lawful
  • Restriction of processing
  • Data portability
  • Withdraw consent that you have given, effective for the future: i.e. further processing of your data is then not allowed from that point in time onwards, unless there is an overriding legitimate reason for doing so.
  • Object to any assertion by TU Graz of an overriding legitimate interest in storing/processing the data (Exception: media privilege according to § 9 of the Austrian Data Protection Act, DSG)
To exercise these rights you can find contact options at: https://datenschutz.tugraz.at/dsgvo/rechte/
You also have a right to make a complaint to the Data Protection Authority.