We, CAMPUS 02 University of Applied Sciences (abbr. CAMPUS 02 UAS), Körblergasse 126, 8010 Graz, Austria, process the following data categories by automated means as part of your further education at our University of Applied Sciences and for the purpose of fulfilling the civil law agreement:
Master data 1 (gender, name, title, date of birth, further education), student master data 2 (citizenship, private e-mail address), social security number/ alternative code, address data, contact data, additional information (professional activity, previous school education), professional experience;
In addition, we process the following data categories
As CAMPUS 02 UAS aims to design and further develop modern, interactive teaching and learning scenarios, images and videos may be recorded during course units. These recordings are only used and provided for documentation purposes (e.g. for photo reports on the learning platform and project reports).
In principle, the data categories listed above are collected directly from you - however, these can be supplemented by system-generated data, by course information required for processing and by performance assessment data.
The processing of this data is based on the fulfillment of a contractual legal relationship according to Art. 6 para. 1 cl. b of the EU General Data Protection Regulation (GDPR) or on the basis of legitimate interest according to Art. 6 para. 1 cl. f of the GDPR and is carried out for the purpose of fulfilling the civil law agreement, processing the further education operation and securing the property of CAMPUS 02. The disclosure and processing of the above-mentioned personal data is voluntary and serves to fulfill the contract. Without the disclosure and processing of your data, the conclusion and fulfillment of the civil law agreement is not possible.
Your personal data will be deleted step-by-step after the end of the continuing education program, taking into account the applicable legal retention obligations.
In order to take over further education data in the event of a possible transfer to a regular or non-degree programme and to fulfill the retention obligations provided for this purpose, the above-mentioned categories of data processed by automated means for the purpose of fulfilling the civil law agreement will be retained for a period of 80 years, calculated from the end of the academic year in which the civil law relationship ends, in accordance with § 13 para. 8 of the University of Applied Sciences Studies Act (Fachhochschulgesetz, FHG).
The data processed in the context of the organization of further education and the billing of participation fees, any ÖH fees and library fees will be deleted after 10 years. The data processed in the course of the evaluation will be stored for 7 years, analogous to the certification period of the QM system according to § 22 para. 4 of the University Quality Assurance Act (HS-QSG).
The social security number or the alternative code will be deleted in accordance with § 8 para. 5 of the Education Documentation Act after two years, calculated from the end of the academic year in which the civil law agreement ends.
The retention period may be extended in all cases where judicial or administrative proceedings are pending in which CAMPUS 02 UAS has party status and in which this data is at issue.
Your personal data is treated as confidential and is generally processed only by CAMPUS 02 UAS staff members internally.
Data processors employed by us may also process data for us to fulfill the purposes described if they offer sufficient guarantees for the security of the data. The above-mentioned data categories are viewed and processed by external IT service providers, for example, in the case of support.
We use Microsoft Office 365 as the cloud service for our e-mail correspondence as well as for the provision of online classes and online examinations. Hosting is mainly provided within the European Union in accordance with European data protection laws. Some services and technical support can also be provided from outside of the EU. Some profile data (names, password, PUID number) is also saved in the US. On July 10, 2023, the European Commission adopted an adequacy decision on the Data Privacy Framework (data protection agreement between the EU and the USA). If providers in the USA certify themselves in accordance with these data protection requirements (which, among other things, restrict access to data by US authorities and provide legal protection for EU citizens), an adequate level of data protection is generally guaranteed for data transfers. You can check which providers are included in the list here: https://www.dataprivacyframework.gov/s/participant-search
Microsoft has undergone this self-certification. The data transfer can therefore be based on the adequacy decision on the Data Privacy Framework as a valid legal basis for data transfers to the USA. Furthermore, the standard contractual clauses and additional technical and organizational measures guaranteed by Microsoft also apply. Further information on data processing can be found in Microsoft's privacy policy (https://www.microsoft.com/de-de/privacy/privacystatement).
In order to fulfill the civil law contract (Art. 6 para. 1 cl. b GDPR), CAMPUS 02 UAS will provide you with software tools if required so that you can complete tasks and work.
Apart from the data recipients mentioned, CAMPUS 02 UAS does generally not disclose information to third parties. Third parties are asked to directly contact the student.
In order to provide sufficient parking spaces (on the basis of legitimate interest according to Art. 6 para. 1 cl. f GDPR), individual master data may be transmitted to Arivo Parking Solutions GmbH.
Please note that we will update this privacy statement from time to time (e.g. due to law amendments, usage of new technology, new study opportunities). We recommend that you regularly check it for updates.
In general, you have right of access, the right to rectification, to erasure, to restrict, to data portability, to withdraw and to object.
If you do, please contact us — we will be happy to help.
Data Protection Coordination Team
at CAMPUS 02 UAS
CAMPUS 02 - University of Applied Sciences
Körblergasse 126, 8010 Graz
+43 316 6002-8909
datenschutz@campus02.at
Data Protection Officer
at CAMPUS 02 UAS
If you believe that processing your data violates data protection laws or that your data protection rights have been infringed in some other way, you can also file a complaint with the supervisory authority. In Austria, the competent supervisory authority is the Austrian Data Protection Authority in Barichgasse 40-42, 1030 Vienna, telephone no.:+43 1 52 152-0, e-mail dsb@dsb.gv.at.
