Privacy Statement

Whistleblower system

Protecting your data is of utmost importance to us. Our privacy statements for different groups of data subjects offer a brief overview of the personal data we collect and what it is used for.

We, CAMPUS 02 - University of Applied Sciences (abbr. CAMPUS 02 UAS), Körblergasse 126, 8010 Graz, process the personal data provided by you in the context of a notification within the meaning of the Whistleblower Protection Act.

The whistleblower system fulfils the legal requirements of the Whistleblower Protection Act (HSchG) by making it easy and transparent to report violations of the law.

Reports are submitted voluntarily via a digital application provided by CAMPUS 02 UAS, which can be accessed via the website and enables whistleblowers to report information and suspicions about possible violations, abuses or misconduct in a low-threshold manner.

When information is received, the following personal data is processed:

  • Name of the whistleblower (but only if the whistleblower discloses his/her identity)
  • Professional connection of the whistleblower to CAMPUS 02 UAS
  • Other personal data about the whistleblower that he/she discloses in the written report or subsequently (including through attached documents)
  • Personal data of persons affected by the notification
  • Persons involved in follow-up measures

The processing is based on the fulfilment of legal obligations pursuant to Art. 6 para. 1 lit. c of the General Data Protection Regulation (GDPR) in conjunction with the HSchG in the currently valid amendement.

Personal data must be stored for five years from the last time it was processed or transmitted and beyond that for as long as is necessary to carry out administrative or judicial proceedings that have already been initiated or investigative proceedings under the StPO. Personal data will be deleted once the obligation to retain it no longer applies. Personal data that is not required for the processing of a report must be deleted immediately if it was collected unintentionally. Processing operations actually carried out, in particular changes, queries and transfers, must be logged. Log data on these processes must be stored from the last time they were processed or transmitted until three years after the retention obligation no longer applies and then deleted.

Your personal data will be treated confidentially and will primarily only be processed internally by employees of CAMPUS 02 UAS. Information entered into the whistleblower system by authorised persons and subsequently transmitted to CAMPUS 02 UAS is encrypted end-to-end so that only CAMPUS 02 UAS can view and decrypt it.

In accordance with §§ 13, 14 HSchG, third parties may also be commissioned or called in to fulfil the tasks.

ACOmarket GmbH, Wollzeile 11/2, 1010 Vienna, Austria, was commissioned to provide the whistleblowing system. This company uses Vispato GmbH, Hansaallee 299, 40549 Düsseldorf, Germany, as a sub-processor, which provides the application, although they do not have access to the personal data.

Please note that we will update this privacy statement from time to time (e.g. due to law amendments, usage of new technology, new study opportunities). We recommend that you regularly check it for updates.

As long as and insofar as it is necessary to protect the identity of a whistleblower - in particular for the duration of administrative or judicial proceedings or investigative proceedings under the Code of Criminal Procedure - the general rights of data subjects do not apply.

If you do, please contact us — we will be happy to help.

Data Protection Coordination Team
at CAMPUS 02 UAS

CAMPUS 02 - University of Applied Sciences
Körblergasse 126, 8010 Graz
+43 316 6002-8909
datenschutz@campus02.at

Data Protection Officer
at CAMPUS 02 UAS

dsb@campus02.at

If you believe that processing your data violates data protection laws or that your data protection rights have been infringed in some other way, you can also file a complaint with the supervisory authority. In Austria, the competent supervisory authority is the Austrian Data Protection Authority in Barichgasse 40-42, 1030 Vienna, telephone no.:+43 1 52 152-0, e-mail dsb@dsb.gv.at.