We are conducting a student survey via Microsoft Forms. As part of this survey, we generally do not intend to collect any personal data. However, questions regarding educational background, access to study programs, and/or reasons for studying at the university of applied sciences (FH) will be asked. Participation in the survey does not require you to provide your name or register, which means that, typically, no conclusions can be drawn about individuals or the identification of your person or other participants in the survey. Microsoft Forms may process technical metadata, such as IP addresses and timestamps. Furthermore, the results of this survey (e.g., final reports) will only be processed in aggregated and anonymized or pseudonymized form. Participation in the survey is voluntary.

After completing the survey, it is possible to participate in a voluntary prize draw. A link to a form will appear, where you can enter your first and last name to take part in the draw. Survey participation and form submission are conducted separately, ensuring that entering your name cannot be linked to your survey responses.

Data processing is carried out for the purposes of public relations, particularly to improve the availability of information about our study programs (e.g., through the development of an AI-based language chatbot), and is based on your explicit consent in accordance with Article 6 (1) (a) of the General Data Protection Regulation (GDPR). You can withdraw your consent at any time with future effect by contacting datenschutz@campus02.at. The lawfulness of the processing carried out prior to the withdrawal is not affected by this.

Data provided by you as part of the prize draw participation will be deleted after 3 months, starting from the completion of the prize draw. The survey itself/the raw survey data will be deleted no later than 3 years after the end of the calendar year in which the survey took place. The results, without any personal reference, will be retained for quality assurance purposes.

The Microsoft "Forms" tool is used for this survey with the subsequent prize draw. Hosting primarily takes place within the European Union in accordance with European data protection laws. Certain services and technical support may also be provided outside the European Union. Therefore, data transfer to the USA is generally possible.

On July 10, 2023, the European Commission adopted an adequacy decision on the Data Privacy Framework (data protection agreement between the EU and the USA). If providers in the USA certify themselves in accordance with these data protection requirements (which, among other things, restrict access to data by US authorities and provide legal protection for EU citizens), an adequate level of data protection is generally guaranteed for data transfers. You can check which providers are included in the list here: https://www.dataprivacyframework.gov/s/participant-search

Microsoft has undergone this self-certification. The data transfer can therefore be based on the adequacy decision on the Data Privacy Framework as a valid legal basis for data transfers to the USA. Furthermore, the standard contractual clauses and additional technical and organizational measures guaranteed by Microsoft also apply. Further information on data processing can be found in Microsoft's privacy policy (https://privacy.microsoft.com/dehttps://privacy.microsoft.com/de-de/privacystatement) .